- Test - lists.nanog.org

Anyone from megapth networks?
by Lou Katz 25 Mar '14

25 Mar '14

Please contact me offlist about an NTP attack. -- -=[L]=- Composed on an ASR33 Linux? Is that an OS, like Pentium?

1 0

ms word
by Randy Bush 25 Mar '14

25 Mar '14

this would be a good time to tll your users not to send or open ms word documents. active 0day http://arstechnica.com/security/2014/03/zero-day-vulnerability-in-microsoft… randy

2 1

Ipv4 end, its fake.
by Bryan Socha 25 Mar '14

25 Mar '14

As someone growing in the end of ipv4, its all fake. Sure, the rirs will run out, but that's boring. Don't believe the fake auction sites. Fair price of IP at the end is $1 for bad Rep $2 for barely used, $3 for no spam and $4 for legacy. Stop the inflation. Millions of IPS exist, there is no shortage and don't lie for rirs with IPS left.

10 10

Re: Level 3 blames Internet slowdowns on Technica
by Larry Sheldon 24 Mar '14

24 Mar '14

On 3/21/2014 9:13 AM, Sholes, Joshua wrote:> How do you get around the problem of natural monopolies, then? My strongly held belief is that if the "natural" monopoly* becomes oppressive somebody in their garage will find another way, and absent regulation and force of arms available to the "natural" monopoly, eliminate the monopoly situation and maybe the "natural" monopolist. Or should > we be moving to a world where, say, a dozen or more separate companies are > all running fiber or coax on the poles on my street in an effort to get to > my house? Could be--we have two energy companies at our house. And two communications companies have boxes on the back wall. Beyond the piped-in water service, we have several competing beverage sources (including for water) in service. The house across the street has, it appears, at least three companies providing TV service (and Internet service?). Three outfits provide waste disposal service in the neighborhood, although I am not bright enough to see a competitor for the sewage component. I wasn't bright enough to see the World Wide Web, either. Nobody uses poles. > IMHO, the only way to get real competition on the last mile is to have the > actual fiber/wire infrastructure being owned by a neutral party that's > required to pass anyone's traffic. As soon as "required" is in the discussion, we have a monopoly, and a monopoly has the power to abuse the situation. Wire and glass are not the only media available, as if that mattered. And we already have duplicates; what is the big deal? OH! And the reason why one set of wires is idle, is that provider got beat by the completion on the other set. (For this discussion, coaxial cable is a "set of wires".) *too old, failing memory and all, I'll have to go read up on "natural monopoly"--I can not think of one that does not require regulation and force of arms to exist. -- Requiescas in pace o email Two identifying characteristics of System Administrators: Ex turpi causa non oritur actio Infallibility, and the ability to learn from their mistakes. (Adapted from Stephen Pinker)

8 7

59.229.189.0/24
by greg whynott 24 Mar '14

24 Mar '14

Hello, Up until today we have been able to reach hosts in the 59.229.189.0/24network via AS174, Cogent, in Toronto. Now we can not, our packets stop at 38.112.36.101. The support team at Cogent informed me that network isn't in the internet routing table. I attempted to do an AS lookup on it and sure enough it is not. Using looking glass routers in Korea indicate the same. Yet it is still reachable from other networks, I can use 'Team Viewer' and webx to connect to hosts at the remote office which sits within that /24. When on the remote site, i can do traceroutes back to our office in Toronto. This part is a bit confusing to me, from Toronto I get a 'no route to host'. So packets arriving from Korea to our network shouldn't be able to find a route back, even if its taking a different path. any guess why this network may not be advertising its routes or what is going on here? thanks in advance, greg This is the network route from Toronto to Korea: Host Loss% Snt Last Avg Best Wrst StDev 1. 10.101.2.1 0.0% 6 1.5 15.1 1.5 83.3 33.4 2. 10.101.111.11 0.0% 6 0.2 0.2 0.2 0.2 0.0 3. 10.101.101.101 0.0% 6 0.7 0.8 0.7 0.8 0.0 4. 38.122.184.161 0.0% 6 <-- ISP ROUTER 5. 38.20.50.130 0.0% 6 1.9 2.0 1.9 2.1 0.0 6. 38.112.36.101 89.0% 5 1.6 1.7 1.6 1.7 0.0 This is the route from Korea to Toronto, done at the same time as the above. 1 <1 ms <1 ms <1 ms 192.168.0.1 2 1 ms <1 ms <1 ms 58.229.189.1 3 1 ms 1 ms 1 ms 10.254.241.205 4 1 ms 1 ms 1 ms 58.229.66.9 5 2 ms 1 ms 1 ms 58.229.66.105 6 7 ms 5 ms 3 ms 58.229.119.149 7 2 ms 2 ms 2 ms 118.221.7.34 8 144 ms 144 ms 144 ms 58.229.92.254 9 276 ms 208 ms 192 ms te-8-2.car1.SanJose2.Level3.net [4.59.0.161] 10 204 ms 162 ms 162 ms ae-2-70.edge1.SanJose3.Level3.net[4.69.152.80] 11 165 ms 165 ms 165 ms Cogent-level3-4x10G.SanJose.Level3.net[4.68.110.138] 12 156 ms 156 ms 156 ms be2000.ccr21.sjc01.atlas.cogentco.com[154.54.6.105] 13 166 ms 165 ms 165 ms be2164.ccr21.sfo01.atlas.cogentco.com[154.54.28.33] 14 187 ms 187 ms 187 ms be2256.mpd21.mci01.atlas.cogentco.com[154.54.6.90] 15 206 ms 206 ms 206 ms be2158.mpd21.ord01.atlas.cogentco.com[154.54.7.130] 16 216 ms 216 ms 216 ms be2081.ccr21.yyz02.atlas.cogentco.com[154.54.42.10] 17 221 ms 221 ms 221 ms te3-8.ccr02.yyz01.atlas.cogentco.com[154.54.5.85] 18 231 ms 230 ms 230 ms te4-1.mag03.yyz01.atlas.cogentco.com[154.54.86.82] 19 214 ms 215 ms 214 ms 38.122.184.162 <-- OUR ROUTER

