- Test - lists.nanog.org

Lossy compression HTTP proxy
by Vlad Galu 22 Nov '11

22 Nov '11

Hello, I am looking for a proprietary $subj, a la ziproxy [1]. Caching is not the main concern (well, I wouldn't mind it caching compressed JPEGs). Mobile telco people should probably know a few vendors. Thanks! [1] http://ziproxy.sourceforge.net -- PacketDam: a cost-effective software solution against DDoS http://www.packetdam.com

1 0

actual problems in networks
by Piotr 22 Nov '11

22 Nov '11

Hello There is some working service about problems in tier's networks ? Like this: http://www.backbone-news.com/ thanks Piotr

2 1

Re: First real-world SCADA attack in US
by Hal Murray 21 Nov '11

21 Nov '11

> On an Illinois water utility: > http://www.msnbc.msn.com/id/45359594/ns/technology_and_science-security That URL says: > The Nov. 8 incident was described in a one-page report from the Illinois > Statewide Terrorism and Intelligence Center, according to Joe Weiss, a > prominent expert on protecting infrastructure from cyber attacks. Joe Weiss gave a good talk at Stanford last Oct 12. http://www.stanford.edu/class/ee380/ My quick summary: The whole SCADA industry isn't tuned into network security issues. It's not part of their culture. ---------- Several years ago, Idaho National Labs ran an experiment. They blew up a diesel generator by remote control. Aurora is the buzzword. The abstract page for his talk has a link to a CNN video. It only has a few seconds of the generator. Here is a longer version on YouTube: http://www.youtube.com/watch?v=fJyWngDco3g -- These are my opinions, not necessarily my employer's. I hate spam.

1 0

XO Contact
by Nicolas Strina 21 Nov '11

21 Nov '11

Hello, Can someone from XO contact me offlist please ? Regards,

1 0

Re: ASA log viewer
by Joel M Snyder 21 Nov '11

21 Nov '11

>I'd like to fully search on an 'column', a la 'ladder logic' style., >as well as have the data presented in an orderly well-defined fashion. Yes, Splunk. See: http://www.networkworld.com/reviews/2011/092611-splunk-test-250836.html for a recent Network World test of Splunk which may help. jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

6 6

abuse@brasiltelecom.com.br Contact - Re: http://ipcacoal.org/ipcacoal/includes/kiwi.htm
by Don Gould 21 Nov '11

