- Test - lists.nanog.org

Spyware 'calling home' volumes soar
by Fergie (Paul Ferguson) 26 Jul '05

26 Jul '05

8% counts for a lot of traffic... John Leyden writes in The Register: [snip] Outbound spyware transmissions from infested machines accounted for up to eight per cent of total outbound web traffic in pilot tests of a new managed spyware screening service. UK web security firm ScanSafe said the volume of traffic observed during a 10 week pilot test of its Spyware Screening service showed that spyware applications are becoming more and more stealthy in their ability to hide their outbound 'covert' channels among normal web traffic. That's bad news because data sent when spyware "calls-home" can include confidential and even privileged information. Spyware now accounts for around 20 per cent of web-based threats, which includes other malware such as worms and Trojans, and is still on the increase, according to ScanSafe. The firm said malware such as CoolWebSearch, which hides on an infected client using newly developed root-kit architecture, often evades detection. [snip] http://www.theregister.co.uk/2005/07/25/spyware_screening/ - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Transit politics (Telus blocking sites it does not like)
by Mike Tancsa 25 Jul '05

25 Jul '05

http://www.edmontonsun.com/News/Canada/2005/07/24/1145417-sun.html As the slashdot headline quotes, Canadian telephone company and ISP "Telus" has admitted that they are <http://www.edmontonsun.com/News/Canada/2005/07/24/1145417-sun.html>blocking all attempts to access a website set up by the employee's union (who is currently "on-strike" or "locked-out", depending on your point of view). Currently no customers of the Telco's ADSL service (or any other ADSL service provider who leases lines) can access the <http://www.voices-for-change.com/>union's webpage. Is it reasonable for an ISP to censor webpages they don't agree with during contract negotiations?" As Telus is one of my transit providers, they are still advertising the path to me, but are blackholing the /32s in question. Kind of sets a bad precedent for a common carrier argument :( I like BGP blackholing to protect internet infrastructure, but what exactly is this protecting ? ---Mike -------------------------------------------------------------------- Mike Tancsa, tel +1 519 651 3400 Sentex Communications, mike(a)sentex.net Providing Internet since 1994 www.sentex.net Cambridge, Ontario Canada www.sentex.net/mike

3 6

Call for Presentations - NANOG 35 - October, 2005
by Steve Feldman 25 Jul '05

25 Jul '05

* * * * * * * * * * * * * * * * * CALL FOR PRESENTATIONS NANOG 35 October 23-25, 2005 Fourth Joint Meeting With ARIN! * * * * * * * * * * * * * * * * * The North American Network Operators' Group (NANOG) will hold its 35th meeting October 23-25, 2005, in Los Angeles. The meeting will be hosted by Equinix. This will be NANOG's fourth joint meeting with ARIN, the American Registry for Internet Numbers (www.arin.net) NANOG will meet from Sunday to Tuesday, and ARIN from Wednesday to Friday, October 26-28. NANOG registration opens in August. NANOG conferences provide a forum for information exchange among network operators, engineers, and researchers. Meetings are held three times each year, and include presentations, tutorial sessions, and BOFs. NANOG solicits presentations highlighting issues relating to technology already deployed or soon to be deployed in the Internet. Vendors are encouraged to work with operators to present deployment experiences with the vendor's products and interoperability. Researchers are invited to present short (10-minute) summaries of their work for operator feedback. Topics include routing, network performance, statistical measurement and analysis, and protocol development and implementation. Studies presented may be works in progress. Researchers from academia, government, and industry are encouraged to present. The community is invited to present talks on: Network Operations - Everyday life in the NOC - Present-day operational case studies - Exchange point technologies and implementation - Peering/colocation coordination issues - Content provider issues - Security attacks/mitigation, tools, and analysis - State of OAM tools for IP and MPLS networks Deployment Experience - Alternative last-mile technologies (metro/rural, broadband, radio, optical, etc.) - VoIP deployment - VoIP peering and interconnect - Anycast - IPTV - Large-scale wireless - Wavelength use by enterprises Research, Policy, and New Technology - Approaches to securing the global routing system (e.g., s*BGP and/or other tools) - Inter-provider MPLS/QoS/PCE - RIR policy (e.g., implications of HD ratio) - Currently active standards organizations and their topic areas - IPv6 economics: why is deployment so slow? - Approaches to IPv6 scalability, e.g., SHIM6 Topics for short (10-20 minute) lightning talks will be solicited on-site in LA. "Technologies to Watch" topics will be appropriate for this session. Proposals are also invited for tutorial sessions. Previous topics have included: - Troubleshooting BGP - Best Practices for Determining Traffic Matrices - Options for Blackhole and Discard Routing - BGP/MPLS Layer 3 VPNs NANOG also welcomes suggestions/recommendations for panels and other presentation topics. How to Present -------------- Submit an abstract and draft slides for the presentation in email to nanog-support(a)nanog.org. See www.nanog.org/presentations.html for submission guidelines. The deadline for abstracts and slides is September 6, 2005. While the majority of speaking slots will be filled by September 6, a limited number of slots may be available after that date for topics that are exceptionally timely, important, or critical to the operations of the Internet. Submissions will be reviewed by the NANOG Program Committee, and presenters will be notified of acceptance by September 26. Final drafts of presentation slides are due by October 12, and final versions October 19.

