- Test - lists.nanog.org

Small Network Equipment Shipping boxes
by Andrew Konkol 07 Feb '10

07 Feb '10

Gurus, Where I work we ship our own gear. That being said, we've run out of 1U shipping boxes for cisco gear. I've searched the list archives, uline, as well as a few other shipping material websites and cannot find an acceptable shipping box with foam inserts. I would like a corrugated cardboard box with foam supports for shipping 1U cisco gear (3550s, 4948s, etc..) I was wondering if anyone has sourced a good shipping box? I apologize if this topic has been brought up before and my search didn't find the thread. Thanks, -a

4 3

How polluted is 1/8?
by Mirjam Kuehne 07 Feb '10

07 Feb '10

Hello, After 1/8 was allocated to APNIC last week, the RIPE NCC did some measurements to find out how "polluted" this block really is. See some surprising results on RIPE Labs: http://labs.ripe.net/content/pollution-18 Please also note the call for feedback at the bottom of the article. Kind Regards, Mirjam Kuehne RIPE NCC

11 12

How common are wide open SIP gateways?
by Drew Weaver 07 Feb '10

07 Feb '10

Heya, Has anyone done any research or have any anecdotal numbers related to how common it is to have a SIP gateway sitting out on the Internet with no ACL or authentication? Recently we have noticed a couple of instances where we get abuse complaints from companies who claim that one of our hosting clients 'stole SIP service' from them. This reminds me somewhat of the 'SMTP open relay' days. We obviously take action and shut the offending user down but I can't help but wonder how common this practice is. Usually I just ask the company why their system allows anyone to use their SIP gateway and they usually say something like "We can't predict what IP our users will come in from... etc" I am just wondering if anyone else has noticed this trend. -Drew

9 10

Insecure Cable networks ?
by Jorge Amodio 06 Feb '10

06 Feb '10

Is it a common practice on cable network providers to leave access to the cable modem/router management web UI wide open ? Here is the scoop. I heard about it but didn't experienced it hands on or seen myself until recently when I was testing one of the embedded TCP/IP boards I produce which as many other IP gadgets has a mini HTTP server which I access just typing the IP address of the thing. In my home lab an IPv4 address on 10/8, not very uncommon I screwed up and made a typo on the IP address and ended on a different device web UI, an Ambit cable modem Hmmm my modem is from Toshiba, I tried the default factory password, it worked !!, not only that, this thing is several cities hundreds of miles away from here .. ehhh ? fired nmap, tried several 10/24 networks and just playing by hand found hundreds of devices and every single one I tried default password it worked, not only modems, also modem/routers and some with integrated VoIP where if I wanted I would have been able to change provisioning configuration, channel scanning, browse through the call manager logs and see who's calling or being called, etc. Isn't this a huge security hole ? It wont take much for a kiddie to write a very simple script to drive crazy the noc guys taking down pieces of the network here and there ... If a grownup from TWC/RR wants to get more specifics feel free to contact me. Regards

4 4

Re: Regular Expression for IPv6 addresses
by Richard.E.Brown＠DARTWARE.COM 06 Feb '10

06 Feb '10

Folks, Thanks for all the comments on the IPv6 regex... ----- > Jeroen Massar <jeroen(a)unfix.org> wrote: > > The only proper way of "testing" if an address is a valid IPv6 address > is to feed it to getaddrinfo() and then use it through that API. Good point. One of the reasons to do this was for environments where getaddrinfo() might not be availble. (For example, in a Javascript - see the page on the InterMapper site: http://intermapper.com/ipv6validator ) > Of course, there should be only limited places where a user can enter or > see IP addresses in the first place. There is this great thing called > DNS which is what most people should be using. Another good point. But look at Seiichi's note (below)... ----- > Seiichi Kawamura <kawamucho(a)mesh.ad.jp> also> wrote: > This might be of some interest to you. > > http://tools.ietf.org/html/draft-ietf-6man-text-addr-representation-04 We believe this correctly recognizes all the cases specified by RFC4291. But it's a great idea to update the Javascript page above to reformat to this recommendation. ----- > Carsten Bormann <cabo(a)tzi.org> > > I was looking at this regexp for my Ruby course as a great example of "how not > to use Regexps". > > But thank you for this textbook example! > And, of course, an error did creep in. You're quite welcome! :-) But seriously... Do you have an example of an address that causes the RE to fail? > If you really need an RE, the right approach here is to write a small program >to > generate the RE. Absolutely. The Perl program cited includes code much like your example. Rich Brown richard.e.brown(a)dartware.com Dartware, LLC http://www.dartware.com 66-7 Benning Street Telephone: 603-643-9600 West Lebanon, NH 03784-3407 Fax: 603-643-2289 PS Dartware is sponsoring a table displaying our InterMapper network monitoring software at the NANOG48 Beer 'n Gear. Please come by to introduce yourself and take a look...