21 Nov '11

Anyone with any clue on how to contact abuse(a)brasiltelecom.com.br like to forward this? Their abuse contact in the whois database is just bouncing. I do realise this is just day to day noise, but as you can see from the trail below, I have used the normal tools that we put in place to mange these sorts of issues. I have noted over the past 12 months, quite a bit of discussion on NANog about Whois and that fact that the resource is now failing. I would like to see the community address the whois database, clean it up and return it to being functional. Mine is not perfect either, and I will pledge to work on that over the next 12 months. I'd like to year your commitment to the same. Cheers D Sirs, A host in your IP range is hosting a bank security breach web site. Can you please address this? http://ipcacoal.org/ipcacoal/includes/kiwi.htm - Please see the correct site at www.kiwibank.co.nz # whois ipcacoal.org NOTICE: Access to .ORG WHOIS information is provided to assist persons in determining the contents of a domain name registration record in the Public Interest Registry registry database. The data in this record is provided by Public Interest Registry for informational purposes only, and Public Interest Registry does not guarantee its accuracy. This service is intended only for query-based access. You agree that you will use this data only for lawful purposes and that, under no circumstances will you use this data to: (a) allow, enable, or otherwise support the transmission by e-mail, telephone, or facsimile of mass unsolicited, commercial advertising or solicitations to entities other than the data recipient's own existing customers; or (b) enable high volume, automated, electronic processes that send queries or data to the systems of Registry Operator or any ICANN-Accredited Registrar, except as reasonably necessary to register domain names or modify existing registrations. All rights reserved. Public Interest Registry reserves the right to modify these terms at any time. By submitting this query, you agree to abide by this policy. Domain ID:D155949678-LROR Domain Name:IPCACOAL.ORG Created On:24-Apr-2009 12:20:02 UTC Last Updated On:02-Apr-2011 20:41:14 UTC Expiration Date:24-Apr-2012 12:20:02 UTC Sponsoring Registrar:eNom, Inc. (R39-LROR) Status:CLIENT TRANSFER PROHIBITED Registrant ID:a81fb17fb96efad6 Registrant Name:Kallew Cesar Braganca Pavao Registrant Organization:ipcacoal.org Registrant Street1:Rua Carlos SCherrer, 478 Registrant Street2: Registrant Street3: Registrant City:Cacoal Registrant State/Province: Registrant Postal Code:76962-278 Registrant Country:BR Registrant Phone:+55.6934418628 Registrant Phone Ext.: Registrant FAX:+55.6934418628 Registrant FAX Ext.: Registrant Email:k182_@hotmail.com Admin ID:a81fb17fb96efad6 Admin Name:Kallew Cesar Braganca Pavao Admin Organization:ipcacoal.org Admin Street1:Rua Carlos SCherrer, 478 Admin Street2: Admin Street3: Admin City:Cacoal Admin State/Province: Admin Postal Code:76962-278 Admin Country:BR Admin Phone:+55.6934418628 Admin Phone Ext.: Admin FAX:+55.6934418628 Admin FAX Ext.: Admin Email:k182_@hotmail.com Tech ID:a81fb17fb96efad6 Tech Name:Kallew Cesar Braganca Pavao Tech Organization:ipcacoal.org Tech Street1:Rua Carlos SCherrer, 478 Tech Street2: Tech Street3: Tech City:Cacoal Tech State/Province: Tech Postal Code:76962-278 Tech Country:BR Tech Phone:+55.6934418628 Tech Phone Ext.: Tech FAX:+55.6934418628 Tech FAX Ext.: Tech Email:k182_@hotmail.com Name Server:NS1.SERVIDORPROTEGIDO.NET Name Server:NS2.SERVIDORPROTEGIDO.NET Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: Name Server: DNSSEC:Unsigned # host ipcacoal.org ipcacoal.org has address 200.160.239.14 ipcacoal.org mail is handled by 0 ipcacoal.org. # whois 200.160.239.14 % Copyright (c) Nic.br % The use of the data below is only permitted as described in % full by the terms of use (http://registro.br/termo/en.html) % being prohibited its distribution, comercialization or % reproduction, in particular, to use it for advertising or % any similar purpose. % 2011-11-19 19:16:09 (BRST -02:00) inetnum: 200.160.239/24 aut-num: AS8167 abuse-c: BTA17 owner: Gallas Software e Internet LTDA. ownerid: 005.753.287/0001-44 responsible: Depto. Registro de Domínios / ABUSE country: BR owner-c: HOHSI2 tech-c: HOHSI2 inetrev: 200.160.239/24 nserver: ns1.homehost.com.br nsstat: 20111116 AA nslastaa: 20111116 nserver: ns2.homehost.com.br nsstat: 20111116 AA nslastaa: 20111116 created: 20081020 changed: 20081020 inetnum-up: 200.160.224/19 nic-hdl-br: BTA17 person: Brasil Telecom S. A - Abuso e-mail: abuse(a)noc.brasiltelecom.net.br created: 20030624 changed: 20050214 nic-hdl-br: HOHSI2 person: HOMEHOST Hospedagem de Sites e-mail: registro(a)homehost.com.br created: 20060716 changed: 20101014 % Security and mail abuse issues should also be addressed to % cert.br, http://www.cert.br/, respectivelly to cert(a)cert.br % and mail-abuse(a)cert.br % % whois.registro.br accepts only direct match queries. Types % of queries are: domain (.br), ticket, provider, ID, CIDR % block, IP and ASN. -- Don Gould 31 Acheson Ave Mairehau Christchurch, New Zealand Ph: + 64 3 348 7235 Mobile: + 64 21 114 0699

2 2

Re: ASA log viewer
by Duane Toler 20 Nov '11

20 Nov '11

I'll go back to check that option about queue size. Thanks for the hint! Sent from my iPhone On Nov 20, 2011, at 9:23, "jjanusze(a)wd-tek.com" <jjanusze(a)wd-tek.com> wrote: > > e.g., interface_name syslog_ip[tcp/port] [emblem format] [secure] > > > Also, when you do a sho log, do you have the following set? > > > Deny Conn when Queue Full: disabled > >

