- Test - lists.nanog.org

GBLX congestion in Dallas area
by Joel Perez 07 Jun '05

07 Jun '05

Is anybody seeing any congestion in the Dallas area for Global Crossing? I'm seeing packet loss to some of my equipment up there. Thanks, -------------------------------------------- Joel Perez | Network Engineer 305.914.3412 | Ntera --------------------------------------------

2 1

drone armies C&C report - May/2005
by Gadi Evron 07 Jun '05

07 Jun '05

Below is a periodic public report from the drone armies / botnets research and mitigation mailing list. For this report it should be noted that we base our analysis on the data we have accumulated from various sources. According to our incomplete analysis of information we have thus far, we now publish our regular two reports. This month we would especially like to commend Staminus, who contacted us and have since made incredible efforts to deal with the threat. Also, we'd like to mention Internap for their continuous efforts. The ISP's that are most often plagued with botnet C&C's (command & control) are, by the order listed: ---------------------------------- Top 15 with open non-resolved suspect C&Cs by Name: ASN Responsible Party Unique C&Cs Open-unresolved 6517 YIPESCOM - Yipes Communication 60 41 21840 SAGONET-TPA - Sago Networks 90 24 25761 STAMINUS-COMM - Staminus Commu 86 20 4766 KIXS-AS-KR Korea Telecom 43 20 13680 AS13680 Hostway Corporation Ta 22 19 21698 NEBRIX-CA - Nebrix Communicati 24 18 13301 UNITEDCOLO-AS Autonomous Syste 27 17 21788 NOC - Network Operations Cente 29 16 29415 EUROWAN-ASN OVANET - EuroWan d 16 15 13749 EVERYONES-INTERNET - Everyones 24 14 30083 SERVER4YOU - Server4You Inc. 21 14 25700 SWIFTDESK - SWIFTDESK VENTURE 13 13 23522 CIT-FOONET - CREATIVE INTERNET 14 12 27595 ATRIVO-AS - Atrivo 31 11 13237 LAMBDANET-AS European Backbone 11 11 The following table is a historical ranking of the top 10 Responsible parties listed by the number of unique C&Cs in the BBL along with the current number of C&Cs responding as open at the time of the survey. ASN Responsible Party Unique C&Cs Open-unresolved 21840 SAGONET-TPA - Sago Networks 90 24 10913 INTERNAP (Block 1,3,4,5) 90 1-5 13790 19024 14742 25761 STAMINUS-COMM - Staminus Commu 86 20 6517 YIPESCOM - Yipes Communication 60 41 4766 KIXS-AS-KR Korea Telecom 43 20 27595 ATRIVO-AS - Atrivo 31 11 21844 THEPLANET-AS - THE PLANET 31 1-5 21788 NOC - Network Operations Cente 29 16 13301 UNITEDCOLO-AS Autonomous Syste 27 17 3356 LEVEL3 Level 3 Communications 25 1-5 * We would gladly like to establish a trusted relationship with these and any organizations to help them in the future. * By previous requests here is an explanation of what "ASN" is, by Joe St Sauver: http://darkwing.uoregon.edu/~joe/one-pager-asn.pdf The Trojan horses most used in botnets: --------------------------------------- 1. Korgobot. 2. SpyBot. 3. Optix Pro. 4. rBot. 5. Other SpyBot variants and strains (AgoBot, PhatBot, actual SDbots, etc.). This report is unchanged. Credit for gathering the data and compiling the statistics should go to: Prof. Randal Vaughn <Randy_Vaughn(a)baylor.edu> -- Gadi Evron, Israeli Government CERT Manager, Tehila, Ministry of Finance. gadi(a)CERT.gov.il Office: +972-2-5317890 Fax: +972-2-5317801 The opinions, views, facts or anything else expressed in this email message are not necessarily those of the Israeli Government.

1 0

Needed : AOL Network Contact
by David Brinks 07 Jun '05

07 Jun '05

I seem to have a couple Class Cs that AOL's portal servers are blocking and I would like to contact someone at AOL to discuss getting the blocks removed. I've tried going through their tech support but after multiple dead-ends and being told "AOL is a content provider and doesn't have Network Support group, nor servers nor any people who take care of servers" multiple times I'm wondering if any one you may have a backside phone number or email I could try. (I've already tried the number listed in their whois information but that only gets met to their Postmaster group and they also tell me they have no group that takes care of routers, IPs or servers.) Thank-you for your time and any help anyone may be able to offer. David Brinks --- Power-Net Internet Services --- Network Manager brinks(a)power-net.net

3 2

RE: Changes to the Nanog Mailing List Administration Team
by Hannigan, Martin 07 Jun '05

07 Jun '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Malayter, Christopher > Sent: Monday, June 06, 2005 12:54 PM > To: 'nanog(a)merit.edu' > Subject: Changes to the Nanog Mailing List Administration Team > > > > Good Afternoon, > > It is my pleasure to announce that Robert Seastrom will be > joining the Nanog > Mailing List Administration Team. He joins us as Martin > Hannigan departs > the list team. And a fine replacement RS will make. Thank you Susan Harris, Betty Burke, and Sue Joiner (Merit) for the education about how the list functions and the cooperation in analyzing it and putting changes in place. It couldn't have been done without their help. I'm looking forward to other volunteer stuff. And thanks to Chris and Steve for the same. :-) -M<

