- Test - lists.nanog.org

Registered Class C addresses
by Peter Polasek 18 Dec '98

18 Dec '98

I apologize in advance if this is an ISP 101 question. Is there any reasonable method for acquiring a registered Class C address these days? We are opening a data center in England and need at least 2 registered Class C addresses IP for the production network. Last time I checked, subnetted class C registered addresses were still available (within the Class A range), but pure Class C addresses were not. We very strongly prefer to avoid subnetting addresses because this becomes extremely difficult maintain when the network becomes large (as this will). The reserved private range address are not appropriate because this will not be a private network. Please reply directly to me and I will issue a summary to the group. Thanks, Peter Polasek pete(a)brass.com

2 1

SF POWER: Dec 16 briefing and indepedent analysis
by Sean Donelan 17 Dec '98

17 Dec '98

For those wondering how a single human error could take down a chunk of the power grid, it now appears there were at least two failures involved in the San Francisco blackout. The original root cause: the failure to remove safety grounds; and a second failure in the protective systems. The second failure in the protective systems is now under investigation. http://www.pge.com/whats_new/news/outage.html PG&E has added a 2nd backup system to the San Mateo plant. Exactly what the second backup system is supposed to do, wasn't clear from the PG&E statement. In addition to PG&E's internal investigation, there are now two other independent investigations by the California Public Utility Commission and the California Independent System Operator. This power outage seems to have struck a nerve. I don't remember there being this type of hostility after the double Western States blackouts in 1996. -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

1 0

Re: System and Network Monitoring
by Ravi Pina 17 Dec '98

17 Dec '98

On Thu, Dec 17, 1998 at 10:55:15AM -0500, Ashley Streb wrote: > Any examples of this up and running? I can see the one reference to it > at http://puck.nether.net/sysmon/, but would like something a little more > detailed. > I would be curious to see how people have implemented it and > exactly how they have extracted information out of > it. > > Thanks. > > -Ashley What are you looking for? The best way to get an example is to run it yourself. I use it to monitor our entire network, all production machines and each of their processes. The system emails out up/down pages which I send to our internal ticketing system, to a pager gateway, and log to a local facility. >From there, you can just imagine what can be done. -r

1 0

Paul Vixie..famous Internet personality!
by Dean Robb 17 Dec '98

17 Dec '98

http://www.nytimes.com/library/tech/98/12/biztech/articles/14spam.html Precis on our own Paul Vixie. Includes quotes from a spammer and Earthlink. Spammers should be investigated by Ken Starr! Dean Robb PC-EASY computer services (757) 495-EASY [3279]

1 0

Re: 'best'
by Jay R. Ashworth 17 Dec '98

17 Dec '98

On Tue, Dec 15, 1998 at 07:22:14PM -0600, foo, whomever, the hell _that_ is, wrote: > Received: from squig.sfx.com (NOBODY(a)squig.sfx.com [169.207.160.17]) by scfn.thpl.lib.fl.us (8.8.5/8.6.5) with ESMTP id UAA12434 for <jra(a)scfn.thpl.lib.fl.us>; Tue, 15 Dec 1998 20:11:20 -0500 (EST) > several hundred busy people just received that message. > > was it worth it? > > think before you post. > > -foo > > Jay R. Ashworth wrote: > > On Tue, Dec 15, 1998 at 12:20:14PM -0500, Bill Becker wrote: > > > On Tue, 25 Apr 1972, David Diaz wrote: > > > > _No one's_ gonna comment on that? > > > > :-) > > > > Cheers, > > -- jr 'as close to the epoch as _I've_ seen...' a I did. And I _signed_ my post, rather than forging it. _My_, but the outpatients are out in force lately. Cheers, -- jra -- Jay R. Ashworth jra(a)baylink.com Member of the Technical Staff Buy copies of The New Hackers Dictionary. The Suncoast Freenet Give them to all your friends. Tampa Bay, Florida http://www.ccil.org/jargon/ +1 813 790 7592

1 0

System and Network Monitoring
by Derek Balling 17 Dec '98

17 Dec '98

OK, I'm looking for "real world" data and not sales/marketing hype. I'm looking for a package to do network and system monitoring. It's a heterogenous environment consisting of all manner of routers, at least 700 servers (Mostly FreeBSD, but also Solaris and Network Appliance boxen). Requirements: 1.) Must support FreeBSD (obviously, its the platform of probably about 98% of the servers) 2.) Must scale well. Today we have (at best guess given by management) "somewhere between 500 and 1000 servers", but that number grows daily. Operations adds about 4-5 servers a week at the present time. 3.) Must support the ability to provide checks on custom situations (e.g., an external program which checks the output from an e-commerce server to check that the pricing/qty/etc. is accurate and not stale or outdated) 4.) Must provide a flexible escalation method including e-mail and paging. 5.) Provide a nice interface to quickly find and troubleshoot problems. Preferably this would be X based, so that the server itself could reside in our server rooms, exporting the display to whomever had a need to watch the network/servers, or troubleshoot their particular corner of the world. I know this product has to exist, but I've only so far found one product that claims to be able to do all of that (HP OpenView). I'm not against HP, but I'd like to have some more options than what I currently have available to me. Replies probably should be made off-list (and if anyone wants me to, I'll happily summarize to the list what I get). Thanks in advance. ====================================================================== Derek J. Balling | "Bill Gates is a monocle and a white dredd(a)megacity.org | fluffy cat from being a villain in the http://www.megacity.org/ | next Bond film." - Dennis Miller ======================================================================

