- Test - lists.nanog.org

IGMP with ISP radius accounting
by Sean Donelan 01 Oct '04

01 Oct '04

Have any ISPs (which really means vendors) looked at integrating IGMP support in edge switches with RADIUS? I'm aware of IGAP, but that involves changing the packets and identifying individual users. I was wondering about using IGMP snooping to trigger RADIUS accounting events, e.g. join, leave.

1 1

RE: SLA Tool
by Fisher, Shawn 01 Oct '04

01 Oct '04

Looking at www.cacti.net also, seems pretty decent. -----Original Message----- From: JDeane(a)sungardfutures.com [mailto:JDeane@sungardfutures.com] Sent: Friday, October 01, 2004 3:04 PM To: Fisher, Shawn; nanog(a)merit.edu Subject: RE: SLA Tool JFFNMS (http://www.jffnms.org) seems to have a decent SLA configuration. Been working for us in a limited testing capacity. Regards, Jade Jade E. Deane Senior Network Engineer SunGard Futures Systems SunGard Systems International, Inc. jdeane(a)sungardfutures.com +1 (312) 577-6100 +1 (866) 741-0076 (Fax) -----Original Message----- From: Fisher, Shawn [mailto:SFisher@Bresnan.com] Sent: Friday, October 01, 2004 1:27 PM To: Nanog List (E-mail) Subject: SLA Tool Is there any decent opensource tools that can be used to monitor SLA's? We have several customers requesting SLA's but not enough to warrant a flown blown Concord type solution. TIA Shawn Fisher

2 1

RE: SLA Tool
by JDeane＠sungardfutures.com 01 Oct '04

01 Oct '04

JFFNMS (http://www.jffnms.org) seems to have a decent SLA configuration. Been working for us in a limited testing capacity. Regards, Jade Jade E. Deane Senior Network Engineer SunGard Futures Systems SunGard Systems International, Inc. jdeane(a)sungardfutures.com +1 (312) 577-6100 +1 (866) 741-0076 (Fax) -----Original Message----- From: Fisher, Shawn [mailto:SFisher@Bresnan.com] Sent: Friday, October 01, 2004 1:27 PM To: Nanog List (E-mail) Subject: SLA Tool Is there any decent opensource tools that can be used to monitor SLA's? We have several customers requesting SLA's but not enough to warrant a flown blown Concord type solution. TIA Shawn Fisher

1 0

SLA Tool
by Fisher, Shawn 01 Oct '04

01 Oct '04

Is there any decent opensource tools that can be used to monitor SLA's? We have several customers requesting SLA's but not enough to warrant a flown blown Concord type solution. TIA Shawn Fisher

