- Test - lists.nanog.org

CANTAT2 break? problems?
by Jim Mercer 05 Jan '01

05 Jan '01

i was notified by teleglobe that there was a problem with CANTAT2 (transatlantic undersea fiber). our circuits appear to be back up (down from 14:00 to 16:00 EST). not sure if teleglobe is re-routing via another cable, or the problem was fixed quickly. -- [ Jim Mercer jim(a)pneumonoultramicroscopicsilicovolcanoconiosis.ca ] [ Reptilian Research -- Longer Life through Colder Blood ] [ aka jim(a)reptiles.org +1 416 410-5633 ]

1 0

RE: FTP with authentication to RADIUS
by Roeland Meyer 05 Jan '01

05 Jan '01

> From: Steve Sobol [mailto:sjsobol@NorthShoreTechnologies.net] > Sent: Friday, January 05, 2001 12:35 PM > > "Brian W." wrote: > > > scp is also a possibility, its usage is a bit cryptic, but it is an > > option.. > But it requires an active shell account on both ends. > > Ain't no way I'm granting shell access to anyone who doesn't > specifically > ask for it. Actually, I'm picky about granting it even to > people who DO > ask for it. This pretty much reflects the attitudes of most of production Unix admins. I don't do it here either. The only shell accounts, on production hosts, are admins and I force most of them to use sudo. Very few (2) have root access here. We've also killed telnetd and ftpd (as in; deleted, never to be used, period). If we have a customer that needs to upload files, we write a special applet for them and make them use a web browser.

1 0

The Cidr Report
by Tony Bates 05 Jan '01

05 Jan '01

This is an auto-generated mail on Fri Jan 5 12:00:00 PST 2001 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 05Jan01 0) General Status Table History ------------- Date Prefixes 291200 96164 301200 95187 311200 95059 010101 95093 020101 95079 030101 95173 040101 95422 050101 95475 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 7237 Number of ASes announcing only one prefix: 3821 (1389 cidr, 2432 classful) Largest number of cidr routes: 637 announced by AS701 Largest number of classful routes: 1652 announced by AS1221 1) Gains by aggregating at the origin AS level --- 05Jan01 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1652 1215 437 26.5% TELSTRA-AS AS701 1581 1426 155 9.8% Alternet AS271 284 131 153 53.9% BCnet Backbone AS7545 189 67 122 64.6% TPG Internet Pty Ltd AS9269 165 46 119 72.1% Hong Kong CTI AS8013 449 344 105 23.4% PSINET-CA AS6595 162 63 99 61.1% DODDSEUR AS7657 253 164 89 35.2% The Internet Group Limited AS2563 127 40 87 68.5% KoRean Education Network AS705 326 241 85 26.1% ALTERNET-AS AS4755 209 124 85 40.7% Videsh Sanchar Nigam Ltd. India AS4293 341 258 83 24.3% Internal ASN for C&W AS174 527 448 79 15.0% Performance Systems International AS7496 100 22 78 78.0% Power Up AS4151 278 201 77 27.7% USDA Internet Access Network AS1727 187 111 76 40.6% MRMS-WEST AS7046 329 254 75 22.8% UUNET-CUSTOMER AS724 244 172 72 29.5% DLA-ASNBLOCK-AS AS3908 233 161 72 30.9% Supernet, Inc. AS1942 137 65 72 52.6% FR-CICG-GRENOBLE AS13999 79 7 72 91.1% UNKNOWN AS577 240 170 70 29.2% Bell Backbone AS7018 594 527 67 11.3% AT&T WorldNet Service Backbone AS5106 101 37 64 63.4% AADS-COLUMBUS AS3749 122 58 64 52.5% TECNET AS3602 307 244 63 20.5% Sprint Canada Inc. AS226 167 104 63 37.7% USC/Information Sciences Institut AS2548 365 308 57 15.6% DIGEX-AS AS16758 63 6 57 90.5% UNKNOWN AS376 133 77 56 42.1% RISQ For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Re: fwd ppml: ARIN asking about SWIP procedures
by Eric A. Hall 05 Jan '01