1 0

ASA log viewer
by Duane Toler 20 Nov '11

20 Nov '11

Hey NANOG! My employer is deploying CIsco ASA firewalls to our clients (specifically the 5505, 5510 for our smaller clients). We are having problems finding a decent log viewer. Several products seem to mean well, but they all fall short for various reasons. We primarily use Check Point firewalls, and for those of you with that experience, you know the SmartViewer Tracker is quite powerful. Is there anything close to the flexibility and filtering capabilities of Check Point's SmartView Tracker? For now, I've been dumping the logs via syslog with TLS using syslog-ng to our server, but that is mediocre at best with varying degrees of reliability. The syslog-ng server then sends that to a perl script to put that into a database. That allows us to run our monthly reports, but that doesn't help us with live or historical log parsing and filtering (see above, re: SmartView Tracker). If a customer called to help us troubleshoot connection issues over the past few days, there's no way to review the logs and figure out what happened back then. Every CCIE we've talked to, and Cisco themselves, seem to not care about firewall traffic logs or the ability to parse and review them. We know about Cisco Security Center, but that seems incapable of handling logs, etc. CS-MARS would've been great, but that's overpriced and now discontinued anyway. We'd hate to spend the time writing our own app if there's a viable product already available (we're willing to pay a reasonable price for one, too). Any ideas? Thanks!!

5 9

Query : seeking a (low cost & secure) turnkey plug-and-play appliance to report network outages
by A. Chase Turner 20 Nov '11

20 Nov '11

I am seeking a $100 turnkey micro hardware appliance to plug into a LAN hub (behind a consumer-level cable modem) whose only purpose in life is to send heartbeat (and simple quality of service metrics) to a pre-configured central aggregation service on the WAN. Key requirement is the micro hardware appliance will be installed by non-technical elderly end-users -- so, it must be pre-configured and literally plug and play without need for the person installing the appliance to open a web browser to configure. And it must be a secure, good-reputation stand-alone hardware appliance ... because the heartbeat cannot / must not be a service installed on the end-user's computer where it becomes a support burden (e.g., did the end-user turn off their computer? Is their antivirus software blocking the outgoing heartbeat? That the end-user needs to enter a username/password/destination to enable the heartbeat, etc) There is a commercial turnkey solution that meets all the requirements except one -- that the solution cannot exceed $100 per remote appliance : http://www.myconnectionserver.com/learnmore/quality.html Question to the list: do you know of an alternative hardware solution under $100 that would suffice -- and be of such quality that an incumbent internet service provider will not thumb their nose at me when I call in to report remote users are down based upon the loss of heartbeats from the remote users? MOTIVATION FOR THE ABOVE Ten elderly neighbors to my mother in a rural area suffer frequent internet outages from their one (and only) incumbent cable internet service provider. All of them have learned they will encounter one of the following responses : "You are the only one reporting a problem" OR "We need three reports before we take action" OR "We fixed it. You need to re-boot your modem. (moments later after rebooting cable modem). It must be your computer that is the problem." OR "We know there is a problem. We'll send a crew out to repair the issue next week" These 10 elderly neighbors are fuming ... and they recently formed a call tree -- so that when one person suffers an internet outage, they call other neighbors in the call tree to see if they too have an outage ... and if so, each calls in an outage report (often 20 minutes of being placed on hold) The call tree is working (somewhat) to improve accountability and response by the cable service provider ... but it is a waste of their time as there is no formal "record" of outage events to spur the provider to provide refunds for unscheduled service outages. Thus, I am seeking a turnkey quality of service micro appliance that automates (and documents) service outage notifications .. so as to allow me (living in a city and my being on a different internet service provider) to take on the role of calling the rural cable service provider and claim (with authority) that I know that 10 individuals systems (who have the heartbeat appliance installed) are down and that the cable service provider needs to fix the issue...