1 0

Weekly Routing Table Report
by Routing Table Analysis 01 Oct '04

01 Oct '04

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 02 Oct, 2004 Analysis Summary ---------------- BGP routing table entries examined: 148514 Prefixes after maximum aggregation: 87767 Unique aggregates announced to Internet: 70657 Total ASes present in the Internet Routing Table: 18150 Origin-only ASes present in the Internet Routing Table: 15772 Origin ASes announcing only one prefix: 7354 Transit ASes present in the Internet Routing Table: 2378 Transit-only ASes present in the Internet Routing Table: 75 Average AS path length visible in the Internet Routing Table: 4.7 Max AS path length visible: 26 Prefixes from unregistered ASNs in the Routing Table: 58 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 16 Number of addresses announced to Internet: 1342569892 Equivalent to 80 /8s, 5 /16s and 253 /24s Percentage of available address space announced: 36.2 Percentage of allocated address space announced: 58.5 Percentage of available address space allocated: 61.9 Total number of prefixes smaller than registry allocations: 68347 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 28520 Total APNIC prefixes after maximum aggregation: 14270 Prefixes being announced from the APNIC address blocks: 26682 Unique aggregates announced from the APNIC address blocks: 14234 APNIC Region origin ASes present in the Internet Routing Table: 2142 APNIC Region origin ASes announcing only one prefix: 640 APNIC Region transit ASes present in the Internet Routing Table: 327 Average APNIC Region AS path length visible: 4.8 Max APNIC Region AS path length visible: 22 Number of APNIC addresses announced to Internet: 164342912 Equivalent to 9 /8s, 203 /16s and 172 /24s Percentage of available APNIC address space announced: 75.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 23552-24575 APNIC Address Blocks 58/7, 60/7, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 84895 Total ARIN prefixes after maximum aggregation: 51348 Prefixes being announced from the ARIN address blocks: 65053 Unique aggregates announced from the ARIN address blocks: 22944 ARIN Region origin ASes present in the Internet Routing Table: 9589 ARIN Region origin ASes announcing only one prefix: 3431 ARIN Region transit ASes present in the Internet Routing Table: 922 Average ARIN Region AS path length visible: 4.4 Max ARIN Region AS path length visible: 18 Number of ARIN addresses announced to Internet: 233130752 Equivalent to 13 /8s, 229 /16s and 75 /24s Percentage of available ARIN address space announced: 69.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647,29695-30719, 31744-33791 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/7, 72/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 27533 Total RIPE prefixes after maximum aggregation: 19130 Prefixes being announced from the RIPE address blocks: 24369 Unique aggregates announced from the RIPE address blocks: 15991 RIPE Region origin ASes present in the Internet Routing Table: 5862 RIPE Region origin ASes announcing only one prefix: 3151 RIPE Region transit ASes present in the Internet Routing Table: 1011 Average RIPE Region AS path length visible: 5.3 Max RIPE Region AS path length visible: 26 Number of RIPE addresses announced to Internet: 172404800 Equivalent to 10 /8s, 70 /16s and 176 /24s Percentage of available RIPE address space announced: 60.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-34815 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 6310 Total LACNIC prefixes after maximum aggregation: 2335 Prefixes being announced from the LACNIC address blocks: 6155 Unique aggregates announced from the LACNIC address blocks: 3602 LACNIC Region origin ASes present in the Internet Routing Table: 392 LACNIC Region origin ASes announcing only one prefix: 111 LACNIC Region transit ASes present in the Internet Routing Table: 80 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 18 Number of LACNIC addresses announced to Internet: 16196608 Equivalent to 0 /8s, 247 /16s and 36 /24s Percentage of available LACNIC address space announced: 48.3 LACNIC AS Blocks 26592-26623, 27648-28671 LACNIC Address Blocks 200/7 Emerging AfriNIC Region Analysis Summary ---------------------------------------- Prefixes being announced by AfriNIC Region ASes: 1248 Total AfriNIC prefixes after maximum aggregation: 684 Prefixes being announced from the AfriNIC address blocks: 885 Unique aggregates announced from the AfriNIC address blocks: 676 AfriNIC Region origin ASes present in the Internet Routing Table: 92 AfriNIC Region origin ASes announcing only one prefix: 21 AfriNIC Region transit ASes present in the Internet Routing Table: 12 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 16 Number of AfriNIC addresses announced to Internet: 1999104 Equivalent to 0 /8s, 30 /16s and 129 /24s Percentage of available AfriNIC address space announced: 11.9 AfriNIC AS Blocks <none> AfriNIC Address Blocks 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 839 4389 159 Data Communications Bureau 1221 809 1184 581 Telstra Pty Ltd 4766 544 3408 266 Korea Internet Exchange for " 9583 530 41 106 Satyam Infoway Ltd., 