- Test - lists.nanog.org

MENOG6 Call for Papers
by Mehmet Akcin 26 Feb '10

26 Feb '10

Colleagues thought it would be useful to send this to few lists who have interest in doing / extending their business in Middle East. Looking forward to see you all in Riyadh! Mehmet Akcin / MENOG Programme Committee Middle East Network Operators Group (MENOG) Riyadh, Saudi Arabia 10 - 14 April 2010 http://www.menog.net Call for Papers The MENOG Programme Committee is now seeking contributions to the programme for MENOG 6. We would like to invite people to submit their presentation proposals as soon as possible to help us produce the programme in a timely fashion. We would also like to encourage people through out the Middle East region who have not previously presented their work to do so. We are looking for people who would : * Offer a technical tutorial on an appropriate topic; and/or * Participate in the technical conference sessions as a speaker. * Share their local experience with any of the fields of interest for MENOG. Presentation proposals can be submitted at: http://submission.menog.net/paper/user/login.php?event=23 MENOG 6 FORMAT -------------- MENOG 6 will run for 5 days, and will include 3 days of hands-on technical workshops, followed by Opening and Closing Plenaries, several Technical Conference sessions including updates from the RIPE NCC, as well half a day of tutorials. Workshop 10th-12th Tutorials 13th (morning) Conference 13th (afternoon) and 14th CONFERENCE MILESTONES --------------------- Call for Papers Opens: now Deadline for Speaker Submissions: 15th March 2010 Final Slides: 10th April 2010 Final Programme Published: 22nd March 2010 TECHNICAL CONFERENCE -------------------- Each Technical session in MENOG will last 90 minutes - multiple sessions can be cover one subject area if there is demand. A 90 minute session allows presentations to be up to 25 minutes in length, meaning 3 presentations per session and some time for Q&A. Longer presentations should be submitted as tutorials. The Technical Conference commences after lunchtime on the 13th of April. Expected subject areas for MENOG 6 include: 1. HTTP and Non-HTTP Content Filtering; Anti-spam 2 Internationalised Domain Names (IDN) and Localisation 3. NREN (National Research and Education Networks) 4. ISP Operations, Peering and Internet Exchange Points 5. SP Network Security 6. IPv4 depletion/IPv6 deployment 7. Datacentres, Applications & Services 8. VSAT technologies TUTORIALS ---------- Tutorials are 90 minute technical presentations which focus on a particular subject in-depth. Tutorials will take place on the morning of the 13th of April. Tutorial Instructors are encouraged to also sign up to be a Speaker in the Technical Conference Programme as well. You can sign up to give a tutorial and/or conference session presentation by following the instructions at the end of this message for signing up as a speaker or instructor. Examples of Tutorial topics might be: - Network security, IPSec, Auditing/Forensics, DDoS Mitigation - Routing, Network Design, BGP - IPv6 deployment - IDN, Localisation - Content filtering & anti-spam - Network planning, management and traffic engineering - Internet exchanges, construction, peering and collocation - Operations, NOC, Helpdesk and other support aspects - DNS and DNSSEC If you have an idea for a tutorial subject that is not listed, please feel free to submit it to us. CFP SUBMISSION -------------- When considering a presentation or tutorial, remember that the MENOG audience is mainly comprised of technical network operators and engineers with a wide range of experience levels from beginners to multi-year experience. There is a strong orientation to offer core skills and basic knowledge in the tutorials and to address issues relevant to the day-to-day operations of ISPs and network operators over the next 12 - 18 months in the conference sessions. Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions. The Programme Committee cannot consider a presentation proposal without accompanying draft slides. While the majority of speaking slots will be allocated by 15th of March 2010, a limited number of slots may be available after then for presentations that are exceptionally timely, important, or of critical operational importance. IMPORTANT NOTE -------------- MENOG is a TECHNICAL conference so marketing and commercial content is not allowed within the programme. The programme committee will maintain the technical standard of MENOG, and will therefore not accept inappropriate materials. It is expected that the presenter be a technical person and not a sales or marketing person. The audience is extremely technical and expects that the speakers are themselves very knowledgeable. All sessions provide time for questions, so presenters should expect technical questions and be prepared to deliver insightful and technically deep responses. FUNDING AND SUPPORT ------------------- MENOG is a not-for-profit event that is trying to make the conference as close to zero cost as possible for attendees; therefore we are unable to pay the travel costs of speakers. --

