- Test - lists.nanog.org

RE: Severe Response Degradation
by Derrick Bennett 28 Apr '99

28 Apr '99

This is what we are currently seeing. Unfortunately @Home does not do reverse dns for their routers so I am going by their helpdesk's descriptions of locations. I do know that the router is in SF but could not get an exact location due to @home claiming it to be a sprint issue. This also brings back the conversation of RFC1918 addressing and the problems it can cause when troubleshooting response issues. Since opening the ticket the response times are starting to get better (less actual timeouts) but the normal ping of 30-40ms is definitely not there and does severely suffer when more data intensive packets head that way. I still am not sure about locations as @home does not publish any connectivity maps that I have been able to get a hold of. From my traceroutes I would point directly to @Home's router but do not have the ability hold them to this fact which then makes it difficult when I go back and ask for allowances for bad service on my circuits. Tracing route to www.news.com [204.162.80.176] over a maximum of 30 hops: 3 <10 ms 10 ms <10 ms 10.252.25.37 4 <10 ms 10 ms <10 ms 10.252.32.1 5 141 ms 170 ms 170 ms 172.16.2.161 @Home locates this router in SF as a Peer to Sprint 6 160 ms 180 ms 181 ms mae-west.att.net [198.32.136.124] 7 190 ms 180 ms 191 ms gr1-h30.sffca.ip.att.net [192.205.31.41] 8 190 ms 180 ms 171 ms 12.127.1.193 9 140 ms 151 ms 160 ms ar2-a300s1.sffca.ip.att.net [12.127.1.141] 10 111 ms 120 ms 110 ms 12.127.194.46 11 * 12.127.194.46 reports: Destination net unreachable. Tracing route to www.yahoo.com [204.71.200.75] over a maximum of 30 hops: 3 <10 ms 10 ms <10 ms 10.252.25.37 4 <10 ms 10 ms <10 ms 10.252.32.1 5 170 ms 160 ms 140 ms 172.16.3.205 @Home locates this router in SF as a Peer to Sprint 6 150 ms 170 ms 160 ms 206.251.7.201 7 141 ms 150 ms 140 ms 206.251.7.43 8 90 ms 121 ms 120 ms 204.71.200.75 Trace complete. Derrick Bennett Quoted from Stephen: Not that the problem doesn't exist, but ... Sprint does not have a router (or any presence whatsoever) at PAIX. If anyone at PAIX peers with Sprint from a router located at PAIX, they must be buying a circuit to a Sprint POP to do it. Since Sprint has no presence at PAIX, what do you mean by "affects many of the Sprint Net peers in PAIX?" Do you have a traceroute to support your assertion that the @Home router in question is located at PAIX? (I don't know whether it is or no, but none of the traceroutes into @Home that I do from my PAIX routers show an @Home router numbered in 172.16.6 as a next hop.) If there is a problem such as you describe, it's not affecting the two PAIX routers I have that peer with @Home. Stephen

7 9

Preliminary NANOG topics
by Susan R. Harris 28 Apr '99

28 Apr '99

Greetings - here are presentations we've lined up so far for the upcoming NANOG in Eugene: - Security Attacks and Detection on OC-12 and Above Backbones (Y. John Jiang, Cable & Wireless Internet Engineering) - FBI Responses to Security Attacks on the Internet Infrastructure (Scott Larson/Steve Schmidt, FBI) - DNSSec and the new version of BIND (Paul Vixie/David Conrad, ISC) - Optical Networking (Marty Schulman/Dave O'Leary, Juniper Networks) - Wireless Networking and Improved Networking in Rural Areas (John M. Brown, iHighway) - SURFnet and the GigaPort Project (Erik-Jan Bos, Surfnet) - Amsterdam Internet Exchange (Erik-Jan Bos, Surfnet) - Controlled De-Aggregation - A Successful Experiment In More Optimal Routing (Avi Freedman, AboveNet) - InterNIC Update (Mark Kosters, InterNIC) - ARIN Update (ARIN staff) - Architecting Multicast Backbones (John Meylor, Cisco) - News from the Exchange Points (Mark Pryor, PacBell, et al.) - MPLS and Packet over SONET (Alan Hannan, Frontier GlobalCenter) - Y2K Status and NOC Contingency Planning (Sean Donelan, DRA) You'll find abstracts on our (new streamlined) Web pages: http://www.nanog.org/mtg-9905/ We're also in the process of lining up tutorials. On Sunday afternoon, Avi Freedman and Abha Ahuja will offer a session titled "Router Configuration Management Tools." The tutorial will most likely begin at 2:00 p.m., so please plan your flights accordingly! And, folks have expressed interest in hearing about several other topics, including: - Provisioning redundant fiber paths - Wide-area deployment experience with VOIP - Experiences with providing large-scale XDSL service Please check the Call for Presentations at the URL above, and let us know if you're interested in presenting a talk on any of these subjects. See you in Eugene! --Susan Harris, Craig Labovitz, and Pam Ciesla