1 0

Vonage Selects TCS For VoIP E911 Service
by Fergie (Paul Ferguson) 25 Jul '05

25 Jul '05

http://www.advancedippipeline.com/166400372 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

27 51

RE: Transit politics (Telus blocking sites it does not like)
by Mark Segal 25 Jul '05

25 Jul '05

> A nice succinct analysis (by an actual lawyer (law prof) who > specializes in Canadian Internet law) can be found at I think the court allowed them to. <quote> Telus Corp. is moving aggressively in the opening days of the showdown with its chief union, securing a sweeping injunction to limit picketing and blocking access to two pro-union websites. <snip> On the same day it obtained the injunction, Telus blocked its subscribers from a pro-union website, Voices for Change. The site is run by a union shop steward, but not funded by the TWU. The site is the host to discussion forums, in which some union members posted internal company documents that detailed safe methods for crossing picket lines, as well as digital photos of workers and managers still on the job. <snip> Bruce Okabe, Telus vice-president of business solutions, said his company would be "morally negligent" if it had not tried to cut off access, but would not say if his company would have blocked the site if another company had been the target. Mr. Okabe questioned why anyone would want to publicly distribute pictures of workers who had crossed picket lines, saying that to do so imperils the safety of those employees. </quote> >From the following Globe and mail article. http://www.theglobeandmail.com/servlet/story/RTGAM.20050725.wxrtelus25/B NStory/Business/?page=rss&id=RTGAM.20050725.wxrtelus25 Regards, Mark -- Mark Segal Director, Corporate Strategy FCI Broadband Tel: 905-284-4070 Fax: 416-987-4701 http://www.fcibroadband.com

1 0

RE: 911, (is: pointless) (was: You're all over thinking this) (was: Re: Vonage Selects TCS For VoIP E911 Service)
by Jason Sloderbeck 25 Jul '05

25 Jul '05

Summary (and hopeful conclusion) of this thread: Depending on which country you live in, you may have to dial a different number for emergency services. It's true! If you read the entire discussion, you'll be amazed at how many emergency numbers NANOG members can name for various countries, including Russia, France, Australia, UK, Germany, and more. Although it's quite sad to imagine how long it would take an American who is burning alive in some country (let's say "Sri Lanka") to guess the emergency number there, 699935, please don't feel obligated to share yet another country's emergency phone number. Instead, if you find yourself in a potentially-fatal situation in a foreign land, just go here: http://www.sccfd.org/travel.html (Trust me. It's faster than searching through the NANOG archives for the right one.) Well, that wraps up this month's international NANOG travel safety thread. Next month, we'll be talking about the best way to hail a taxi in various countries (during a network emergency, of course). -Jason -- Jason Sloderbeck Positive Networks jason @ positivenetworks . Net

1 0

Re: downloading old nanog real stream
by Randy Bush 24 Jul '05

24 Jul '05

> mplayer -dumpstream -dumpfile nanog31-wedgies.rm rtsp://realmedia.merit.edu/nanog/n31/nanog31-wedgies.rm bingo! works fine on freebsd. thank you! randy

1 0

downloading old nanog real stream
by Randy Bush 24 Jul '05

24 Jul '05

i have to re-give a talk i gave a year ago in sf. i want to download the video stream so i can listen to it on the transpac flight. how the heck do i dl a stream from the nanog site? http://nanog.org/mtg-0405/real/wedgies.ram leads to rtsp://realmedia.merit.edu/nanog/n31/nanog31-wedgies.rm and i dead-end there. randy

1 0

dotUS DNS problems on July 7
by Edward Lewis 23 Jul '05

23 Jul '05

On July 7, 2005, NeuStar received a handful of reports that DNS resolvers were unable to resolve dotUS domains, plus the mention of the problem on the NANOG list. From the reports received, the DNS problem seemed to impact a limited number of independent organizations but was not widespread. The reports followed a maintenance operation at one DNS site. During the maintenance operation a new piece of network equipment was installed. At approximately 10pm EDT (July 8 0200 UTC) the state of a previously operating load balancer was reset. At that time affected servers at independent sites resumed resolving dotUS names. We have reviewed and revised our maintenance procedures to prevent a reoccurrence of this issue. -- -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Edward Lewis +1-571-434-5468 NeuStar If you knew what I was thinking, you'd understand what I was saying.

1 0

RE: Switch advice please - followup
by Nicole 23 Jul '05

23 Jul '05

Thanks to everyone for their advice and stories. It seems the popular choice is Cisco with a close second of foundry. Even a nice mention of Dell switches. Most people had nothing good to say about HP. (phew.. glad I asked you all) I completely forgot abt Foundry so they are my next stop! Oddly no one mentioned 3com. I don't know if that's good or bad. The sad part is I hate Cisco. Well I hate IOS. It is the most counter intuitive interface known to man. We currently have several 3550's and one that is still partially brain dis-functional after a "senior network engineer" at a hosting facility got a-hold of it to "help out". To be honest I miss Ascend. Nice interfaces with actual menu's and interface for those of us who don't need 50 ways to do something or only find they need to touch their switches once a year for upgrades or whatever. You could at least wander through the menu's to figure out/remind yourself what to do. If anyone makes a switch with this type of menuing that can actually pass lots of bits well and is not a consumer toy. I want to know :) Thanks everyone! Nicole > Hello > I am looking at acquiring some switches to upgrade a large web site front > and > back-end switching network. > > I am looking at cisco and HP switches at the moment and would like to hear > peoples opinions on them or recommendations for any others. > > Some of the switches I am looking at are 24 and 48 Port GB (copper) > switches > and 48 and 24 port 10/100 with GB feed's. (one or two feeds) > > Also if anyone makes a small (like 8 port) GB switch with GB that routes > fast > enough to act as a gateway from Gb fiber drop to copper GB feed to other > switches. Most of the small switches seem underpowered for such a task. Or > am I > wrong in this? > > > Thanks so much! > > > Nicole > >

6 6