- Test - lists.nanog.org

Re: Port 139 scans
by vern＠ee.lbl.gov 28 Sep '00

28 Sep '00

> I am particularly concerned over this issue of these broadcasts > originating from Concentric.net I don't think they particularly are. Here at lbl.gov (128.3/16), we're getting scanned from cmu.edu (128.2/16). nersc.gov (128.55/16) is getting scanned from ucsd.edu (128.54/16). So it could well be that the ones being scanned from concentric.net are simply those with nearby address blocks, and it's just one small part of rampant scanning from all over the place. By the way, we identified a couple instances of the virus that Ken Lindahl mentioned in his earlier post. Vern

3 2

Re: NANOG 20 River Rafting *unofficial* Trip
by Kinnith Wallace 28 Sep '00

28 Sep '00

Sean Donelan> The rafting trip looks cool too. Yeah, and US$ 25 is great! But you have to sign up for 3 years of rafting. And whatever happened to 100 free hours? :] (Forgive me, Ron.) -Kinnith Wallace "...99 percent of all NT problems can be solved using the same technique: 'reinstall the (what for lack of strong ethics we call) Operating System, reinstall the applications...'" -reader quoted by Philip Greenspun, http://www.arsdigita.com/books/panda/server

3 2

Re: CEF RPF check w/ACLs (was: Re: netscan.org update)
by Patrick W. Gilmore 28 Sep '00

28 Sep '00

At 02:49 PM 9/28/2000 +0100, James A. T. Rice wrote: >ip verify unicast reverse-exists > >i.e. only accept the packet on this interface if there is a route back to >the source, *not necessarily on the same interface*.. >This should be safe to use on all interfaces and could use the existing >CEF FIB, and might catch a lot of spoofed packets on a good day. That would only stop Bogons on most core routers (full tables, right?). >ip verify unicast destination-advertised > >This would check the destination address on any packet coming into an >interface, and drop it if a route to that destination WASNT advertised out >of that interface - /ideal/ for NAPs & IX's. Couldnt use the existing cef >tables, cisco would need to write an advertised-table for each >interface. Again this should be safe to use on almost any interface. Hrmmm.... That would be nice.... But there are other ways to do this. They may or may not be useful / applicable in your environment, but it can be done without this feature. >James TTFN, patrick

2 1

RE: netscan.org update
by rdobbins＠netmore.net 28 Sep '00

28 Sep '00

Could you elaborate on this, please? Granted, I'm a hosting shop and not a backbone network, but I'm running CEF on my border without complaint, and to apparent good effect. Is there some sort of lossage in doing so that I'm missing? John Fraizer wrote: >snip< > > I have yet to find an easy way to implement CEF on the border that doesn't > break something in some funky way or another. > >snip<

8 8

RE: Port 139 scans
by Roeland M.J. Meyer 28 Sep '00

28 Sep '00

> >> a large number of random hosts scanning through their > >> address space using TCP > >> on port 139? > > We have been seeing this for about 3 weeks now. > > s/weeks/years/ Yes, but definitely a recent upsurge in this activity. I have three clients reporting same. Storm's a brewin'.

