- Test - lists.nanog.org

Reminder: Call for Presentations Open for NANOG 56 in Dallas, TX
by David Temkin 23 Jul '12

23 Jul '12

NANOG Community, After a great NANOG in Vancouver, BC, the survey results are in from 55 and we are already assembling a world-class program for NANOG 56. The North American Network Operators' Group (NANOG) will hold its 56th meeting in Dallas, TX on October 21 - 23, 2012 and join with ARIN on October 24, 2012. Terremark, a Verzion company, will be our host for NANOG 56. The NANOG Program Committee is now seeking proposals for presentations, panels, tutorials, tracks sessions, and keynote materials for the NANOG 56 program. We invite presentations highlighting issues relating to technology already deployed or soon-to-be deployed in the Internet. Vendors are encouraged to work with operators to present real-world deployment experiences with the vendor's products and interoperability. NANOG 56 submissions are welcome at http://pc.nanog.org <http://pc.nanog.org/> For further information on what the Program Committee is seeking, please see http://www.nanog.org/meetings/nanog56/callforpresentations.html When considering submitting a presentation, keep these important dates in mind: Presentation Abstracts and Draft Slides Due: 06-August-2012 Final Slides Due: 27-August-2012 Draft Program Published: 17-September-2012 Final Agenda Published: 1-October-2012 Please submit your materials to http://pc.nanog.org Looking forward to seeing everyone in Dallas! -Dave Temkin (Chair, NANOG Program Committee)

1 0

msn/hotmail email admin needed
by Christian Seitz 23 Jul '12

23 Jul '12

Hello, would an email admin from msm/hotmail please contact me off-list? We have problems sending emails to msn/hotmail from several ip addresses and trying to find someone who can help. Thanks in advance. Sorry for spamming this list, but establishing a direct contact or opening tickets did not work. Regards, Christian Seitz Network Operations -- --------------------------------------------------------------------------- Telefon: +49 (0)30 - 398 02 0 E-Mail : seitz(a)strato-rz.de Website: http://www.strato.de/ --------------------------------------------------------------------------- STRATO AG Pascalstr. 10 10587 Berlin --------------------------------------------------------------------------- Vorsitzender des Aufsichtsrates: Phil Zamani Vorstand: Damian Schmidt (Vorsitz), Julien Ardisson, Christian Mueller, Christoph Steffens, Rene Wienholtz Amtsgericht Berlin-Charlottenburg HRB 79450

2 1

HE Fremont IPv6 tunnel
by Jeroen van Aart 23 Jul '12

23 Jul '12

Recently I migrated the server that's running an HE IPv6 tunnel to one of the Fremont endpoints and now the tunnel is going down for a few minutes every couple of hours or so. I haven't been able yet to find a reason for this. I made sure the old server is not running any IPv6 related things anymore (such as radvd). I am curious if anyone knows if the Fremont endpoints are experiencing some problems? I have barely ever noticed any problems with the IPv6 tunnels so I am pretty sure it's not on HE's side, but I wanted to make sure. Thanks, Jeroen -- Earthquake Magnitude: 4.6 Date: Sunday, July 22, 2012 06:32:50 UTC Location: Santa Cruz Islands region Latitude: -10.6712; Longitude: 164.7985 Depth: 37.00 km

2 3

Postini/google email admin assistance requested
by Lyle Giese 22 Jul '12

22 Jul '12

I run a smaller email filter service for clients and starting Saturday, we are experiencing heavy traffic aimed at one email account. 99% of the traffic is coming from obsmtp.com servers. In the last 24 hrs, we have been getting over 1,000 attempts per hour to this account with a couple of peaks at 4,000 per hour. Not sure if they can help but an offlist contact from them would be nice. Sorry for the noise to the rest! Lyle Giese LCR Computer Services, Inc.

3 2

Re: Attack on UDP 101
by Shahab Vahabzadeh 21 Jul '12

21 Jul '12

Dear Stefan, I have an 7206VXR Router with this design: int gig 0/1: directly connected to 3750 switch (uplink to internet) int gig 0/2: vlan termination from PSTN centers int virtual-template1: xdsl users Its about 4 days that I see near 300Mpbs outbound traffic in int gig0/1 that there is no such a traffic in none of routers interface, but the same traffic is seen in 3750 peer interface. I try to run monitor session on 3750 and monitor port traffic which I see that packet is generating from a user and its in a loop between 3750 and 7206. When I disconnect that user, I see that that packet is in loop again, because of that I am sure its making a loop but I do not know the reseaon is that packets or not. Thanks On Sat, Jul 21, 2012 at 11:02 PM, Stefan Fouant < sfouant(a)shortestpathfirst.net> wrote: > Can you give us more information? What do you mean it is causing Layer 3 > loops? > > Stefan Fouant > > Sent from my HTC on the Now Network from Sprint! > > > ----- Reply message ----- > From: "Shahab Vahabzadeh" <sh.vahabzadeh(a)gmail.com> > Date: Sat, Jul 21, 2012 10:50 am > Subject: Attack on UDP 101 > To: <nanog(a)nanog.org> > > Hi there, > Does any body know any report about attack on UDP Port 101 which make Layer > 3 Loops? > This is an example sniff: > > Source IP Address is : 76.164.199.86 > Source port: 62946 Destination port: 101 > 2012-07-21 11:11:09.646757 > > Thanks > > -- > Regards, > Shahab Vahabzadeh, Network Engineer and System Administrator > > Cell Phone: +1 (415) 871 0742 > PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90 > > > -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871 0742 PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90