1 0

Re: Above.net off the air
by I Am Not An Isp 28 Apr '99

28 Apr '99

At 06:51 PM 4/27/99 -0400, Becki Kain wrote: > >Personally, I'm glad it was posted. I have a friend who has two servers >at abovenet and they were not told, and definatly not 3 times, what the cause >of the downtime was. I realise it is one of the hazards of co-location of >your servers, not to be able to run to it, but still would be nice to know >it wasn't your machines that were down. In Above.Net's defense, and without making any comment on the cause or the fix of the problem, I can vouch as a "disinterested party" that three separate messages went out the tech list @ above.net regarding this issue. Perhaps your friend is not correctly registered on the contact list or something? Additionally, without commenting on the cause or the fix or even Above.Net's network, I must say Above.Net does a good job of trying to keep their customers informed. I've seen notifications for things which might not have been noticed by customers - things other providers might have tried to sweep under the rug. TTFN, patrick I Am Not An Isp - www.ianai.net ISPF, The Forum for ISPs by ISPs, <http://www.ispf.com> "Think of it as evolution in action." - Niven & Pournelle (No, I still don't have enable.)

2 1

Severe Response Degradation
by Derrick Bennett 28 Apr '99

28 Apr '99

I have waited 24 hours before posting this and after many updates I believe this too be multi-vendor and operational enough for nanog. Many people have been seeing high response times (200-500ms) when packets route through an @Home 172.16.6 router I believe is at PAIX in Northern California. According to the @Home noc this is a tier 4 issue with their helpdesk and is bandwidth related. But instead of your normal saturation issue the help desk is telling me that the problem is related to a network routing storm coming from Sprint Net's network's and affect's many of the Sprint Net peers in PAIX. I have been unable to confirm this with Sprint and was hoping others on the list could help confirm this issue and it's actual reach and/or impact. Derrick Bennett

2 1

Re: Survey
by Sean Donelan 28 Apr '99

28 Apr '99

richer(a)cnri.reston.va.US (Ira Richer) writes: >The FCC has chartered the Network Reliability and Interoperability >Council (NRIC) to address a number of issues about the reliability of >communications systems, primarily traditional telcos. One of the A reminder. If you plan to respond to the survey Ira previously mentioned the deadline for responding is Friday. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

RISK FREE HOME BASED BUSINESS
by Charlie 28 Apr '99

28 Apr '99

Need more money? Have big dreams? NO RISK BUSINESS - Not MLM! Own a home based catalog business for $29 and work at your own pace! Debt free consumer direct manufacturer needs reps to set up wholesale accounts. True residual income on superior quality consumable products. 100% money back guarantee. Potential to earn top CEO income. If you're tired of the rat race, would like to experience time freedom, and build a risk free solid business, call (509) 880 0303. THIS IS AWESOME! You CAN have your dreamss back! ///////////////////////////////////////////////////////////////// REMOVE AT mailto:bobb@marchmail.com?subject=remove /////////////////////////////////////////////////////////////////

1 0

RE: Contact handles disappearing mysteriously from the whois database!
by John Fraizer 28 Apr '99

