- Test - lists.nanog.org

BGP noob needs monitoring advice
by Dave Pooser 21 Dec '11

21 Dec '11

Earlier this year I got a /24 of PA space, set up our shiny new router, got BGP working with both my upstreams, and heaved a sigh of relief: "I'll never have to think about THAT again!" (Okay, quit laughing; I SAID I was a noob!) Now, I discover that one of my upstreams quit announcing our route in November (fortunately the provider who assigned us the /24, so we're still covered in their /18) and the other upstream apparently started filtering our announcements last week. I'm working with both of them to get that fixed, but it's made it clear to me that I need to be monitoring this. My question for the group is, how? I can and do monitor my own router, and I can see that I'm receiving full routes from both ISPs. I am capable of manually accessing route servers and looking glass servers to check if they're receiving routes to me, but I'd like something more automated. Free is nice, $$ is not a problem, $$$$ might become a problem. Thanks in advance for any suggestions. -- Dave Pooser Manager of Information Services Alford Media http://www.alfordmedia.com

9 10

Level3 AWS network issues?
by Rob Smith 21 Dec '11

21 Dec '11

Is anyone else seeing issues connecting to the different Amazon AWS products from the east coast via Level3? I'm very high latency once I hit Amazon's network on Level3 for the last day and a half: me@computer:~/$ tracepath s3.amazonaws.com 1: computer.local 0.136ms pmtu 1500 1: XXXXXXXX 6.495ms 1: XXXXXXXX 2.091ms 2: 10.68.96.1 8.933ms 3: gig-2-18-nycmnyr-rtr02.nyc.rr.com 12.440ms 4: tenge-0-4-0-6-nyquny91-rtr001.nyc.rr.com 12.296ms 5: bun6-nyquny91-rtr002.nyc.rr.com 13.894ms 6: ae-3-0.cr0.nyc20.tbone.rr.com 16.869ms 7: 107.14.17.169 10.200ms 8: xe-9-3-0.edge2.Newark1.Level3.net 12.215ms 9: ae-32-52.ebr2.Newark1.Level3.net 12.380ms 10: ae-4-4.ebr2.Washington1.Level3.net 20.277ms 11: ae-92-92.csw4.Washington1.Level3.net 15.482ms 12: ae-2-70.edge3.Washington1.Level3.net 15.972ms asymm 13 *13: AMAZON.COM.edge3.Washington1.Level3.net 277.609ms asymm 16 * *14: 72.21.220.129 311.718ms asymm 17 * *15: 72.21.222.139 325.718ms * *16: 72.21.218.201 279.354ms asymm 17 * *17: 72.21.218.207 276.793ms asymm 15 * I've heard from a few other folks that they're experiencing this as well, but only if they're traversing the Level3 network. I've tried contacting Amazon and tried going through my own provider but haven't been able to get anywhere. Can anyone forward this to the appropriate Amazon/Level3 contacts or provide contact information for someone that I can relay this information to?

1 0

Any tools to help network security
by Deric Kwok 21 Dec '11

21 Dec '11

Hi We discover there are so many (source) ip not belonging to our network to go to outside. We can block it but don't know how to locate the source. Any tools can be easily found out. Thank you

4 3

BGPmon regex
by Christopher J. Pilkington 21 Dec '11

21 Dec '11

I'm trying to edit my prefixes' AS path regex in BGPmon, and when I add a '\s' in the Regular expression field, upon save, the '\' is stripped. Is this expected behavior? The workaround is to insert a '\\s' instead, but one needs to remember to do this on every edit, and I tend to forget which results in panicking the others on our team with false positives. -cjp

3 2

routeviews.org domain registration
by Stephen Strowes 21 Dec '11

21 Dec '11

routeviews.org domain registration has lapsed? I pinged John Kemp at uoregon.edu, but unsure if he is the correct contact for this. Domain ID:D48496876-LROR Domain Name:ROUTEVIEWS.ORG Created On:14-Dec-2000 23:05:47 UTC Last Updated On:20-Dec-2011 08:53:07 UTC Expiration Date:14-Dec-2012 23:05:47 UTC Sponsoring Registrar:Network Solutions LLC (R63-LROR) Status:CLIENT TRANSFER PROHIBITED Status:AUTORENEWPERIOD Registrant ID:DOMAIN-RESALE Registrant Name:Pending Renewal or Deletion Registrant Street1:P.O. Box 430 Registrant Street2: Registrant Street3: Registrant City:Herndon Registrant State/Province:VA Registrant Postal Code:20172 Registrant Country:US Registrant Phone:+1.5707088786 Registrant Phone Ext.: Registrant FAX: Registrant FAX Ext.: Registrant Email:pendingrenewalordeletion@networksolutions.com

3 2

Google's Schmidt on Iran supposedly hijacking GOOG'd .dk traffic
by Gadi Evron 21 Dec '11

21 Dec '11

Video at: http://edition.cnn.com/video/#/video/bestoftv/2011/12/13/erin-schmidt-on-ir… Gadi. -- Gadi Evron, ge(a)linuxbox.org. Blog: http://gevron.livejournal.com/

1 0

Happy xmas folks
by andrew.wallace 21 Dec '11

21 Dec '11

I just want to say happy xmas to everyone at NANOG. I'm about to sign off for the holidays. Andrew

3 3

Re: IPv6 RA vs DHCPv6 - The chosen one?
by Daniel Espejel 21 Dec '11

21 Dec '11

IPv6-RA autoconfiguration method allows to autoconfigure ipv6-capable network interfaces by sending IPv6 prefixes throughout a link, so every node that understands its message format can derive its own IPv6 address based on internal algorithms. By using RA, you can configure almost any node to serve as a router (i.e. running RADVD). As a matter of fact, there are some flags in the RAs to set the DHCP as the "complement device" to get full information about the network. In cases when the only thing you need to know its a basic network configuration (routes), or if devices don't need to use another external services such as DNS, RA should me enough. On the other hand, DHCPv6 works in a way very similar like DHCPv4, and you can spread information like the DNS-servers for a given link or network. More advanced auto-configuration schemas may be reached if using RA+DHCPv6. Think on scenarios like mobile networks, multihommed hosts and low-power consuption ip based network-based networks. BR. -- Daniel Espejel Pérez

1 0

Any clueful Megapath/Covad peeps on the list?
by Mike Lyon 21 Dec '11

21 Dec '11

If so, can you ping me off-list? Having issues finding clue through your phone tree. Thank You, Mike

1 0

DNS zone response speed test tool?
by Jay Ashworth 21 Dec '11

21 Dec '11

I've put monitoring onto my public website, and by far the largest component of the response time it gives me is the DNS lookup -- 4-500ms, which seems entirely unreasonable. Is there a tool that anyone knows about that will measure the response time of my zone servers, somewhere on the web? Is the sum of the times in a dig +trace the proper metric to look at there? Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

4 5