05 Jan '01

> On Thu, 4 Jan 2001, Eric A. Hall wrote: > > > All of this stuff (global WHOIS included) really needs to go into > > LDAP, using standardized schemas for the relevant data. > I'm not sure this is a good idea, or even possible. That's two arguments, and they need to be separated. As to the quality of the concept, standardized views of a partitioned database are required in order to facilitate improved levels of debugging and problem reporting. We already know this much: given that the Internet is a collection of independent networks, mechanisms for locating and identifying the operators of the networks are necessary in order for the network operators to manage their interconnections effectively. Every network operator with more than a year's experience under his belt will agree with this. Standardizing the information structure and supplementing the data with a standards-based referral mechanism to the downstream databases is the only real difference for this model versus the schema-free WHOIS/rWHOIS already tried. So if standardized views allow for more/better management of independent networks and their interconnections then its a good idea. The benefits of standardized schema are most apparent when you look at them in the context of a referral-based partitioned database. If every network has its own isolated partition with its own WHOIS service (requiring manual manipulation), standardized data is not necessary. But if the data sources are interconnected then standardized schema allow for higher degrees of automation, which does lead to "better". For example, an operator can provide an address in question as a search key, and then programmatically follow the referrals to locate the operator of the end-point network which owns the address in question. Faster is the "better" quality in this case. Programmatic access to distributed data can also allow for a limited amount of route-management automation, address-to-domain mapping (validation? DNS is very easy to lie to and with), and many other services. These are all positive benefits, so the idea is a good one. Whether the benefits are high enough to justify the effort is your second question. > Given the wide range of organizational approaches and privacy customs > and/or laws worldwide, I'm not sure how you could approach this. If the parties agree that it should be done, it will get done. It doesn't appear they agree with the premise, so there's no motivation to do it. Maybe from your perspective there is no requirement for it, but from the outside there is a strong desire for this kind of service. Our jobs as network operators are much harder than they should be. > Even within just the RIR's, there's the different philosophies > regarding the contents of the data. For instance, ARIN maintains > fairly tight-fisted control over it's database, which allows them the > freedom to fix things that are broken. The RIPE database is owned and > maintained by RIPE members, which allows members the freedom to update > their information on their own, and use the amount of protection they > feel appropriate. (Not to sure about the APNIC database, but the > Asia-Pacific region has its own cultural mores and specific background > as well.) What if this happened from the top down? Surely the parties would do it if they were instructed to do so by the body that empowered them in the first place? Given that scenario, the parties also have the power to do it themselves once they are motivated. I am not reading motiviation from your post. > I get the impression that LDAP/X.500 was designed with a specific > corporate and/or governmental organizational structure in mind. I > don't necessarily think this maps very well on to the anarchy that is > the Internet. The referral mechanism is the key, since it allows for distributed management of autonomous partitions. The standardized schema is only important if the referrals work. LDAP is a well-documented protocol for querying, viewing, managing and navigating partitioned data so its a good solution to the problem. > Shane Kerr <shane(a)ripe.net> > Database Software Engineer > RIPE NCC > +31 20 535 4427 -- Eric A. Hall http://www.ehsco.com/ Internet Core Protocols http://www.oreilly.com/catalog/coreprot/

1 0

Information Sharing
by Kevin Facinelli 05 Jan '01

05 Jan '01

Industry Experts, This is an opportunity to get your ideas heard. I am asking the NANOG group for industry relevant white papers, articles or information regarding: Bandwidth, Colocation Selection, Computer Hardware Selection, Network Operations Centers, Legal Issues SLA's/QOS, Peering and Interconnection, Power Systems, and Service Models. This information will be available free of charge from the web resource www.colosource.com. Colosource is a web service dedicated to providing information on issues that surround the Colocation/DataCenter industry segment. We provide a clearinghouse of information regarding over 400 different companies and seek to continue improving the value of this service. Please feel free to email me directly information that you may have for publish that can help educate our community of users. Thank You, Kevin Facinelli www.colosource.com webmaster(a)colosource.com __________________________________________________ Do You Yahoo!? Yahoo! Photos - Share your holiday photos online! http://photos.yahoo.com/

1 0

We want to give you a Brand New Free Satellite!
by GetFreeSatellite13＠dainong.co.kr 05 Jan '01

