- Test - lists.nanog.org

[NANOG-announce] REMINDER: CFP for NANOG 48
by Tom Daly 04 Jan '10

04 Jan '10

Hello Fellow NANOG'ers, As you all should know by now, NANOG 48 is coming up in February. The NANOG Program Committee has been busily recruiting, collecting, and reviewing submissions for the program, however, we still need more content. We have lined up many interesting Tracks and Panels, but need more General Session submissions - to learn more about what you're up to in your networks and what is important to you! The NANOG 48 Call for Presentations is still available at http://www.nanog.org/meetings/nanog48/index.php. The PC will be having a call next Tuesday to review submissions, and would like to have more material to review. So what that means: - YOU: Go think of something you think is important to the NANOG Community - YOU: Write up some slides (PDF format prefered) - YOU: Submit them to the PC tool (https://pc.nanog.org) - WE, THE PC: Tell you how awesome your presentation looks - YOU: Present at NANOG 48 and take all the credit for your awesome talk! Yes, it really is that simple. Do it now! Shamelessly, for the NANOG PC, Tom Daly -- Tom Daly CTO, Dynamic Network Services, Inc. http://dyn.com/ _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

geolocation comparison
by Bradley Huffaker 04 Jan '10

04 Jan '10

CAIDA plans to conduct a comparison of geolcocation tools for determining the location of Internet Protocal (IP) address (and other identifiers) in the summer of 2010. At this time we wish to receive feedback from interested parties on input to the comparison survey, whether they wish to participate and in what capacity. * What is your primary interest in geolocation services? Legal, academic, content localization, disaster preparedness, regulation, ... * Can you provide ground truth geolocation information for your organization? * Do you have suggested metrics, questions, or tests to include in the comparisons? * If you provide a geolocation service, under what conditions would you be willing to participate? * If you use a Geolocation service(s), which do you use and in what way? * Which companies do you consider to be the primary providers of geolocation services at this time? Please send any comments to: geocompare-info(a)caida.org Details can be found: http://www.caida.org/projects/cybersecurity/geolocation/ -- "Be always at war with your vices, at peace with your neighbors, and let each new year find you a better man." - Benjamin Franklin

1 0

More ASN collissions
by Jared Mauch 04 Jan '10

04 Jan '10

As always, good research by renesys. http://www.renesys.com/blog/2009/12/bonjour-yall-asn-split-persona.shtml - Jared

6 7

Re: Consumer-grade dual-homed connectivity options?
by Scott Weeks 04 Jan '10

04 Jan '10

--- paul.w.bennett(a)gmail.com wrote: From: "Paul Bennett" <paul.w.bennett(a)gmail.com> At home, I currently run two DSL lines. Right now, we just have two separate LANs, one connected to each line, with my wife's devices attached to one, and my devices attached to the other. For a while now, I've been thinking about setting up a load-balancing routing solution to give both of us access to both lines. --------------------------------------------------- Maybe www.xincom.com/products.php will work? scott

4 3

InterNAP FCP (again?)
by Michael J McCafferty 04 Jan '10

04 Jan '10

All, I know this has been discussed to some degree before and I have searched the archives. However is it seems in my previous posts to this list about anything, the truly useful replies are the private replies ones that don't make it to this list. We are considering the InterNAP Flow Control Platform. Currently we have 3 transit providers but are adding one or two more and will also be adding a connection to the Any2 exchange at One Wilshire. The price is manageable, the reporting seems quite useful, but I haven't seen it actually in action on my network. If it works as claimed for managing commit levels, performance, etc. then I expect we'd be very happy. The problem is that InterNAP does not want to do any acceptance testing... all sales are final... and in my research on the web, I see a few companies that have implemented the FCP and have either removed it or switched to Avaya CNA (yes, I know it's going away). Since InterNAP has pulled way from any kind of happiness guarantee, I'd very much like to hear from actual users of the FCP, happy and unhappy, to help me feel better about signing the PO. Does it do what it says it does for performance and managing commit levels? Do you feel it was worth the integration and money? Are you happy with it? What size and shape is the network you used it on? Do you have any additional thoughts to share regarding the FCP? Thanks! Mike -- ************************************************************ Michael J. McCafferty Principal M5 Hosting http://www.m5hosting.com You can have your own custom Dedicated Server up and running today ! RedHat Enterprise, CentOS, Ubuntu, Debian, OpenBSD, FreeBSD, and more ************************************************************

