- Test - lists.nanog.org

RE: NANOG Digest, Vol 5, Issue 92
by mack 29 Jun '08

29 Jun '08

> > Message: 7 > Date: Sat, 28 Jun 2008 21:31:33 -0500 (CDT) > From: Joe Greco <jgreco(a)ns.sol.net> > Subject: Re: what problem are we solving? (was Re: ICANN opens up > Pandora'sBox of > To: davids(a)webmaster.com > Cc: nanog(a)nanog.org > Message-ID: <200806290231.m5T2VXob020706(a)aurora.sol.net> > Content-Type: text/plain; charset=us-ascii > [snip] > > I don't see what you're saying as supporting ICANN's actions. If DNS > is > irrelevant for these purposes, then why bother "making a bad solution a > bit > worse." Just let it become, over the next 25 years, some mid-level > directory resource that users see less and less of, until it's almost > as > irrelevant as IP address. One could make the argument this is already the case. If I want to find a particular web site for a specific local company, I usually search in google rather than try and find the web site by guessing the name. So in reality the web site name is already irrelevant for local small businesses. For large national and international companies, we can mostly depend on .com mapping correctly as they have spent large sums of money protecting their brands. Ie. mcdonalds.com maps to the fast food joint rather than some other family owned business. In 25 years a name will map to .com or be irrelevant with the current proposal. I would be happy to be proven wrong but time will tell. > > (*I* don't buy that, but then again, I'm making the argument that we've > really screwed up with DNS) > > ... JG > -- > Joe Greco - sol.net Network Services - Milwaukee, WI - > http://www.sol.net > "We call it the 'one bite at the apple' rule. Give me one chance [and] > then I > won't contact you again." - Direct Marketing Ass'n position on e-mail > spam(CNN) > With 24 million small businesses in the US alone, that's way too many > apples. > -- LR Mack McBride Network Administrator Alpha Red, Inc.

2 1

Re: what problem are we solving? (was Re: ICANN opens up Pandora'sBox of
by Brandon Butterworth 29 Jun '08

29 Jun '08

> The problem is > that while I can go and register a "Mycompany LLC" in Wisconsin and a > "Mycompany LLC" in Illinois, there is only one "mycompany.com" available, > though "mycompany.wi.us" and "mycompany.il.us" are both available and do > not collide. 1. register .local [1] 3. n * profit! brandon [1] I know

1 0

Re: the business model, was what problem are we solving? (was Re: ICANN opens
by Brandon Butterworth 28 Jun '08

28 Jun '08

> bbc.co.uk is fine because when you access it, you are aware it is a site > designed for UK residents so when they tell you you can't access parts > of their web site, you understand. But they shouldn't have "bbc.com" for > that web site. No need to tell us we shouldn't do what we're not doing bbc.co.uk is used for UK bbc.com is used for non UK and has adverts as you non UKers don't pay brandon

1 0

Expired SSL cert for mms.nexteldata.net
by Jay R. Ashworth 28 Jun '08

28 Jun '08

According to my Blackberry, it expired last night at midnight UTC. RSA/1024, issued by Verisign. Serial number ends in 73aa 0f08 Is anyone at Nextel/Sprint/RIM listening here? My Blackberry tells me what the problem is, but for everyone on normal phones, it's probably just an error; calling first-tier support seems... unproductive. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com '87 e24 St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274 Those who cast the vote decide nothing. Those who count the vote decide everything. -- (Joseph Stalin)

