- Test - lists.nanog.org

Re: Napster & other bandwidth hogs
by ken harris. 24 Jan '00

24 Jan '00

Ryan Bek [12:57 PM 1/24/00 -0500] wrote: :I (and I presume many others) have had concerns brought to us about the :bandwidth hogging apps & services, like Napster Music Community. As many have :discovered, applications such as these can consume a good deal of a broadband :connection, as users can serve up files from their own machines, subverting :normal firewall configs that can prevent undesired behind-the-firewall :serving. there was a c|net report on just this the other day. it actually is directly related to universities. school's crack down on net music software napster < http://news.cnet.com/news/0-1005-200-1527930.html?tag=st.ne.1002. > :-Ryan- -ken harris !k < ken at arpa dot com >

1 0

Napster & other bandwidth hogs
by Ryan Bek 24 Jan '00

24 Jan '00

Hello all - I (and I presume many others) have had concerns brought to us about the bandwidth hogging apps & services, like Napster Music Community. As many have discovered, applications such as these can consume a good deal of a broadband connection, as users can serve up files from their own machines, subverting normal firewall configs that can prevent undesired behind-the-firewall serving. Since these apps are becoming more and more prevalent, as college students are huge collectors of digital music, and as bandwidth is always a concern, I am wondering what others in either the educational or business community are doing in light of this. Even having logistical information such as, "close ports x, x, and x" would be of assistance. I'd just like to have some ammunition in case others higher on the food chain ask for this to happen. While there *is* a big concern about copyright (lawsuits and such are in the works against Napster), but being part of an educational community, restricting services based on content is a *huge* can of worms that is dealt with at higher levels than where I function. I mostly need to know the technical end of stuff - Napster's site doesn't list any technical stuff like what ports are used. Thanks a bunch! -Ryan- Ryan Bek Help Desk Manager Office of Information Technology, Greensboro College Phone - (336) 272-7102 x354 FAX - (336) 271-6634

8 9

Re: Atlanta <--> Jax Fiber Outage?
by Sean Donelan 24 Jan '00

24 Jan '00

On Mon, 24 January 2000, Robert Gash wrote: > I'm noticing severe reachability problems on the Jacksonville, FL <--> > Atlanta, GA links. The issue appears to be a fiber cut (or a partial > fiber cut) between my upstream and Sprint Atlanta. Can anyone confirm > this outage? There have been ongoing problems throughout the southeast due to the severe ice storm over the weekend. Power and telephone outages have been reported, and some Internet providers were effected. However, yours is the report I've seen of a problem between Sprint Atlanta and Jacksonville.

1 0

Atlanta <--> Jax Fiber Outage?
by Robert Gash 24 Jan '00

24 Jan '00

I'm noticing severe reachability problems on the Jacksonville, FL <--> Atlanta, GA links. The issue appears to be a fiber cut (or a partial fiber cut) between my upstream and Sprint Atlanta. Can anyone confirm this outage? -- .----------------- PGP Key: `finger gashalot(a)gashalot.com` -----------------. | Robert Gash | Work - gashalot(a)fasturl.net | | Senior Systems Administrator | Personal - gashalot(a)gashalot.com | | VenerNet Inc -- www.fasturl.net | http://www.gashalot.com | `---- PGP Key Fprint: 78 5D 64 D2 99 F3 D8 A0 B2 56 DF EF F2 C6 D3 DF ----'

1 0

TPRC CFP
by Robert Cannon 24 Jan '00

24 Jan '00

The Telecommunications Policy Research Conference is increasingly turning its attention to Internet policy issues, reflective in the change in the name of the conference this year. Traditionally the participants are academians and government policy makers. It is hoped by many (such as myself) that there will be increased participation by NANOG and IETF types. More information about the conference is available at the website. -Bob Cannon CALL FOR PAPERS www.tprc.org TPRC Presents: The 28th Research Conference on Communication, Information and Internet Policy September 23-25, 2000 Alexandria, Virginia TPRC is an annual forum for dialogue among scholars and decision-makers from the public and private sectors engaged in communication and information policy. The purpose of the conference is to acquaint policymakers with the best of recent research and to familiarize researchers with the knowledge needs of policymakers and industry. The TPRC program is assembled from submitted and invited abstracts. TPRC is now soliciting proposals for papers for presentation at its 2000 conference. Proposals should be based on current theoretical and/or empirical research relevant to the making of communication and information policy, and may be from any disciplinary perspective. TPRC welcomes national, international, or comparative studies. Subject areas of particular interest include, but are not limited to the following. An elaboration for each topic is available at the above URL. Privacy Universal Service (Social and Economic perspectives) International Governance (e.g. WIPO, WTO, ITU, ICANN, IETF, W3C) Pricing Structure User Studies Infrastructure (e.g. Broadband Development) Mass Media and the Internet (e.g. Streaming Media) Intellectual Property (e.g. Deep Linking and Copyright) Wireless Policy Challenges (e.g. 3G, Bluetooth, Spread Spectrum, WAP) Sustainable Open Source Models Network Reliability (e.g. Y2K, 2036, NRIC) Real Options and Investments Access, Pinch Points and Antitrust Accessibility Issues Community Networking Internet and Human Rights (e.g. Culture, Gender and Censorship) IP Telephony (e.g. Settlement and QOS) Internet Service Quality Economics & Policy Value Sensitive Design of Cyberspace Regulation of Online Activity (e.g. Taxation, Gambling, Protection of the Vulnerable, Grey Markets) Civil Society, Political Participation and the Internet E-Commerce (e.g. Trust, Security, Liability and Dispute Resolution) Bandwidth and Spectrum Markets Regulatory Design for Economic Growth and Development Globalization of the Knowledge Economy Statistical Studies Critical Infrastructure, Cyberwar and Law Enforcement Internet Appliances Evolution of Industry Structure Abstracts should be certain to contain a clear statement of the central ideas and outcomes of the research, in addition to a description of the topic being addressed. All submissions must be submitted via the TPRC web site at http://www.tprc.org. The site contains a form that you can use to submit your contact information, a 500 word abstract, and a brief CV. In addition, if you have already written a full paper, you may post that online and submit the URL. Submissions are due by March 24, 2000. No submission will be accepted after this date. Selected papers will be required to be no more than 30 pages and will be due to TPRC by August 18, 2000. Papers not received by that date will be removed from the program. TPRC intends to provide access to all accepted papers either through publication on our web site or through a link to its publisher. Inquiries may be made to Dawn Higgins: (202) 452-9033 or tprc(a)ei.com. ______________________________________________ FREE Personalized Email at Mail.com Sign up at http://www.mail.com?sr=mc.mk.mcm.tag001

