- Test - lists.nanog.org

Forget Bernie...
by blitz 02 May '02

02 May '02

http://biz.yahoo.com/rc/020502/telecoms_worldcom_1.html Bernie was dragged kicking and screaming out of Wcom today according to news I read....perhaps they chained him to his multi-milliondollar sailboat and pushed it twords the Bermuda triangle. John Sidgmore is now CEO. Yawn... Of course, they make little mention of his $630 mil "loan" that seems to be "dissapeared". >Then become a UUNET customer cause we already do this... Perhaps other >providers with 24/7 security teams will pipe up to give potential >customers a heads-up on options other than UUNET? If you go with UUNET >please tell the sales driod I sent you cause then I get 50 bucks :) (my >only raise thanks to bernie)

3 2

RE: Large ISPs doing NAT?
by Daniska Tomas 02 May '02

02 May '02

> -----Original Message----- > From: Jake Khuon [mailto:khuon@NEEBU.Net] > Sent: 2. mája 2002 10:51 > To: nanog(a)merit.edu > Subject: Re: Large ISPs doing NAT? > > > DT> and what if one of the devices behind that phone would also be a > DT> personal "ip gateway router" (or how you call that)... you could > DT> recursively iterate as deep as your mail size allows you to... > > It's possible. Could it get ugly? Yes. Do we just want to > shut our eyes and say "let's not go there."... well... maybe. > I just don't think the solution is to say, "this can never > happen... we must limit all handheld devices to sitting > behind a NAT gateway." > no eye-shutting. it's just about considering HOW MANY (or WHAT PART) of your users will need the 'full' service. if you have 95% of bfu's with web+mail phones or pda's then nat is completely ok for them. and those 5% (if so many ever) phreaks - give them an opportunity to have public ip with no nat for a few bucks more you will end up with exactly two exactly specified services... not that bad, is it? -- Tomas Daniska systems engineer Tronet Computer Networks Plynarenska 5, 829 75 Bratislava, Slovakia tel: +421 2 58224111, fax: +421 2 58224199 A transistor protected by a fast-acting fuse will protect the fuse by blowing first.

3 2

Re: Effective ways to deal with DDoS attacks?
by Hank Nussbacher 02 May '02

02 May '02

At 04:16 AM 02-05-02 +0000, Christopher L. Morrow wrote: >What we use and we're a 'largeish' network: > >http://www.secsup.org/Tracking/ >(shameless plug #1) > >Among other things this is a tool we use... there was a great set of >slides and presentation given at NANOG23: > >http://www.nanog.org/mtg-0110/greene.html >(shameless plug #2) Shameless plug #3 from RIPE41: http://www.ripe.net/ripe/meetings/archive/ripe-41/tutorials/eof-ddos.pdf 155 slides - 2.3M -Hank Consultant Riverhead Networks (formerly Wanwall Networks) www.riverhead.com >There is also a set of papers Barry Greene from Cisco has available on the >Cisco website... I'm positive he'll respond to this with the link, if he >doesn't search the NANOG mailing list archive for the link it should be >obvious in posts from Barry. > >If you want more pointers I'd be glad to chat on the phone with you, >numbers included below. > > >--Chris >(chris(a)uu.net) >####################################################### >## UUNET Technologies, Inc. ## >## Manager ## >## Customer Router Security Engineering Team ## >## (W)703-886-3823 (C)703-338-7319 ## >####################################################### > >On Wed, 1 May 2002, Pete Kruckenberg wrote: > > > > > There's been plenty of discussion about DDoS attacks, and my > > IDS system is darn good at identifying them. But what are > > effective methods for large service-provider networks (ie > > ones where a firewall at the front would not be possible) to > > deal with DDoS attacks? > > > > Current method of updating ACLs with the source and/or > > destination are slow and error-prone and hard to maintain > > (especially when the target of the attack is a site that > > users would like to access). > > > > A rather extensive survey of DDoS papers has not resulted in > > much on this topic. > > > > What processes and/or tools are large networks using to > > identify and limit the impact of DDoS attacks? > > > > Thanks. > > Pete. > > > >

1 0

Lab/testing time
by Pete Kruckenberg 01 May '02

01 May '02

I'm putting together a justication for additional lab equipment and personnel, and would be interested what an average network engineering group spends in terms of budget and personnel on a lab and people to run it, as a percentage of overall budget. This would be primarily for main-stream issues (software testing, configuration testing), as opposed to new-vendor/bleeding-edge lab work. I'm also interested if there are significant variations between these costs with various vendors. Are the lab/testing costs significantly different if I were primarily using vendor X vs. vendor Y, and how would costs for a pure X vendor network compare to a X+Y multivendor network? Thanks. Pete.

