- Test - lists.nanog.org

AOL and Sprint
by jlewis＠lewis.org 25 May '02

25 May '02

Anyone else unable to reach AOL this morning via Sprint's network? I can get there through C&W or UUNet, but not via Sprint. -- ---------------------------------------------------------------------- Jon Lewis *jlewis(a)lewis.org*| I route System Administrator | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

2 1

The Cidr Report
by CIDR Report 25 May '02

25 May '02

This is an auto-generated mail on Fri May 24 23:00:00 PDT 2002 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 24May02 0) General Status Table History ------------- Date Prefixes 170502 109785 180502 109834 190502 109804 200502 109906 210502 109923 220502 109973 230502 109965 240502 110020 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 10.1.1.1/32 from AS(65302) AS Summary ---------- 1) Gains by aggregating at the origin AS level --- 24May02 --- For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Slightly Operational: How to 0wn the Internet in Your Spare Time
by Sean Donelan 24 May '02

24 May '02

Although this thread will immediately go out of control, Vern Paxson et al once again has come up with some interesting numbers. Something to read over the US Memorial Day holiday weekend. http://www.icir.org/vern/papers/cdc-usenix-sec02/index.html I was lucky enough to see a preview of the paper. It shows we still have some hard work ahead of us.

1 0

Re: list problems?
by Avleen Vig 24 May '02

24 May '02

On Wed, 22 May 2002, Andy Dills wrote: > If you ask me, I think that this is analagous to the situation where some > guy gets rejected at a job interview because he "doesn't have a degree", > which is in truth just an excuse. Actually (without hoping to trigger a flame war), there are a lot of very large comanies, mainly in the US (mainly in the finanial sector or eduction sector, and occassionaly in the defense sector), who DO refuse to hire without a degree. There are many good technical persons out there who don't have a degree. There are almost many unemployeed technical persons who would make better admins / engineers than some people I know who have degrees. With the current situation, I see the following: Proportionally here are more technical people in jobs WITH degrees than without People with degrees have more experience, and get farther I believe the latter reason is because more people hire candidates with degrees. Vicious circle. Not hiring people who don't hold degrees is fast becoming a policy matter. The reasons for it are numerous. Very few (IMO) are 'good' reasons.

29 41

Routers vs. PC's for routing - was list problems?
by Vinny Abello 24 May '02

24 May '02

I would have to say for any Linux/BSD platform to be a viable routing solution, you have to eliminate all moving parts or as much as possible, ie. no hard drives because hard drives will fail. Not much you can do about the cooling fans in various parts of the machine though which routers also tend to have. Solid state storage would be the way to go as far as what the OS is installed on. You have to have something to imitate flash on the common router. Otherwise, if you can get the functionality out of a PC, I say go for it! The processing power of a modern PC is far beyond any router I can think of. I suppose it would just be a matter of how efficient your kernel, TCP/IP stack and routing daemon would be at that point. :) At 10:48 PM 5/22/2002, you wrote: >On Wed, 22 May 2002, Andy Dills wrote: > > > > >From the number of personal replies I got about these topics, it seems > > > like many people are interested in sharing information about how to do > > > routing on a budget, or how to avoid getting shot in the foot with your > > > Cisco box. > > > > Routing on a budget? Dude, you can buy a 7200 for $2 grand. Why bother > > with a linux box? Heh, at least use FreeBSD :) > >Before the dot com implosion, they weren't nearly that inexpensive. The >average corporate user will also need smartnet (what's that on a 7200, a K >or a few per year?) for support, warranty, and software updates. Some >people just don't appreciate being nickled and dimed by cisco and forced >to either buy much more router than they need, or risk ending up with >another cisco boat anchor router when the platform they chose can no >longer do the job in the limited memory config supported. > >I have a consulting customer who, against my strong recommendation, bought >a non-cisco router to multihome with. It's PC based, runs Linux, and with >the exception of the gated BGP issue that bit everyone running gated a few >months ago, has worked just fine. It's not as easy to work with in most >cases, but there are some definite advantages, and some things that Linux >actually makes easier. They'd initially bought a 2621 when multihoming >was just a thought, and by the time it was a reality, 64mb on a 2621 >couldn't handle full routes. The C&W/PSI depeering (which did affect >this customer, as they were single homed to C&W at the time and did >regular business with networks single homed to PSI) was proof that without >full routes, you're not really multihomed. > >-- >---------------------------------------------------------------------- > Jon Lewis *jlewis(a)lewis.org*| I route > System Administrator | therefore you are > Atlantic Net | >_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ Vinny Abello Network Engineer Server Management vinny(a)tellurian.com (973)300-9211 x 125 (973)940-6125 (Direct) Tellurian Networks - The Ultimate Internet Connection http://www.tellurian.com (888)TELLURIAN

