- Test - lists.nanog.org

Odd DNS responses for www.neopets.com
by Stephen Milton 07 Feb '03

07 Feb '03

Maybe it's just me, but isn't there something odd about a DNS query coming back with 78 entries for the same host? It sends back an UDP packet that gets truncated and the DNS resolver reverts to TCP to get the full list. It seems to cause problems with Windows clients and/or Windows DNS servers. Seems like overkill. Here is a dig on www.neopets.com: ;; Truncated, retrying in TCP mode. ; <<>> DiG 9.2.1 <<>> www.neopets.com @ns2.neopets.com ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34814 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 78, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION: ;www.neopets.com. IN A ;; ANSWER SECTION: www.neopets.com. 1582 IN A 198.172.122.97 www.neopets.com. 1582 IN A 198.172.122.98 www.neopets.com. 1582 IN A 198.172.122.101 ... many lines deleted ... www.neopets.com. 1582 IN A 198.172.122.194 www.neopets.com. 1582 IN A 198.172.122.196 www.neopets.com. 1582 IN A 198.172.122.197 ;; AUTHORITY SECTION: neopets.com. 2434 IN NS ns1.neopets.com. neopets.com. 2434 IN NS ns2.neopets.com. ;; Query time: 53 msec ;; SERVER: 198.172.121.14#53(ns2.neopets.com) ;; WHEN: Wed Feb 5 16:42:45 2003 ;; MSG SIZE rcvd: 1349 -- Stephen Milton - Vice President (425) 881-8769 x102 ISOMEDIA.COM - Premium Internet Services (425) 869-9437 Fax milton(a)isomedia.com http://www.isomedia.com

7 8

Re: Cascading Failures Could Crash the Global Internet
by Danny McPherson 06 Feb '03

06 Feb '03

RFC 3439 talks of coupling & amplification and it's relation to the Internet. -danny > > > Sigh, there are differences between tightly coupled networks, such as > the electric power grid and loosely couple networks like the Internet. > But there are also some similarities, such as electric grids use DC > interconnections to limit how far AC disturbances propagate; the > Internet uses AS interconnections to limit IGP disturbances from > propagating. > > http://sci.newsfactor.com/perl/story/20686.html > > The actual article requires payment to read > http://ojps.aip.org/getabs/servlet/GetabsServlet?prog=normal&id=PLEEE800006… >

