- Test - lists.nanog.org

Update on 25 Broadway/TELEHOUSE America
by Akio Sugeno 13 Sep '01

13 Sep '01

TELEHOUSE has been providing periodic updates to our clients regarding our 25 Broadway facility. We'd like to share this latest update with the NANOG list, thinking several of your members may be interested: The TELEHOUSE 25 Broadway facility continues to run on generator with no word from Con Edison on when power will be restored. We're pleased to report that the fuel delivery has arrived and our tank is now being refilled. Once done we will have fuel on site for more than four days. We are beginning preparations to get replacement staffing into Manhattan later today. Client access into the building cannot be guaranteed at this time, but you will be kept informed as we get additional information. Please continue to call (718) 370-9663 or email us for support as needed. We will provide further update late this afternoon or as new information develops. Regards, --akio ----------------------------------- Akio Sugeno Chairman of NYIIX/LAIIX/6IIX Voice: 718-355-2509, Fax: 718-355-2517

1 0

More Assistance available
by jeff＠digitalpipe.net 13 Sep '01

13 Sep '01

Folks, As you begin rebuilding in NY and DC, I'd also like to offer up my assistance to anyone who can use it. I'm in the San Francisco Bay Area, but would be happy to do anything I can to help you remotely. I'm quite familiar with Cisco, Sun and x86. Reply off list if there's anything I can do. -Jeff

5 4

Analysis from a JHU CS Prof
by Lloyd Taylor 13 Sep '01

13 Sep '01

A cogent analysis of this morning's events... >From: "Jonathan S. Shapiro" <shap(a)eros-os.org> >Subject: Thoughts on this morning's events >Date: Tue, 11 Sep 2001 13:07:24 -0400 > >I hope and trust that all of those concerned for their loved ones will find >them healthy and whole. If you are stuck at work, consider waiting a few >hours to go home. Right now the roads are far more risk than staying put. > >As someone who passed through the WTC 45 minutes before the bomb went off >years ago, and watched live as the second WTC tower was penetrated at 9:03, >I wanted to inject some analysis into the current situation. > >This act goes well beyond terrorism as we have previously understood it. >It's been repeatedly demonstrated to us that a single plane can be hijacked >by a small, well-prepared group backed up by the right logistics support. >Hijacking *five* planes, on a tight timetable, from multiple locations, to >hit multiple targets within 90 minutes of each other is simply a completely >different scale of organization. This act required logistic support and >coordination involving hundreds of people, with major-league funding. > >Also, it's worth remembering that airplanes aren't all that easy to fly, and >it's unlikely that a commercial pilot could be persuaded to fly into a >building -- even at gunpoint. This means that the perpetrators needed to >find five adequate pilots, which in turn means that they needed to know *in >advance* which kinds of planes they would be hijacking. While a lot of the >pilot training could be done using Flight Simulator, you still need to know >what to train for. > >Further, this is a very difficult attack to defend against. Suppose you >*did* have a SAM (surface to air missile) handy in New York, and you saw the >plane coming in time to use it. Do you shoot down a plane over a major >metropolitan area, or do you let it crash? Which will cause greater >destruction? While you figure it out the opportunity passes. > >The attackers picked planes that were scheduled for cross-country flights, >and would therefore be loaded with JP (airplane fuel). JP burns very hot, >and is relatively easy to set on fire. Because these planes were loaded with >fuel, they could be relied on to spread the fuel through the buildings on >impact, maximizing damage and hampering rescue efforts. > >The planes were hijacked from major U.S. airports. Security at these >airports may not be the tightest in the world, but neither is it sloppy. In >this case, it was systematically beaten in several locations at once. This >required time, money, thought, and preparation. > >What we have here is an attacker who has said not just "I can attack >anything I want", but "I can attack lots of things, all at once, and not >only can't you stop me but you can't even detect a very large organization >that is doing the preparations -- even when we tip you off three weeks in >advance!" > >On the whole, it seems fair to say that this entire action was carefully >thought out, planned in careful detail, and (at least from the attacker's >perspective) well executed. It required access to significant information >resources. > >Obviously, the targets were picked for maximum symbolic value, but the >Pentagon is a military target. That means that this *isn't* an act of >terrorism; it is an act of war. If indeed it proves that the attacker was >bin-Laden, and if Taliban has been harboring him, it would not surprise me >to see the United States take the view that Taliban has committed an >undeclared act of war, and react accordingly. > >Finally, an observation on people's reactions. People here at Hopkins showed >a range of initial reactions from dismay to tears to shock. But this quickly >changed. The second reaction was universally anger. The sense of things -- >and we are talking here about basically pacifist academics, mind you -- is >that if we can figure out who launched this thing we should take them out >decisively, and it's just too damned bad if some country decides to get on >the wrong side. > >If the goal of this attack was fear it has failed. Possibly, it has altered >the American perception of terrorism in a basic way and convinced us that >decisive action is the only response to terrorism. This lesson comes at too >high a cost, and with personal tragic impact on too many people, and at a >price that we should never have been forced to pay, to be sure. Still, if >this incident teaches America to respond decisively to terrorism then >perhaps those losses will mean something, and *some* small good may yet be >recovered from this. > >Meanwhile, let us hope that the death toll is smaller than all our fears, >and do what we can to help the victims and their loved ones come to terms as >they can. > > >Jonathan S. Shapiro