4 5

RE: misunderstanding scale
by Naslund, Steve 24 Mar '14

24 Mar '14

I don't buy that one at all. Grandma does not care or know about ipv4 or ipv6. When the ipv4 CPE gets installed it blocks inbound connections by default, why would ipv6 be any different? Windows firewall if she is relying on that should not have any problems with v6 than it does with v4. I am also pretty sure that grandma does not care that NAT is present or not. In fact, grandma's cell phone might already using v6. If the equipment does not work right out of the box, that is the equipment supplier or service provider problem. Do you really believe that most people deploying home gateways understand ipv4, NAT, or stateful firewalls? No, they plug it in and the defaults should work for them. It might require an engineering degree (or reading) to understand how IPv6 works however grandma does not need to know how IPv6 works or even how a network works. She plugs in the CPE, plugs in her PC and off you go. The smart people on this list are to ones that need to know how is works. If we can't make the customer experience transparent to them, then bad on us. Steve -----Original Message----- From: Curtis Maurand [mailto:cmaurand@xyonet.com] Sent: Monday, March 24, 2014 12:34 PM To: Naslund, Steve Subject: Re: misunderstanding scale On 3/24/2014 12:53 PM, Naslund, Steve wrote: > If they have a stateful IPv6 firewall (which they should and which most firewall vendors support), they already have what they need to prevent their internal systems from being accessible from the outside. If you are an enterprise and you don't have a stateful firewall, you are in trouble from a security standpoint whether you run v4 or v6. If you cannot configure a stateful firewall to block connections being initiated from outside, you are not qualified to be working with the firewall, v4 or v6 does not matter. If someone is relying on NAT in case their firewall is misconfigured, they have major issues with security. > > In the home, I am not sure what the major issue is there either. How many CPE devices have you seen that do not implement basic firewall functionality? People may not use them correctly but that is no more an issue with v6 than it is with v4. Most CPE even comes out of the box blocking inbound connections by default. > But grandma doesn't have the ability to deploy a statefull firewall at her house. She doesn't even understand what statefull means putting up a NAT firewall on an IPv4 network is simple and it's easy. It provides adequate protection of one's internal network from the outside. You plug them in and they work. IPv6 just about requires an engineering degree to understand it. Nobody thought about simplicity with it.

1 0

Re: Level 3 blames Internet slowdowns on ISPs’ refusal to upgrade networks | Ars Technica
by Bryan Fields 24 Mar '14

24 Mar '14

On 3/20/14, 12:34 PM, Blake Hudson wrote: > The solution seems to be competition or regulation. I'd prefer competition to regulation. -- Bryan Fields 727-409-1194 - Voice 727-214-2508 - Fax http://bryanfields.net

7 6

Level 3 blames Internet slowdowns on ISPs’ refusal to upgrade networks | Ars Technica
by Jay Ashworth 24 Mar '14

24 Mar '14

L3 escalates on Peering/CDN/Neutrality. http://arstechnica.com/information-technology/2014/03/level-3-blames-intern… -- Sent from my Android phone with K-9 Mail. Please excuse my brevity.

17 26

Survey on Internet Disputes.
by Kshitiz Verma 24 Mar '14

24 Mar '14

Hi, I am Kshitiz Verma, a Ph.D. student in Madrid, Spain, working in the area of studies on the Internet ecosystem. We are conducting a survey on the Internet disputes, not limited to, but mainly focusing on de-peering. We will appreciate responses from the community that help us build our data on such incidences. We did an initial search ( https://docs.google.com/spreadsheet/ccc?key=0Ajn7QWBNzSlLdGo3UzFDVkNvdGVwYn…) but unfortunately the results we obtained were mostly limited to well known disputes in North America. We believe there should be more of them but are hard to find, 1. if they occur outside the Tier 1 regime. 2. if outside USA. 3. because the local news may not always be in English. 4. they may not last long or may not have as big an impact and find place in news. We are posting We are also looking for instances like Youtube hijacking by Pakistan Telecom is not a dispute between any two ASes but still for repairing purposes, connectivity between Pakistan Telecom and PCCW (AS 3491), Hong Kong was disrupted. At the same time, we are not looking for disruption of the Internet connectivity due to an accident like Taiwan earthquake in December 2006. As claimed in http://www.cs.columbia.edu/~misra/news/CD070113.pdf , 500 to 1000 de-peering happens on a daily basis today. We are curious to know how this number has evolved since its inception (starting from post commercialization of NSFNET is already very good but before that is excellent :-) ). Please fill in the following form if you have some information that you may want to share with us. Also, as there are so many de-peerings happening, there is a high possibility that most of these don't become International News, so to get information on these disputes we expanded our search to local and regional News but unfortunately this has not added significant information. Once the results are processed and filtered, we intend to share them publicly. Form: https://docs.google.com/forms/d/1X6msZeK0_3SIaIK8IxZaO2-Vrl1MPh_8dTSpbG0oGz… Many thanks in advance :-) Kshitiz Verma

3 3

tools similar to stat.ripe.net?
by Damien Burke 24 Mar '14

24 Mar '14

Hello, Are there any tools similar to the routing tab at stat.ripe.net ? To be more specific, I'm looking for the "BGP route visibility" feature. -Damien

3 2