3 4

Attack on UDP 101
by Shahab Vahabzadeh 21 Jul '12

21 Jul '12

Hi there, Does any body know any report about attack on UDP Port 101 which make Layer 3 Loops? This is an example sniff: Source IP Address is : 76.164.199.86 Source port: 62946 Destination port: 101 2012-07-21 11:11:09.646757 Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871 0742 PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90

2 3

Re: Attack on UDP 101
by Stefan Fouant 21 Jul '12

21 Jul '12

Can you give us more information? What do you mean it is causing Layer 3 loops? Stefan Fouant Sent from my HTC on the Now Network from Sprint! ----- Reply message ----- From: "Shahab Vahabzadeh" <sh.vahabzadeh(a)gmail.com> Date: Sat, Jul 21, 2012 10:50 am Subject: Attack on UDP 101 To: <nanog(a)nanog.org> Hi there, Does any body know any report about attack on UDP Port 101 which make Layer 3 Loops? This is an example sniff: Source IP Address is : 76.164.199.86 Source port: 62946 Destination port: 101 2012-07-21 11:11:09.646757 Thanks -- Regards, Shahab Vahabzadeh, Network Engineer and System Administrator Cell Phone: +1 (415) 871 0742 PGP Key Fingerprint = 8E34 B335 D702 0CA7 5A81 C2EE 76A2 46C2 5367 BF90

1 0

Re: Hearing Syria internet cut
by James Smith 21 Jul '12

21 Jul '12

I'm curious to know what method people use to monitor the changes in the BGP system? Any recommendations? -----Original Message----- From: Andree Toonk <andree+nanog(a)toonk.nl> Date: Fri, 20 Jul 2012 06:21:21 To: <gbonser(a)seven.com> Cc: <nanog(a)nanog.org> Subject: Re: Hearing Syria internet cut .-- My secret spy satellite informs me that at 12-07-19 10:00 PM George Bonser wrote: > Can anyone confirm? Yes confirmed, about 90% of the Syrian prefixes disappeared from the BGP tables between 13:32 and 14:13 (UTC) earlier today (2012-07-19). Cheers, Andree

2 1

Re: Hearing Syria internet cut
by Scott Weeks 20 Jul '12

20 Jul '12

--- thepacketmaster(a)hotmail.com wrote: From: "James Smith " <thepacketmaster(a)hotmail.com> I'm curious to know what method people use to monitor the changes in the BGP system? Any recommendations? ------------------------------------------ There're many. Look in the archives. For this one, though: http://www.renesys.com/blog/2012/07/syria-leaves-the-internet.shtml scott