21 33

Re: Totally OT, sorry; was (Re: Lack of Security)
by Dave Stewart 13 Sep '01

13 Sep '01

At 11:52 AM 9/13/2001, John Fraizer wrote: >The same goes for rental cars/trucks. And I think we need to concern ourselves about the response the first time a terrorist uses his rented Honda Accord to drive a trunkload of explosives into a restaurant, sports arena or monument/landmark... I don't know how we address that kind of threat.

2 1

Lack of Security
by Robert Hough 13 Sep '01

13 Sep '01

Been thinking about this a lot, and forgive me if it's already been brought up. However, one thing I've heard time and time again about this whole incident, is American people screaming about the lack of security. The security we display in most aspects of our society echo the same security we display in most of our networks as well. Look at Microsoft's Windows for instance. Probably one of the most insecure OS'es on the Internet at the moment. Yet, millions of people still tolerate it. Time and time again, it has been the target of attacks. However, Microsoft releases a flimsy patch, and tells us everything is going to be OK. A few months later (sometimes weeks or days), it gets nailed again. All of this, for convenience. Now ask yourself, why was it so easy to hijack these planes? Because we have sacrificed security for convenience - and our enemy used that against us. Well, something to chew on. G'Night. -- Robert Hough (rch(a)acidpit.org)

27 43

Multihoming w/ Verio
by Mike Stubbers 13 Sep '01

13 Sep '01

Could anyone experienced with multihoming with Verio please contact me off-list. We are using a Verio link as a customer fallback to another ISP link and I don't believe I'm seeing what I should be for routing advertisements. This is after changing our community setting with them as a customer fallback. re: http://info.us.bb.verio.net/routing.html Mae West looking glass no longer shows a path through AS2914 and I am wanting to make sure that the failover will happen if my primary link through AS101 goes down. I have attempted to work with Verio's frontline support with two separate calls which have not helped. They do say they see our network advertisements and are redistributing them in their IBGP, but they can not tell me why I don't see them externally. Another view at route-views.oregon-ix.net shows 2914 in the path, but with out a direct path back from Verio to me, it all flows through the 2914-701-101 path. I'm wanting to know if this is what I should be seeing. Any assistance would be appreciated. MAE-West Looking Glass Results Query: bgp Addr: 129.101.0.0 BGP routing table entry for 129.101.0.0/16, version 42538010 Paths: (10 available, best #10) Advertised to peer-groups: internal pop rr-pop 701 101 11808 165.117.64.114 (metric 220400) from 165.117.1.172 (165.117.1.172) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:228 2548:666 3706:170 701 101 11808 165.117.51.254 (metric 490800) from 165.117.1.165 (165.117.1.165) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:244 2548:666 3706:164 701 101 11808 204.255.168.117 (metric 310600) from 165.117.1.173 (165.117.1.173) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:327 2548:666 3706:168 1239 101 11808 165.117.1.230 (metric 450500) from 165.117.1.174 (165.117.1.174) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:203 2548:666 3706:168 701 101 11808 204.255.168.113 (metric 420500) from 165.117.1.139 (165.117.1.139) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:246 2548:666 3706:132 1239 101 11808 165.117.1.120 (metric 440505) from 165.117.1.120 (165.117.1.120) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:202 2548:666 3706:143 701 101 11808 165.117.68.190 (metric 445600) from 165.117.1.147 (165.117.1.147) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:254 2548:666 3706:102 701 101 11808 204.255.168.109 (metric 415400) from 165.117.1.199 (165.117.1.199) Origin IGP, metric 4294967294, localpref 100, valid, internal Community: 2548:180 2548:245 2548:666 3706:161 1239 101 11808 198.32.136.129 from 198.32.136.129 (144.228.105.5) Origin IGP, metric 69, localpref 100, valid, external Community: 2548:201 2548:666 1239 101 11808 198.32.136.11 from 198.32.136.11 (144.228.105.1) Origin IGP, metric 68, localpref 100, valid, external, best Community: 2548:201 2548:666 route-views.oregon-ix.net>sho ip bgp 129.101.0.0 BGP routing table entry for 129.101.0.0/16, version 444896 Paths: (47 available, best #31) Advertised to non peer-group peers: 128.223.162.75 ....clip... 267 2914 701 101 11808 204.42.253.253 from 204.42.253.253 (204.42.253.253) Origin IGP, localpref 100, valid, external Community: 267:2914 2914 701 101 11808 129.250.0.11 from 129.250.0.11 (129.250.0.11) Origin IGP, metric 9, localpref 100, valid, external Community: 2914:420 234 2914 701 101 11808 204.212.44.131 from 204.212.44.131 (204.212.44.131) Origin IGP, localpref 100, valid, external Community: 234:2914 2914 701 101 11808 129.250.0.6 from 129.250.0.6 (129.250.0.6) Origin IGP, metric 16, localpref 100, valid, external Community: 2914:420 701 101 11808 157.130.185.17 from 157.130.185.17 (137.39.3.117) Origin IGP, localpref 100, valid, external Mike Stubbers Network Analyst Supervisor, SCP Information Technology Services University of Idaho mikest(a)uidaho.edu 208-885-2122