21 32

RE: Routers vs. PC's for routing - was list problems?
by Rowland, Alan D 24 May '02

24 May '02

AFAIK standard (non-proprietary) CompactFlash, SmartCards, Memory Stick, et al, are seen as (removable) storage with typical allowed attributes. I can set a file/folder/card to 'locked' in my camera but when plugged into the computer this will show as 'read only.' Then again, router manufacturers are infamous for jiggering as much as possible to proprietary. Might still be able to 'administer' the card in another machine then install it in the proprietary device but that might void your warranty. :) Hey, they're just protecting their market share, right? Worked for Apple, oh, wait a minute... (/mnt asbestos underwear) Just my 2¢. -Al -----Original Message----- From: Steven J. Sobol [mailto:sjsobol@JustThe.net] Sent: Thursday, May 23, 2002 2:39 PM To: Dan Hollis Cc: E.B. Dreger; Vinny Abello; nanog(a)merit.edu Subject: Re: Routers vs. PC's for routing - was list problems? On Thu, 23 May 2002, Dan Hollis wrote: > On Thu, 23 May 2002, Steven J. Sobol wrote: > > On Thu, 23 May 2002, E.B. Dreger wrote: > > > EIDE-based flash drives have become very inexpensive. Some > > > embedded systems use CompactFlash boards. > > Can you set flash drives to be write-only? > > Why would you want to do this? Duh. Sorry about the brainfart. I was about to launch into a long explanation of what I want to do when I realized I wrote "write-only" instead of "read-only." I meant "read-only." Note to self: Engage brain *before* fingers. -- Steve Sobol, CTO (Server Guru, Network Janitor and Head Geek) JustThe.net LLC, Mentor On The Lake, OH 888.480.4NET http://JustThe.net "In a 32-bit world, you're a 2-bit user/You've got your own newsgroup: alt.total.loser" - "Weird Al" Yankovic, "It's All About the Pentiums"

2 1

Need help GigE between Luxn<-->Cisco7500
by Arman 24 May '02

24 May '02

Hello, We have recently turned up a GigE link (~5 miles) between our two facilities. The carrier, Time W, is using Luxn 3202 optical access devices as termination gear on each end of the link. The luxns in turn connect via GigE to two cisco 7507 GEIP (we know about GEIP vs GEIP+). diagram 10 ft 5 mile 10 ft cisco7507----- Lyxn 200===CO=====Luxn 1019 ------cisco7507-1019 ^^^ ^^^ ^^^ multi-mode single-mode multi-mode The Cisco 7507 gigE port at 1019 sees alot of Giant packets and %OSPF-4-ERRRCV errors suggesting that the ethernet frames are getting corrupted. MTU on each cisco is 1500 and the link is forced to 1000. We consistently see packet losses of 10-20% with no load at all. If anyone has any experience with Luxn gear and/or Luxn-cisco interconnection please contact me off list. thanks ak -----------------details-------------------------- interface GigabitEthernet5/0/0 ip address X.X.X.1 255.255.255.252 ip route-cache distributed load-interval 30 no negotiation auto GigabitEthernet5/0/0 is up, line protocol is up Hardware is cyBus GigabitEthernet Interface, address is 0050.73a0.bda0 Internet address is X.X.X.2/30 MTU 1500 bytes, BW 1000000 Kbit, DLY 10 usec, reliability 255/255, txload 1/255, rxload 1/255 Encapsulation ARPA, loopback not set Keepalive set (10 sec) Full-duplex mode, link type is force-up, media type is SX output flow-control is unsupported, input flow-control is unsupported ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:07, output 00:00:01, output hang never Last clearing of "show interface" counters 1d19h Queueing strategy: fifo Output queue 0/40, 0 drops; input queue 0/75, 0 drops 30 second input rate 0 bits/sec, 1 packets/sec 30 second output rate 1000 bits/sec, 1 packets/sec 351887 packets input, 43900564 bytes, 0 no buffer Received 34773 broadcasts, 0 runts, 1028 giants, 0 throttles 0 input errors, 0 CRC, 73419 frame, 0 overrun, 0 ignored 0 watchdog, 19308 multicast, 0 pause input 0 input packets with dribble condition detected 181113587 packets output, 2653176686 bytes, 0 underruns(0/0/0) 0 output errors, 0 collisions, 3 interface resets 0 babbles, 0 late collision, 0 deferred 2 lost carrier, 0 no carrier, 0 pause output 0 output buffer failures, 0 output buffers swapped out

