- Test - lists.nanog.org

Re: Readiness for IPV6
by Joe St Sauver 09 Jul '02

09 Jul '02

And of course in the American higher education space, IPv6 traffic handling was one of the factors that motivated the selection of Juniper's T640's for the next generation of the Abilene/Internet2 backbone (see: http://archives.internet2.edu/guest/archives/I2-NEWS/log200204/msg00003.html) Related to that, a growing number of Internet2 connectors now do native IPv6 peering with the Abilene backbone (rather than tunnelling their v6 connectivity), including NYSERnet, the Pittsburgh Gigapop, Great Plains, WiscNet, 6Tap, CUDI, ANS, MAX, Surfnet, and APAN. (see, for example: http://listserv.indiana.edu/cgi-bin/wa?A2=ind0207B&L=abilene-ops-l&P=R2) Regards, Joe

2 1

AS11443 / OLM-03 / 216.71.0.0/17 unreachable
by Ingo Flaschberger 09 Jul '02

09 Jul '02

Hi over 4 hours the netblock 216.71.0.0/17 was not reachable. currently it works again (ober bbn-planet) OLM LLC (ASN-OLM) 3080 Ogden Ave Lisle, IL 60532 US before it was reachable over this paths (fom ris: http://www.ripe.net/ripencc/pub-services/np/ris/rrc05.html) 216.71.0.0/17 2002-07-09 07:43:20202.12.28.190 4777 2516 701 1 11443 216.71.0.0/17 2002-07-06 10:48:35 212.20.151.234 13129 6461 701 11443 216.71.0.0/17 2002-07-07 05:29:54 193.0.0.56 3333 9057 3549 11443 11443 at the routeserver of bbnplanet (genuity) the network was also not in bgp-table. gblx said, the the circuit to OLM was definitly down. reason unkown. does sbdy know more information about this? bye, Ingo Flaschberger -- we own the fibre; 09.06.1998 illiad

1 0

AS number inconsistencies
by Marwan Fayed 09 Jul '02

09 Jul '02

Hi All, This is my first post to this list so please forgive me if it's in any way inappropriate, and as I know everyone has work to do, I'll try to be brief. I am a CS PhD student trying to track ASes (for reasons I'm happy to discuss offline). There is a grave inconsistency I have come across and can't explain. Simply, there seems to be many AS numbers in the non-private range that come into use at some point in time and advertise a range of IPs, but these AS numbers are not allocated until much later. More specifically, archived BGP tables show many AS numbers which ARIN shows not to have allocated (in their allocation history tables) until many months, sometimes a year/two, later. The number of such ASes has shrunk over time (from about 100 in 1999/2000 to 20-30 in 2002) but still exists. I don't want to "name ASes" <grin>. Does any one have any explanations? Are network operators "notified" of their new AS number well in advance of the actual receipt of that number on paper, for example? Any help is appreciated (and hopefully this occurence is of interest to nanog). Thanks, --marwan ps. If one wishes to refer to a cluster of members of nanog, are they referred to as "NANOs"? (Not to be confused with the salutation made famous by tv's Mork & Mindy, of course) :-) ******************************************************** "Theatre is not supposed to change the world, but it can show the world can change." --unnamed director ********************************************************

8 8

Re: Readiness for IPV6
by Rizzo Frank 09 Jul '02

09 Jul '02

Alif The Terrible wrote: > Afraid not. How about you? Good to hear, Jerry. Have you forged any checks in the past, or are the guys on usenet full of it? Frank Rizzo

3 2

Re: Bogus bogon?
by Rob Thomas 08 Jul '02

08 Jul '02

Hi, John. ] 192.88.99.0/24 which is the 6to4 anycast network. Do we really want to be ] filtering that prefix? Good question. I'm re-reading RFC 3068 now, and the RFC appears to allow for the advertisement of this prefix into the global table. I'm wondering if this is wise, however. It seems this prefix would best be used internally. What do others think? Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

3 2

Prefix delta
by Rob Thomas 08 Jul '02

08 Jul '02

Hi, NANOGers. I received a suggestion to graph the changes in the number of prefixes in the Internet routing table. I have put together a simple page that provides this data, updated every five minutes. http://www.cymru.com/BGP/deltapref.html This is a very simple text page. It will be replaced by a graph as soon as I have the time to configure RRDTool. :) This data is based on my nine BGP peering sessions. If you would like to be peer number ten (or eleven, or twelve...), feel free to ping on me. I have forgotten who made this suggestion, so I am not able to give proper credit. To whomever you are - thanks. :) Thanks, Rob. -- Rob Thomas http://www.cymru.com ASSERT(coffee != empty);