1 0

RE: Don't blame Intelligence or Security Agencies.....
by Greg Mirsky 13 Sep '01

13 Sep '01

It is not Mossad's objective to secure EL Al's flights. Have you tried to get into El Al' terminal at JFK without a ticket? Greg -----Original Message----- From: alex(a)yuriev.com [mailto:alex@yuriev.com] Sent: Thursday, September 13, 2001 11:15 AM To: clarke Cc: nanog(a)merit.edu Subject: Re: Don't blame Intelligence or Security Agencies..... > The intelligence agencies in the United States are the best in the world. Mossad would disagree with you. Ever wondered why no one hijacks El Al flights? Alex

2 1

problem with shipment of spares
by Jim Mercer 13 Sep '01

13 Sep '01

we just heard that the air service up here (FirstAir northern canada), is not shipping cargo until "new security measures are in place". (air is the only transport here since there are no roads coming here, and shipping via boat is, well, not realistic due to a 4-5 month shipping window) which could mean until next week. we have spares which were ordered a while ago sitting on the other end, and have some requirements for other spares. i figured there might be other issues like this in other areas. -- [ Jim Mercer jim(a)reptiles.org +1 416 410-5633 ] [ Now with more and longer words for your reading enjoyment. ]

1 0

Re: Don't blame Intelligence or Security Agencies.....
by alex＠yuriev.com 13 Sep '01

13 Sep '01

> > > > The intelligence agencies in the United States are the best in the world. > > > > > > Mossad would disagree with you. > > > Ever wondered why no one hijacks El Al flights? > > > > I always thought it was due to two factors: > > > > 1) Proper security design at the airports that make all the obvious single-person > > low-tech attacks fairly unlikely to work, forcing the use of high-tech or > > conspiracy solutions. > > > > 2) The reluctance of anybody to be the on-the-ground part of a conspiracy or > > the seller of a high-tech solution, when you *know* that your continued life > > expectancy is very short unless you plan to spend the rest of your life hiding > > under a bush in one of the more inhospitable jungles of New Guinea. > > Not to mention the fact that ElAl has multiple armed air marshalls on > *every* flight. Right, and they are not afraid to use deadly force immediately. Alex

1 0

RE: Don't blame Intelligence or Security Agencies.....
by Hire, Ejay 13 Sep '01

13 Sep '01

I cannot begin to express how happy I am that the terrorists did not elect to carry-on a briefcase full of Anthrax or Botulinum Toxin. This would have easily magnified the effects of the disaster exponentially. Thought for the day: Botulinum Toxin is a bio-chemical weapon so powerful that 1 pound (properly distributed) would easily obliterate the eastern Seaboard. Manufacturing this "Mega-Weapon" is only slightly more complex than making liquor. -eh -----Original Message----- From: Ariel Biener [mailto:ariel@fireball.tau.ac.il] Sent: Thursday, September 13, 2001 5:59 AM To: clarke Cc: nanog(a)merit.edu Subject: Re: Don't blame Intelligence or Security Agencies..... On Thu, 13 Sep 2001, clarke wrote: > The intelligence agencies in the United States are the best in the world. This is actually not true. In order for anyone to get world class explosives, they would need to be well connected and to have access to explosives, that is, someone will have to supply them. Among these network of terrorists, some of them deal with supplying explosives, some with aquiring them, some with planning, some with other financial aspects. Like any other military (or large organization), they have a few departments. Most of the people are rather sane, and work in a more or less normal manner to do their "job". The ones carrying out the missions are the vast minority of such an organization. Intelligence gathering should and must be at the preliminary stage, by infiltrating such organizations, in any possible way. An operation of the size the US witnessed involved many people, at all levels of the organization. If the organization was well covered by the CIA/???, then the information would have reached them long time before the actual hit. This is what intelligence is all about. --Ariel > > Get your shit straight! > > ~ Clarke ~ > -- Ariel Biener e-mail: ariel(a)post.tau.ac.il PGP(6.5.8) public key http://www.tau.ac.il/~ariel/pgp.html

2 1