2 2

ICANN opens up Pandora's Box of new TLDs
by Tomas L. Byrnes 28 Jun '08

28 Jun '08

I just know who should be held for further processing @ the gate. Which is good enough, in this case. "What is the object of defense? Preservation. It is easier to hold ground than take it. . . defense is the stronger form of waging war" Carl Von Clausewitz > -----Original Message----- > From: Gadi Evron [mailto:ge@linuxbox.org] > Sent: Friday, June 27, 2008 8:33 PM > To: Tomas L. Byrnes > Cc: Christopher Morrow; Roger Marquis; nanog(a)nanog.org > Subject: RE: ICANN opens up Pandora's Box of new TLDs > > On Fri, 27 Jun 2008, Tomas L. Byrnes wrote: > > These issues are not separate and distinct, but rather related. > > > > A graduated level of analysis of membership in any of the sets of: > > > > 1: Recently registered domain. > > > > 2: Short TTL > > > > 3: Appearance in DShield, Shadowserver, Cyber-TA and other > sensor lists. > > > > 4: Invalid/Non-responsive RP info in Whois > > > > Create a pretty good profile of someone you probably don't want to > > accept traffic from. > > > > Conflation is bad, recognizing that each metric has value, and some > > correlation of membership in more than one set has even > more value, as > > indicating a likely criminal node, is good. > > > > YMMV. > > > > I guess, if you have perfect malware signatures, code with > no errors, > > and vigilance the Marines on the wire @ gitmo would envy, you can > > accept traffic from everywhere. > > Not quite, because you still won't know who to send the Marines to > kill. > The Internet is perfect for plausible deniability. > > Gadi. > > > > > > > > >> -----Original Message----- > >> From: Christopher Morrow [mailto:morrowc.lists@gmail.com] > >> Sent: Friday, June 27, 2008 7:23 PM > >> To: Roger Marquis > >> Cc: nanog(a)nanog.org > >> Subject: Re: ICANN opens up Pandora's Box of new TLDs > >> > >> On Fri, Jun 27, 2008 at 4:32 PM, Roger Marquis <marquis(a)roble.com> > >> wrote: > >>> Phil Regnauld wrote: > >>> apply even cursory tests for domain name validity. Phishers and > >>> spammers will have a field day with the inevitable namespace > >>> collisions. It is, however, unfortunately consistent with ICANN's > >>> inability to address other security issues such as fast > flush DNS, > >>> domain tasting (botnets), and requiring valid domain contacts. > >>> > >> > >> Please do not conflate: > >> > >> 1) Fast flux > >> 2) Botnets > >> 3) Domain tasting > >> 4) valid contact info > >> > >> These are separate and distinct issues... I'd point out > that FastFlux > >> is actually sort of how Akamai does it's job (inconsistent dns > >> responses), Double-Flux (at least the traditional DF) isn't though > >> certainly Akamai COULD do something similar to Double-Flux (and > >> arguably does with some bits their services. The particular form > >> 'Double-Flux' is certainly troublesome, but arguably > TOS/AUP info at > >> Registrars already deals with most of this because #4 in your list > >> would apply... That or use of the domain for clearly illicit ends. > >> Also, perhaps just not having Registrar's that solely deal in > >> criminal activities would make this harder to accomplish... > >> > >> Botnets clearly are bad... I'm not sure they are related > to ICANN in > >> any real way though, so that seems like a red herring in the > >> discussion. > >> > >> Domain tasting has solutions on the table (thanks drc for > >> linkages) but was a side effect of some > >> customer-satisfaction/buyers-remorse > >> loopholes placed in the regs... the fact that someone figured out > >> that computers could be used to take advantage of that > loophole on a > >> massive scale isn't super surprising. In the end though, > it's getting > >> fixed, perhaps slower than we'd all prefer, but still. > >> > >>> I have to conclude that ICANN has failed, simply failed, > >> and should be > >>> returned to the US government. Perhaps the DHL would at > >> least solicit > >>> for RFCs from the security community. > >> > >> I'm not sure a shipping company really is the best place > to solicit... > >> or did you mean DHS? and why on gods green earth would you > want them > >> involved with this? > >> > >> -chris > >> > >> > > > > >

2 2

Fwd: NYC - possible power/utility outages on the horizon
by n3td3v 27 Jun '08

27 Jun '08

---------- Forwarded message ---------- From: cybersec <xploitable(a)gmail.com> Date: Fri, Jun 27, 2008 at 11:04 PM Subject: Fwd: NYC - possible power/utility outages on the horizon To: n3td3v <n3td3v(a)googlegroups.com> ---------- Forwarded message ---------- From: Hal Newman <hnew...(a)tems.ca> Date: Jun 27, 10:17 pm Subject: NYC - possible power/utility outages on the horizon To: CrisisAlert A union that represents thousands of Con Edison employees voted to go on strike at 12:01 AM on June 29. The union and Con Ed are currently in negotiations. The strike would span all Con Ed commodities: gas, electric, and steam. The potential major consequence of the strike to the city is longer response times for repairs. The last Con Ed strike was in 1983 and lasted for nine weeks. Also, another union that represents some 15,000 New York City Verizon employees may go on strike at 12:01 AM on August 3. The union and Verizon are currently in negotiations. The strike would include Verizon telecom only (i.e. landlines) and not Verizon wireless. Verizon may bring in workers from across the U.S. if needed, but all non-essential work will stop and there may be a delayed response time for repairs. The last Verizon strike was in 2003 and lasted for three weeks.

