- Test - lists.nanog.org

Re: Software router state of the art
by Seth Mattinen 29 Jul '08

29 Jul '08

Michael 'Moose' Dinn wrote: >> Thanks for being oh-so-helpful with a serious question. Got any useful >> answers for me? Give me a vendor that offers your suggestion. I don't have >> time for a make-it-myself solution. >> > > What are your requirements? > The problem I'm facing is that if I want something from Cisco that can do at least line-rate T3, I'm looking at least $20k per router. I don't have a uber-budget, so for me, that's kind of painful when I start to need more than one plus spare parts. But, I have a high level of confidence that I can put cards in, some memory, power it up, configure it and I'm good to go. Junpier's J-series is a BSD based platform as far as I understand it. ImageStream is *much* more affordable for me, but is Linux-based, and I fear Linux as a router and I don't know what they've done to fix the common gripes with Linux-as-router. I have no idea if either of the two have hardware assist in the cards, but my impression is that they are essentially software platforms with custom interface cards. Interface cards are important to me because I'm operating in an environment where my link to the outside world is probably going to be T1/T3. I'm aware of Cisco IOS, then BSD-based and Linux-based platforms that are actually sold as routing products. I also know there are a billion "yay, router!" things out there. T1 cards are easy to find. The only other place I know I could buy a T3 card from is Sangoma. Maybe someone has even used it* T3 card before. Rather than reinvent the wheel alone, nanog has to contain the highest concentration of people that have tried various things and already know what will work and what won't work. I'm not looking for OS politics, just operational experience from people who have access to more money and more hardware than I do to have tried more stuff. If my best option is still from the big players, so be it. If there's something else that's just as stable, I want to hear about it. I'm not adverse to some dirty work, but I just don't have the time right now to jump in over my head into a software router project and then fight my way back to the surface. I'm not trying to create something for educational purposes, I need something suitable for a production environment. ~Seth * http://www.sangoma.com/products_and_solutions/hardware/data_only/a301.html

8 9

Off topic - RE: So why don't US citizens get this?
by nancyp＠yorku.ca 29 Jul '08

29 Jul '08

Grad Student thesis rsrch one page: comments welcome ;) however I have my good comments filter on... Is Internet Reachability a Net Neutrality Issue? ----CRTC Chairperson Konrad von Finckenstein introduced Net Neutrality in his speech to the 2007 Broadcasting Invitational Summit and again at the 2008 Canadian Telecom Summit mentioning that the CRTC's New Media Initiative will include "striking a social, cultural and economic balance to deal with Internet traffic prioritization". ----Traffic prioritization or traffic shaping is a small part of the entire concept of a neutral network. ----The internet has no minimum standard of acceptable performance for reachability of websites and data. As an information tool it becomes useless without this reachability addressed as far as possible. ----The most famous example of non-neutrality in Canada occurred during the Telus labour dispute (2005). Telus blocked access to a pro-union site by blocking the server on which it was hosted. Researchers at Harvard, Cambridge and the University of Toronto (OpenNet Initiative) found that Teluss actions resulted in an additional 766 unrelated sites also being blocked for subscribers. Dealing with blocking access to servers and blocking access to other networks are very important aims of a neutral internet. ----Example: A York University professor was sitting at his desk at work in March 2008 trying to reach an internet website located somewhere in Europe. It was important to his research so when he repeatedly could not reach the site he contacted his IT department at the University. They were mystified why this would be the case. The Professor went home after work and found that he could reach the website from home consistently, for many days and was not ever able to reach the website from the University campus network.Yorks bandwidth supplier is Cogent which had severed a peering relationship with a bandwidth provider in Europe called Telia, which was the bandwidth network provider for the website that the Professor was trying to reach. However at home, the Professor purchased bandwidth from Rogers (and its upstream providers) who did not sever their peering relationship with Telia. Cogent did not proactively inform the University of the issue and the loss of connectivity. Unreachability due to arbitrariness in network peering is unacceptable. ----Parts of the internet become unreachable for a great many reasons such as line failure, cable cuts, misconfiguration of equipment and human error but to add significantly and deliberately to this unreachability due to arbitrariness in peering is unacceptable. End users whether award winning scholars, backyard astronomers or teenage scientists require as much reachability of data as the technology will allow. Political and economic persuasions should not be permitted to condition and alter the media or the content. ----Recommendation: Bandwidth purchase agreements (Service Level Agreements) that specify bandwidth, uptime and cost actually define connectivity thus they should contain a list of peers or network interconnections that will be maintained for the length of the agreement. Prepared by Nancy Paterson, York University July 23, 2008 nancyp(a)yorku.ca PS anyone willing to proof read a few technical pages of thesis paper? pls contact off list

9 11

RE: So why don't US citizens get this?
by natalidel＠mailinator.com 28 Jul '08

28 Jul '08

Randy Bush <<a href="mailto:nanog%40nanog.org?Subject=So%20why%20don%27t%20US%20citizens%20get%2…" title="So why don't US citizens get this?">randy(a)psg.com> at Sun Jul 27 08:18:20 UTC 2008 said:</a> > shoot the messenger, eh? <pre>> the fact is that real 100m/100m is about USD30/mo in japan. in the > states, i pay about USD90 for 256k/768k. as far as the internet is > concerned, the united states is a third world country. > > randy This is exactly my point, why is it that the US is so behind??? </pre> -- No, this email's not real, it's http://deadfake.com

20 23

Missing URL is here (was: So why don't US citizens get this?)
by michael.dillon＠bt.com 28 Jul '08