1 0

Feds pull suspicious .gov site
by blitz 06 Feb '03

06 Feb '03

> > >Forwarded from: William Knowles <wk(a)c4i.org> > >http://news.com.com/2100-1023-983384.html > >By Declan McCullagh >Staff Writer, CNET News.com >February 5, 2003 > >WASHINGTON--In a move that raises questions about the security of >governmental domains, the Bush administration has pulled the plug on a >.gov Web site pending an investigation into the authenticity of the >organization that controlled it. > >Until recently, visitors to the AONN.gov Web site were treated to a >smorgasbord of information about an agency calling itself the Access >One Network Northwest (AONN), a self-described cyberwarfare unit >claiming to employ more than 2,000 people and had the support of the >U.S. Department of Defense. > >No federal agency called AONN appears to exist, and no agency with >that name is on the official list of organizations maintained by the >U.S. National Institute of Standards and Technology. > >The General Services Administration (GSA), which runs the .gov >registry, pulled the domain on Jan. 24, after a query from CNET >News.com. > >"There are questions about the authenticity of the Web site that >includes the AONN name," the agency said in an e-mail reply. "Until >the situation is resolved, we have eliminated the URL from the .gov >directory name server." > >The action could point to the first case of a .gov domain name >hijacking. > >The GSA investigation raises questions about the integrity of federal >Web sites at a time when the Bush administration is touting electronic >government initiatives. President Bush signed the E-Government Act of >2002 in December, and the IRS in January began a program to encourage >Americans to file their taxes electronically. > >Cybersquatting, or registering a domain to which you may not be >entitled, is hardly uncommon among the multitude of .com and .net >domains. In 1999, President Bill Clinton signed an anticybersquatting >law, and an alternate process through which domain names can be >challenged has resulted in more than 11,000 domain names being >transferred away from the parties who had registered them. > >But there are no known cybersquatting incidents involving a >governmental domain, according to the GSA. "I'm not aware of any >incident" in the past when an unapproved individual has gained control >of a .gov domain name, an agency representative said. > >Chris Casey, who in 1995 helped to create Congress' first Web sites >and now runs a Web design company called Casey.com, says he was >surprised to hear that AONN had apparently secured a .gov name, and >said a misappropriated .gov domain could create confusion among Web >users. > >"I'm not aware of it ever happening before," Casey said. ".gov, .edu >and .mil carry a feeling of trustworthiness...People have learned to >place more faith in them." > >AONN's background > >Claiming credit for the deleted .gov site is a man who calls himself >Robert L. Taylor III, whose name and contact information appeared in >documents on the AONN.gov site. > >Taylor, who appears to reside near Everett, Wash., declined to explain >how, exactly, he secured a .gov domain for the group, calling AONN's >operations "classified." > >"We have exploited a security hole in the bureaucracy," Taylor said in >a telephone interview. "There are loopholes, there are security holes, >there are holes in the system." > >On its now-deleted site, AONN contended its "U.S. Defense Security >Intelligence Network" (DSIN) was launched at Harvard University's John >F. Kennedy School of Government last year, but Doug Gavel, the Kennedy >School's communications director, says he's not aware of any such >program. Similarly, AONN said its champion in Congress is Rep. Jay >Inslee, D-Wash., whose office categorically denies it. A Senate Budget >Committee representative said he had never heard of AONN. > >A Pentagon representative also said that AONN has no affiliation with >the U.S. military and he had no knowledge of the organization. > >It's unclear when the site was first registered or how Taylor may have >taken control of a .gov domain. According to the official .gov >registration rules, only organizations that appear in an official list >of government agencies qualify for a .gov domain--and AONN is not on >it. If AONN were a legitimate Defense Department agency, it would have >to register a .mil--rather than a .gov--domain name. > >One loophole exists for city and state governments, which were allowed >to register .gov domains before the current rules took effect in May >1997. Such registrations are no longer permitted. But local and state >governments with existing sites, such as the state of California's >ca.gov, were allowed to keep them. > >Registering a .gov domain name involves writing an authorization >letter--two samples are provided on the GSA Web site--printing it out, >and then sending it to the ".GOV Domain Manager" in Reston, Va. The >GSA would not comment on what security measures were in place, and >what changes, if any, have been made. > >The GSA's safeguards don't provide foolproof security, says Adrian >Lamo, a hacker and social engineer who claims to have penetrated >computer systems run by The New York Times and a string of other >corporations. > >"The process isn't intended to stop anyone who isn't going to be >stopped by the need to go to Kinko's, print out some letterhead and >then send an honest-to-God postal letter," Lamo said. "It'll stop the >people that are willing to break any rule, as long as they can fill >out a Web form to do it. And that eliminates 95 percent of pranks." > >If someone expressed interest in AONN, Taylor would send them a >122-page PDF file containing buzzwords such as "computer intrusion >teams, "beyond state-of-the-art super computing... next level >broad-range security systems, cyber warfighting, highly advanced >satellite technologies and nano-technologies." It described AONN as a >"joint-counterstrike force (that) possesses such a culmination of some >of the world's brightest and most brilliant intellect, intelligentsia, >academicians and minds, it can quite easily be said that the AONN DSI >concept by itself is worth multibillions." > >A notice on AONN.gov offered to "split payment on contract >disbursements" with its fund-raisers. Taylor also offered this deal to >potential buyers: "You come up with fifty million dollars and we'll >sign contracts as well as deliver both human assets and the DSIN >program." > >Taylor would not say if he had collected any money from corporations >and individuals as a result of these offers. > >Besides claiming to be a military intelligence agency, AONN also said >it has an "emerging and expensive clothing line" and an urban and R&B >record label that has signed "certified platinum artists." In November >2000, a company named AONN Records released a CD called November 12 >Projekt that a local newspaper described as a collaboration of "two >ambitious young rappers." > >Taylor said that that AONN.gov and AONN Records are the same. > >No company named AONN Records or Access One Network Northwest is >listed with directory assistance, and the Washington state government >has no record of a company with either name being incorporated. > >AONN Records' CD release appears to have been distributed by The >Orchard, which provides a vehicle for independent musicians to sell to >online stores such as Amazon.com and CDNow.com. The Orchard could not >locate AONN Records or Robert Taylor in its files. A representative >said that would be the case if The Orchard no longer carried the >November 12 Projekt CD. > >One document Taylor distributed from his Hotmail account this week, >called a "Special Projects Dossier," lists excerpts from job >applications apparently sent to him by intelligence officers seeking >employment. > >"Some have suggested it is a spoof by a rock group who has misused the >aonn.com and aonn.gov registrations," a representative for the >Association of Former Intelligence Officers said this week. "How they >obtained the (top-level domain) of .gov is baffling and shows a flaw >in the registration system that could create greater mischief in other >hands."