1 1

Re: ICANN opens up Pandora's Box of new TLDs
by Brandon Butterworth 27 Jun '08

27 Jun '08

> And no, companies *aren't* "forced to pay for another domain name" just > because a new TLD appears -- they aren't doing it *now* Oh yes we are brandon

4 3

Attn: Paul Vixie
by J. Oquendo 27 Jun '08

27 Jun '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Please shoot me an offlist email (sorry for the excess traffic list) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iQIVAwUBSGU2IoOeOV2sx4+mAQJmEA//evs/h35ND0RkuFc8Yvu1mUloUoF69Zc5 quWiqg4FsEHXtZLAeppkF+zaFCzh1kLh7SOWSGriKRPahtI3nrjGe+IPRJN3JNkv YmvYRj7pdihzUBH+2p/0S7GQoHBzDGp40s97a+/JGkCi1Zsv2dCyMAEvpUJeu+LR Fl5ncTOuEFIMQo4oftJxlToyoktLnuxMpjey6k9a0D2kcqo6066IwoIp7yjbt73V 0xT43Yz+C/3wGwrxPj/ijK7m4kC77asvycu5uP9gAa15rn+fhjvLD6voOY/4QNMW lo//nodF4/ZgZ/bEMp46YZbdcEJNBSDdnqYPxZVT7RVfOpiLtc3DjRonogyGL/gx ZpHUGWtZDSG5QF/uETGEmea81B7KwuLWzDHPQbIReHW8C5aPQo6iYT/Uv7uIey8D llSCcgfLQxYvd0BEIAoVGmNud9i3YlUUczCeiaDJzJmml45M4A/v2lsfLhnO2dgv aFU7aKW3EaWGWvIcfJP82oxHBbOl2Dbt80RtyN9vWsYY0nqQbafjMmm5WtjrMv2+ 57K9syxtCVYUFiYIAPggXylFen3s1E+bGufjS3HjJ8U/RluRj7u7FBZIQN7tJWPd P+ZJQ8K+ewcrQO59VBYlpq7fT/6f0o1z0mIK3KgRIfLPaAMDuAfbIi3BhY3Rbr9z oHq63Z8fju4= =omjA -----END PGP SIGNATURE-----