17676 370 5532 52 XTAGE CORPORATION 4755 367 133 48 Videsh Sanchar Nigam Ltd. Aut 2907 354 1857 328 SINET Japan 9443 354 69 80 Primus Telecommunications 9929 344 161 33 China Netcom Corp. 703 312 342 241 UUNET 17557 312 23 156 Pakistan Telecom 2764 283 274 232 connect.com.au pty ltd 7474 271 269 202 Optus Communications Pty Ltd 9942 240 73 129 COMindico Australia 4802 232 28 141 Wantree Development 9800 230 374 67 CHINA UNICOM 9498 228 49 48 BHARTI BT INTERNET LTD. 7563 210 48 164 Korea Internet Infrastructure 17974 203 62 10 PT TELEKOMUNIKASI INDONESIA 4837 202 2264 106 chinanet IDC center beijing n ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1406 6760 980 AT&T WorldNet Services 701 1269 8429 916 UUNET Technologies, Inc. 1239 940 2867 624 Sprint 3549 852 563 206 Global Crossing 2386 841 530 602 AT&T Data Communications Serv 4323 796 637 218 Time Warner Telecom 6197 776 365 349 BellSouth Network Solutions, 18566 743 208 6 Covad Communications 721 720 21028 298 DLA Systems Automation Center 209 629 3465 498 Qwest 3561 618 2494 426 Cable & Wireless USA 3356 587 10907 446 Level 3 Communications, LLC 20115 587 425 300 Charter Communications 852 512 1142 398 Telus Advanced Communications 7843 489 681 98 Adelphia Corp. 7132 435 8157 377 SBC Internet Services 705 431 163 273 UUNET Technologies, Inc. 6198 430 396 200 BellSouth Network Solutions, 22773 401 960 18 Cox Communications, Inc. Atla 5668 398 87 18 Century Telephone RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 637 2031 527 UUNET - Commercial IP service 3320 299 2470 237 Deutsche Telekom AG 8220 282 461 268 COLT Internet - International 3301 281 1100 271 TeliaNet Sweden 21502 268 40 3 NUMERICABLE is a cabled netwo 680 251 2025 239 DFN-IP service G-WiN 3246 218 476 215 Song Networks 13083 217 51 8 Mannesmann Datenverarbeitung 1257 208 744 178 SWIPnet Swedish IP Network 8708 205 113 182 Romania Data Systems S.A. 5515 201 843 147 Sonera Solution Autonomous Sy 3215 188 876 76 France Telecom Transpac 786 176 1794 176 The JANET IP Service 719 157 288 102 LANLINK autonomous system 6746 151 29 128 Dynamic Network Technologies, 8866 150 18 19 Bulgarian Telecommunication C 25186 149 154 106 France Telecom Transpac's Tra 3269 147 1227 67 TELECOM ITALIA 5400 147 207 119 BT Ignite European Backbone 3303 146 609 129 Swisscom Ltd LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6140 367 138 68 ImpSat 8151 303 439 129 UniNet S.A. de C.V. 16814 212 13 7 NSS, S.A. 11172 203 99 52 Servicios Alestra S.A de C.V 6147 193 90 20 Telefonica Del Peru 11664 163 12 35 Keytech SA 6505 137 90 94 Global One Communicaoes Ltda 7303 129 58 23 Telecom Argentina Stet-France 6503 127 164 86 AVANTEL, S.A. 11992 90 9 31 Integrated Systems 6535 85 7 19 Chilesat Servicios Empresari 11311 84 8 24 Sinectis S.A. 10481 81 32 7 Prima S.A. 11556 80 40 2 Cable-Wireless Panama 14420 80 5 33 ANDINATEL S.A. 5639 77 8 8 Telecommunications Services o 15311 76 21 36 Telefonica Empresas 10292 71 6 27 TELECOMMUNICATIONS OF JAMAICA 14117 71 6 4 Telefonica del Sur S.A. 4270 70 18 9 Red de Interconexion Universi AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 251 631 218 The Internet Solution 5536 114 16 4 Internet Egypt Network 2018 94 297 92 Tertiary Education Network 2905 92 276 81 The Internetworking Company o 20928 59 16 1 Noor Advanced Technologies AS 22750 50 3 2 >>UNKNOWN<< 6713 31 42 10 Itissalat Al-MAGHRIB 9129 31 3 4 UUNET Kenya 5713 26 125 24 Telkom SA Ltd 8524 25 1 4 AUCEGYPT Autonomous System 14988 25 16 1 Botswana Telecommunications C 16637 24 10 19 Johnnic e-Ventures 10798 18 1 12 Standard Bank of South Africa 12258 18 3 12 Vodacom Internet Company 12455 17 4 2 Jambonet Autonomous system 21491 16 1 3 UTL On-line is RF broadband I 8346 15 7 14 SONATEL-AS Autonomous System 15706 15 4 2 Sudatel Internet Exchange Aut 24835 15 18 5 RAYA Telecom - Egypt 21280 14 2 3 Swift Global Kenya Ltd.Is an Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 18566 743 737 Covad Communications 4134 839 680 Data Communications Bureau 3549 852 646 Global Crossing 4323 796 578 Time Warner Telecom 6197 776 427 BellSouth Network Solutions, 9583 530 424 Satyam Infoway Ltd., 721 720 422 DLA Systems Automation Center 7843 489 391 Adelphia Corp. 22773 401 383 Cox Communications, Inc. Atla 5668 398 380 Century Telephone 27364 395 376 Armstrong Cable Services 6467 388 359 E.Spire Communications, Inc. 701 1269 353 UUNET Technologies, Inc. 22909 381 347 Comcast Cable Corporation 4755 367 319 Videsh Sanchar Nigam Ltd. Aut 17676 370 318 XTAGE CORPORATION 1239 940 316 Sprint 9929 344 311 China Netcom Corp. 6140 367 299 ImpSat 6478 370 296 AT&T Worldnet Services List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 64512 PRIVATE 24.249.231.0/24 15218 COX Communications 64512 PRIVATE 24.249.232.0/24 15218 COX Communications 64512 PRIVATE 24.249.233.0/24 15218 COX Communications 64512 PRIVATE 24.249.234.0/24 15218 COX Communications 64512 PRIVATE 24.249.235.0/24 15218 COX Communications 65010 PRIVATE 64.192.10.0/23 7911 Williams Communicati 65217 PRIVATE 192.102.236.0/24 217 University of Minnes 1877 UNALLOCATED 192.108.199.0/24 1876 Southern Methodist U 22750 UNALLOCATED 196.44.64.