- Test - lists.nanog.org

Don't forget about physical security - Australia
by Sean Donelan 06 Sep '03

06 Sep '03

Two people dressed as computer technicians entered Australia's mainframe data center for customs and intelligence centre at the Sydney International Airport. They impersonated EDS technicians hired to repair the mainframes. They spent two hours disconnecting the mainframe communications equipment. They then put the equipment on trolleys and pushed them out the front door past the guards.

2 1

SNMP OID's for BGP monitoring
by Austad, Jay 05 Sep '03

05 Sep '03

What OID's are people using to monitor/graph BGP stats on Cisco routers? -jay

3 2

A web interface to check the consistency of RPSL policies
by Olivier Bonaventure 05 Sep '03

05 Sep '03

Dear All, In the framework of a research project on interdomain traffic engineering, Vincent Magnin, has developped a tool and a web interface that could be useful for network operators. The tool relies on the RPSL databases from the main 19 IRR and builds a map of the global Internet based on this information. Furthermore, by using a few heuristics the tool is able to infer the type of relationship (customer->provider, provider->customer, peer-to-peer, ...) between two autonomous systems. This heuristic works well when both AS register accurately their routing policies. Unfortunately, not all ASes correctly maintain their RPSL policy. In those cases, the heuristic will either perform an educated guess or indicate a potential problem found in the RPSL specification. The web interface of the tool allows to easily browse through the 19 RPSL databases and we believe that it could be useful for ISPs willing to check the consistency of their RPSL policy compared to the policy of their neighbors. You can access the web interface of the tool at the URL below : http://rpsl.info.ucl.ac.be Your feedback, to rpsl(a)info.ucl.ac.be is welcome as we intend to later release the tool in open source if it appears to be useful for operators. Best regards, Vincent Magnin, Steve Uhlig and Olivier Bonaventure -- CSE Dept. UCL, Belgium - http://www.info.ucl.ac.be/people/OBO/

1 0

zebra server redundancy
by Steve Francis 05 Sep '03

05 Sep '03

A while back there was a thread about using zebra/gated to originate a host route into OSPF that is tied to the loopback on multiple boxes, in order to achieve server redundancy and load balancing w/o appliances. In testing so far, this seems to work great. My only question is how are people withdrawing the routes? ospfd does not yet re-read its config on a HUP. Killing the daemon seems a bit rude, depends on timers for convergence, and precludes having more than one service per box. removing the alias from the loopback interface seems slow to converge, as zebra does not seem to be notified in real time of such events, but seems to have a periodic timer that looks at interface status. (Adding it back to the loopback has also had some issue, if the host route is already in the routing table from other hosts.) Looks like an expect script telneting to the ospfd and removing the network statement from the router ospf section is the best way, or is there some more elegant mechanism people use? Thanks

3 2

Re: Important changes to the .org tld today.
by neil＠DOMINO.ORG 05 Sep '03

05 Sep '03

> The .org zone file will continue to be pushed to the Verisign > nameservers for a short period of time. However due to the fact that > the UltraDNS nameservers publish and propagate zone changes globally > within 5 minutes, rather than the twice daily update schedule of the > Verisign nameservers, answers from the NSTLD.COM nameservers may be > out of date and inconsistent with the actual SOA for up to 24 hours > after a change is accepted by the Public Interest Registry (PIR.org) Hmm I thought this was NANOG and not MARKETINGPOINTLESSINFOOG ? Neil.

5 5

RE: SNMP OID's for BGP monitoring
by Austad, Jay 05 Sep '03

05 Sep '03

Doh, unfortunately, I'm on the 12.3 train, and that OID does not exist. I could have sworn that I saw some MRTG graphs awhile back where people were monitoring how many prefixes they had and other sorts of things. Were they scripting this somehow or pulling via SNMP? > -----Original Message----- > From: Jared Mauch [mailto:jared@puck.Nether.net] > Sent: Friday, September 05, 2003 10:27 AM > To: Austad, Jay > Cc: nanog(a)merit.edu > Subject: Re: SNMP OID's for BGP monitoring > > > If you are running 12.0(26)S you can now graph the number > of routes you receive from a BGP peer. > > Here's the OID for those that have long-awaited such a > feature. > > .1.3.6.1.4.1.9.9.187.1.2.4.1.1 > > Now why this is missing from their "newer" 12.2 and > 12.3 software > is something that you will need to ask your cisco rep. > > - Jared > > On Fri, Sep 05, 2003 at 10:23:29AM -0500, Austad, Jay wrote: > > > > What OID's are people using to monitor/graph BGP stats on > Cisco routers? > > > > -jay > > -- > Jared Mauch | pgp key available via finger from jared(a)puck.nether.net > clue++; | http://puck.nether.net/~jared/ My statements > are only mine. >