1 0

fiber plant management?
by Justin M. Streiner 06 Feb '10

06 Feb '10

To those of you who currently operate large campus/metro fiber plants, what are you currently using to track the usage of that plant? By that I mean things such as: * tracking the number of free/used/unusable strands in a cable * tracking conduit utilization * tying OTDR test results/power meter readings to strands * trying as-built drawings to cable routes and plant assets like manholes, junction boxes, transition splice points, duct banks, utility poles, etc. * mapping termination bays to cables * tracking cross-connects and splice locations * grouping cable segments and cross-connects together into a path/circuit * utilization reports, etc. I've looked at one or two commercial packages, and might look at more as time permits. I haven't seen much in the open-source world, and I suspect that many places ended up rolling their own management apps to tie into existing provisioning systems, etc. It's possible that I could end up going that route as well. jms

6 10

lawful intercept/IOS at BlackHat DC, bypassing and recommendations
by Gadi Evron 06 Feb '10

06 Feb '10

"That peer-review is the basic purpose of my Blackhat talk and the associated paper. I plan to review Cisco’s architecture for lawful intercept and explain the approach a bad guy would take to getting access without authorization. I’ll identify several aspects of the design and implementation of the Lawful Intercept (LI) and Simple Network Management Protocol Version 3 (SNMPv3) protocols that can be exploited to gain access to the interface, and provide recommendations for mitigating those vulnerabilities in design, implementation, and deployment." More here: http://blogs.iss.net/archive/blackhatlitalk.html Gadi. -- Gadi Evron, ge(a)linuxbox.org. Blog: http://gevron.livejournal.com/

9 13

Small Network Equipment Shipping boxes
by Andrew Konkol 06 Feb '10

06 Feb '10

Gurus, Where I work we ship our own gear. That being said, we've run out of 1U shipping boxes for cisco gear. I've searched the list archives, uline, as well as a few other shipping material websites and cannot find an acceptable shipping box with foam inserts. I would like a corrugated cardboard box with foam supports for shipping 1U cisco gear (3550s, 4948s, etc..) I was wondering if anyone has sourced a good shipping box? I apologize if this topic has been brought up before and my search didn't find the thread. Thanks, -a

1 0

Re: How polluted is 1/8?
by Manish Karir 06 Feb '10

06 Feb '10

Hi Jared, Merit would be happy to sink and collected this traffic. Perhaps even the entire /8 depending on the traffic level. Ideally we would want to do the entire /8. We have disk and bandwidth in place for our other research activities and this would fit in nicely. We could probably do a full pcap capture for a week or so and make it publicly available to the broader research community. -manish > >There was a call on the apnic list for someone to sink some of the traffic. >I'd like to see someone capture the data and post pcaps/netflow analysis, and possibly just run a http server on >that /24 so people can test if their network is broken. > >I've taken a peek at the traffic, and I don't think it's 100's of megs, but without a global view who knows. > >- Jared

1 0

Re: google contact? why is google hosting/supporting/encouraging spammers?
by Mike Hearn 06 Feb '10

06 Feb '10

Hello nanog, I was pointed to the recent thread about Google Groups spammers and thought I'd throw out a few comments. Keeping Google free of spam, and keeping the wider internet community on our side is important to us. By the time I looked at it, the account named by Jim was already shut down as part of a systematic anti-abuse sweep. We automatically identify and shut down many accounts every day and this account was no different. The nature of providing free email services at scale is that abuse is inevitable and the only way to tackle it is with automation, so hopefully you can understand that we may not always be as responsive to ad hoc manual reports as would be ideal. Google Groups spam specifically is something we started seriously tackling only recently. Doing it as well as GMail required a rewrite of the rather old groups backend. It's already improved dramatically in the past few months and it is continuing to get better rapidly as we close the remaining holes. On the question of caring, we do care about spam of all kinds, both inbound and outbound, and have a large anti abuse team dedicated to stopping spammers. This is a difficult problem - there is a dedicated underground economy of people who spend all day reverse engineering our systems so they can sell accounts and mail relay services to other, less capable individuals. But I think it's fair to say we're ahead of the game here - for example, Google is the only major webmail provider I know of that has aggressively deployed SMS verification. Thanks for the feedback. Google wants to be the best netizen possible, and we know getting spam from google IPs is frustrating - we're on it. /mike -- GMail Engineering Google Switzerland GmbH

1 0