- Test - lists.nanog.org

RE: custom dialup kits
by Rowland, Alan D 30 Jul '02

30 Jul '02

Not sure what you're looking for here. Phone jack converters? Available at many airport gift shops and a Google search results in http://kropla.com/sources.htm Best regards, _________________________ Alan Rowland -----Original Message----- From: Miguel Mata-Cardona [mailto:mmata@sv.cciglobal.net] Sent: Tuesday, July 30, 2002 8:21 AM To: nanog(a)merit.edu Subject: custom dialup kits who make these kits nowaday? Had some contacts, but most of them are gone. URL or contact email will be very appreciated. -- Miguel Mata-Cardona Intercom El Salvador mmata(a)sv.intercomnet.net

1 0

Re: verio arrogance
by Ralph Doncaster 30 Jul '02

30 Jul '02

> (Apologies if this is flogging a dead horse, but some messages are worth > repeating, if for no other reason than to illustrate the down side of > not understanding the proper rationale for CIDR.) I thought the dead horse was the conclusion that small ISPs should use whatever means the ARIN rules allow in order to get PI space. Having used provider-assigned space for a couple years, I can firmly say it sucks. Even if I had to talk to every tier-1 to get my de-aggregates accepted, it would be MUCH less hastle than having PA IP space. And your suggestion has technical deficiencies as well. I have a leased line between Toronto and Ottawa, so I want to announce my Ottawa IPs to my Toronto transit provider as well as an Ottawa transit provider. And the reverse for the Toronto IPs. My understand is trying to punch holes in PA space is much more difficult than de-aggregating ARIN PI space. -Ralph

10 12

RE: redundancy [was: something about arrogance]
by John Ferriby 30 Jul '02

30 Jul '02

> You cannot as easily be held hostage. I have consulted for > a few ISPs and > have my share of war stories. > > Here's a (true!) example. One day, a certain head of a > fairly large ISP > decided that he wouldn't route traffic to or from IPs he had > assigned that > didn't reverse resolve because he felt it was imperative that > people be able > to find network contacts in this way (I think he got sick of > being the one to > get the abuse emails). He told my client three days before implementing a > sweep and filter. He had the equivalent of about 38 /24s from this ISP > distributed over about 180 customers, they were his sole uplink. [SNIP] Often overlooked is the redundancy in business processes. We tend to view events with an external-forces engineering perspective while frequently the culprits are uninformed decisions, knee-jerk reactions and opportunism by humans at our vendors. (Not to downplay other risks.) -John -- John Ferriby - PGP Key: www.ferriby.com/pgpkey

1 0

Re: OC-768 availability?
by blitz 30 Jul '02

30 Jul '02

I heard that as well, as well as holographic processing...can't remember who however, but Lucent (or whoever they are this week) or Nortel (presently circling the drain) come to mind.. At 19:53 7/29/02 -0700, you wrote: >Wasn't one of the major switch companies working on a system of bubbles. > <seriously> I'm not sure if it was foundry or Juniper or who but >someone was trying to route packets or rather switch packets in a device >at high speed by using bubbles to reflect and switch the light instead >of converting to electrons. > >On Mon, 29 Jul 2002, blitz wrote: > > > > > Seriously, I don't see OC768 coming online en masse until they get the > > kinks worked out of optical switching. The transit times are so short thru > > the innards, in the order of picoseconds, that electronics is way too slow > > to perform such mundane tasks like determining where a packet is supposed > > to go. > > Thus, all this will require optical computing to be available cheaply > and a > > lot more widespread than it is now. Cross your fingers and hope for a > > quantum breakthrough... > > OC192 is already pushing the limits of present technology. > > And add to that, the sorry state of the major players in telecom, and I > > don't think you'll see them willing to pony up an investment in something > > like that until it's well established. > > A typical egg/chicken situation...... > > > > > > > > At 16:10 7/29/02 -0700, you wrote: > > > > > > >Hello, > > > > > >I am currently running a network of cisco 2621s with the OC-192 NM for my > > >upstream connections. The internal network links are a mixture of K56Flex > > >modems and GRE tunnels. > > > > > >I am looking to upgrade to OC-768 real soon now and am wondering what the > > >prospects are for OC-768 availability on the 2621 platform. I've found > the > > >2621 to be rock-solid, except when I ping it, so I'd like to keep my > > >network on that platform if possible. > > > > > >In addition, if anyone knows the availability of OC-768 circuits between > > >the following cities I'd appreciate any fiber maps and an approximate > > >price range: > > >Ottawa, ON, CA > > >Midland, ON, CA > > >Goderich, ON, CA > > >Toronto, ON, CA > > >Compton, CA, US > > >Sealand > > > > > >At each site I plan to announce a /24 from a /20 I was allocated so if > > >everyone could please update their prefix filters now that would be great. > > > > > >Thank you. > > > > > >-- Dalph Roncaster > > > > > >Communicate in total privacy. > > >Get your free encrypted email at https://www.hushmail.com/?l=2 > > > > > >Looking for a good deal on a domain name? > > >http://www.hush.com/partners/offers.cgi?id=domainpeople > >