2 1

OT: Fiber or DS-3 access in Morgantown, West Virginia
by Michael K. Smith 05 Sep '03

05 Sep '03

Hello All: If anyone knows of a provider that has either DS-3 or Fiber access into Morgantown, West Virginia, if you would contact me off list I would appreciate it. Thanks, Mike -- Michael K. Smith NoaNet 206.219.7116 (work) 206.579.8360 (cell) mksmith(a)noanet.net http://www.noanet.net

1 0

FW: Important changes to the .org tld today.
by Bruce Beckwith 05 Sep '03

05 Sep '03

PIR was scheduled to announce to the NANOG list today, the relevant technical details that have already been noted by the UltraDNS note below. PIR would like to assure the community that we have worked very closely with VeriSign and IANA, and appreciate all of the support both have and continue to offer in this transition. Given the considerable planning and efforts involved in this transition, we do not expect any significant impacts to the community. If you have any questions, please feel free to contact me. Regards, Bruce Bruce W. Beckwith VP, Operations Public Interest Registry 1775 Wiehle Avenue Suite 102A Reston, VA 20190 v: +1 703.464.7005 x105 f: +1 703.783.8287 bbeckwith(a)pir.org -----Original Message----- From: Rodney Joffe [mailto:rjoffe@ultradns.com] Sent: Friday, September 05, 2003 9:03 AM To: NANOG Subject: Important changes to the .org tld today. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 During the root zone (.) update later today, specifically with root zone serial number 2003090501, the entries for .org will me modified. The current zone entry contains the following authoritative nameservers for the .org tld: org. 2D IN NS A7.NSTLD.COM. org. 2D IN NS L7.NSTLD.COM. org. 2D IN NS G7.NSTLD.COM. org. 2D IN NS F7.NSTLD.COM. org. 2D IN NS M5.NSTLD.COM. org. 2D IN NS TLD1.ULTRADNS.NET. org. 2D IN NS TLD2.ULTRADNS.NET. org. 2D IN NS J5.NSTLD.COM. org. 2D IN NS I5.NSTLD.COM. org. 2D IN NS C5.NSTLD.COM. org. 2D IN NS E5.NSTLD.COM. Effective with the 2003090501 load, the entry will reflect the removal of the Verisign NSTLD.COM nameservers. The zone entry will therefore contain the following only: org. 2D IN NS TLD1.ULTRADNS.NET. org. 2D IN NS TLD2.ULTRADNS.NET. If you have the 9 ??.NSTLD.COM nameservers cached or hard coded in any way, you may wish to flush your cache or modify your nameservers in the near future to avoid any inconsistent or stale data, and you may want to make your system administrators, NOCs and customer support groups aware of the changes. The .org zone file will continue to be pushed to the Verisign nameservers for a short period of time. However due to the fact that the UltraDNS nameservers publish and propagate zone changes globally within 5 minutes, rather than the twice daily update schedule of the Verisign nameservers, answers from the NSTLD.COM nameservers may be out of date and inconsistent with the actual SOA for up to 24 hours after a change is accepted by the Public Interest Registry (PIR.org) Any questions or concerns regarding this change should be directed to the PIR (http://www.pir.org) Sincerely, Rodney Joffe CTO and Chairman UltraDNS Corp. http://www.ultradns.com -----BEGIN PGP SIGNATURE----- Version: PGP 8.0.2 iQA/AwUBP1iJJEa3pZtqJ3OwEQJvwACdHkKdAW3TqDSpOJVoguhFAx0YebwAnAw9 c6fW3PeXcgvjwhvLIPaxRVEW =+m9c -----END PGP SIGNATURE-----

1 0

ChoiceOne issues today?
by Bob German 05 Sep '03

05 Sep '03

I've just had a couple of unrelated calls from choiceone DSL users unable to reach my network. Anyone work for ChoiceOne, contact me off list, or if anyone else has seen this issue today, say hey. Bob

1 0

OT: Alpharetta, GA fast turnup?
by Daryl G. Jurbala 05 Sep '03

05 Sep '03

Sorry for the OT post. I've got a customer who is trying to move their office 30 days form now and can't get BellSouth to commit to moving their T1 (of course). If anyone has any info of alternate means in the area for T1-ish access please contact me off list. Thanks, Daryl G. Jurbala BMPC Network Operations Tel: +1 215 825 8401 Fax: +1 508 526 8500 INOC-DBA: 26412*DGJ PGP Key: http://www.introspect.net/pgp

1 0