1 0

Follow-UP: URGENT NEED HELP: DOS Currently underway via C&W transit link
by John M. Brown 23 Jan '00

23 Jan '00

Hats off to C&W's NOC staff. Within 10 min of calling, and not even having to get uptight, they had a ACL on there edge rtr to us!!!! now the trace back to see who it might be..... Ain't broad-band wonderful!! Thanks to C&W!!!

1 0

URGENT NEED HELP: DOS Currently underway via our C&W transit link
by John M. Brown 23 Jan '00

23 Jan '00

We have a DOS attach currently underway via our C&W transit link. This is consuming all bandwidth on the C&W link. This is NOT transiting our other backbone links Source IP's are random Dest IP is 206.29.129.98 which is a Co-Lo server using 206.29.129.96 /27 Certainly would be nice if people would filter on there edges. If anyone can lend help in finding this nice person doing this, there will be a reward at NANOG San Jose! :) Here is a snip from CFLOW mm/dd/yy hh:mm:ss ii oi srcAS src_address mk port next_hop_addr dstAS dst_address mk port pr tos flgs packets bytes -------- -------- -- -- ----- --------------- -- ----- --------------- ----- --------------- -- ----- -- --- ---- ---------- ---------- 01/22/100 23:54:30 2 1 0 168.87.199.44 00 23098 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 195.64.161.18 00 28986 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 159.225.88.89 00 31034 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 51.173.107.119 00 34874 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 72.228.241.56 00 39226 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 114.152.168.77 00 45114 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 6.198.65.52 00 49210 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 218.86.51.65 00 55610 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 148.224.190.10 00 61242 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 38.123.67.54 00 59 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 178.119.185.125 00 1851 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 119.254.14.35 00 8507 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 5.4.243.62 00 14139 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 57.135.125.85 00 16187 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 56.100.199.112 00 20795 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 35.18.98.42 00 27451 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 129.177.110.76 00 30523 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 166.57.114.31 00 33083 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 88.123.137.92 00 37435 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 170.35.224.39 00 43579 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 59.166.68.52 00 48955 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 167.153.104.107 00 53051 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 179.106.107.86 00 55611 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 88.195.189.97 00 59963 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 250.102.51.105 00 64827 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 211.55.122.90 00 4924 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40 01/22/100 23:54:30 2 1 0 149.44.239.105 00 6716 206.29.129.98 0 206.29.129.98 27 23 6 8 00 1 40

1 0

Re: New form of packet attack named Stream
by Vadim Antonov 23 Jan '00

23 Jan '00

Jamie Rishaw <jamie(a)dilbert.exodus.net> wrote: > Unless you are > Vixie > Hubbard > Cerf > Donelan > Manning > Bush > Jesus Christ (Randy, you _do_ look like a biblical personage :) > A major s/w key figure > or comparable entity > .. or someone that knows me IRL, and has for some time .. please do not > e-mail me asking for the code. Actually, you provided enough details, so any unix guy who knows his sockets can write the program in fifteen minutes. This type of attack was known for a long time (and there are even nastier variations using TCP header bits and fragments), and, unfortunately, there's no good defense against it. The core routers are indeed vulnerable; is there any router which has an access list for restricting packet flow to the routing processor? (My knowledge of latest-and-greatest features from OFRV is somewhat outdated). A toyed with the idea of reverse-path verification coupled with some kind of super-squelch message; but so far all such schemes have holes in them. DoS attacks are a real scourge. --vadim

7 7

Re: Wireless cards for NANOG18
by Shawn McMahon 21 Jan '00

21 Jan '00

At 01:28 PM 1/21/2000 -0500, you wrote: >Greetings everyone - we wanted to let you know that Merit is looking for >wireless sponsors for the upcoming meeting in San Jose. We've been >offered the loan of several dozen cards, but if possible, we'd like to >have even more available for the mobile among you. Our preferred formats >are: > > - 802.11 compliant, Direct Sequence Spread 2.4 GHz (DS) > 2 Mb/s, 11 Mb/s > - 802.11 Compliant, Frequency Hopping 2.4 GHz (FH) Frequency Hopping. Dang, we're gonna miss you, Hedy. Best lookin' geek I ever saw.

1 0

NANOG 18 Hotel Info
by Pam Ciesla 21 Jan '00

21 Jan '00

The Double Tree (408-453-4000) has rooms still available for Sunday and Monday. Other hotels in the area are: Courtyard San Jose 408-441-6111 Hyatt 408-993-1234 Hanford Hotel 408-453-3133 Pam Pam Ciesla Events Coordinator Merit Network,Inc. 734-936-0172 - phone 4251 Plymouth Road 734-647-3185 - fax Bldg.I, Suite 2000 pam(a)merit.edu Ann Arbor, MI 48105

1 0