- Test - lists.nanog.org

Re: OUTAGE: DACS failure in USWEST/spokane
by Sean Donelan 28 Dec '98

28 Dec '98

SEAN(a)dra.COM (Sean Donelan) writes: >This morning USWEST lost a DACS serving Spokane (and other places >in Washington State). Now the story starts changing. The telco is now saying it was a power outage, and the standby power failed at the central office. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

5 5

Re: OUTAGE: DACS failure in USWEST/spokane
by Sean Donelan 28 Dec '98

28 Dec '98

rmeyer(a)mhsc.COM (Roeland M.J. Meyer) writes: >After five years of dealing with USworst ... dumb management. Those guys >couldn't find a clue in a clue factory. The Colorado Public utilities The reason I asked is the "problem" doesn't seem to be confined to USWEST. I've experienced the DACS problem with different RBOCS and several inter-exchange carriers. So I don't think it is just a USWEST issue. I don't know the DACS vendor used in the various incidents, so there may be a correlation by equipment vendor. In this incident, it turned out not to be a DACS problem, but a power problem. Nevertheless, my initial comments did cause a number of people to go Hmm? I received a several responses. From the anedoctal reports, something seems amiss. Several people reported a detectable up-tick in DACS related problems this year. Was there some sort of upgrade everyone installed their DACS in the last year? Even if it is just customer service reps playing the "Wheel of Excuses," there is usually some problem trend which leads them to start using a particular problem to close trouble tickets. Most customer serice reps wouldn't know a DACS if it fell on them. Someone must be using the term in their presence. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Re: New resource available!
by jprovo＠ma.ultranet.com 28 Dec '98

28 Dec '98

[snip] >> Care to explain why the heck we need yet another forum for that sort of stuff? > If you can point me to other forums where it belongs and that do >the same thing I would be interested in knowing. I have yet to see a list >(Which doesn't mean one doesn't exist) where people (Hopefully ISPs and >NSPs and the likes) talk about where they are seeing a smurf attack, or >who is strobing them or other such activities. Funny, ongoing attacks that one wishes to be pubilc about sure sound "operational" in nature to me. If one didn't wish to be public, sending data to the appropriate molassas-agency (CERT, et al) would make sense. Was anyone yelled at on NANOG for talking about ongoing attacks? I don't think so. Personally, I'm so pleased to see the current commodity nature of domain names put to such good use; the internet version of one-hit-wonders/one trick ponies/etc. Joe

1 0

OUTAGE: DACS failure in USWEST/spokane
by Sean Donelan 27 Dec '98

27 Dec '98

This morning USWEST lost a DACS serving Spokane (and other places in Washington State). That isn't very unusual, but did spark my interest in a continuing pattern of DACS failures around the country. Not only have several telco's we use had DACS failures (usually a power supply), but the mean time to repair (and reprogram) them was over 12 hours. Whatever method of quickly re-loading the repaired DACS configuration doesn't seem to be working, or the operational procedures of several telephone companies are lacking. Generally after 10-12 hours, the telco usually informs us they are manually re-programming the DACS circuit by circuit. Have other network operators seen the same thing from their facility departments or providers? Is this a problem with the DACS vendor, user- interface design, operator procedures, or dumb management? -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

3 2

Urgently need help: Question about Japanese leased line
by Tatsuya Kawasaki 26 Dec '98

26 Dec '98

Dear Operators, I believe this type of leased line service is only in Japan. Does anyone explain the REAL different bwtn DA(digital accesss), DR (ditial Reach) and true leased line called HSD? Better yet NO MORE DA NOR DR!!!!!!!!!! I know from our experience, DA, DR are cheap and always gives us the problem when either sides of leased line goes off, ie power failure. In the past, all I can do is to ask NTT to check the line, needless to say the result comes back with OKAY but with not our supprise-- hey what would I expect from NTT anyhow..., without changing anything, the network comes back normal. Once someone explains in the past that it might be something to do with electric charge in DSU which "lock" circuit and when it is disconnected to check, it will be discharged and back to normal or something like that. Anyone can add this or correct what I have just said. Suggestion in either English or Japanese is accepted. Sincerely urgently yours, Tatsuya かわさき TK3197 = = = = = = Business Network Telecom (BNT) ビジネスネットワークテレコム株式会社〒111-0053　東京都台東区浅草橋3-8-5 31山京ビル6階 TEL 03-5687-0307 FAX 03-5687-6009 http://www.giganet.net

1 0

Re: New resource available!
by TTSG 26 Dec '98

26 Dec '98

> Hi there, too, > > And we need this because.... ? *blank obviously clueless stare, wildly waving > hands* > I'm sorry you felt my message was a spam. > > Care to explain why the heck we need yet another forum for that sort of stuff? > If you can point me to other forums where it belongs and that do the same thing I would be interested in knowing. I have yet to see a list (Which doesn't mean one doesn't exist) where people (Hopefully ISPs and NSPs and the likes) talk about where they are seeing a smurf attack, or who is strobing them or other such activities. The idea was originally brought up on Inet-Access and met with very little interest. Then, within the span of a week, over a dozen multi-site hacks were attempted. People would post something like "Is anyone seeing probing from '1.2.3.4'?" We then worked to stop the hacking. Sometimes it took multiple people to call the contact for them to believe us. Sometimes people had to ask how to contact someone, or where to look for information, or "Gee, how can I tell if this is happening to me". Rather than junk up the news groups (Inet-Access, Nanog) we started another one, allowing people to concentrate on the other issues on the other lists. The announcement list should be a low volume list (Unless the occurances of attacks warrants it) so many can join that and be fairly certain that only important messages will be posted. I hope I've made this clear enough, but if not I welcome more comments or criticism. Tuc/TTSG > Thanks & happy holidays, > Chris > > On Fri, Dec 25, 1998 at 09:41:35PM -0500, TTSG wrote: > [.. <spam imploded> ..] > > -- > Frisbeetarianism, n.: > The belief that when you die, your soul goes up on the roof and gets stuck. >