3 2

Does anyone have the Cyber Storm II Exercise Report?
by Eric Brunner-Williams 04 Jan '10

04 Jan '10

I'm sure someone must, but google as I have I only find "fact sheets" (marcom collateral) and reports to Congress. Thanks in advance! Eric

2 1

Article on spammers and their infrastructure
by Phil Regnauld 04 Jan '10

04 Jan '10

http://threatpost.com/en_us/blogs/attackers-buying-own-data-centers-botnets… It this something new ? The article seems to mix various issues together. And this would seem highly inefficient to me compared to traditional botnets (renting your own rack for a botnet doesn't really make sense :) Comments ?

21 38

Re: Consumer-grade dual-homed connectivity options?
by Mathias Seiler 03 Jan '10

03 Jan '10

Hi Paul You can do this on a linux box with a pretty much basic kernel. I currently have a similar setup at home with a DSL and a cable line (from different providers). Here's the script I'm actually using: http://ocaholic.ch/download/multinat.txt Some packets are tagged with iptables (SSH as an example) because I want it to prefer the DSL connection. You can do pretty interesting things with it, even per-packet round-robin distribution … which is a Bad Idea™ though. If you want it to fail-over automatically you need to patch the kernel etc. You'll find all information on http://lartc.org/ (especially on http://lartc.org/howto/lartc.rpdb.multiple-links.html) and here: http://www.ssi.bg/~ja/#routes This setup is running for about a year now and it does this quite well. Regards Begin forwarded message: >> >> --- paul.w.bennett(a)gmail.com wrote: >> From: "Paul Bennett" <paul.w.bennett(a)gmail.com> >> >> At home, I currently run two DSL lines. Right now, we just have two >> separate LANs, one connected to each line, with my wife's devices attached >> to one, and my devices attached to the other. For a while now, I've been >> thinking about setting up a load-balancing routing solution to give both >> of us access to both lines. >> --------------------------------------------------- >> Mathias Seiler MiroNet GmbH, Strassburgerallee 86, CH-4055 Basel T +41 61 201 30 90, F +41 61 201 30 99 mathias.seiler(a)mironet.ch www.mironet.ch

1 0

Regarding SLA violations
by Saqib Ilyas 03 Jan '10

03 Jan '10

Hi NANOGers I request a few moments of your time for your invaluable input on the following questions that I am wondering about: 1. a) How often does a service provider network incur SLA violations? b) Which SLA parameter is the most probably violated (bandwidth, delay, packet loss or others)? c) Apart from link failures, what are other likely causes of this violation? 2. If a service provider provisions a 2 Mbps data pipe between two customer sites, how often does the customer traffic go beyond 2 Mbps? Thanks and best regards -- Muhammad Saqib Ilyas PhD Student, Computer Science and Engineering Lahore University of Management Sciences

1 0

RBN and it's spin-offs
by Bruce Williams 02 Jan '10

02 Jan '10

Interesting article about RBN, it's spin-offs and the global network infrastructure used for cybercrime. Has a passing mention of Atrivo's place in the global picture. http://www.newsweek.com/id/228674 Reportedly started by someone operating under the name "Flyman," RBN is known as the mother of cybercrime among online investigators. François Paget, senior expert for the McAfee company, says that RBN began as an Internet provider and offered "impenetrable" hosting for $600 a month. This meant a guarantee that it would not give out information about its clients, no matter what business they were in. Aleksandr Gostev, director of Kaspersky Labs, a global research and threat analysis center, believes that RBN's servers are located in Panama. "Confidential data about clients can be obtained only by a court decision," a Newsweek source familiar with the situation says. "But what court do you apply to if criminal ties are discovered? A Panamanian court?" -- Bruce Williams “Discovering...discovering...we will never cease discovering... and the end of all our discovering will be to return to the place where we began and to know it for the first time.” -T.S. Eliot

9 15