1 0

Re: news-peering
by Lyndon Nerenberg 01 May '02

01 May '02

> } I'm trolling for newspeers, if there is anyone out there still using > } NNTP.. > > http://www.usenet-se.net/peering/ A useless list based on my experience (zero responses to requests to twelve different sites). --lyndon

3 2

Download estimate tool?
by Brennan_Murphy＠NAI.com 01 May '02

01 May '02

I'm looking for a tool to estimate file download times given a certain set of variables: file size, available bandwidth, latency, receive window and circuit utilization. To explain: Suppose I have a single OC3 serving FTP downloads to individuals all over the globe. If the OC3 is not heavily utilized *and* I know the bandwidth and latency between my FTP server and a client's workstation, I can make a rough estimate of how long it will take for a file of a particular size to download. I could create a matrix in Excel based on latencies and bandwidths (factoring in TCP receive window sizes) and that would give me a quick reference tool for gauging how long something should take to download given a fair number of scenarios. But what if I want to enhance such a matrix to factor in what happens to download times in those various scenarios as the utilization of that OC3 approaches 100%? I could make alot of edits to above mentioned Excel matrix....but that would get tricky and visually unappealing. Can anyone recommend a tool that makes it easy to play with the above variables...a sort of modeling tool not quite so fancy or expensive as Opnet for example? Maybe a webpage with a Java applet ? Or maybe a fancy Excel file? Thanks, BM

1 0

BGP route explosion
by andrew＠whine.com 01 May '02

01 May '02

I had a network outage this morning brought about by a BGP route explosion at around 6:30 EST(-4) this morning. Anyone else notice it, and who the culprit whats? I got the exact same hit from both my providers, AT&T Can, and Telus. Thanks Andrew

8 9

Verizon fiber cut in Midtown Manhattan
by Rishi Singh 01 May '02

01 May '02

http://1010wins.com/topstories/StoryFolder/story_1199630592_html WINS) May 1, 2002 6:49 am US/Eastern (New York-AP) -- Telephone service in a section of midtown Manhattan has been disrupted by a construction accident. Verizon spokesman Cliff Lee says a construction crew working on 58th Street between Lexington and Third avenues yesterday cut into a cable underground, causing the disruption. It's unclear how many customers have experienced problems. Police say thousands of people have been affected. Lee says Verizon has received about 400 calls from customers having difficulty. Repair crews are working at the scene. The affected area is between Third and Fifth avenues from 57th to 65th streets. (Copyright 2002 by The Associated Press. All Rights Reserved.)

2 1

news-peering
by Alex Rubenstein 01 May '02

01 May '02

I'm trolling for newspeers, if there is anyone out there still using NNTP.. If interested, email me a traceroute to www.nac.net, and we'll get things rolling. -- Alex Rubenstein, AR97, K2AHR, alex(a)nac.net, latency, Al Reuben -- -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --

2 1

NANOG 25 - Toronto - Any Questions?
by Randy Neals 01 May '02

01 May '02

Hi Folks, For those making travel arrangements and planning your time around NANOG25 in Toronto we have a web site with local details up and running. http://139.142.132.40/ If you don't see what you need, or have other questions, please email me off-list and I'll try to dig up what you need. The following is some details we have been asked so far: AIRPORT: The airport you should be heading to is Pearson International/Toronto International CYYZ. (Maps and other details on web site) AMTRAK: There is also AMTRAK service directly to Toronto Union Station. "The International" runs from Chicago to Toronto. "The Maple Leaf" runs from NYC to Toronto. GEEK ADVENTURE TREK: Some attendees are planning a trip to Niagara Falls on Saturday. For those arriving early who might want to participate drop me an email and I'll provide the details. CELL PHONE COVERAGE: There are 4 cell phone companies that have coverage in Toronto. Check with your home carrier about roaming in Canada. Rogers AT&T Wireless - 800 Mhz"A"AMPS/TDMA http://www.shoprogers.com/store/wireless/overview.asp Bell Mobility - 800Mhz"B"AMPS/TDMA/1.9GhzCDMA-PCS http://www.bellmobility.ca/ Telus(Clearnet) - 1.9GhzCDMA-PCS/800Mhz iDEN/Mike (Nextel) http://www.telusmobility.com/ Microcell - 1.9GhzGSM-PCS http://www.fido.ca/portal/Entree.html PAGER/RIM COVERAGE: Many variables. Check with your home service provider to ensure you have international roaming. SkyTel/Skypage: You need to add International roaming. RIM 950/957 on Mobitex: Cingular in US/Rogers AT&T in CA RIM 850/857 on DATATAC: Motient in US/Bell Mobility in CA. Blackberry 5810 on GPRS: AT&T & Voicestream in US/Rogers AT&T in CA. HAM RADIO Yes. Email me. CURRENCY CONVERSION: This meeting should be fairly easy on your expense report. Here are some common currency conversions to the Hudson Bay Peso and the conversion of the CAD$149 hotel room rate. Credit Cards, and Bank ATM/Debit cards usually work with no problem here. USD$1 to CAD$1.56 (Hotel Room USD$95) GBP 1 to CAD$2.27 (Hotel Room GBP 65) EUR$1 to CAD$1.40 (Hotel Room EUR$105) YEN 100 to CAD$1.22 (Hotel Room YEN 12,228) Randy Neals Group Telecom Rneals(a)gt.ca

2 1