- Test - lists.nanog.org

RE: bgp geopolitical analysis (warning: zero operational content. or so.)
by Pickett, Mclean 29 Nov '01

29 Nov '01

How about mapping BGP info to Per Capita Income. I imagine you might see a better correlation there. McLean -----Original Message----- From: k claffy [mailto:kc@ipn.caida.org] Sent: Tuesday, November 27, 2001 9:46 PM To: nanog(a)nanog.org Cc: elfcore(a)caida.org Subject: bgp geopolitical analysis (warning: zero operational content. or so.) one of caida's elves (brad) did a cool visualization of demographic measures of Internet resources, stratified by continent with substratification by country (with help of CIA factbook, RouteViews, and NetGeo). http://www.caida.org/analysis/geopolitical/bgp2country/ measures: geographic area, human population, GDP, phones-in-use, ASes, ISPs, prefixes, addresses.... nothing overwhelmingly surprising here but compelling nonetheless (yes, it turns out data can be both) k // things are not what they seem to be, nor are they otherwise. -lankavatara sutra //

4 4

bgp geopolitical analysis (warning: zero operational content. or so.)
by k claffy 29 Nov '01

29 Nov '01

one of caida's elves (brad) did a cool visualization of demographic measures of Internet resources, stratified by continent with substratification by country (with help of CIA factbook, RouteViews, and NetGeo). http://www.caida.org/analysis/geopolitical/bgp2country/ measures: geographic area, human population, GDP, phones-in-use, ASes, ISPs, prefixes, addresses.... nothing overwhelmingly surprising here but compelling nonetheless (yes, it turns out data can be both) k // things are not what they seem to be, nor are they otherwise. -lankavatara sutra //

2 2

Re: Looking for a ping plotting tool for *nix
by Steven M. Bellovin 29 Nov '01

29 Nov '01

In message <009e01c177bc$0df91830$9865fea9@49uzz>, "Mike Moglin" writes: > >http://www.pingplotter.com/download.html > As best I can tell, that's for Windows only. I wish there were a Unix version. >----- Original Message ----- >From: "mike harrison" <meuon(a)highertech.net> >To: "Troy Corbin" <troyc(a)titan.communitech.net> >Cc: <dani-post(a)roisman.com>; <nanog(a)merit.edu> >Sent: Tuesday, November 27, 2001 10:06 PM >Subject: Re: Looking for a ping plotting tool for *nix > > >> >> > Sample: >> > http://people.ee.ethz.ch/~oetiker/smokeping/smokeping.cgi >> >> Thanks.. I needed that also. WOW! --Mike- >> >> > > > --Steve Bellovin, http://www.research.att.com/~smb Full text of "Firewalls" book now at http://www.wilyhacker.com

3 2

[barney@databus.com: NYTimes.com Article: Engineers Suspect Diesel Fuel in Collapse of 7 World Trade Center]
by Barney Wolff 29 Nov '01

29 Nov '01

I'm sure there will be lessons from this, but not what they will be. Date: Thu, 29 Nov 2001 10:22:20 -0500 (EST) This article from NYTimes.com has been sent to you by barney(a)databus.com. Engineers Suspect Diesel Fuel in Collapse of 7 World Trade Center November 29, 2001 By JAMES GLANZ Engineers and scientists are trying to determine what role diesel fuel, ignited into an uncontrollable fire, had in the collapse of 7 World Trade Center. http://www.nytimes.com/2001/11/29/nyregion/29TOWE.html?ex=1008047340&ei=1&e… -- Barney Wolff "Nonetheless, ease and peace had left this people still curiously tough. They were, if it came to it, difficult to daunt or to kill; and they were, perhaps, so unwearyingly fond of good things not least because they could, when put to it, do without them, and could survive rough handling by grief, foe, or weather in a way that astonished those who did not know them well and looked no further than their bellies and their well-fed faces." J.R.R.T.

1 0

Anyone getting burned by Enron going under?
by Eric Germann 29 Nov '01

29 Nov '01

With the nearly imminent demise of Enron, does anyone see major impacts based on telecom's use of Enron Broadband services? Eric

1 0

out-of-band network experiences
by Michael Chang 28 Nov '01

28 Nov '01

Hello All, I would appreciate if you could share your experiences of settting up out-of-band management networks especially large # 50 - 100+ sites. Appreciate your experiences on the follwing and any other: - out-of-band network circuit going thru the same transport equipment as the managed network - topology (i.e Frame,ATM,leased circuits etc) - redundancy in out-of-band network for criticial monitoring ( Dual hub-spoke for redundancy etc, dial-on-demand with POTS, ISDN, wireless etc) - hierarchy with regional aggregation for out-of-band networks to reduce costs - SLAs for out-of-band monitoring -static routes versus dynamic protcols (RIP,OSPF, EIGRP) Michael Chang __________________________________________________ FREE voicemail, email, and fax...all in one place. Sign Up Now! http://www.onebox.com