1 0

Re: WorldComm Fiber Cut????
by Internet Guy 08 Jul '02

08 Jul '02

HHHMMM... Very interesting. Someone who believes what a carrier really tells them. If you go to the MFN homepage & click on the graphs listed below, then you might see that possibly the data being displayed is both inaccurate, as well as misleading. Go to SJC OC3 Los Angeles, to OC192 SJC3 to SJC4, to OC12 MaeW ATM, OC48 # 2 for IAD to NYR, IAD # 2 to PAIX VA OC48, DCA2 to DFW2 OC48, PAIX OC12 to Core1.sjc, NPA - DS3 to San Jose, LGA1 OC192#2 to IAD, LGA1 OC48 to Chicago, NYC Backbone OC192 to LGA2, NYC Backbone OC48 # 2 to core3.lga1, ETC... Each one of these graphs shows abnormalities in the flow of internet data, such as "pits", spikes, square wave function graphs, clipping on some waveforms, etc. This is not limited to MFN. I have observed this on other similiar types of Sundry network data collection systems. It is not easy to see HOW BAD the problem is with these Sundry data collection systems, UNTIL you expand the MRTG graph. Once this is done, then you can really see how bad the integrity of the collected data really is. A small MRTG graph really masks the problems associated with the data which is being displayed. With a larger graph, you definately see the problems associated with todays Sundry systems. As there is no way to really verify the QUALITY or INTEGRITY of the data being displayed, then I submit as fact, that what is being shown here is really in a grey area, at best. So who really knows how correct, the data which is being displayed on the MFN home page is really is ? Cause with the clipping, spiking, pits, & squarewave graphs, small graphing scale being shown, definately, I have my doubts ... One would also wonder, that if this data collection system is used by MFN to generate bills for customers of MFN who are charged by the Megabyte, what these customers bills look like & HOW accurate these bills really are... Regards, Mike Martin. >From: "Pawlukiewicz Jane" <pawlukiewicz_jane(a)bah.com> >To: "nanog(a)merit.edu" <nanog(a)merit.edu> >Subject: Re: WorldComm Fiber Cut???? >Date: Mon, 08 Jul 2002 10:52:18 -0400 > > >MFNs status page is: > >http://www.mfn.com/network/ip_networkstatus.shtm#sjc > >Jane > >Sean Donelan wrote: > > > > On Sun, 7 Jul 2002, Gerardo A. Gregory wrote: > > > Can someone from WorldComm please verify a fiber cut that happened >today at > > > around 11:30 am (Central). I have bveen informed that a fiber cut in > > > Illinois (or Indiana) has been in effect (until just a few minutes) >for all > > > of the afternoon and most of the evening. > > > > Worldcom is reporting a problems near Chicago. Earthlink is reporting > > problems affecting its customers in Indiana, Illinois, Iowa, Michigan, > > Wisconsin and Ohio. > > > > http://help.mindspring.com/netstatus/ > > http://www.noc.uu.net/ > > > > Cable & Wireless is showing delays out of Cleveland, Ohio > > > > http://sla.cw.net/ > > > > AT&T and Sprint aren't reporting any problems. > > > > http://ipnetwork.bgtmo.ip.att.net/index.html > > http://www.sprint.net/ > > > > MFN's and PSI's network status pages have stopped working for me, so I > > don't know if they are having problems. > > > > http://www.above.net/html/techlog.txt > > http://www.psi.net/cgi-bin/netstatus.pl5 _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com

