- Test - lists.nanog.org

Re: Sprint peering policy
by ren 29 Jun '02

29 Jun '02

Perhaps broadband in the UK is different than in the US, but I can tell you peering around the legacy networks has made a huge difference at the network I peerlead for. Customers are getting smart and have come to discover 'Tier 1' is an empty status. Networks evolve and traffic sources/destinations shift. Hunt for the growing traffic, not just a network brand that may be in need of a facelift. Steve, I hope you/Opal Telecom are looking into the Adlex tools. Play with the traffic tracker and find out who is in your top 10, top 20, etc. circles at different times of the day/week. Chase the band between 20&30 and see what a difference you can make in terms of performance for your network. It is amazing how quickly you can discover that some networks are out there under multiple ASNs (legal and other reasons prevail) and when peered with that 'entity' you can punt a former top 10 down a band. Adlex, while expensive, can help prove your theory is inaccurate. Adlex has paid for itself in just a matter of months from my perspective <G> -ren At 10:37 AM 6/29/2002 +0100, Stephen J. Wilcox wrote: >"Peering around" only works if the networks the broadband provider wants to >reach are buying from another network that they can get peering with, as most >tier1's have similar i'll call it 'fascist' peering regimes they will not be >able to peer around. > >They will of course be able to get peering with smaller providers but >these are >individually small gains.. > >Steve

1 0

Re: Sprint peering policy
by Vijay Gill 29 Jun '02

29 Jun '02

"Daniel Golding" <dgolding(a)sockeye.com> writes: > One is, Sprint won't peer with you. I'm not even sure who you work for, but > rest assured, they will not peer with you. Time spent on this might be > better utilized reading some of Bill Norton's excellent intro to peering Dan, if you are a peer of sprint and I use the word peer as in: 1 : one that is of equal standing with another : EQUAL; especially : one belonging to the same societal group especially based on age, grade, or status then I am sure things can happen. Keeping the above definition of peering in mind, and not the current accepted definition of what "peering" means, things suddenly become crystal clear. vijay "time to put back the peer in peering" gill

4 3

The Cidr Report
by CIDR Report 29 Jun '02

29 Jun '02

This is an auto-generated mail on Fri Jun 28 23:00:01 PDT 2002 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amount of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 28Jun02 0) General Status Table History ------------- Date Prefixes 210602 111582 220602 111717 230602 111670 240602 111786 250602 111981 260602 111996 270602 111954 280602 111076 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 13191 Number of ASes announcing only one prefix: 8060 (4540 cidr, 3520 classful) Largest number of cidr routes: 623 announced by AS701 Largest number of classful routes: 1237 announced by AS701 1) Gains by aggregating at the origin AS level --- 28Jun02 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1097 846 251 22.9% Telstra Pty Ltd AS701 1237 989 248 20.0% UUNET Technologies, Inc. AS17557 298 112 186 62.4% Pakistan Telecom AS6595 204 58 146 71.6% DoD Education Activity Network As AS7018 808 677 131 16.2% AT&T AS852 479 352 127 26.5% Telus Advanced Communications AS16473 193 75 118 61.1% Bell South AS4151 237 142 95 40.1% USDA AS19632 98 4 94 95.9% Metropolis Intercom S.A. AS1239 523 430 93 17.8% Sprint AS12302 123 30 93 75.6% MobiFon S.A. AS7303 159 68 91 57.2% Telecom Argentina Stet-France Tel AS7046 325 236 89 27.4% UUNET Technologies, Inc. AS16814 105 20 85 81.0% NSS, S.A. AS226 176 92 84 47.7% Los Nettos AS2048 182 104 78 42.9% State of Louisiana AS4755 205 132 73 35.6% Videsh Sanchar Nigam Ltd. Autonom AS577 262 190 72 27.5% Bell Advanced Communications Inc. AS4323 408 339 69 16.9% Time Warner Communications, Inc. AS3464 164 103 61 37.2% Alabama SuperComputer Network AS19834 64 4 60 93.8% NetForce, Inc. AS10620 83 23 60 72.3% TVCABLE BOGOTA AS724 216 157 59 27.3% DLA Systems Automation Center AS6123 70 13 57 81.4% Web Professionals AS3908 310 253 57 18.4% Supernet, Inc. AS209 315 258 57 18.1% Qwest AS16758 63 6 57 90.5% IKON Office Solutions AS1 444 388 56 12.6% GENUITY AS9051 81 26 55 67.9% INCONET Autonomous System AS9498 80 27 53 66.2% BHARTI BT INTERNET LTD. Total 54876 42309 12567 22.9% For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: How important is IM? was RE: How important is the PSTN
by Roger Marquis 29 Jun '02

29 Jun '02

Rizzo Frank <frank.rizzo(a)ghettocolo.com> wrote: > By "IM" I assume you're referring to Instant Messaging as an ideal, not > any particular protocol or vendor implementation. Which begs the > question, is "IM" is a risk IM has been a risk since it was introduced as the Unix `talk` program. Responsible corporate security policy should at least address it. Many such policies, including some I wrote after this post, have forbidden IM for some time now. <http://groups.google.com/groups?hl=en&lr=&ie=UTF-8&selm=_jfe4.1731%24T01.55…> Whether blocking IM is a prudent strategy at your organization depends on the value of the data "messaged", the IM application, and routing of IM packets. In common use IM does expose many organizations to a non-trivial risk of corporate espionage. -- Roger Marquis (ex-CSO) Roble Systems Consulting http://www.roble.com/

