- Test - lists.nanog.org

L3 burp today - what happened?
by David G. Andersen 23 Feb '04

23 Feb '04

Anyone know what happened to L3 during the last hour? They seem to have developed an appetite for dropping packets in San Jose for customers on the Genuity portion of their network, but I'm curious if anyone has a slightly more detailed explanation about the failure. The failure seems to have started at 17:09 and ended at about 17:51 EST. -Dave -- work: dga(a)lcs.mit.edu me: dga(a)pobox.com MIT Laboratory for Computer Science http://www.angio.net/

3 2

RE: possible L3 issues
by kwallace＠pcconnection.com 23 Feb '04

23 Feb '04

thanks all, finally got through to the NOC. It will be intersting to see what the real cause turns out to be.. -----Original Message----- From: Andy Naylor [mailto:andy_naylor@49.com] Sent: Tuesday, February 24, 2004 12:57 AM To: Wallace Keith Subject: Re: possible L3 issues L3 is having system-wide hardware failures. Their master ticket is 858908. Andrew On Mon, 23 Feb 2004 kwallace(a)pcconnection.com wrote: > > anyone else seeing high latency via L3 , especially the west coast ? > - Keith > > >

1 0

Level3 issues?
by Scott Francis 23 Feb '04

23 Feb '04

one of my machines is at a colo facility that uses Level3 as a primary upstream, and I've been noticing significant packet loss off and on for the last hour or so. Heard from an Internap customer that L3 was having BGP issues ... anybody have more details? I haven't heard anything substantive. -- Scott Francis | darkuncle(at)darkuncle(dot)net | 0x5537F527 "I gave you the chance of aiding me willingly, but you have elected the way of pain!" -- Saruman, speaking for sysadmins everywhere

1 0

RE: possible L3 issues
by Chris Ranch 23 Feb '04

23 Feb '04

Definite failures in South East US. I have a dead OC-3. Chris > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > kwallace(a)pcconnection.com > Sent: Monday, February 23, 2004 2:53 PM > To: nanog(a)merit.edu > Subject: possible L3 issues > > > > anyone else seeing high latency via L3 , especially the west coast ? > - Keith > >

1 0

Genu/L3 Major Outage
by Chris Ranch 23 Feb '04

23 Feb '04

Hello, Anyone know what's going on with GENU/L3's failure? I have an OC-3 in South Florida up/up, but bgp peer not responding. 17:00 EST. Thanks, Chris ---------------------------------------------- Chris Ranch Director of Network Architecture Affinity Internet, Inc. Office: +1 415 764 1091 ext. 3 Cell: +1 925 683 5823

1 0

BGP, MED, Confederation presentation
by Sam Stickland 23 Feb '04

23 Feb '04

Hi, There was a link posted to this list about six months ago, of a presentation that showed how to use additive MEDs to set up traffic flows correctly between sites (where each site is it's own BGP confederation) and showing animation of the resulting (example) traffic flows. I remember that the technique it described was well regarded and that it was reasonably unqiue. Sorry for the vague description, but my web searches and trawls through the nanog archives have drawn a blank. I'm hoping that someone here knows what I'm talking about :) Sam

3 3

RE: T1 Customer CPE Replacement?
by Sean Crandall 23 Feb '04

23 Feb '04

We have tens of thousands of Netopia's in service for our T-1, SDSL and ADSL customers. Netopia has been a great company to work with. Their devices are fairly feature packed for what is needed on an edge device. They are missing advanced routing such as OSPF and BGP, however. The devices are either driven by an easy to use menu system or you can hit ctrl-n and jump to the CLI. If the unit is under warranty, then getting a replacement for a failed unit should not be an issue. I can't say what our failure rate has been, but I can say that with all of the options out there (cisco, efficient, etc), if they had been a problem, we would not still be shipping them. -Sean Sean Crandall VP Engineering Operations MegaPath Networks Inc. 6691 Owens Drive Pleasanton, CA 94588 (925) 201-2530 (office) (925) 201-2550 (fax) > -----Original Message----- > From: Scott McGrath [mailto:mcgrath@fas.harvard.edu] > > Have you tried a softnet depot maintenance agreement. This > entitles you to IOS upgrades but H/W replacement is some > negotiated percentage of list price. > > The other guys _may_ be cheaper in the short run but hardware > replacement is always like having a root canal cant speak for > Netopia but I have dealt with Adtran ended up buying a spare > DS3 CSU/DSU because of the experience. > > Cisco has many warts but they do honor their maintenance > contracts unlike some other vendors who I have had the > misfortune of dealing with. > > > Scott C. McGrath > > On Mon, 23 Feb 2004, Claydon, Tom wrote: > > > Hello, > > > > We're looking for a good replacement for fractional T1 > customers with > > Cisco > > 1600- & 1700-series routers as their CPE. They are good > routers, but > > the ongoing support costs are an issue, and we need to > replace them ASAP. > > > > Someone had mentioned several CPE vendors, such as Adtran > and Netopia. > > Are there any others, and does anyone have any pros/cons of what > > they're familiar with? > > > > > > Thanks, > > > > = TC > > > > -- > > Tom Claydon, IT/ATM Network Engineer > > Dobson Telephone Company > > phone: (405) 391-8201 cell: (405) 834-0341 > > > > >