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 27 Jun '08

27 Jun '08

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 28 Jun, 2008 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 261031 Prefixes after maximum aggregation: 128186 Deaggregation factor: 2.04 Unique aggregates announced to Internet: 127105 Total ASes present in the Internet Routing Table: 28561 Prefixes per ASN: 9.14 Origin-only ASes present in the Internet Routing Table: 24896 Origin ASes announcing only one prefix: 12051 Transit ASes present in the Internet Routing Table: 3665 Transit-only ASes present in the Internet Routing Table: 80 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 18 Max AS path prepend of ASN (43380) 13 Prefixes from unregistered ASNs in the Routing Table: 612 Unregistered ASNs in the Routing Table: 221 Number of 32-bit ASNs allocated by the RIRs: 48 Prefixes from 32-bit ASNs in the Routing Table: 8 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 778 Number of addresses announced to Internet: 1864217696 Equivalent to 111 /8s, 29 /16s and 180 /24s Percentage of available address space announced: 50.3 Percentage of allocated address space announced: 61.1 Percentage of available address space allocated: 82.3 Percentage of address space in use by end-sites: 72.4 Total number of prefixes smaller than registry allocations: 127006 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 59718 Total APNIC prefixes after maximum aggregation: 22124 APNIC Deaggregation factor: 2.70 Prefixes being announced from the APNIC address blocks: 56731 Unique aggregates announced from the APNIC address blocks: 25012 APNIC Region origin ASes present in the Internet Routing Table: 3284 APNIC Prefixes per ASN: 17.27 APNIC Region origin ASes announcing only one prefix: 878 APNIC Region transit ASes present in the Internet Routing Table: 512 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 359769888 Equivalent to 21 /8s, 113 /16s and 167 /24s Percentage of available APNIC address space announced: 76.6 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 119970 Total ARIN prefixes after maximum aggregation: 64949 ARIN Deaggregation factor: 1.85 Prefixes being announced from the ARIN address blocks: 89671 Unique aggregates announced from the ARIN address blocks: 34705 ARIN Region origin ASes present in the Internet Routing Table: 12240 ARIN Prefixes per ASN: 7.33 ARIN Region origin ASes announcing only one prefix: 4741 ARIN Region transit ASes present in the Internet Routing Table: 1144 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 15 Number of ARIN addresses announced to Internet: 353360032 Equivalent to 21 /8s, 15 /16s and 216 /24s Percentage of available ARIN address space announced: 72.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 173/8, 174/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 56335 Total RIPE prefixes after maximum aggregation: 34205 RIPE Deaggregation factor: 1.65 Prefixes being announced from the RIPE address blocks: 51535 Unique aggregates announced from the RIPE address blocks: 34513 RIPE Region origin ASes present in the Internet Routing Table: 11539 RIPE Prefixes per ASN: 4.47 RIPE Region origin ASes announcing only one prefix: 6041 RIPE Region transit ASes present in the Internet Routing Table: 1742 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 18 Number of RIPE addresses announced to Internet: 361948800 Equivalent to 21 /8s, 146 /16s and 230 /24s Percentage of available RIPE address space announced: 83.0 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-48127 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 20337 Total LACNIC prefixes after maximum aggregation: 5198 LACNIC Deaggregation factor: 3.91 Prefixes being announced from the LACNIC address blocks: 18584 Unique aggregates announced from the LACNIC address blocks: 10491 LACNIC Region origin ASes present in the Internet Routing Table: 960 LACNIC Prefixes per ASN: 19.36 LACNIC Region origin ASes announcing only one prefix: 315 LACNIC Region transit ASes present in the Internet Routing Table: 160 Average LACNIC Region AS path length visible: 4.1 Max LACNIC Region AS path length visible: 15 Number of LACNIC addresses announced to Internet: 52687360 Equivalent to 3 /8s, 35 /16s and 242 /24s Percentage of available LACNIC address space announced: 52.3 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 4062 Total AfriNIC prefixes after maximum aggregation: 1204 AfriNIC Deaggregation factor: 3.37 Prefixes being announced from the AfriNIC address blocks: 4339 Unique aggregates announced from the AfriNIC address blocks: 1880 AfriNIC Region origin ASes present in the Internet Routing Table: 240 AfriNIC Prefixes per ASN: 18.08 AfriNIC Region origin ASes announcing only one prefix: 76 AfriNIC Region transit ASes present in the Internet Routing Table: 47 Average AfriNIC Region AS path length visible: 3.9 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 12233216 Equivalent to 0 /8s, 186 /16s and 170 /24s Percentage of available AfriNIC address space announced: 36.5 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1668 387 90 Videsh Sanchar Nigam Ltd. Aut 17488 1188 82 91 Hathway IP Over Cable Interne 9583 1163 111 420 Sify Limited 9498 1078 550 62 BHARTI BT INTERNET LTD. 4766 846 6006 343 Korea Telecom (KIX) 4134 829 12995 328 