4 3

Re: How important is IM? was RE: How important is the PSTN
by Steven M. Bellovin 29 Jun '02

29 Jun '02

In message <Pine.GSO.4.40.0206282129130.7026-100000(a)clifden.donelan.com>, Sean Donelan writes: > > >Despite what security people say, if you are going to use e-mail, the web >or IM, the question is how can you do it safely? Heck, I read a recent >article how even the US military is starting to use a version of IM for >its battlefield coordination of activity. > While "just say no" sometimes applies, competent security understand the concept of "business need". You're absolutely right about this: > So instead of just saying no, how about coming up with same ways to > solve the how to do it securely. --Steve Bellovin, http://www.research.att.com/~smb (me) http://www.wilyhacker.com ("Firewalls" book)

1 0

IDS experience's
by Brandon Knicely 28 Jun '02

28 Jun '02

IDS's have been around awhile but recently became interested in their usefulness. I was wondering if I could get some group feedback on the following: 1. How many folks have actually deployed either a NID, NNID or HID system? 2. Have they been useful or just generated noise and excess cycles? (1 - waste of time, 10 - water walker) 3. Any 'real-world' comparative/useful data and/or opinion on different approaches...ie pattern matching, anomoly detection and/or data mining approaches? 4. Any feedback on Snort, ISS, Cisco or Symantec? Or other newer/different approaches ie Okena? 5. Other general good information, ie issues, gripes, etc.? I would appreciate any help, feel free to contact direct or list and will summarize. thanks, Brandon

4 4

RE: How do I log on while in flight?
by Mansey, Jon 28 Jun '02

28 Jun '02

Does anyone else find this too hard to believe? I cant be the only one who has inadvertantly forgotten to power off their cell phone while flying. This must happen all the time, but we don't hear about horrible DoS of cell networks. Or is this why cell service sucks so badly in some places? ;-) Jm > To add to it, it is not system specific. Depending on the > size of the MSA (metropolitin service area) or RSA (rural > service area) footprint, there may be as many as 4 or 5 > cellular network carriers effected in this cascading failure > by a SINGLE airborne mobile. > > So, now you know one of the more UNKNOWN reasons why it is > not legal to use a cell phone while airborne. It is a great > way to DoS the network and the carriers, subscribers, and FCC > don't want that.

4 4

RE: How do I log on while in flight?
by James Smith 28 Jun '02

28 Jun '02

> -----Original Message----- > From: Mansey, Jon [mailto:Jon_Mansey@verestar.com] > > Does anyone else find this too hard to believe? I cant be the > only one who > has inadvertantly forgotten to power off their cell phone > while flying. This > must happen all the time, but we don't hear about horrible DoS of cell > networks. > Not a problem. Your cell phone is on your hip, buried in the seat with another body next to it. Great shielding. You are in a giant metal tube, which also has great shielding properties. It is most likely a small one, and incapable of great power output. You would have to get it and bring it up closer to the window level to really get a signal out line of sight to a tower. It would be instructive to see FCD alarm stats plotted by time and location... James H. Smith II NNCDS NNCSE First Call Response Center Professional Services - Network Engineer The Presidio Corporation

1 0

RE: Bellsouth DSL in Chattanooga - Whose Lines?
by Steve.Smith＠sarcom.com 28 Jun '02

28 Jun '02

BellSouth only has a co-lo with KMC in Chatt. They can give you full service IF the building is lit with Bell fiber. Most of the buildings are KMC though. Atlanta is their closet full facility. Steve -----Original Message----- From: CARL.P.HIRSCH(a)sargentlundy.com [mailto:CARL.P.HIRSCH@sargentlundy.com] Sent: Friday, June 28, 2002 9:39 AM To: nanog(a)merit.edu Subject: Bellsouth DSL in Chattanooga - Whose Lines? Does Bellsouth use its own infrastructure for consumer/business ADSL (specifically in Chattanooga, TN), or does it rely on someone else's lines to get from the local central office to the nearest peering exchange? I've seen outfits like Covad use Exodus/C&W, but I'm imagining a RBOC like BellSouth prefers to use its own infrastructure. What is the closest peering point that would be used in Chattanooga, anyhow? thanks, -carl hirsch

1 0

Re: Worldcomm network question
by Eric Brandwine 28 Jun '02

28 Jun '02

>>>>> "b" == blitz <blitz(a)macronet.net> writes: b> For that and other reasons, Wcom will be bailed out, at taxpayer expense if b> necessary, for national security reasons. WorldCom still "runs" UUNET as well. We carry a significant portion of the backbone, and have many customers that have no other connections. With the bandwidth glut, I'm sure the core could survive the sudden lack of UUNET, but there's a lot of edges that would get unhappy. There's no way they'd let us go Chapter 7, even if we wanted to. ericb b> At 18:19 6/26/02 -0400, you wrote: >> Anyone have any ideas, speculation, or info on how adverse future of WCOM >> would play out for ISPs and such? Among other things, WCOM is the preferred >> provider of long-haul pipes for DoD.....that can't be good!! -- Eric Brandwine | Microsoft treats security vulnerabilites as public UUNetwork Security | relations problems. ericb(a)uu.net | +1 703 886 6038 | - Bruce Schneier Key fingerprint = 3A39 2C2F D5A0 FC7C 5F60 4118 A84A BD5D 59D7 4E3E

2 1