1 0

New resource available!
by TTSG 26 Dec '98

26 Dec '98

Hi, New forum for discussing and alerting others to attacks of any type be they strobe, exploit, smurf, etc. This is a closed list, unmoderated. We hopefully expect a decent traffic level. hack-track(a)hack-track.com - Subscribe by sending: subscribe hack-track <Yourname> to listproc(a)hack-track.com A second list has been designed for low volume, critical information. Only confirmed multi-site attacks will be broadcast. This is a closed, moderated list. hack-track-announce(a)hack-track.com - Subscribe vy sending: subscribe hack-track-announce <Yourname> to listproc(a)hack-track.com A web site will also carry the archives, and any important information. You can find it at http://www.hack-track.com/ PLEASE, if you have ANYTHING to submit, or want to help admin the moderated list (I'd like to get atleast a few people around the world to help so that the fate of the internet doesn't rest completely on my shoulders), or if you want to help put together a FAQ, PLEASE, PLEASE (Can I beg enough) email me privately. (I have a self imposed restriction of 100000 bytes per email message, if you need to send something larger than that we can arrange for it to be FTP'd to me) Thanks, Tuc/TTSG

1 0

The Cidr Report
by Tony Bates 25 Dec '98

25 Dec '98

This is an auto-generated mail on Fri Dec 25 12:00:00 PST 1998 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 25Dec98 0) General Status Table History ------------- Date Prefixes 181298 54712 191298 54745 201298 54631 211298 54716 221298 54845 231298 54811 241298 54847 251298 54839 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 4371 Number of ASes announcing only one prefix: 2158 (1151 cidr, 1007 classful) Largest number of cidr routes: 355 announced by AS3561 Largest number of classful routes: 1003 announced by AS701 1) Gains by aggregating at the origin AS level --- 25Dec98 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 389 144 245 63.0% BCnet Backbone AS2493 325 178 147 45.2% iSTAR Internet, Inc. AS3749 222 77 145 65.3% TECNET AS701 1003 863 140 14.0% Alternet AS1785 541 403 138 25.5% NYSERNet Backbone AS174 667 544 123 18.4% Performance Systems International AS5668 133 36 97 72.9% Century Telephone Inc. AS4200 189 96 93 49.2% AGIS (Apex Global Information Ser AS4755 142 62 80 56.3% Videsh Sanchar Nigam Ltd. India AS1267 109 30 79 72.5% IUNET-AS AS4293 207 135 72 34.8% IMCI AS549 221 155 66 29.9% ONet Backbone AS4740 383 321 62 16.2% Ozemail Pty Ltd (ASN-OZEMAIL) AS1221 390 332 58 14.9% AARNET-AS AS8517 129 72 57 44.2% UNKNOWN AS7657 141 86 55 39.0% The Internet Group Limited AS7046 245 193 52 21.2% UUNET-CUSTOMER AS7545 115 65 50 43.5% TPG Internet Pty Ltd AS1239 534 485 49 9.2% SprintLink Backbone AS72 88 40 48 54.5% Schlumberger Information Network AS7496 73 28 45 61.6% Power Up AS577 211 166 45 21.3% Bell Canada Backbone AS10928 93 50 43 46.2% UNKNOWN AS852 174 132 42 24.1% AGT Advance Communication AS3221 84 42 42 50.0% RIPE-ASNBLOCK4 AS719 444 405 39 8.8% LANLINK-AS AS803 71 35 36 50.7% SaskNet Backbone AS7122 111 76 35 31.5% MTS ADVANCED Network Policy AS2707 65 32 33 50.8% WEC AS6897 46 14 32 69.6% RIPE-ASNBLOCK6 For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

AUTORESPONDERS : Gentle Reminder
by Rodney Joffe 25 Dec '98

25 Dec '98

Hello, A gentle reminder to those of you who use autoresponders when you go on vacation - are out of the office - go to the men's/ladies room etc. DON'T subscribe to NANOG and other lists from these accounts. Having just been bombarded by a bunch of "I'm out of the office on Vacation until January 5th - In case of emergency..." type messages after my prior message, I can tell you it's irritating as hell, and pretty rude. /rlj

10 10

Re: follow up on gigabit either
by George Herbert 24 Dec '98

24 Dec '98

K wrote: [useful summary of gigabit ether situation] >Steve also made exclnt point that the ATM vs 'promiscuous' medium > have other inherent distinction of potential interest > to ISPs with policy/privacy/security concerns I'm not quite sure I understand this bit; isn't switched ether (of any speed) equally secure as an ATM switch would be? -george william herbert gherbert(a)crl.com I speak only for myself

3 2