1 0

Re: OSPF VS. IS-IS
by Marshall Eubanks 28 Sep '00

28 Sep '00

Troy Davis wrote: > > my email client is not a web browser.. > > seriously, the vast majority of nanog subscribers can't read HTML > "enhanced" messages. > > On Wed, 27 Sep 2000, Marshall Eubanks <tme(a)21rst-century.com> wrote: You are absolutely correct and I apologize - I have changed my preferences so that this will not happen again. In some ways, this has been superceded, but FWIW here is the original -------- Original Message -------- Subject: Re: OSPF VS. IS-IS Date: Wed, 27 Sep 2000 19:27:41 -0400 From: Marshall Eubanks <tme(a)21rst-century.com> Reply-To: tme(a)21rst-century.com Organization: Multicast Technologies To: Leo Nelson <lnelson(a)axient.com> CC: "'nanog(a)merit.edu'" <nanog(a)merit.edu> References: <2A2BBEF175D5AC4F9796F03C98F08C1F7817A7(a)ax000002.phx.axient.com> Leo Nelson wrote: > > > Hello I am in search of any articles that reflect the differences > between OSPF and IS-IS. I am particularly interested in papers that > highlight design, implementation, bandwidth usage, and scalability > concerns for large internetworks. > > Also if anyone could give some statistics on the how much IS-IS is > being used in large scale ISP, ASP, and NAPs > > Thank You > Leo Nelson CCNA > Axient Communications > 602.850.3083 Have you read Radia Perlman;'s book ? She was a creator of IS-IS, and goes into some detail. I would start there... >From Amazon : Interconnections, Second Edition : Bridges, Routers, Switches, and Internetworking Protocols (Addison Wesley Professional Computing Series) by Radia Perlman Our Price: $59.95 Availability: Usually ships within 24 hours. See larger photo Hardcover - 560 pages 2 edition (October 1999) Addison-Wesley Pub Co; ISBN: 0201634481 ; Dimensions (in inches): 1.28 x 9.55 x 7.65 -- Regards Marshall Eubanks T.M. Eubanks Multicast Technologies, Inc. 10301 Democracy Lane, Suite 410 Fairfax, Virginia 22030 Phone : 703-293-9624 Fax : 703-293-9609

1 0

OSPF VS. IS-IS
by Leo Nelson 27 Sep '00

27 Sep '00

Hello I am in search of any articles that reflect the differences between OSPF and IS-IS. I am particularly interested in papers that highlight design, implementation, bandwidth usage, and scalability concerns for large internetworks. Also if anyone could give some statistics on the how much IS-IS is being used in large scale ISP, ASP, and NAPs Thank You Leo Nelson CCNA Axient Communications 602.850.3083

3 2

RE: OSPF VS. IS-IS
by Leo Nelson 27 Sep '00

27 Sep '00

Way cool thank you very much Ping -----Original Message----- From: Ping Pan [mailto:pingpan@research.bell-labs.com] Sent: Wednesday, September 27, 2000 3:21 PM To: Leo Nelson Cc: 'nanog(a)merit.edu' Subject: Re: OSPF VS. IS-IS Some have brought up this question before. Please take a look at http://www.nanog.org/mtg-0006/katz.html - Ping > Leo Nelson wrote: > > Hello I am in search of any articles that reflect the differences > between OSPF and IS-IS. I am particularly interested in papers that > highlight design, implementation, bandwidth usage, and scalability > concerns for large internetworks. > > Also if anyone could give some statistics on the how much IS-IS is > being used in large scale ISP, ASP, and NAPs > > Thank You > Leo Nelson CCNA > Axient Communications > 602.850.3083

1 0

RE: Port 139 scans
by Roeland M.J. Meyer 27 Sep '00

27 Sep '00

> From: John Fraizer [mailto:nanog@EnterZone.Net] > Sent: Wednesday, September 27, 2000 11:26 AM > > On Wed, 27 Sep 2000, Bill Becker wrote: > > > Speaking of the internet and the way it operates, is anyone > else seeing a > > large number of random hosts scanning through their address > space using TCP > > on port 139? > > > > Bill > > We have been seeing this for about 3 weeks now. I have too, it looks like they're looking for Windoze and Samba boxen. That's one of the netbios ports.

2 1

RE: Inventor of the Internet Technology / Father of Modern Day Ne tworking
by Michael Medwid 27 Sep '00

27 Sep '00

No - Al Gore invented the Internet. (Sorry list - I couldn't resist.) -----Original Message----- From: Ehud Gavron [mailto:GAVRON@ACES.COM] Sent: Wednesday, September 27, 2000 9:28 AM To: nanog(a)merit.edu Cc: GAVRON(a)ACES.COM Subject: Inventor of the Internet Technology / Father of Modern Day Networking My apologies for this non-op note. I was hoping to tap the wisdom of the collective. http://www.lk.cs.ucla.edu/ http://www.lk.cs.ucla.edu/LK/Inet/keys.html Is there a person who invented the Internet, and is this person him? Cheers, Ehud

4 3