28 Apr '99

At 01:45 PM 4/27/99 -0600, Lauren.Nowlin(a)Level3.com wrote: > >I'm sure you have no idea what Mark went through to be allowed to >post on NANOG. Don't further frustrate the messenger... He likely >already has internal bruises for his efforts and doesn't deserve an >extra dose of sarcasm. > > -Ren Oh -- We know. It is obviously NSI policy to keep their CUSTOMERS in the dark about operational issues with a service for which we are paying $35/yr per domain. Just like it is their policy to omit information from information posted on their web site regarding financial information citing "proprietary information" although this information is available via FOIA. We appreciate the fact that Mark may be black-and-blue for weeks as a result of his post to NANOG. We do NOT appreciate the cloak-and-dagger tactics for which NSI is now world renowned. Lose a record here, arbitrarily delete a domain here, remove telephone contact information from the web site, redirect internic.net to networksolutions.com and delete/move/modify/FUBAR the information/templates/forms that have been in the same location for YEARS citing "Improvements" as a reason -- ALL without consulting the public OR the Government before doing so. I could give a rats ass about how pretty their site is. Their cutesy little graphics are a waste of bandwidth. Speaking of which, I'm surprised that there wasn't any stink about them providing ad space to VeriSign on the old internic.net site. I want reliable -- dependable -- FAMILIAR service. You would think these people had J. Edgar Hoover at the wheel. ------------------------------------------------------------------ ML.ORG is gone. Check out http://www.EZ-IP.Net - It's *FREE* ------------------------------------------------------------------ Get your *FREE* Parked Domain account at http://www.EZ-Hosting.Com ------------------------------------------------------------------ John Fraizer | __ _ | The System Administrator | / / (_)__ __ ____ __ | The choice mailto:John.Fraizer@EnterZone.Net | / /__/ / _ \/ // /\ \/ / | of a GNU http://www.EnterZone.Net/ | /____/_/_//_/\_,_/ /_/\_\ | Generation PGP Key fingerprint = 7DB6 1CA2 DAA6 43DA 3AAF 44CD 258C 3D7E B425 81A8

3 3

Corelation between traffic and prefixes
by Alex Bligh 27 Apr '99

27 Apr '99

Has anyone done a (statistical) corelation and regression exercise between number of announced prefixes from peers, and traffic sent to them, and if so would they be prepared to publish the consolidated data (if not the anonymized data set)? Equally is there a corellation between advertised address space and traffic sent? Yes, there is an operational reason for this question. Essentially I'd like to know (a) whether advertized prefixes have a definable average "value" as well as "cost" (cost in terms of router resources), and (b) to what extent total prefixes is in practice a good measure of network size for peering decisions, or whether one really needs go do the Netflow. For instance on (a) I have noticed one inverse corelation - networks which are poor at CIDR tend to cause more aggro and give less value than the equivalent total address space. I am interested more in statistical data than opinion, the former of which I have have a lack of, the latter a surfeit. I will anonymize and summarize useful private replies to this list unless a preference otherwise is indicated. -- Alex Bligh GX Networks (formerly Xara Networks)

1 0

RE: Contact handles disappearing mysteriously from the whois data base!
by Lauren.Nowlin＠Level3.com 27 Apr '99

27 Apr '99

I'm sure you have no idea what Mark went through to be allowed to post on NANOG. Don't further frustrate the messenger... He likely already has internal bruises for his efforts and doesn't deserve an extra dose of sarcasm. -Ren On Tuesday, April 27, 1999 1:31 PM, Jay R. Ashworth [SMTP:jra@scfn.thpl.lib.fl.us] wrote: > > On Tue, Apr 27, 1999 at 02:55:24PM -0400, Mark Kosters wrote: > > Two things have occured over the past week that have lead to changes > > in whois. > > My ghod; they _are_ alive! > > You know, I didn't see those things mentioned on RS-ANNOUNCE... > > > Cheers, > -- jra > -- > Jay R. Ashworth > jra(a)baylink.com > > Member of the Technical Staff Buy copies of The New Hackers > Dictionary. > The Suncoast Freenet Give them to all your friends. > Tampa Bay, Florida http://www.ccil.org/jargon/ > +1 813 790 7592

1 0

Re: address spoofing
by Simon Leinen 27 Apr '99

27 Apr '99

>>>>> "rb" == Randy Bush <randy(a)psg.com> writes: > [...] > but the uglier symptoms are packets from my own address space > deny ip 147.28.0.0 0.0.255.255 any (6 matches) One of our customers has 129.129.0.0/16, and we sure receive a lot of leaked packets with source and destination addresses in that range from our upstream. (One of these days I'll try to get those traced :-) 147.28.0.0 doesn't seem like a likely "random" prefix though. Maybe an ex-customer/employee of yours didn't clean up their configuration when they left? -- Simon. http://www.switch.ch/misc/leinen/

1 0