CHINANET-BACKBONE 23577 824 35 704 Korea Telecom (ATM-MPLS) 4780 704 351 63 Digital United Inc. 18101 688 167 35 Reliance Infocom Ltd Internet 9829 598 450 12 BSNL National Internet Backbo Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 209 3013 3874 622 Qwest 6389 2671 3260 199 bellsouth.net, inc. 2386 1496 663 877 AT&T Data Communications Serv 4323 1469 1044 376 Time Warner Telecom 7018 1395 5822 976 AT&T WorldNet Services 11492 1231 150 12 Cable One 1785 1080 510 104 AppliedTheory Corporation 20115 1048 1068 561 Charter Communications 18566 1045 296 10 Covad Communications 7011 1015 287 554 Citizens Utilities Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 414 1788 372 TDC Tele Danmark 8452 344 188 11 TEDATA 3301 335 1460 305 TeliaNet Sweden 3320 319 7046 268 Deutsche Telekom AG 8866 319 77 21 Bulgarian Telecommunication C 5462 296 666 27 Telewest Broadband 8551 287 269 38 Bezeq International 3215 286 2742 89 France Telecom Transpac 680 274 2047 264 DFN-IP service G-WiN 6746 268 126 243 Dynamic Network Technologies, Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1273 2464 227 UniNet S.A. de C.V. 11830 604 299 9 Instituto Costarricense de El 22047 565 270 14 VTR PUNTO NET S.A. 7303 469 231 65 Telecom Argentina Stet-France 16814 426 27 10 NSS, S.A. 6471 411 85 48 ENTEL CHILE S.A. 11172 408 118 70 Servicios Alestra S.A de C.V 10620 397 101 68 TVCABLE BOGOTA 14117 375 23 9 Telefonica del Sur S.A. 20299 334 23 98 NEWCOM AMERICAS Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 475 61 30 LINKdotNET AS number 20858 397 34 3 EgyNet 3741 273 853 224 The Internet Solution 2018 201 205 85 Tertiary Education Network 5713 156 558 94 Telkom SA Ltd 6713 143 135 11 Itissalat Al-MAGHRIB 33783 133 9 17 EEPAD TISP TELECOM & INTERNET 5536 121 8 16 Internet Egypt Network 29571 102 13 8 Ci Telecom Autonomous system 33776 100 6 3 Starcomms Nigeria Limited Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 209 3013 3874 622 Qwest 6389 2671 3260 199 bellsouth.net, inc. 4755 1668 387 90 Videsh Sanchar Nigam Ltd. Aut 2386 1496 663 877 AT&T Data Communications Serv 4323 1469 1044 376 Time Warner Telecom 7018 1395 5822 976 AT&T WorldNet Services 8151 1273 2464 227 UniNet S.A. de C.V. 11492 1231 150 12 Cable One 17488 1188 82 91 Hathway IP Over Cable Interne 9583 1163 111 420 Sify Limited Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2671 2472 bellsouth.net, inc. 4755 1668 1578 Videsh Sanchar Nigam Ltd. Aut 11492 1231 1219 Cable One 17488 1188 1097 Hathway IP Over Cable Interne 4323 1469 1093 Time Warner Telecom 8151 1273 1046 UniNet S.A. de C.V. 18566 1045 1035 Covad Communications 9498 1078 1016 BHARTI BT INTERNET LTD. 1785 1080 976 AppliedTheory Corporation 22773 966 904 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 701 UUNET Technologies, 22492 UNALLOCATED 12.2.46.0/24 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.20.55.0/24 6517 Yipes Communications 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.31.25.0/24 6517 Yipes Communications 27220 UNALLOCATED 12.35.204.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.48.244.0/23 7843 Adelphia Corp. 24.51.159.0/24 7843 Adelphia Corp. 24.54.23.0/24 7843 Adelphia Corp. 24.54.224.0/19 20001 HoldCo LLC - Road Runner 24.75.160.0/19 7843 Adelphia Corp. 24.75.192.0/18 7843 Adelphia Corp. 24.142.40.0/21 7018 AT&T WorldNet Services 24.142.160.0/19 7018 AT&T WorldNet Services 24.246.0.0/17 7018 AT&T WorldNet Services 24.246.128.0/18 7018 AT&T WorldNet Services Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:9 /10:16 /11:44 /12:143 /13:281 /14:514 /15:1037 /16:9958 /17:4325 /18:7368 /19:15727 /20:18361 /21:17999 /22:22360 /23:23307 /24:136792 /25:859 /26:1032 /27:783 /28:81 /29:9 /30:1 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 209 1769 3013 Qwest 6389 1670 2671 bellsouth.net, inc. 11492 1211 1231 Cable One 2386 1191 1496 AT&T Data Communications Serv 18566 1026 1045 Covad Communications 9583 1013 1163 Sify Limited 4755 1009 1668 Videsh Sanchar Nigam Ltd. Aut 17488 1002 1188 Hathway IP Over Cable Interne 6298 976 991 Cox Communicatons 6478 947 956 AT&T Worldnet Services Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:7 8:118 12:2060 13:2 15:22 16:3 17:5 18:13 20:35 24:1071 25:1 32:62 38:446 40:92 41:651 43:1 44:2 47:6 52:3 55:3 56:3 57:24 58:501 59:501 60:448 61:1001 62:1188 63:2031 64:3288 65:2386 66:3533 67:1229 68:694 69:2278 70:681 71:121 72:1821 73:5 74:1028 75:159 76:299 77:738 78:710 79:199 80:950 81:848 82:612 83:393 84:577 85:1024 86:417 87:701 88:335 89:1285 90:14 91:1301 92:205 93:590 94:52 96:37 97:27 98:168 99:3 112:1 113:1 114:58 116:762 117:329 118:182 119:446 120:49 121:554 122:793 123:360 124:858 125:1153 128:362 129:202 130:131 131:409 132:67 133:9 134:177 135:33 136:220 137:87 138:145 139:93 140:489 141:99 142:415 143:311 144:365 145:51 146:364 147:154 148:511 149:197 150:120 151:191 152:131 153:136 154:10 155:277 156:174 157:277 158:186 159:240 160:276 161:114 162:239 163:187 164:523 165:449 166:319 167:327 168:620 169:136 170:428 171:30 172:10 189:242 190:2141 192:5787 193:4104 194:3221 195:2511 196:1048 198:3730 199:3274 200:5545 201:1456 202:7622 203:8020 204:3970 205:2131 206:2391 207:2772 208:3388 209:3520 210:2571 211:1051 212:1430 213:1631 214:148 215:49 216:4396 217:1199 218:339 219:412 220:1068 221:471 222:309 End of report

