- Test - lists.nanog.org

TWTC as4323 full routes
by Jon Lewis 06 Feb '06

06 Feb '06

Has anyone else with a transit connection to Time Warner Telecom noticed TWTC on and off over the past few days advertising an extra 2500 or so routes? Right now, I've got 180169 routes from 4323...and 176-177K from other transits. I noticed them setting off my BGP-4-MAXPFX warning :( ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

1 0

intergalactic nog
by Randy Bush 06 Feb '06

06 Feb '06

as gadi has just discovered there's a whole world out there, he seemed unaware of your all being there so is sending this message to everyone he can find. hence, the message is not private, so i can distribute, and i thought i would save everyone the trouble. [ btw, i personally don't support this ] randy From: Gadi Evron <ge(a)linuxbox.org> To: Randy Bush <randy(a)psg.com> Subject: establishing a global NOG Date: Mon, 06 Feb 2006 21:23:09 +0200 Hello! How are you? After the recent CME-24/BlackWorm incident I finally realized just how large the net-ops world outside of the US really is. I found many people from South Asia, Africa, etc. who were very helpful, serious and knowledgeable yet outside of my normal circles. The global ad-hoc cooperation that took place really made me realize that it is past time for a global NOG to form. We are working on locating leading net-ops people from different NOGs around the world in order to get started. What we have in mind is an open and public group, but with a semi-strict code. I figure we'll figure it out as we go. I'd like to invite you on-board, as well as ask you if you know of others who may be a good addition for our critical mass when we start. Thanks, I'd appreciate any input. Gadi.

1 0

RE: Problems connectivity GE on Foundry BigIron to Cisco 2950T
by David Hubbard 06 Feb '06

06 Feb '06

You are using a crossover cable right? If that's all set, you do need to have neg-off on the Foundry and "no nego auto" on the Cisco. I haven't used the rj-45 gbics in the Foundry equipment before, not sure if that could be an issue. I would go with the hard set 1000-full on both sides. David From: Sam Stickland > > Hi, > > I'm having a right mare trying to get a Foundry BigIron to > connect up to a cisco 2950T, via Gigabit copper. > > The Foundry BigIron is using a cisco RJ45/copper GBIC that > was pulled from a live cisco 6500, where it was working > fine. The cisco 2950T has two fixed 10/100/1000 RJ45 ports. > > The cables between the equipment have been tested and are fine. > > The Foundry has three different types of the gigabit negiation modes: > > auto-gig Autonegotiation > neg-full-auto Autonegotiation first, if failed try > non-autonegotiation > neg-off Non-autonegotiation > > I've tried all three, complete with all the other > possibilities with the cisco 2950T (which has fixed full > duplex operation, but can be set to 'speed auto' or > 'speed 1000'). > > None of these combinations bring up the link. The cisco 2950 > never gets a link light. The Foundry gets a link light > regardless when it's mode is set to 'gig-default neg-off'. > > I'm at a bit of a loss to explain this. Does anyone know of any > configuration issues that can explain this, or is it time to start > swapping out hardware components? > > Sam > >

7 6

Yahoo, Google, Microsoft contact?
by n3td3v 06 Feb '06

06 Feb '06

Sorry for posting... but we couldnt reach Yahoo, Google, Microsoft directly. I recommend you guys setup a "Don't have a contact for" list instead of this bullshit we're experiencing on NANOG month in month out, jeez. Theres no excuse, Good day.

27 40

flow -> web
by Randy Bush 06 Feb '06

06 Feb '06

i have a few routers of various flavors spewing netflow data. currently i use flowtools, and get text reports via email. but they're soooo 20th century. what will accept flow data from the routers and give me a sexy web page or two showing the elephant apps and sites? has to be in freebsd ports tree, as i don't have much time to spend on this. randy

6 6

Did anyone else notice the CAIDA skitter poster in the background of George Bush's speech at the NSA?
by Joe McGuckin 05 Feb '06

05 Feb '06

http://tinyurl.com/doy6r -- Joe McGuckin ViaNet Communications 994 San Antonio Road Palo Alto, CA 94303 Phone: 650-213-1302 Cell: 650-207-0372 Fax: 650-969-2124