1 0

RE: BL of Compromised Hosts?
by Michel Py 23 Feb '04

23 Feb '04

> Deepak Jain wrote: > Would anyone be interested in receiving a text or BGP > feed of IPs of hosts known/suspected to be compromised > and used as parts of DDOS attacks? Would anyone be > interested in contributing their BGP views? There is a regrouping of BGP feeds for various "questionable" hosts and networks around AS29467; read http://arneill-py.sacramento.ca.us/draft-py-idr-redisfilter-01.txt and feel free to contact the authors. The different sources have different but commonly known communities. Michel.

4 3

eBGP, iBGP, injecting networks
by isaac＠ravengate.net 23 Feb '04

23 Feb '04

greetings list, hoping someone can hook me up on the right way to do this. --- we have two ASN's we control. we have two border/edge routers (1 in each ASN) that talks to a different backbone provider. the two border routers peer with eachother over eBGP and also are in the same OSPF process. (we are working to merge them into the same BGP ASN) my question is this: how do we achieve router redundancy between these two routers? currently if we lose a transit link, the traffic will flow fine out the other pipe. but we don't have BGP network statements in router 2 that exist in router 1 and we don't have BGP network statements in router 1 that exist in router 2. so the routes injected into BGP from router 1 will get withdrawn right if router 1 dies? is it a problem to announce the same networks from two different eBGP peers to two different upstreams? ------ if you are still reading, thanks! to clearify some more- current setup: current setup: ASN 1 (we're not Genu!ty- just using for an example) :) ASN 1 injects all of its own space and announces this space to Above.net and ASN 2 ASN 2 injects all of its own space and announces this space to Savvis and ASN 1. so stuff out on the net looks like: 1 6461 etc etc and 1 2 6347 ------- 2 6347 etc etc and 2 1 6461 etc etc ------- so, you see we are prepending on of our AS's on the way out. the problem is tho, we only have 1 router in each respective Autonmous System injecting address space. if we lose that router, we lose announcing that ASN's space. is it totally going to cause probs to have routes originating from two different AS's? routing loops would be a real drag. what about having an iBGP router in AS 1 inject the same space as the border router in AS 1? this other router also peers with AS 2.... thanks a lot! jg

7 7

O/T: fake identity seal was: RE: M$ CD patches
by Michel Py 23 Feb '04

23 Feb '04

By popular demand, I put back the "fingerprint" version of the authentic fake identity seal; go to http://arneill-py.sacramento.ca.us/ move the mouse cursor over the yellow padlock on the left. Might look a little bright on some platforms, gamma 1.8. My HTML is not quite sophisticated enough so it can detect Macs and pop a 2.2 gamma image instead. Enjoy! Michel. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Michel Py Sent: Saturday, February 21, 2004 3:31 PM To: Sean Donelan Cc: nanog list Subject: RE: M$ CD patches > Sean Donelan wrote: > Regardless of the distribution method, geniune Microsoft > patches are always cryptographically signed by Microsoft. > Whether consumers can figure out how to check the signature > is a different question. Lots can't. I recently put a fake "identity seal" on my personal web site (go to https://arneill-py.sacramento.ca.us and put the mouse cursor over the padlock on the left). It's completely bogus: not only the artwork has been greatly inspired by Comodo's thing (view the real thing here: http://www.instantssl.com/ssl-certificate-products/ssl-certificate-trust logo.html) when the actual SSL certificate comes from freessl.com, but it also works even if you view the insecure page http://arneill-py.sacramento.ca.us/. Besides, I do not have a credit card processing system, although I do accept donations in cash and gold bullions. So, what you're looking at is nothing more than a little photoshop and javascript. Guess what: I have received many questions that say in substance "how much does it cost to get the same seal as yours and can you come install it on my web server?" Michel.

1 0