15 17

BGP Update Report
by cidr-report＠potaroo.net 18 Nov '11

18 Nov '11

BGP Update Report Interval: 10-Nov-11 -to- 17-Nov-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 48265 2.6% 28.0 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS9829 38906 2.1% 52.9 -- BSNL-NIB National Internet Backbone 3 - AS7552 38240 2.1% 27.4 -- VIETEL-AS-AP Vietel Corporation 4 - AS15180 28145 1.5% 827.8 -- Diveo do Brasil Telecomunicacoes Ltda 5 - AS19743 27477 1.5% 3925.3 -- 6 - AS32528 23428 1.3% 5857.0 -- ABBOTT Abbot Labs 7 - AS6316 21598 1.2% 260.2 -- AS-PAETEC-NET - PaeTec Communications, Inc. 8 - AS27738 20805 1.1% 61.2 -- Ecuadortelecom S.A. 9 - AS20632 19602 1.1% 612.6 -- PETERSTAR-AS PeterStar 10 - AS31148 16200 0.9% 39.6 -- FREENET-AS FreeNet ISP 11 - AS11492 13132 0.7% 13.9 -- CABLEONE - CABLE ONE, INC. 12 - AS9498 12596 0.7% 15.0 -- BBIL-AP BHARTI Airtel Ltd. 13 - AS5800 11958 0.7% 49.0 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 14 - AS8866 10511 0.6% 159.3 -- BTC-AS Bulgarian Telecommunication Company Plc. 15 - AS36923 10226 0.6% 53.3 -- SWIFTNG-ASN 16 - AS12880 9615 0.5% 100.2 -- DCI-AS Information Technology Company (ITC) 17 - AS6389 9593 0.5% 2.7 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 18 - AS28885 9025 0.5% 73.4 -- OMANTEL-NAP-AS OmanTel NAP 19 - AS29049 8420 0.5% 21.9 -- DELTA-TELECOM-AS Delta Telecom LTD. 20 - AS8151 8284 0.5% 8.3 -- Uninet S.A. de C.V. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS32528 23428 1.3% 5857.0 -- ABBOTT Abbot Labs 2 - AS19743 27477 1.5% 3925.3 -- 3 - AS17408 3184 0.2% 3184.0 -- ABOVE-AS-AP AboveNet Communications Taiwan 4 - AS15180 28145 1.5% 827.8 -- Diveo do Brasil Telecomunicacoes Ltda 5 - AS20136 778 0.0% 778.0 -- MCGASN1 - Mainstream Consulting Group, Inc 6 - AS57405 769 0.0% 769.0 -- MIHAN-NOC2 MIHAN COMMUNICATION SYSTEMS CO.,LTD 7 - AS38528 671 0.0% 671.0 -- LANIC-AS-AP Lao National Internet Committee 8 - AS49466 614 0.0% 614.0 -- DECLIC-TELECOM Declic Telecom SAS 9 - AS20632 19602 1.1% 612.6 -- PETERSTAR-AS PeterStar 10 - AS11323 595 0.0% 595.0 -- GETTYIMAGES - Getty Images 11 - AS46088 560 0.0% 560.0 -- ZECONTECH - Zecontech, Inc. 12 - AS36995 1012 0.1% 506.0 -- MTN-CI 13 - AS37909 496 0.0% 496.0 -- WAKHOK-NET Wakkanai Hokusei Gakuen University 14 - AS56939 470 0.0% 470.0 -- CREDOS Credo-S Ltd. 15 - AS28272 912 0.1% 456.0 -- F-TELECOM TELECOMUNICAÇÕES LTDA 16 - AS16916 7274 0.4% 454.6 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC 17 - AS6072 6286 0.3% 449.0 -- UNISYS-6072 For routing issues, email hostmaster(a)unisys.com 18 - AS53558 1774 0.1% 443.5 -- TSG-3 - TCN Systems Group 19 - AS46975 2443 0.1% 407.2 -- MHS-CHI - Merriman Hosting Solutions, LLC 20 - AS12170 403 0.0% 403.0 -- PENTELOFAMERICA - Pentel of America, LTD. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 84.204.132.0/24 19433 1.0% AS20632 -- PETERSTAR-AS PeterStar 2 - 130.36.34.0/24 11712 0.6% AS32528 -- ABBOTT Abbot Labs 3 - 130.36.35.0/24 11712 0.6% AS32528 -- ABBOTT Abbot Labs 4 - 66.248.104.0/21 10750 0.6% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 5 - 213.16.48.0/24 10176 0.5% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 6 - 202.92.235.0/24 9581 0.5% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 7 - 66.248.120.0/21 7638 0.4% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 8 - 206.80.93.0/24 7247 0.4% AS16916 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC 9 - 65.122.196.0/24 6482 0.3% AS19743 -- 10 - 208.98.239.0/24 4464 0.2% AS25983 -- ENMAX-ENVISION - Enmax Envision Inc. 11 - 66.238.91.0/24 4199 0.2% AS19743 -- 12 - 65.162.204.0/24 4199 0.2% AS19743 -- 13 - 66.89.98.0/24 4199 0.2% AS19743 -- 14 - 65.163.182.0/24 4199 0.2% AS19743 -- 15 - 72.164.144.0/24 4198 0.2% AS19743 -- 16 - 202.153.174.0/24 3184 0.2% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 17 - 66.248.96.0/21 2959 0.1% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 18 - 192.139.142.0/24 2270 0.1% AS23498 -- CDSI - Cogeco Data Services Inc. 19 - 217.52.130.0/24 1869 0.1% AS15475 -- NOL AS36992 -- ETISALAT-MISR 20 - 217.52.70.0/24 1803 0.1% AS15475 -- NOL AS36992 -- ETISALAT-MISR Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0