- Test - lists.nanog.org

Break-In At SAIC Risks ID Theft
by Fergie (Paul Ferguson) 15 Feb '05

15 Feb '05

In light of the fact that Telcordia is a wholly-owned subsidary of SAIC, this is especially troublesome. ref: http://www.icann.org/announcements/announcement-07feb05.htm http://www.icann.org/announcements/telcordia-disclosure.htm [snip] "Some of the nation's most influential former military and intelligence officials have been informed in recent days that they are at risk of identity theft after a break-in at a major government contractor netted computers containing the Social Security numbers and other personal information about tens of thousands of past and present company employees." [ref:] http://www.washingtonpost.com/wp-dyn/articles/A17506-2005Feb11.html (registration required) - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

5 4

3rd Party Cisco CWDM GBICs?
by Aaron Thomas 15 Feb '05

15 Feb '05

Hi List, Cisco currently provides 8 lambdas for CWDM and we have a 10 lambda mux/de-mux system we want to make use of over a single fibre (5 data channels). The 1430 and 1450nm lambdas are dark and I was wondering if there are any 3rd party vendors out there that have produced Cisco compatible GBICs for these wavelengths. I have looked around and seen Finisar does make Cisco GBICs, but not in the 1430/1450 lambdas. Any help appreciated Aaron

4 3

Re: [ppml] Deaggregation in the ARIN region Was: [nanog] The Cidr Report
by Paul Bradford 15 Feb '05

15 Feb '05

Maybe this all is just a result of different inefficient (IP Wise not $$ wise) network designs... like those that rely on upstream providers to provide a "virtual" backbone for a company because they design thier network to be discontiguous... Thanks, Paul On Tue, 2005-02-15 at 08:21 -0500, Bruce Eastman wrote: > > Jon is right. Deaggregation is not a laughing matter. Its poor management > > at least from a netizens point of view.... > > > Well, the warning advisory in and of itself was meant to interject a little > humor, but the idea > was serious. ARIN submits an e-mail message to the customer, with each > allocation. > I think John's idea of adding a short paragraph and direction to a few links > was a very good > idea. I believe the message sent out with each allocation would be a good > place to add said > links and paragraph. > > Bruce Eastman > > > > ----- Original Message ----- > From: "Bill Darte" <billd(a)cait.wustl.edu> > To: "'Bruce Eastman '" <bruce.eastman(a)adelphia.com>; <owner-ppml(a)arin.net>; > <ppml(a)arin.net> > Sent: Monday, February 14, 2005 6:32 PM > Subject: RE: [ppml] Deaggregation in the ARIN region Was: [nanog] The Cidr > Report > > > > Jon is right. Deaggregation is not a laughing matter. Its poor management > > at least from a netizens point of view.... > > > > Still, you advisory below is a hoot! I like it. > > > > Bill Darte > > > > > > Bruce Eastman said: > > > > > > Maybe ARIN should add a Warning label. :) > > > > > > > > > > > > WARNING - DANGER - READ THIS & HEED THIS! > > > > > > > > WARNING: THIS IS NOT A TOY. THIS IP IS DESIGNED FOR USE BY EXPERIENCED > > NETWORKING PERSONNEL AND IS INTENDED > > > > FOR USE BY AN EXPERT IN ROUTING. THESE IP'S ARE INTENDED FOR USE SOLELY > > BY > > SENIOR NETWORK ENGINEER TYPES > > > > ( WITH NECESSARY SAFETY EQUIPMENT ). NO OTHER USE IS INTENDED OR > > RECOMMENDED. ILLEGAL TO OWN, PURCHASE OR > > > > TRANSFER BY ANYONE OTHER THAN ARIN OR OUTSIDE THE TERMS AFOREMENTIONED. > > MISUSE OR CARELESS USE MAY CAUSE > > > > SERIOUS ROUTING DEAGGREGATION. READ OWNERS MANUAL BEFORE USING. > > > > > > > > > > > > Bruce Eastman > > Senior IP Analyst > > Adelphia Communications > > > > > > > > > > ----- Original Message ----- > > From: "Jon Lewis" <jlewis(a)lewis.org> > > To: "Andrew Dul" <andrew.dul(a)quark.net> > > Cc: <ppml(a)arin.net> > > Sent: Sunday, February 13, 2005 1:12 PM > > Subject: Re: [ppml] Deaggregation in the ARIN region Was: [nanog] The > > Cidr > > Report > > > > > > > On Sun, 13 Feb 2005, Andrew Dul wrote: > > > > > > > I was wondering if people in the ARIN region agreed with these > > statements > > > > about the ARIN region not doing enough to educate the membership > > about > > > > deaggregation, BGP annoucements etc... > > > > > > > > If ARIN were to do more what would you suggest? > > > > > > > > 1. More/Better online training > > > > 2. Regional Training session (similar to RIPE?) > > > > > > Whether or not ARIN actually did any training courses, it would be > > nice to > > > see some info on BCPs for BGP routing in the training section of the > > ARIN > > > web site rather than just "how to use whois" and "how to jump through > > the > > > hoops to get IP space". > > > > > > Too many networks deaggregate their announcements for no reason simply > > > because they don't realize there's any reason they shouldn't. > > > > > > Covering things like route filtering (i.e. not leaking provider A's > > routes > > > to provider B) would be nice. Might even mention the use of routing > > > registries (radb, altdb, ARIN's own one, etc.). > > > > > > To make a bad analogy, right now, ARIN's like a gun shop selling guns > > with > > > no manuals and no safety literature. Not everyone who's buying knows > > how > > > to use them safely. > > > > > > ---------------------------------------------------------------------- > > > Jon Lewis | I route > > > Senior Network Engineer | therefore you are > > > Atlantic Net | > > > _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ > >

1 0

Source for IDS data
by Eric Germann 15 Feb '05

15 Feb '05

One more request for the group. Looking for some contacts off list who would be willing to discuss supplying some IDS data. Ideal candidates for this research would have the following characteristics: 1. Have a fairly visible network that draws appreciable attempts. 2. Have an IDS collection point in front of the firewall so ATTEMPTED intrusions are also recorded. 3. Have a fairly extensive history of IDS attempts. This is for a graduate research project I am engaged in and I am willing to discuss with potential suppliers of data. Targets are not required, I want to characterize sources only. If you are interested in supplying data or would like to discuss it further, please contact me OFF-LIST by hitting reply and we can talk off line. Thanks Eric Germann

1 0

Cisco 3640 Flash errors - upgrade bootrom?
by Kim Onnel 15 Feb '05

15 Feb '05

I have a 3640 that while booting up gives the errors below at the console, Console Errors: _____________ C3600 processor with 65536 Kbytes of main memory Main memory is configured to 64 bit mode with parity disabled unknown flash deþ System Bootstrap, Version 11.1(7)AX [kuong (7)AX], EARLY DEPLOYMENT RELEASE SOFT WARE (fc2) Copyright (c) 1994-1996 by cisco Systems, Inc. C3600 processor with 65536 Kbytes of main memory Main memory is configured to 64 bit mode with parity disabled unknown flash device - mandev code = 0xffff cannot read flash info getdevnum warning: device "flash" has size of zero unknown flash device - mandev code = 0xffff cannot read flash info getdevnum warning: device "flash" has size of zero open: read error...requested 0x4 bytes, got 0x0 trouble reading device magic number boot: cannot open "flash:" an alternate boot helper program is not specified (monitor variable "BOOTLDR" is not set) and unable to determine first file in bootflash loadprog: error - on file open boot: cannot load "tftp:c3640-js-mz.122-15.T5.bin 40.40.40.2" System Bootstrap, Version 11.1(7)AX [kuong (7)AX], EARLY DEPLOYMENT RELEASE SOFT WARE (fc2) Copyright (c) 1994-1996 by cisco Systems, Inc. C3600 processor with 65536 Kbytes of main memory Main memory is configured to 64 bit mode with parity disabled I was adviced to upgrade bootrom, because the bootrom doesnt recognize the flash sticks, how do you guys check that this bootrom will work with this flash stick ? Regards