2 1

RE: ml hacks for goodmail
by Jim McBurnett 05 Feb '06

05 Feb '06

Randy, Do a Google on AOL yahoo goodmail. It seems as of this mornings newspaper, AOL will be employing goodmail in a manner so that it will charge for guaranteed access to the end user mail boxes on a per email basis. 1/4 to 1 cent per email. There is an Senate commerce committee meeting on that.. A New York Times article is here: http://www.nytimes.com/2006/02/05/technology/05AOL.html?_r=2&pagewanted= 1&oref=slogin&oref=slogin (watch the wrap on the link) I thought it was a hoax like the USPS will charge for email.. BUT, upon a little research, it actually worries me. AOL says it will strip active links and graphics going to end users, unless you are on the PAYING list for Bulk emails. It is really not very clear at this point, but it appears some restrictions must already be in place.... Fergie-- Where were ya man? Later, J -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Randy Bush Sent: Saturday, February 04, 2006 10:11 PM To: nanog(a)nanog.org Subject: ml hacks for goodmail so, anyone working on the majordomo and mailman hacks for goodmail? "i am sorry, but you can not subscribe to this list from an aol.com address. don't ask us to explain, ask support(a)aol.com." or am i missing something here? clue-bat if so, please. randy

1 0

firewall authentication problem
by Mohsen A. Momeni 04 Feb '06

04 Feb '06

Hi, I have two group of users connected to internet through a firewall for traffic control. Both should be authenticated by firewall through an AAA server before connecting to internet and there are different user policies for different users in firewall. 1) LAN users. 2) Dial-up users which are connected to a router, and are authenticated by an AAA server (for logging in) The problem is that I don't want a second authentication. I want the users logged in, can be automatically authenticated by the firewall. Firewall should somehow know their username to apply the policies. There should be a mapping from IP to username in AAA server. I think it should be a function of the router to send the IP to AAA server after successful authentication. AAA server can be a RADIUS or LDAP server. Is this possible? If yes, please tell me how. Regards,