3 2

RE: ACLs / Filter Lists - Best Practices
by Irwin Lazar 28 Nov '01

28 Nov '01

> jm> > jm> Is anyone aware of any current "best practices" related to the > jm> recommended set of filtering rules (Cisco ACL lists or Juniper filter > jm> sets) for reasons of Security, statistics collection, DoS attack > jm> analysis/prevention, etc.? I'm curious to see if there are any such I've got a collection of links to information on Cisco ACL's, including best practices, at: http://www.itprc.com/security.htm HTH, Irwin

1 0

Looking glass AS6762
by Pierfrancesco Caci 28 Nov '01

28 Nov '01

Hello, we finally have a looking glass. http://etabeta.noc.seabone.net/cgi-bin/lg.pl It's on Telecom Italia international backbone, as6762, seabone.net. Pf -- ------------------------------------------------------------------------------- Pierfrancesco Caci | System Administrator @ seabone.net p.caci(a)seabone.net | Telecom Italia S.p.A. - International Operations Linux paperino 2.4.16 #1 Mon Nov 26 16:28:11 CET 2001 i686 unknown

1 0

Re: 132.0.0.0/10 not in the databases
by Steven M. Bellovin 28 Nov '01

28 Nov '01

In message <5.1.0.14.2.20011128081413.00aa29f0@localhost>, Philip Smith writes: > >My theory is that DISO-UNRRA were originally allocated 132.1.0.0/16 through >132.15.0.0/16 in the classful world - these are all in the ARIN DB under >various military guises. When CIDR came along, it seems that someone must >have decided that because 132.0.0.0/16 was now available and part of a >bigger block, it could be added to the announcement, etc...? > >There are a total of four like this: > >Network Origin AS Description >132.0.0.0/10 568 DISO-UNRRA >135.0.0.0/13 10455 Lucent Technologies >137.0.0.0/13 568 DISO-UNRRA >158.0.0.0/13 568 DISO-UNRRA Umm -- how does Lucent fit into that? Last I checked, it wasn't part of DoD. Back in the mists of time, AT&T was allocated what we would now call 135.0.0.0/8. We allocated addresses according to what seemed like a rational scheme at the time, this being pre-CIDR. But a wandering neutron struck our CEO, inducing a fission event that produced (among other particles) AT&T and Lucent. 135.0.0.0/8 was split between the two companies as a collection of /16's, on the reasonably rational grounds of "whoever is using the block gets to keep it". This minimized disruption (or rather, avoided further disruption), at a time when there was plenty of other chaos involved in splitting companies, networks, buildings, and organizations. Unfortunately, it did not happen to correspond to CIDR principles, but as I said, the allocation to AT&T antedated CIDR and in no way anticipated what the CEO and the Board of Directors was going to do. >From 135.207.0.0/16, --Steve Bellovin, http://www.research.att.com/~smb Full text of "Firewalls" book now at http://www.wilyhacker.com

2 1

132.0.0.0/10 not in the databases
by Leo Bicknell 27 Nov '01

27 Nov '01

132.0.0.0/10 is floating around: route-views.oregon-ix.net>show ip bgp 132.0.0.0/10 BGP routing table entry for 132.0.0.0/10, version 12484641 Paths: (43 available, best #41) Advertised to non peer-group peers: 64.166.72.140 4513 13646 5696 568, (aggregated by 568 198.26.128.1) 195.66.224.82 from 195.66.224.82 (209.10.12.222) Origin IGP, metric 7602, localpref 100, valid, external, atomic-aggregate [snip, route-views has more than a page of entries for it] However, it doesn't apprar to be registered: % whois -h whois.arin.net 132.0.0.0 No match for "132.0.0.0". 568 regisitered to disa.mil, and a number of longer prefixes inside the /10 are registered to .mil addresses: % whois -h whois.arin.net 132.15.0.0 Kadena Air Base (NET-KADENA-NET) Bldg 792, Kadena AB JA APO, AP 96368-5149 US The question is, do they legitimately own the whole /10? If so, why isn't it marked in the databases? -- Leo Bicknell - bicknell(a)ufp.org - CCIE 3440 PGP keys at http://www.ufp.org/~bicknell/ Read TMBG List - tmbg-list-request(a)tmbg.org, www.tmbg.org

4 4