3 2

Re: System and Network Monitoring
by Dean Anderson 16 Dec '98

16 Dec '98

I use OpenView 4 now have for several years (since Openview 3). It was the best thing going for a while anyway. The best/worst thing about OpenView is using vendor equipment management modules that only work with openview. Or HP LanProbes and such. These tend to be huge worksavers, if you can somehow accomodate the security limitations (or use oob sets, etc) At least, they used to be. Now, I'm not so sure. Instead of using snmp to actually change configuration, I am now mostly using it to monitor what's going on, and react to snmp traps when they are sent. Frankly, I don't think snmp monitoring is all that hard. OpenView is still incredibly expensive, and very difficult to buy. I think the freeware alternatives are just as good, and possibly better in some cases. But it depends though on what you are going to do. I'd check into mrtg and scotty first, and then look at OpenView. They also work on freebsd... --Dean At 02:52 PM 12/16/1998 -0600, Tim Salo wrote: >> Date: Tue, 15 Dec 1998 16:48:06 -0800 (PST) >> From: Derek Balling <dredd(a)megacity.org> >> To: nanog(a)merit.edu >> Subject: System and Network Monitoring >> >> OK, I'm looking for "real world" data and not sales/marketing hype. >> >> I'm looking for a package to do network and system monitoring. It's a >> heterogenous environment consisting of all manner of routers, at least 700 >> servers (Mostly FreeBSD, but also Solaris and Network Appliance boxen). >> [...] > >I would be interested to hear about your comparison of a commercial >package such as HP OpenView with free alternatives. > >My inclination is towards a commercial package. I even suspect that it >would be less expensive in the long run, plus it seems likely to free >up your technical talent for revenue-producing activities. > >-tjs > > ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Plain Aviation, Inc dean(a)av8.com LAN/WAN/UNIX/NT/TCPIP http://www.av8.com ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

1 0

'best'
by Bill Becker 16 Dec '98

16 Dec '98

Is anyone else seeing this crap from best.com besides me? I complained to them last time and received no reply. So i decided to filter parts of them and it's looking like i did the right thing. Here are a few entries from 209K of ejectamenta. Someone checked through an entire /19 for a place to login. Dec 12 18:32:02 139o-4700 105: Dec 12 18:32:01: %SEC-6-IPACCESSLOGP: list 101 denied tcp 206.86.7.91(4783) -> 207.171.128.1(23), 1 packet Dec 12 18:32:06 139o-4700 106: Dec 12 18:32:05: %SEC-6-IPACCESSLOGP: list 101 denied tcp 206.86.7.91(4791) -> 207.171.128.9(23), 1 packet Dec 12 18:32:09 139o-4700 107: Dec 12 18:32:08: %SEC-6-IPACCESSLOGP: list 101 denied tcp 206.86.7.91(4800) -> 207.171.128.18(23), 1 packet Dec 12 18:32:13 139o-4700 108: Dec 12 18:32:12: %SEC-6-IPACCESSLOGP: list 101 denied tcp 206.86.7.91(4807) -> 207.171.128.25(23), 1 packet ...etc. Annoying. Bill

6 8

Re: System and Network Monitoring
by Tim Salo 16 Dec '98

16 Dec '98

> Date: Tue, 15 Dec 1998 16:48:06 -0800 (PST) > From: Derek Balling <dredd(a)megacity.org> > To: nanog(a)merit.edu > Subject: System and Network Monitoring > > OK, I'm looking for "real world" data and not sales/marketing hype. > > I'm looking for a package to do network and system monitoring. It's a > heterogenous environment consisting of all manner of routers, at least 700 > servers (Mostly FreeBSD, but also Solaris and Network Appliance boxen). > [...] I would be interested to hear about your comparison of a commercial package such as HP OpenView with free alternatives. My inclination is towards a commercial package. I even suspect that it would be less expensive in the long run, plus it seems likely to free up your technical talent for revenue-producing activities. -tjs

1 0

heads up ... another imapd attack source
by Phil Howard 16 Dec '98

16 Dec '98

Just a few minutes ago, another attempted IMAPD breakin. This one originated from rock.careers.csulb.edu [134.139.149.100]. It was logged at Dec 14 16:59:56 CST.

10 11