1 0

Re: Routers vs. PC's for routing - was list problems?
by Dan Hollis 24 May '02

24 May '02

On Thu, 23 May 2002, Jason K. Schechner wrote: > On Thu, 23 May 2002, Dan Hollis wrote: > > On Thu, 23 May 2002, Steven J. Sobol wrote: > > > Can you set flash drives to be write-only? > > Why would you want to do this? > Logging. If a h@xx0r cracks your box he can't erase anything that's > already been written there. Often it takes a physical change (jumper, > dipswitch, etc) to change from write-only to read-only making it pretty > tough for the h@xx0r to cover his steps. Eh? Setting a flash drive to *write-only* would fix this how? Why would anyone want to make a flash drive *write-only*? -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]

5 5

Re: Routers vs. PC's for routing - was list problems?
by E.B. Dreger 24 May '02

24 May '02

JKS> Date: Thu, 23 May 2002 17:34:29 -0400 (EDT) JKS> From: Jason K. Schechner JKS> > Why would you want to do this? JKS> JKS> Logging. If a h@xx0r cracks your box he can't erase JKS> anything that's already been written there. Often it takes BSD enforces append-only when running proper securelevel. AFAIK, Linux lacks this attribute, and root can disable the so-called "immutable" attrib. JKS> a physical change (jumper, dipswitch, etc) to change from JKS> write-only to read-only making it pretty tough for the JKS> h@xx0r to cover his steps. Why not log to an external bastion host? -- Eddy Brotsman & Dreger, Inc. - EverQuick Internet Division Phone: +1 (316) 794-8922 Wichita/(Inter)national Phone: +1 (785) 865-5885 Lawrence ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist(a)brics.com> To: blacklist(a)brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist(a)brics.com>, or you are likely to be blocked.

3 2

RE: Routers vs. PC's for routing - was list problems?
by Rowland, Alan D 24 May '02

24 May '02

Most flash media includes read only 'tabs' similar to the legacy floppy variety. Steven may have hit on an interesting solution here... -Al -----Original Message----- From: E.B. Dreger [mailto:eddy+public+spam@noc.everquick.net] Sent: Thursday, May 23, 2002 2:38 PM To: FiXXiT(a)off-road.com Cc: Dan Hollis; Steven J. Sobol; Vinny Abello; nanog(a)merit.edu Subject: Re: Routers vs. PC's for routing - was list problems? JKS> Date: Thu, 23 May 2002 17:34:29 -0400 (EDT) JKS> From: Jason K. Schechner JKS> > Why would you want to do this? JKS> JKS> Logging. If a h@xx0r cracks your box he can't erase JKS> anything that's already been written there. Often it takes BSD enforces append-only when running proper securelevel. AFAIK, Linux lacks this attribute, and root can disable the so-called "immutable" attrib. JKS> a physical change (jumper, dipswitch, etc) to change from JKS> write-only to read-only making it pretty tough for the JKS> h@xx0r to cover his steps. Why not log to an external bastion host? -- Eddy Brotsman & Dreger, Inc. - EverQuick Internet Division Phone: +1 (316) 794-8922 Wichita/(Inter)national Phone: +1 (785) 865-5885 Lawrence ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Date: Mon, 21 May 2001 11:23:58 +0000 (GMT) From: A Trap <blacklist(a)brics.com> To: blacklist(a)brics.com Subject: Please ignore this portion of my mail signature. These last few lines are a trap for address-harvesting spambots. Do NOT send mail to <blacklist(a)brics.com>, or you are likely to be blocked.

1 0