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.64.0/19 2905 The Internetworking 22750 UNALLOCATED 196.44.65.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.66.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.67.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.68.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.69.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.70.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.71.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.72.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.73.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.74.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.75.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.76.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.77.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.78.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.79.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.80.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.81.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.82.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.83.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.84.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.85.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.86.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.87.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.88.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.89.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.90.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.91.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.92.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.93.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.94.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.95.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.224.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.224.0/20 2905 The Internetworking 22750 UNALLOCATED 196.44.225.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.226.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.227.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.228.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.229.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.230.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.231.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.232.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.233.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.234.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.235.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.236.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.237.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.238.0/24 2905 The Internetworking 22750 UNALLOCATED 196.44.239.0/24 2905 The Internetworking Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 111.0.0.0/24 7563 Korea Internet Infrastructure 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.83.16.0/20 5515 Sonera Solution Autonomous Sy 192.83.32.0/19 5515 Sonera Solution Autonomous Sy 192.83.96.0/22 5515 Sonera Solution Autonomous Sy 192.83.100.0/24 5515 Sonera Solution Autonomous Sy 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.136.79.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.172.11.0/24 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:3 /10:6 /11:15 /12:62 /13:133 /14:306 /15:546 /16:8084 /17:2240 /18:3882 /19:9833 /20:10353 /21:7850 /22:10822 /23:12480 /24:81100 /25:236 /26:207 /27:113 /28:51 /29:30 /30:97 /31:0 /32:46 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 728 743 Covad Communications 6197 627 776 BellSouth Network Solutions, 2386 607 841 AT&T Data Communications Serv 7018 554 1406 AT&T WorldNet Services 3549 450 852 Global Crossing 702 388 637 UUNET - Commercial IP service 27364 379 395 Armstrong Cable Services 1239 375 940 Sprint 9583 368 530 Satyam Infoway Ltd., 4766 363 544 Korea Internet Exchange for " 701 352 1269 UUNET Technologies, Inc. 5668 346 398 Century Telephone 6198 316 430 BellSouth Network Solutions, 20115 299 587 Charter Communications 6467 288 388 E.Spire Communications, Inc. 9929 275 344 China Netcom Corp. 6517 265 292 Yipes Communications, Inc. 13609 265 308 Choice One Communications Inc 21502 265 268 NUMERICABLE is a cabled netwo 4323 248 796 Time Warner Telecom Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:7 12:1402 13:1 15:5 16:2 17:3 18:1 20:6 24:717 32:66 33:2 38:78 40:54 44:3 47:2 52:3 55:1 56:3 57:17 60:6 61:520 62:494 63:1848 64:2541 65:2054 66:2506 67:389 68:546 69:717 70:79 80:523 81:553 82:313 83:172 84:32 111:1 128:121 129:169 130:87 131:186 132:35 134:187 135:17 136:176 137:55 138:182 139:36 140:187 141:107 142:123 143:64 144:159 145:42 146:323 147:94 148:326 149:108 150:87 151:65 152:153 153:67 154:2 155:127 156:58 157:73 158:142 159:162 160:55 161:68 162:374 163:80 164:211 165:161 166:118 167:223 168:356 169:120 170:267 171:9 192:5574 193:2903 194:2131 195:1499 196:644 198:3646 199:3290 200:3661 201:20 202:4872 203:5700 204:3333 205:2098 206:2443 207:2645 208:2280 209:3008 210:1485 211:639 212:1111 213:1195 214:133 215:31 216:3679 217:1035 218:175 219:101 220:256 221:37 222:43 End of report