1 0

BGP Update Report
by cidr-report＠potaroo.net 20 Jul '12

20 Jul '12

BGP Update Report Interval: 14-Jul-12 -to- 16-Jul-12 (2 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS17813 8441 1.1% 62.5 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 2 - AS8402 7458 0.9% 4.3 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS6389 6799 0.8% 2.0 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 4 - AS7029 4412 0.6% 1.3 -- WINDSTREAM - Windstream Communications Inc 5 - AS28573 4308 0.5% 2.1 -- NET Servicos de Comunicao S.A. 6 - AS47931 4294 0.5% 34.9 -- ALENETWORK A.L.E. COM NETWORK S.R.L 7 - AS9829 4175 0.5% 3.2 -- BSNL-NIB National Internet Backbone 8 - AS22561 4072 0.5% 4.0 -- DIGITAL-TELEPORT - Digital Teleport Inc. 9 - AS18566 3937 0.5% 1.9 -- COVAD - Covad Communications Co. 10 - AS1785 3867 0.5% 2.0 -- AS-PAETEC-NET - PaeTec Communications, Inc. 11 - AS27738 3789 0.5% 6.9 -- Ecuadortelecom S.A. 12 - AS8151 3457 0.4% 2.4 -- Uninet S.A. de C.V. 13 - AS17974 3355 0.4% 1.5 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 14 - AS13118 3240 0.4% 67.5 -- ASN-YARTELECOM OJSC Rostelecom 15 - AS24560 3049 0.4% 2.9 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 16 - AS20115 2973 0.4% 1.8 -- CHARTER-NET-HKY-NC - Charter Communications 17 - AS10620 2846 0.4% 1.4 -- Telmex Colombia S.A. 18 - AS4766 2764 0.3% 1.0 -- KIXS-AS-KR Korea Telecom 19 - AS8452 2604 0.3% 2.2 -- TE-AS TE-AS 20 - AS3356 2474 0.3% 2.2 -- LEVEL3 Level 3 Communications TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS49745 815 0.1% 815.0 -- ESIH-AS EnergoStroyInvest-Holding JSC 2 - AS43348 1154 0.1% 577.0 -- TATARINOVA-AS PE Tatarinova Alla Ivanovna 3 - AS55665 182 0.0% 182.0 -- STMI-AS-ID PT Sampoerna Telemedia Indonesia 4 - AS33524 149 0.0% 149.0 -- BT-ROC1-AS1 - BlueTie, Inc. 5 - AS3 146 0.0% 759.0 -- J2-GLOBAL-IRELAND j2 Global Ireland Ltd 6 - AS58249 282 0.0% 141.0 -- SKYDRAGONCOMPANYWITHLIMITEDLIABILITY Sky Dragon Company With Limited Liability 7 - AS49072 138 0.0% 138.0 -- APSUARA-AS TCA Apsuara Ltd. 8 - AS37026 395 0.1% 131.7 -- SALT-ASN 9 - AS42806 125 0.0% 125.0 -- TELECOM-AS Telecom Georgia 10 - AS53189 1507 0.2% 115.9 -- 11 - AS42602 112 0.0% 112.0 -- GRANBANK-AS GRAN branch of Joint Stock Commercial Bank INVESTBANK Open-end JSC AS 12 - AS34349 111 0.0% 111.0 -- KUNTSEVONET-AS ZAO Networks Project AS 13 - AS29126 94 0.0% 94.0 -- DATIQ-AS Datiq B.V. 14 - AS54722 92 0.0% 92.0 -- BMOS - Museum of Science 15 - AS29398 83 0.0% 83.0 -- PETROBALTIC "Petrobaltic" S.A. 16 - AS4 308 0.0% 339.0 -- COMUNICALO DE MEXICO S.A. DE C.V 17 - AS50433 74 0.0% 74.0 -- TSPU-AS Tomsk State Pedagogical University 18 - AS10702 2328 0.3% 70.5 -- INL-AS - Idaho National Laboratory 19 - AS19406 752 0.1% 68.4 -- TWRS-MA - Towerstream I, Inc. 20 - AS13118 3240 0.4% 67.5 -- ASN-YARTELECOM OJSC Rostelecom TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/19 3149 0.4% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 98.125.192.0/22 2000 0.2% AS22561 -- DIGITAL-TELEPORT - Digital Teleport Inc. 3 - 59.176.0.0/14 1978 0.2% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 4 - 59.177.0.0/16 1521 0.2% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 5 - 111.125.126.0/24 1519 0.2% AS17639 -- COMCLARK-AS ComClark Network & Technology Corp. 6 - 59.177.0.0/18 1067 0.1% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 7 - 59.177.48.0/20 1004 0.1% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 8 - 114.143.220.0/24 957 0.1% AS17762 -- HTIL-TTML-IN-AP Tata Teleservices Maharashtra Ltd 9 - 202.56.215.0/24 954 0.1% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 10 - 123.252.208.0/24 852 0.1% AS17762 -- HTIL-TTML-IN-AP Tata Teleservices Maharashtra Ltd 11 - 139.139.19.0/24 837 0.1% AS1562 -- DNIC-ASBLK-01550-01601 - DoD Network Information Center 12 - 194.190.10.0/24 815 0.1% AS49745 -- ESIH-AS EnergoStroyInvest-Holding JSC 13 - 194.63.9.0/24 810 0.1% AS1273 -- CW Cable and Wireless Worldwide plc 14 - 69.38.178.0/24 732 0.1% AS19406 -- TWRS-MA - Towerstream I, Inc. 15 - 59.177.64.0/18 624 0.1% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 16 - 94.131.0.0/16 577 0.1% AS43348 -- TATARINOVA-AS PE Tatarinova Alla Ivanovna 17 - 94.130.0.0/16 577 0.1% AS43348 -- TATARINOVA-AS PE Tatarinova Alla Ivanovna 18 - 59.177.0.0/19 561 0.1% AS17813 -- MTNL-AP Mahanagar Telephone Nigam Ltd. 19 - 65.82.30.0/24 536 0.1% AS6197 -- BATI-ATL - BellSouth Network Solutions, Inc 20 - 204.134.161.0/24 530 0.1% AS10702 -- INL-AS - Idaho National Laboratory Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0