1 0

Euro-IX ASN Tools updated
by Serge Radovcic 26 Feb '10

26 Feb '10

After several peering community requests we have now extended our ASN tool set to allow searches on not only European IXP participants but also those in other regions. The Euro-IX ASN database has some 9.200 entries of participants from 280 IXPs from around the globe. The data stored in our ASN database is a culmination of our member IXPs updating their records, all relevant entries from the peeringDB and me trawling through the rest of the IXP websites. I don't claim that this set of data is exhaustive but we do our very best! The data stored looks something like this. Europe: IXP Participants - 5,383 Unique ASNs - 2,952 Asia-Pacific: IXP Participants - 1,102 Unique ASNs - 635 North America: IXP Participants - 2,015 Unique ASNs - 832 South America: IXP Participants - 274 Unique ASNs - 158 Africa: IXP Participants - 199 Unique ASNs - 111 Global: IXP Participants - 9,199 Unique ASNs - 4,519 So you can get a closer look at these ASNs by searching in the Euro-IX ASN database: https://www.euro-ix.net/member/m/isp/choosing/ixpmembers/search Or having look at the ASN filter that now includes all 280 IXPs: https://www.euro-ix.net/member/m/asnfilter And for fun we have a list of ASNs that peer at 10 or more IXPs globally: https://www.euro-ix.net/multixp.php I will be at APRICOT 2010 KL from this Sunday to Wednesday if anyone wants to chat with me about this data. Serge

1 0

ATT / Bellsouth Email Feedback Loop
by Wade Peacock 26 Feb '10

26 Feb '10

Greetings Brain Trust, We have found ATT to be heavy handed with their email (spam) filtering. Without warn all of our mail servers will be denied from delivering email to their many domains (att.net, bellsouth.net, etc). They have a removal request form (like most other large ISPs) which takes 2 days to process. We never find out why the we get listed. We always check as many "email" reputation systems and rbl searches to determine why. Everywhere we look we see no evidence of a problem. We have joined other ISP feedback look system, (AOL, Yahoo and even Hotmail/Live) which all have helped stop issues (comprised accounts, bots, etc) before they get to the point of a listing/block. I have searched and I can not find out definitively whether ATT has or does not has a feedback loop system. Anyone out there know? -- Wade Peacock Network Administrator Sun Country Cablevision Ltd Sunwave Internet Department Tel: (250) 832-9711 or (250) 546-9667 Web: http://www.sunwave.net Email: wade.peacock(a)sunwave.net Support Email: support(a)sunwave.net

4 4

Does Savvis have Peering Issues (Santa Clara, Virginia)
by Haarith Devarajan 25 Feb '10

25 Feb '10

Hi, After the last few savvis maintenance upgrades, We constantly keep seeing latency issues on our external monitors. When I look it up on some common monitors like http://www.internetpulse.net/ It shows very high latency and some packet loss from Savvis to almost most vendors. When we escalate this to Savvis, they say we don't escalate tickets based on external monitors. We are not able to reproduce any timeouts but can see general increase in latency. Does any one else see similar issues and fixed it. Appreciate any help, Cheers Haarith CONFIDENTIALITY NOTICE ======================= This email message and any attachments are for the exclusive use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message along with any attachments, from your computer system. If you are the intended recipient, please be advised that the content of this message is subject to access, review and disclosure by the sender's Email System Administrator.