28 Jul '08

As I was saying... > Here in London they even steal bronze statues or brass > railings in a park to get the copper content. Here is one > account of the risks that copper thieves will go to. Don't > read it if you have a queasy stomach. <http://www.yorkshireeveningpost.co.uk/news/11000-volt-horror-death-for. 4253973.jp> --Michael Dillon

1 0

Possible prod to people to upgrade DNS
by Tuc at T-B-O-H.NET 28 Jul '08

28 Jul '08

Hi, The demo takes a while to load, goes fast, but shows how the exploit for DNS can potentially be used to get into a persons machine w/o them even being involved. Tuc/TBOH Forwarded message: > > -- ISR - Infobyte Security Research > -- | ISR-evilgrade | www.infobyte.com.ar | > > ISR-evilgrade: is a modular framework that allow us to take advantage of poor upgrade implementations by injecting fake updates. > > * How does it work? > > It works with modules, each module implements the structure needed to emulate a false update of specific applications/systems. > Evilgrade needs the manipulation of the victim dns traffic. > > Attack vectors: > --------------------- > > Internal scenary: (Internal DNS access,ARP spoofing,DNS Cache Poisoning, DHCP spoofing) > External scenary: (Internal DNS access,DNS Cache Poisoning) > > * What are the supported OS? > > The framework is multiplaform, it only depends of having the right payload for the target platform to be exploited. > > Implemented modules: > --------------------------------- > - Java plugin > - Winzip > - Winamp > - MacOS > - OpenOffices > - iTunes > - Linkedin Toolbar > - DAP [Download Accelerator] > - notepad++ > - speedbit > > ..:: DEMO > > Demo feature - (Java plugin + Dan Kaminsky�s Dns vulnerability) = remote pwned. > http://www.infobyte.com.ar/demo/evilgrade.htm > > ..:: AUTHOR > > Francisco Amato > famato+at+infobyte+dot+com+dot+ar > > ..:: DOWNLOAD > > http://www.infobyte.com.ar/developments.html > > > ..:: MORE INFORMATION > > Presentation: > http://www.infobyte.com.ar/down/Francisco-Amato-evilgrade-ENG.html > >

1 0

Re: So why don't US citizens get this?
by WWWhatsup 28 Jul '08

28 Jul '08

In http://punkcast.com/933/ (2006) Gale Brewer, chair of the NYC Council Tech Cttee talks about Verizon's initial plans for FTTH in NYC. In the city the problem was that they would have to negotiate with apartment building owners who would habg them out to dry for access to their tenants. As a result Verizon went for the suburbs. Just recently, after having gained approval to deliver cable tv like services, and thus one might imagine sufficient revenue to meet such demands, have they started in on the city. joly Jorge Amodio wrote: >I belive there are just few major cities in the US that have a comparable or >higher >concentration of people like other large cities around the world. --------------------------------------------------------------- WWWhatsup NYC http://pinstand.com - http://punkcast.com ---------------------------------------------------------------

1 0

Re: So why don't US citizens get this?
by Guy_Shields＠Stream.Com 28 Jul '08

28 Jul '08

We do its called FIOS. ----- Original Message ----- From: natalidel Sent: 07/26/2008 11:56 PM CET To: nanog(a)nanog.org Subject: So why don't US citizens get this? https://asahi-net.jp/en/service/ftth.html -- hmm? -- No, this email's not real, it's http://deadfake.com

12 15

Level3 newyork - london, anyone else seeing issues?
by Drew Weaver 28 Jul '08

28 Jul '08

C:\Users\aweaver>tracert 123.237.32.1 Tracing route to 123.237.32.1 over a maximum of 30 hops 5 5 ms 5 ms 5 ms ae-2-6.bar2.Cleveland1.Level3.net [4.69.132.202] 6 5 ms 4 ms 4 ms ae-0-11.bar1.Cleveland1.Level3.net [4.69.136.185] 7 13 ms 17 ms 17 ms ae-6-6.ebr1.Washington1.Level3.net [4.69.136.190] 8 16 ms 16 ms 17 ms ae-91-91.csw4.Washington1.Level3.net [4.69.134.142] 9 15 ms 17 ms 17 ms ae-93-93.ebr3.Washington1.Level3.net [4.69.134.173] 10 22 ms 18 ms 18 ms ae-3.ebr3.NewYork1.Level3.net [4.69.132.90] 11 30 ms 18 ms 18 ms ae-63-63.csw1.NewYork1.Level3.net [4.69.134.98] 12 18 ms 19 ms 19 ms ae-13-69.car3.NewYork1.Level3.net [4.68.16.5] 13 * * * Request timed out. 14 * * * Request timed out. 15 * * * Request timed out. 16 * * * Request timed out. 17 * * * Request timed out. 18 * * * Request timed out. 19 * * * Request timed out. 20 * * * Request timed out. 21 * * * Request timed out. 22 * * * Request timed out. 23 * * * Request timed out. 24 * * * Request timed out. 25 * * * Request timed out. 26 * * * Request timed out. 27 * * * Request timed out. 28 * * * Request timed out. 29 * * * Request timed out. 30 * * * Request timed out. Looks like it began occurring around 4am. We're getting reports from some international users that they are unable to reach destinations within our network. -Drew

4 4

Anyone from Charter Communications?
by Justin Ream 28 Jul '08

28 Jul '08

Hi - I thought I'd ask here as it seems I'm not really going to get anywhere through the abuse desk. It involves a stolen laptop (company's) and certain dns requests that this certain stolen laptop would be making. -Justin

1 0

One Communications (Choice One)
by Brendan Mannella 28 Jul '08

28 Jul '08

Just wondering if anyone from the One Communications Network Group is part of this list. Please contact me offlist if so. Brendan Mannella TeraSwitch Networks Inc.

1 0