1 0

OS, Hardware, Network - Logging, Monitoring, and Alerting
by Rev. Jeffrey Paul 27 Jun '08

27 Jun '08

Hi. I've a (theoretically) simple problem and I'm wondering how others solve it. I've recently deployed ~40 Linux instances on ~20 different Dell blades and PowerEdges (we're big on virtualization), a few 7204s and 3560s, and assorted switchable PDUs and whatnot. We need to monitor standard things like cpu, memory, disk usage on all OSes. This is straightforward with net-snmp. It would also be cool if I could monitor more esoteric things, like ntp synchronization status, i/o statistics, etc. Other stuff we really need to keep an eye on is hardware - redundant PSU status in our 7204s and Dells, temperatures and voltages (one of our colos in New York peaked at over 40C a few weeks ago, for instance), and disk array status (I'd like to know of a failed disk in a hardware RAID5 before I get calls about performance issues). Our blade chassis have DRACs in them and I think they export this data via SNMP (I'm trying to avoid the use of SNMP traps), but not all of our other PowerEdges have the DRACs in them so some of this information may need to be pulled via IPMI from within the host OS. Presumably the Cisco gear makes the temperature available via SNMP. Finally, service checks - standard stuff (dns, http, https, ssh, smtp). Now, to the questions. 1) Is SNMP the best way to do this? Obviously some of the data (service checks) will need to be collected other ways. 2) Is there any good solution that does both logging/trending of this data and also notification/monitoring/alerting? I've used both Nagios and Cacti in the past, and, due to the number of individual things being monitored (3-5 items per OS instance, 5-10 items per physical server, 10-50 things per network device), setting them both up independently seems like a huge pain. Also, I've never really liked Nagios that much. I recently entertained the idea of writing a CGI that output all of this information in a standard format (csv?), distributing and installing it, then collecting it periodically at a central location and doing all the rrd/notification myself, but then realized that this problem must've been solved a million times already. There's got to be a better way. What do you guys use? (I'm not opposed to non-free solutions, provided they work better.) Cheers, -jp -- -------------------------------------------------------- Rev. Jeffrey Paul -datavibe- sneak(a)datavibe.net aim:x736e65616b pgp:0xD9B3C17D phone:1-800-403-1126 9440 0C7F C598 01CA 2F17 D098 0A3A 4B8F D9B3 C17D "Virtue is its own punishment." --------------------------------------------------------

10 10