1 0

FYI: U.S. cybersecurity chief resigns
by Fergie (Paul Ferguson) 01 Oct '04

01 Oct '04

U.S. cybersecurity chief resigns Amit Yoran cited frustrations in private 10/01/04 11:51 AM, EDT CNN The government's cybersecurity chief has resigned after one year with the Department of Homeland Security, confiding to industry colleagues his frustration over what he considers a lack of attention paid to computer security issues within the agency. http://www.cnn.com/2004/US/10/01/cyber.chief.ap/index.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

1 0

RE: Internet Connectivity
by Fergie (Paul Ferguson) 01 Oct '04

01 Oct '04

Also see the DShield "Are you cracked?" frob: http://www.dshield.org/warning_explanation.php - ferg -- "Stephen J. Wilcox" <steve(a)telecomplete.co.uk> wrote: ahh then you have one of the new wormy things that scans aggressively for easy accounts on ssh. find src host and disinfect. Steve On Fri, 1 Oct 2004, Jack Vizelter wrote: > > Investigation is still ongoing, but from what they can tell, majority of > the attempted connections have been going over TCP port 22. > > -jack > -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

1 0

RE: Internet Connectivity
by Jack Vizelter 01 Oct '04

01 Oct '04

Investigation is still ongoing, but from what they can tell, majority of the attempted connections have been going over TCP port 22. -jack -----Original Message----- From: Josh Duffek [mailto:consultantjd16@ridemetro.org] Sent: Friday, October 01, 2004 11:05 AM To: Jack Vizelter; nanog(a)merit.edu Subject: RE: Internet Connectivity Did you run a sniffer to get an idea of what all the traffic is? Curious what, if any, port(s) are being flooded. J -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Jack Vizelter Sent: Friday, October 01, 2004 9:56 AM To: nanog(a)merit.edu Subject: Internet Connectivity We had several machines start spewing huge amounts of data causing our pipe to the public Internet to stop. We had no traffic coming in or out of the campus. We're unsure of whether it's virus related, but wanted to inquire if anyone else has heard of or came across something similar. It appears to be an DDOS attack, but, originating from the inside. This started last night at about 10pm EST. Thanks, -jack

3 2

nanog list
by Randy Bush 01 Oct '04

01 Oct '04

was this list broken for about 12 hours and just recently recovered? postings from others and from me were not (yet) received, and are not in the archive at <http://www.merit.edu/mail.archives/nanog/> randy

1 0

RE: Internet Connectivity
by Josh Duffek 01 Oct '04

01 Oct '04

Did you run a sniffer to get an idea of what all the traffic is? Curious what, if any, port(s) are being flooded. J -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Jack Vizelter Sent: Friday, October 01, 2004 9:56 AM To: nanog(a)merit.edu Subject: Internet Connectivity We had several machines start spewing huge amounts of data causing our pipe to the public Internet to stop. We had no traffic coming in or out of the campus. We're unsure of whether it's virus related, but wanted to inquire if anyone else has heard of or came across something similar. It appears to be an DDOS attack, but, originating from the inside. This started last night at about 10pm EST. Thanks, -jack

1 0