1 0

Competition for Internap's FCP product.
by Drew Weaver 25 Feb '10

25 Feb '10

Hi, As my Avaya CNA/Route Science box begins to seriously age, and without the support of Avaya for 'Service Provider' uses of the product, I have been looking for alternatives to the product. The value we get from this product is mainly in the ability to easily manage our bandwidth commitments in a hands off way without having to manually manipulate anything. I have no real illusions that the 'performance' side of things is 'arguable' at best with these sorts of products due to the nature of the Internet. Internap to me stands out as essentially the only alternative to this product, but they have been tremendously difficult to work with, they won't allow us to demo a unit to see if it offers the same functionality as our current solution. The reason they won't allow us to a demo a unit is because they 'don't stock them'. So basically they have 0 units until someone orders one, that is fine if that is their policy but that hasn't really been our experience with other hardware vendors that want close to 100K for a piece of niche equipment. My questions are: -What are other people doing who currently use or used the Avaya/RS product in the past? -Does anyone know of any competition in this space (aside from hiring a guy that sits there and does this for us manually)? -Has Cisco's OER/PFR made any progress in the last few years (is anyone using it?) Sorry to disturb, -Drew

4 3

Colocation + ip transit in NY
by pior 25 Feb '10

25 Feb '10

Hello, I need to find a deal for colocation + ip transit in New York in the next 2 hours. (looks like a joke but...) We need 200Mb/s now, 1Gb/s expected in next 12 months. We actually got a pretty good deal but a crossconnect is needed and the price of it really bothers my boss. Greetings, -- Pior Bastida pior(a)pbastida.net

1 0

Security Guideance
by Paul Stewart 25 Feb '10

25 Feb '10

Hi folks... We have a strange series of events going on in the past while.... Brief history here, looking for input from the community - especially some of the security folks on here. We provide web hosting services - one of our hosting boxes was found a while back with root kits installed, un patched software and lots of other "goodies". With some staff changes in place (don't think I need to elaborate on that) we are trying to clean up several issues including this particular server. A new server was provisioned, patched, and deployed. User data was moved over and now the same issue is coming back.... The problem is that a user on this box appears to be launching high traffic DOS attacks from it towards other sites. These are UDP based floods that move around from time to time - most of these attacks only last a few minutes. I've done tcpdumps within seconds of the attack starting and to date been unable to find the source of this attack (we know the server, just not sure which customer it is on the server that's been compromised). Several hours of scanning for php, cgi, pl type files have been wasted and come up nowhere... It's been suggested to dump IDS in front of this box and I know I'll get some feedback positive and negative in that aspect. What tools/practices do others use to resolve this issue? It's a Centos 5.4 box running latest Plesk control panel. Typically we have found it easy to track down the offending script or program - this time hasn't been easy at all... Thanks, Paul ---------------------------------------------------------------------------- "The information transmitted is intended only for the person or entity to which it is addressed and contains confidential and/or privileged material. If you received this in error, please contact the sender immediately and then destroy this transmission, including all attachments, without copying, distributing or disclosing same. Thank you."

22 21

Looking Glass software - what's the current state of the art?
by Joel M Snyder 24 Feb '10

24 Feb '10

We are migrating our web server from platform A to mutually incompatible platform B and as a result the 7-year-old DCL script I wrote that does Looking Glass for us needs to be replaced. (from my comments, looks like I stole the idea from ejk(a)digex.net...) I'm guessing that someone else has done a better job and I should be just downloading and using an open source tool. What's the current thinking on a good standalone Looking Glass that can be opened to the Internet-at-large? jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

3 2

Spamhaus...
by Laczo, Louis 24 Feb '10

24 Feb '10

Folks, I'm looking for comments / suggestions / opinions from any providers that have been contacted by spamhaus about excessive queries originating from their DNS resolvers, typically, as a proxy for customers. I know that certain large DNS providers (i.e. google and level3) have either been banned or have voluntarily blocked spamhaus queries by their resolvers. We're currently in discussion with spamhaus and I wanted to see how others may have handled this. Thanks! --Lou

30 66

log parsing tool?
by fedora fedora 24 Feb '10

24 Feb '10

Greetings, Anyone has good recommendations for an open-sourced log parsing and analyzing application? It will be used to work with syslog-ng and other general syslog and application logs. I have been looking at swatch and logwatch, but would like to find out if there are other good choices, thanks FD

7 7