1 0

Qwest to Restate Earnings
by Allan Liska 30 Jul '02

30 Jul '02

http://story.news.yahoo.com/news?tmpl=story&u=/ap/20020729/ap_on_bi_ge/qwes… Not too much of a surprise. allan -- Allan Liska allan(a)allan.org

4 3

Looking for historical data
by Alif The Terrible 29 Jul '02

29 Jul '02

Does anyone know of any repository of snapshots of the global routing tables? I am specifically interested in tracking back to the first announcements of individual prefixes. Please respond off-list. Thanks. -- Yours, J.A. Terranson sysadmin(a)mfn.org

2 1

RE: OC-768 availability?
by Williams, Ken 29 Jul '02

29 Jul '02

hah 2621 rockin oc-192 are you for real? -----Original Message----- From: dalph(a)hushmail.com [mailto:dalph@hushmail.com] Sent: Monday, July 29, 2002 4:10 PM To: nanog(a)nanog.org Subject: OC-768 availability? Hello, I am currently running a network of cisco 2621s with the OC-192 NM for my upstream connections. The internal network links are a mixture of K56Flex modems and GRE tunnels. I am looking to upgrade to OC-768 real soon now and am wondering what the prospects are for OC-768 availability on the 2621 platform. I've found the 2621 to be rock-solid, except when I ping it, so I'd like to keep my network on that platform if possible. In addition, if anyone knows the availability of OC-768 circuits between the following cities I'd appreciate any fiber maps and an approximate price range: Ottawa, ON, CA Midland, ON, CA Goderich, ON, CA Toronto, ON, CA Compton, CA, US Sealand At each site I plan to announce a /24 from a /20 I was allocated so if everyone could please update their prefix filters now that would be great. Thank you. -- Dalph Roncaster Communicate in total privacy. Get your free encrypted email at https://www.hushmail.com/?l=2 Looking for a good deal on a domain name? http://www.hush.com/partners/offers.cgi?id=domainpeople

2 1

anyone have a genealogy of providers?
by k claffy 29 Jul '02

29 Jul '02

does anyone know of a concise genealogy of providers since 1990 (e.g., GTE + BBN begat GTE Internetworking; GTEI absorbed Genuity; GTE + BBN + Genuity + ... => Verizon; by ASes even better but we can do the mappings if needed) we're trying to integrate a little more semantic sanity to presentations of macroscopic infrastructure growth over time (notwithstanding the fact that semantic sanity in this space is a losing battle) and it would sure help to have the metabolic process codified in a single source. pointers muchly appreciated, k

1 0

RE: Bogon list or Dshield.org type list
by michael.dillon＠radianz.com 29 Jul '02

29 Jul '02

Having recently read David Moore's paper on backscatter analysis, http://www.caida.org/outreach/papers/2001/BackScatter/ this data is interesting because most of these filters seem to be blocking an amount of traffic proportional to their size. >Extended IP access list 120 (Compiled) > permit tcp any any established (243252113 matches) > deny ip 0.0.0.0 1.255.255.255 any (825328 matches) ^^^ ^^^^^^ The netmask is twice as large and it blocks twice the traffic as the following three blocks. > deny ip 2.0.0.0 0.255.255.255 any (413487 matches) > deny ip 5.0.0.0 0.255.255.255 any (410496 matches) > deny ip 7.0.0.0 0.255.255.255 any (413621 matches) > deny ip 10.0.0.0 0.255.255.255 any (1524547 matches) RFC 1918 space is different from the rest. <some deleted to save space> > deny ip 72.0.0.0 7.255.255.255 any (3300703 matches) ^^^ ^^^^^^^ Eight times as big blocks eight times as much traffic <some deleted to save space> > deny ip 224.0.0.0 31.255.255.255 any (13165320 matches) And the relationship holds even up here in the multicast range. However, since you are seeing this on your ingress filters, this can't be backscatter. It must be incoming attack traffic and since the traffic is evenly distributed over the entire IPv4 address space, you can calculate how much attack traffic is still getting through by adding up the amount of IPv4 address space that you aren't filtering. If you would look at the destination IP addresses from some of the netblocks in the above list, then you could identify which of your machines (or your customer machines) are being attacked. This now provides enough information to identify attack traffic close to its source. If you would publish the destination addresses and time periods of the attacks then other people could look in their netflow data for traffic from bogon addresses to your destination. A central repository like dshield.org for this data would be interesting. Other than for idle curiosity, I think this is interesting because there is the real possibility of being able to identify an attacker and victim soon enough after an attack begins that the victim could issue legal warnings to the attacker and possibly follow up in the courts. I would think that after a few well-publicised cases, the owners of compromised machines used to initiate DDOS attacks will begin to secure their machines the way they should have in the first place. -- Michael Dillon

4 3

Any people still with old filters?
by Roy 29 Jul '02

29 Jul '02

In a recent discussion with a company that owns a /16 and has it broken down further, the statement was made that there are ISPs that filter routes at /16 in what was traditional class B space. The example cited was Verio. Verio web pages state they don't do this any more (the filter is /21). Is there anyone that still filters routes longer than /8 and /16 in the traditional Class A and B space?

5 5