1 0

South Asian Network Operators Group (SANOG) mailing list
by Joe Abley 06 Feb '03

06 Feb '03

[apologies if you get two copies of this; the first one didn't seem to go out for some reason] The South Asian Network Operators Group (SANOG) held their first meeting in Kathmandu, Nepal, a few weeks ago. By any standards the meeting was a great success, and plans are already being made for another one. A mailing list for discussing operational issues in South Asia has now been set up. Those on the NANOG list who are interested in finding out about (and assisting with) the development of infrastructure in other regions might like to subscribe. To subscribe to the SANOG list, send mail to sanog-request(a)sanog.org with the word "subscribe" in the subject or the body of the message. > SANOG - South Asian Network Operators Group > > As data networks has grown around the world, we are taking the > initiative for a South Asian Network Operators Group (SANOG). This is > in line with established practices like NANOG in North America, RIPE > NCC Meetings in Europe and APRICOT in Asia. The meeting will provide a > regional forum to discuss operational issues and technologies closer > home for data operators in the South Asian Region. > > SANOG I, held in Nepal was a success, and SANOG II will be held in Sri > Lanka, dates for which will be announced in early March. > > SANOG I > > SANOG I, the first meeting of the group took place in Kathmandu, > Nepal, on 23-28 January, 2003. To make the organization easier, the > first meeting was held in conjuction with the CAN IT Conference 2003, > which is a national IT conference organzied by Computer Association of > Nepal since 2001. The themes for this year's conference included > operational technologies as an inherent part, to facilitate the > organization of SANOG I. > > The agenda for the first meeting of SANOG was to establish the > procedure for future meetings and gathering a consensus for such a > group. Apart from the meeting itself, during the six day event, there > were tutorials and talk on current and future operational > technologies. > > To post to the SANOG mailing list, please email sanog(a)sanog.org. If > you wish to get the list in digest form (i.e. all the messages over > the past 24 hours), send a email to sanog-request(a)sanog.org with the > subject of "set digest"

1 0

Need operational experience re several pieces of equipment
by Timothy R. McKee 05 Feb '03

05 Feb '03

Please reply off-list, I will summarize if there is any interest. I have a client that is looking to use an inexpensive FastEthernet over DS3 bridge solution for one of their clients. I quickly located two bridges/switches that do this, a) RAD's RIC-T3/ETH and b) DS3SWITCH.COM's line. Do any of you have any operational/reliability comments on either of these boxes or do you know of any other boxes that I didn't find that perform this function? Again, please reply off-list. Many thanks for you time and trouble, Tim McKee

1 0

Average Based Billing
by Lynn Bashaw 05 Feb '03

05 Feb '03

All, Thanks for your comments. There were a couple of instances of an average based billing scheme, but for the most part the comments did not indicate this to be a wide-spread practice. I was interested in the question due to a claim by a potential customer that billing on their current transit links with some other carriers was based on average utilization (specific definition undefined) rather than billing based on a 95th percentile value of some set of samples. I had not heard of this trend and wanted make sure I wasn't missing anything. Thanks again for the feedback and insight. Lynn -----Original Message----- From: Lynn Bashaw Sent: Wednesday, February 05, 2003 11:35 AM To: 'nanog(a)merit.edu' Subject: Does anyone on the list know of any ISPs that bill based on average utilization, rather than some variation of 95th percentile? Thanks Lynn Bashaw Director, Network Engineering Yipes Enterprise Services 2000 S. Colorado Blvd. Denver, CO 80222

1 0

(no subject)
by Lynn Bashaw 05 Feb '03

05 Feb '03

Does anyone on the list know of any ISPs that bill based on average utilization, rather than some variation of 95th percentile? Thanks Lynn Bashaw Director, Network Engineering Yipes Enterprise Services 2000 S. Colorado Blvd. Denver, CO 80222

8 7

issues with sprint in chicago?
by Eric Whitehill 05 Feb '03

05 Feb '03

Is there anyone else out there that seems to be reporting issues with sprint in chicago? In the last hour, i've had 1/2 dozen customers seeming to be calling with issues across some stuff in chicago. Trying to see if this is a sprint problem or a my problem. Thanks! -Eric

1 0

RE: your mail
by Bill Woodcock 05 Feb '03

05 Feb '03

On Wed, 5 Feb 2003, Koepp, Karsten wrote: > Volume usually totals in+out, whereas average does max(in,out) > divided by time intervals. Well, not to be nit-picky, but that wouldn't strictly be averaging, then. To get back to the question at hand, another scheme that I'm seeing more prevalent lately is dual-bin, where local traffic is flat-rate, and international traffic is measured-rate (i.e. billed per-bit). That's relatively easy to do in a simple satcom-up sort of network, since you just bill by netflow accounting on the satcom interface. There's been a really good discussion of these sorts of billing methods going on on the NordNOG list over the past two weeks, and we'll be having a panel discussion on billing methods at the NordNOG meeting next week. -Bill

1 0

Network Operations "Metrics"
by Pete Kruckenberg 05 Feb '03

05 Feb '03

CEO's are judged by their company's profitability, long-term growth, efficiency, etc. Students are judged based on quizes, reports, mid-terms and finals. The economy is tracked by tracking individual sectors, quarter-to-quarter and year-over-year performance, unemployment, interest rates, etc. What metrics are used to measure networks and network operators? What "micro" measurements (the equivalent of tracking travel expenses or cost-of-sales to ensure overall profitability) are used to ensure good macro-level (up-time, network reliability, application performance, happy customers)? What systems/processes do you use to track all of this information, and associate it to overall business success? Thanks. Pete.

7 6