1 0

Draft Agenda for Dallas
by Susan Harris 03 Feb '06

03 Feb '06

DRAFT Agenda--NANOG36 February 12-15, 2006 Dallas Sunday Activities ----------------- 3:30 - 5:00 p.m. Newcomer Orientation and Reception 5:00 - 6:30 p.m. NANOG Community Meeting Monday Morning General Session ------------------------------ 9:00 a.m. Welcome, Introductions Steve Feldman, CNET Brokaw Price, Yahoo! 9:15 a.m. Searching for DNS Cache Poisoners Duane Wessels, Measurement Factory/CAIDA 9:45 a.m. Clear and Present Increase of AAAA Queries Tsuyoshi Toyono and Katsuyasu Toyama, NTT Labs 10:05 a.m. DNS Infrastructure Distribution Steve Gibbard, PCH 10:35 a.m. BREAK 11:05 a.m. IPv6 Panel: Time for the Transition or Just More GOSIP? Daniel Golding, Burton Group, moderator Joe Houle, AT&T Jared Mauch, NTT America Rob Rockell, Sprint Jason Schiller, UUNET/Verizon Fred Wettling, Bechtel 12:05 p.m. LUNCH (on your own) Monday Afternoon Tutorials and BOFs ----------------------------------- 2:00 - 3:30 p.m. Troubleshooting BGP Level: Introductory Philip Smith, Cisco 2:00 - 3:30 p.m. ISP Security 101 Primer Level: Introductory/Intermediate Barry Greene, Cisco 3:30 - 4:00 p.m. BREAK 4:00 - 5:30 p.m. ISP Security and NSP-SEC BOF XI Danny McPherson, Arbor, Moderator 4:00 - 5:30 p.m. Troubleshooting BGP (cont'd.) Philip Smith, Cisco 4:00 - 5:30 p.m. Overview of QoS for Packet-based IP and MPLS Networks Level: Introductory Paresh Shah, Utpal Mukhopadhyaya, and Arun Sathiamurthi, Cisco Monday Evening -------------- Yahoo! Reception at Eddie Deen's Ranch (downtown Dallas) 6:30 - 11:00 p.m. (Transportation provided) Tuesday Morning General Session ------------------------------- 9:00 a.m. IRR Power Tools--a Utility for Managing Internet Routing Registry Filters Richard Steenbergen, nLayer Communications 9:30 a.m. NVisionIP and VisFlowConnect-IP: Two Tools for Visualizing NetFlows for Security Bill Yurcik, NCSA 10:00 a.m. Flamingo: An Internet Traffic Exploration Tool Manish Karir, Merit 10:20 a.m. BREAK 10:50 a.m. Flooding Attacks by Exploiting Persistent Forwarding Loops Jianhong Xia, Lixin Gao and Teng Fei, University of Massachusetts 11:20 a.m. How Prevalent is Prefix Hijacking on the Internet? Peter Boothe and James Hiebert, Univ. of Oregon; Randy Bush, IIJ 11:40 a.m. OpenBGPD, a New Approach to BGP, and its Implemtation at the DE-CIX Bernhard Kroenung, DE-CIX, and Hennig Brauer, OpenBSD 12:10 p.m. LUNCH (on your own) Tuesday Afternoon Tutorials and BOFs ------------------------------------ 2:00 - 3:30 p.m. L2VPN: Path to Convergence Level: Introductory/Intermediate Muhammad Waris Sagheer and Syed Nawaz, Cisco 2:00 - 3:30 p.m. Peering BOF XI William B. Norton, Equinix, Moderator 3:30 - 4:00 p.m. BREAK 4:00 - 5:30 p.m. Tools BOF Todd Underwood, Renesys, Moderator 4:00 - 5:30 p.m. L2VPN: Path to Convergence (cont'd.) Tuesday Evening --------------- Beer 'n Gear, 5:30-7:30 p.m. Wednesday Morning General Session --------------------------------- 9:00 a.m. v6fix: Wiping the Slate Clean for IPv6 Kenjiro Cho, WIDE Project/IIJ, Ruri Hiromi, WIDE Project/Intec NetCore 9:30 a.m. Research Forum -------------- An Inter-domain Consistency Management Layer Nate Kushman, MIT Responsive Yet Stable Traffic Engineering Srikanth Kandula, MIT 10:15 a.m. Hurricane Katrina: Telecom Infrastructure Impacts, Solutions, and Opportunities Paula Rhea, Verizon 10:45 a.m. BREAK 11:15 a.m. Lightning Talks By You! 12:15 p.m. Closing Remarks Steve Feldman, CNET Susan Harris, Merit

1 0

Modelling a large ISP network with C-BGP
by Olivier Bonaventure 03 Feb '06

03 Feb '06

Dear All, C-BGP is an efficient and open-source simulation tool that allows to simulate the behavior of the intra- and interdomain routing protocols in large ISP networks. C-BGP is able to simulate networks with thousands of routers. A key feature ofco C-BGP compared to other simulators is that it is able to support the complex routing policies that are used by ISPs. Thanks to the support of France Telecom R&D, we have been able to use C-BGP to reproduce the behavior of BGP in a large Tier-1 ISP network. For this analysis, we have developped several tools to automatically convert the BGP configurations of Juniper (JUNOS) and Cisco (IOS) routers, the IGP topology and the BGP routes in the C-BGP format. With these tools, any network operator can easily build a C-BGP model of his/her network. With such a model, it is possible to perform different types of analysis on the ISP network, such as : - predicting the flow of the traffic through the network or determining the traffic matrix based on Netflow data (see article in January issue of ACM SIGCOMM Computer Communication Review) - predicting the impact of adding a new peering link on the BGP routes selected by the routers (see article in Nov/Dec issue of IEEE Network Magazine) - predicting the impact of link or router failures on the ISP network You can obtain C-BGP, the conversion tools and several papers describing the utilization of C-BGP to model an ISP network or compute traffic matrices from : http://cbgp.info.ucl.ac.be The website also contains several examples, such as a complete C-BGP model of the Abilene Network based on their publically available JUNOS configurations files. We believe that C-BGP could be very useful for ISPs willing to optimise the distribution and the selection of the BGP routes in their network. Comments, suggestions and questions from network operators are more than welcome. Best regards, Bruno Quoitin, Sebastien Tandel and Olivier Bonaventure -- CSE Dept. UCL, Belgium - http://www.info.ucl.ac.be/people/OBO/

6 7