1 0

OT: Need a PA-A3-T3 in Oregon
by Hitesh Patel 06 Jun '05

06 Jun '05

Anyone have a Cisco PA-A3-T3 we could borrow/buy in Oregon? Ours just became a paperweight and the spare is nowhere to be found... Please contact by email or cell phone (# is in my sig). Sorry for the OT post. -- +---------------------------------+----------------------------+ | Hitesh Patel | Office: (541) 759-3126 | | Network Engineering Manager | Cell: (541) 404-8873 | | Preferred Connections Inc. | Email: hitesh(a)pcinw.com | +---------------------------------+----------------------------+

1 0

Changes to the Nanog Mailing List Administration Team
by Malayter, Christopher 06 Jun '05

06 Jun '05

Good Afternoon, It is my pleasure to announce that Robert Seastrom will be joining the Nanog Mailing List Administration Team. He joins us as Martin Hannigan departs the list team. A bit about Robert, Robert Seastrom is a freelance consultant specializing in supporting production and testbed IP networks. He was a cofounder and former president of the Cambridge Bandwidth Consortium, a cooperative ISP in Cambridge, Massachusetts. Previously, Robert was the Director of Network Architecture at Inter.Net Global Ltd. Robert has also held positions at Akamai Technologies, AboveNet Communications, and Digex, and built pioneering ISPs in Japan and the Republic of Georgia. With the departure of Martin from the team, the position of chair has been vacated. I have been selected to assume the chair of the list administration team. As always we appreciate feedback to nanog-admin(a)merit.edu Regards, Chris Malayter TDS Telecom - Network Services Data Network Engineering chris.malayter(a)tdstelecom.com Phone: (608) 664-4878 FAX: (608) 664-4644

2 1

SBC (AS 7132) contact?
by David Hubbard 06 Jun '05

06 Jun '05

Seeing some random issues with hosting customers of ours unable to get to their sites. Traces out of 7132 seem to stop in and around some of the following: core2-p10-0.crrvca.sbcglobal.net (151.164.42.5) core1-p1-0.crrvca.sbcglobal.net (151.164.188.45) core2-p3-0.cranca.sbcglobal.net (151.164.243.233) core1-p1-0.cranca.sbcglobal.net (151.164.241.221) core2-p11-0.crscca.sbcglobal.net (151.164.242.81) Support from them to our mutual customers won't go past "try clearing your cache" so I'd like to find someone in net ops that can help. :-) Thanks, David

1 0

RE: Battery Maint in LEC equipment
by Hannigan, Martin 06 Jun '05

06 Jun '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Sean Donelan > Sent: Monday, June 06, 2005 7:56 AM > To: nanog(a)nanog.org > Subject: Re: Battery Maint in LEC equipment > > > > On Sun, 5 Jun 2005, Jay Hennigan wrote: > > If your data center has an adequate DC plant, will the > carriers insist > > on installing their own batteries and rectifiers? And how > many of them > > have redundant supplies to take advantage of an A and B > feed from you? > > If you are willing to sign some liability waivers, and maybe pay some > special construction charges, I've found most ILECs are willing to use > your plant. Not in provider/colo land. The LEC's will and do pay for rack space. Most will gladly use protected power to their rectifiers and not use battery if offerred. > But remember, the ILEC is stuck with servicing > that building > long after you may disappear. Which is a good reason not to allow any dependancies out of their control. This is in the enterprises interest. Co mingling with the enterprise is a very bad idea. -M<

1 0

RE: Battery Maint in LEC equipment
by Olsen, Jason 06 Jun '05

06 Jun '05

> From: David Lesher > Question: > Have any NANOG'ers [NANOGites? NANOGees?] run into this? Again, this > is LEC owned, LEC maintained, equipment....Do you provide generator > power for such in your space? SBC (Formerly Ameritech, formerly Illinois Bell, soon to be AT&T again, yadda yadda yadda) has always maintained and replaced the batteries for the FLM 150s and 600s that are installed in our data center and metro sites. Usually the Transport group knows something is wrong before the mouth-breathers in our data center do. We provide power via UPS and generator by default as the FLMs are fed off the same grids as the rest of our gear. I personally wouldn't treat those batteries as a UPS if only because I've never seen a load test performed on them that tells me what sort of survivability I can expect out of them. On the residential side it's easy to guess why they are attempting to force the consumer to buy/maintain batteries for the boxes: as always, follow the money... -jfo Jason "Feren" Olsen DeVry, Inc. Senior Network Engineer One Tower Lane Em: jolsen(a)devry.com Oakbrook Terrace, IL 60181-4624 Ph: 630.645.1607 Fx: 630.382.2929

1 0

Juniper Routers with X switches
by Todd Reed 06 Jun '05

06 Jun '05

How many people are using Juniper routers on their networks and what is your experiences with them? Also, what equipment do you use for switching?

4 3