05 Jan '01

FREE Satellite T.V. System and FREE Installation For a limited time we'll give you this top of the line Digital Satellite System for FREE! We'll even include Free installation. Enjoy 100's of Channels of crystal clear digital picture and cd stereo sound on your FREE Satellite TV System. Why pay for these items in a retail store, when we're giving you the same satellite package for free. Call 888-514-6881 to be Guaranteed Your FREE Satellite Today This Innovative 20" Satellite includes a stereo receiver and an infrared remote. With this FREE offer you will have both Interactive Television Capability and an On Screen Program Guide. This limited time FREE offer is much less than the monthly cost of cable tv. All you have to do is call us to arrange delivery. If you call today, we'll throw in a second receiver for your second T.V. free. Call 888-514-6881 to Begin Surfing through 100's of Channels Today! To be removed send email to abolishus(a)yahoo.com

1 0

Pictures of Schenectady NY CO flood?
by Sean Donelan 05 Jan '01

05 Jan '01

Did anyone get pictures of the latest CO to flood in Schenectaday, NY last week?

1 0

BGP Persistent Route Oscillation Condition
by Clayton Fiske 05 Jan '01

05 Jan '01

In reference to: http://www.ietf.org/internet-drafts/draft-mcpherson-bgp-route-oscillation-0… I keep trying to see if I'm overlooking something. The first Type I Churn example (using route reflectors) has either omitted something, or is inconsistent in the following 2 steps: --- 2) Rd receives the UPDATE from Ra, which leaves Rd with the following installed in its BGP table: NEXT_HOP AS_PATH MED IGP Cost ----------------------- * 6 100 0 12 6 100 1 5 Rd then marks the '6 100, 0, 12' route as best because it has a lower MED. Rd sends an UPDATE message to its neighbors to let them know that this is the best route. 3) Ra receives the UPDATE message from Rd and now has the following in its BGP table: NEXT_HOP AS_PATH MED IGP Cost ----------------------- 6 100 0 13 6 100 1 4 * 10 100 10 5 The first route (6 100, 0, 13) beats the second route (6 100, 1, 4) because of lower MED, then the third route (10 100, 10, 5) beats the first route because of lower IGP metric to NEXT_HOP. Ra sends an UPDATE message to its peers to let them know its new best route. --- In step 2, the first route is chosen because of a lower MED, but the lower IGP cost of the second route is ignored. In step 3, the third route is chosen by lower IGP cost, despite having a higher MED than the first. Am I simply forgetting something here? -c

1 1

ADSL Info
by deen＠slt.lk 05 Jan '01

05 Jan '01

Hello Nanog, Can anyone tell me whether there is an ADSL Forum, and a ADSL Mailing List server which I can subscribe to. Could someone direct me to a site where a description is given on drafting Specifications to purchase (1) CPE/Customer Premise Equipment (2) DSLAM (3) ATM and/or Broadband RAS Preferably Pruduct Independent! Deen Sri Lanka Telecom

1 0

How can we provide enough IP address to MAN network
by Yu Ning 05 Jan '01

05 Jan '01

Hi nanog, When we build MAN (Metropolitan Area Network), we're basically enable the ip layer communication between millions of end system - taking into account the number of family, business building PCs,etc. Recall the scarcity of IPv4 address, I wonder how this huge ip address demand was met in US ? In my mind, we have the following choices: 1. Build the MAN into a private address network, a class A network 10.x.x.x will be sufficient for most metropolitan. But the cons is: need PAT/NAT to access public Internet, and that leads to the potential performance bottleneck. 2. Just wondering, can we use a distributed DHCP system? In this scenario, we can almost convert the address consuming MAN into a 10 to 1 (or 20 to 1) address pool, which achieve nearly the same address utilization efficiency of dialup address pool. Cons: don't know the scalability of DHCP, any comments? 3. Build the MAN into a IPv6 network, and use address conversion at the interconnection point between v4 and v6. Just an idea, feeling that conversion efficiency between v4-v6 should be better than NAT/PAT, any support comments? thanks ! Yu Ning -------------------------------------- (Mr.) Yu Ning, Chief Eng. Internet Network Product Dep. Data Com. Bureau, China Telecom Beijing, P.R.C. +86-10-62072357/54 --------------------------------------

5 4