5 4

RE: WorldComm Fiber Cut????
by James Smith 08 Jul '02

08 Jul '02

Ah, but she didn't say she believed it. Just said where the data was... Do we really need to verify what it shows? At best, it shows that they have spotty reporting. At worst, it shows rather severe reliability problems. Take your pick... James H. Smith II NNCDS NNCSE First Call Response Center Professional Services - Network Engineer The Presidio Corporation > -----Original Message----- > From: Internet Guy [mailto:internetguy205@hotmail.com] > Sent: Monday, July 08, 2002 12:22 PM > To: nanog(a)merit.edu > Subject: Re: WorldComm Fiber Cut???? > > > > HHHMMM... Very interesting. Someone who believes what a > carrier really > tells them. > > If you go to the MFN homepage & click on the graphs listed > below, then you > might see that possibly the data being displayed is both > inaccurate, as well > as misleading. > > Go to SJC OC3 Los Angeles, to OC192 SJC3 to SJC4, to OC12 > MaeW ATM, OC48 # 2 > for IAD to NYR, IAD # 2 to PAIX VA OC48, DCA2 to DFW2 OC48, > PAIX OC12 to > Core1.sjc, NPA - DS3 to San Jose, LGA1 OC192#2 to IAD, LGA1 > OC48 to Chicago, > NYC Backbone OC192 to LGA2, NYC Backbone OC48 # 2 to > core3.lga1, ETC... > > Each one of these graphs shows abnormalities in the flow of > internet data, > such as "pits", spikes, square wave function graphs, clipping on some > waveforms, etc. > > This is not limited to MFN. I have observed this on other > similiar types of > Sundry network data collection systems. > > It is not easy to see HOW BAD the problem is with these Sundry data > collection systems, UNTIL you expand the MRTG graph. Once > this is done, > then you can really see how bad the integrity of the > collected data really > is. A small MRTG graph really masks the problems associated > with the data > which is being displayed. With a larger graph, you > definately see the > problems associated with todays Sundry systems. > > > As there is no way to really verify the QUALITY or INTEGRITY > of the data > being displayed, then I submit as fact, that what is being > shown here is > really in a grey area, at best. > > So who really knows how correct, the data which is being > displayed on the > MFN home page is really is ? > > Cause with the clipping, spiking, pits, & squarewave graphs, > small graphing > scale being shown, definately, I have my doubts ... > > One would also wonder, that if this data collection system is > used by MFN to > generate bills for customers of MFN who are charged by the > Megabyte, what > these customers bills look like & HOW accurate these bills > really are... > > Regards, > > Mike Martin. > > >From: "Pawlukiewicz Jane" <pawlukiewicz_jane(a)bah.com> > >To: "nanog(a)merit.edu" <nanog(a)merit.edu> > >Subject: Re: WorldComm Fiber Cut???? > >Date: Mon, 08 Jul 2002 10:52:18 -0400 > > > > > >MFNs status page is: > > > >http://www.mfn.com/network/ip_networkstatus.shtm#sjc > > > >Jane > > > >Sean Donelan wrote: > > > > > > On Sun, 7 Jul 2002, Gerardo A. Gregory wrote: > > > > Can someone from WorldComm please verify a fiber cut > that happened > >today at > > > > around 11:30 am (Central). I have bveen informed that > a fiber cut in > > > > Illinois (or Indiana) has been in effect (until just a > few minutes) > >for all > > > > of the afternoon and most of the evening. > > > > > > Worldcom is reporting a problems near Chicago. Earthlink > is reporting > > > problems affecting its customers in Indiana, Illinois, > Iowa, Michigan, > > > Wisconsin and Ohio. > > > > > > http://help.mindspring.com/netstatus/ > > > http://www.noc.uu.net/ > > > > > > Cable & Wireless is showing delays out of Cleveland, Ohio > > > > > > http://sla.cw.net/ > > > > > > AT&T and Sprint aren't reporting any problems. > > > > > > http://ipnetwork.bgtmo.ip.att.net/index.html > > > http://www.sprint.net/ > > > > > > MFN's and PSI's network status pages have stopped working > for me, so I > > > don't know if they are having problems. > > > > > > http://www.above.net/html/techlog.txt > > > http://www.psi.net/cgi-bin/netstatus.pl5 > > > > > _________________________________________________________________ > Chat with friends online, try MSN Messenger: http://messenger.msn.com >

1 0

rewars/benefit bogon filters
by jnelson 08 Jul '02

08 Jul '02

Looking for some statisitcs from some dataminers out there.... Bogon lists? How effective are they? DDoS scripts are abundant to those who seek them. Am I going to reep any rewards by taxing my edge routers an extra 25 lines of ACL? Who out there has some stats I can look at? And by posting this, am I diminishing its value? ....provide..comment...Best practice? jnull PGP: 0x54B1A25C "!!!!!" It's the little things ....

3 2

Re: Internet vulnerabilities
by Mike Tancsa 08 Jul '02

08 Jul '02

Well, the recent jumbo AS path issue had an interesting effect of resource starvation on a few routers. Still, I think the softest targets are the root name servers. I was glad to hear at the Toronto NANOG meeting that this was being looked into from a routing perspective. Not sure what is being done from a DoS perspective. ---Mike At 01:56 PM 04/07/2002 -0400, Jason Lewis wrote: >There is a lot of news lately about terrorist groups doing recon on >potential targets. The stories got me thinking. > >What are the real threats to the global Internet? > >I am looking for anything that might be a potential attack point. I don't >want to start a flame war, but any interesting or even way out there idea >is welcome. > >Is it feasible that a coordinated attack could shutdown the entire net? I >am not talking DDoS. What if someone actually had the skills to disrupt >BGP on a widescale? > >jas

17 30