1 0

RE: The Cidr Report
by Frotzler, Florian 15 Feb '05

15 Feb '05

> Recent Table History > Date Prefixes CIDR Agg > 04-02-05 151613 103143 > 05-02-05 152142 103736 > 06-02-05 152231 103721 > 07-02-05 152353 103830 > 08-02-05 152514 103966 > 09-02-05 153855 104090 > 10-02-05 154283 104246 > 11-02-05 154341 104240 > <...> ~ +3000 routes in one week? Anyone else frightened by this? Florian

20 36

Re: Verizon wins MCI
by Robert Boyle 15 Feb '05

15 Feb '05

At 11:45 PM 2/14/2005, Christopher L. Morrow wrote: >uhm, thats the '70 billing departments' ... or so said the SEC's info >about how many billing systems were 'integrated' during the >bernie-dynastic-times. I remember reading in IT Week or Infoweek or some other trade rag that they had over 2400 software packages used for billing and provisioning and they were going to reduce that down to 1500 within 10 years! We have never gotten a correct bill from MCI - ever! In over 10 years of dealing with them and their divisions - MFS, UU, WCom, etc. After C&W took over MCI's network in the mid 90's, their billing department took a couple of months to grasp the enormity of the problem. Once they did, they made changes and the C&W bills were always right after that. :) That is an enormous project... -Robert Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com | 888-TELLURIAN | 973-300-9211 "Well done is better than well said." - Benjamin Franklin

1 0

RADB anon ftp server stoned or deprecated?
by Bill Nash 15 Feb '05

15 Feb '05

$ ftp ftp.radb.net Connected to ftp.radb.net (198.108.1.48). 421 Service not available, remote server has closed connection $ ftp ftp.merit.edu Connected to ftp.merit.edu (198.108.1.48). 421 Service not available, remote server has closed connection - billn

2 2

Source for IDS data
by Eric Germann 15 Feb '05

15 Feb '05

One more request for the group. Looking for some contacts off list who would be willing to discuss supplying some IDS data. Ideal candidates for this research would have the following characteristics: 1. Have a fairly visible network that draws appreciable attempts. 2. Have an IDS collection point in front of the firewall so ATTEMPTED intrusions are also recorded. 3. Have a fairly extensive history of IDS attempts. This is for a graduate research project I am engaged in and I am willing to discuss with potential suppliers of data. Targets are not required, I want to characterize sources only. If you are interested in supplying data or would like to discuss it further, please contact me OFF-LIST by hitting reply and we can talk off line. Thanks Eric Germann

1 0

RE: The Cidr Report
by Hannigan, Martin 15 Feb '05

15 Feb '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Hank Nussbacher > Sent: Monday, February 14, 2005 3:26 AM > To: Philip Smith > Cc: Nanog > Subject: Re: The Cidr Report > > > > At 10:27 AM 14-02-05 +1000, Philip Smith wrote: > > Well said. At NANOG you get the clueful people cuz they at > least knew to > come. That is a start. But there are hundreds of ISPs out > there who don't > have a clue. RIPE realized this without having to do a > membership poll and > rightly so, goes and does training where it is needed (and > believe me - I > am their biggest critic and all-around pain in the ass when > it comes to > their expenses as Leo and Rob can attest). > > NANOG is not the place to do it. ARIN, as part of their > overhead should do > an east coast, west coast and Chicago area tutorial at least once a > year. And guess what - most of the training material has > already been > written by the other RIRs. Am I misreading the report? That doesn't look like a list of clueless people. Just because another RIR does something doesn't mean we should automatically assume ARIN should too. This is a different area with different dynamics. Regardless, you could always propose this to ARIN instead of NANOG. :-) -M<

2 1