- Test - lists.nanog.org

MAE West
by Rodney Joffe 02 Feb '98

02 Feb '98

OK. No-one else seems to have mentioned (noticed?) it, so let me see if I can get the info flow going. Over 12 hours ago, MFS started some maintenance at MAE West. All the peers went down. Most have not come up. MFS is still working on it, and says that it looks like some kind of Gigaswitch failure during the maintenance. They don't seem to have any kind of ETR. Does anyone else have any better info?

4 3

Re: The Cidr Report
by Vince Fuller 02 Feb '98

02 Feb '98

> As you can see things are startng to move up recently. I'd suggest > folks take a look at the "Interesting Aggregates" section on the web > page as it appears there's been a large influx of routes > here. Particularly AS719 who look like they may have a config error > with many many /28s showing up. They aren't the only ones as there > seems to be a lot of potential savings to be made here just by > eye-balling the aggregates. It looks like AS 719 may have cleaned-up their act, but there is still a lot of garbage in that section of the report. Most of them seem to be subnets of /16's that all have the same AS path and therefore have no reason to not be aggregated. 168.108.x.y, 166.102.x.y, 152.166.x.y-152.172.x.y, 129.81.x.y, and 139.175.x.y are the most obvious offenders - all of the components of each are singly-homed to a single AS path (yes, AS 1 has a couple of small ones not listed above - I'll see about chasing those down). Others, like 161.11.x.y, 138.87.x.y, 137.15.x.y, 137.98.x.y, and 143.233.x.y appear to be multi-homed but still shouldn't need to be propagated to the global Internet. If you're going to accept CIDR block subcomponents from your customers for load-balancing or other purposes, please set community "no-advertise" or otherwise prevent them from leaking out to the rest of the net - everyone else doesn't need to see your trash... --Vince (note: from address modified to discourage spam)

2 1

[Fwd: FW: Update on Mae West.]
by Rodney Joffe 02 Feb '98

02 Feb '98

OK. Latest news our NOC got. Looks impressive. Wonder if they mean Steve Feldman? > > ---------- > > From: Ryan Jeffs[SMTP:rjeffs@genuity.net] > > Sent: Sunday, February 01, 1998 10:15 PM > > To: trouble(a)genuity.net > > Subject: Update on Mae West. > > > > Mae West: Still hosed. > > Work Done: Replacement of SCP card on Giga-1 > > Removed everyone off of the giga, and replaced 1 by 1 > > Replacement of parts ON SCP card. > > > > None of it worked.. > > > > > > Current Status: Gentleman who designed Mae-West is being flown in. He > > has > > just landed and is due to arrive onsite in 20 minutes. > > > > > > Side note: peers are coming back up again as i write this (possibly > > another false alarm?) > > > > > > -Ryan Jeffs > > Help Desk Technician > > Genuity Network Operations Center > > > > >

2 1

Re: MAE West
by sob＠academ.com 02 Feb '98

02 Feb '98

I don't know if I have any better information, but I am told that the MFS Trouble Ticket number is 158176. Apparently, they were doing some maintenance involving a faulty OC-3 and something else (yet undefined) happened. -- Stan | Academ Consulting Services |internet: sob(a)academ.com Olan | For more info on academ, see this |uucp: {mcsun|amdahl}!academ!sob Barber | URL- http://www.academ.com/academ |Opinions expressed are only mine.

1 0

with a flap flap here and a flap flap there...
by Marc Slemko 02 Feb '98

02 Feb '98

We were doing some testing. It involved testing advertising routes via a new box. Simple enough; discontinue an advertisement of some unimportant block from where it is normally advertised, start advertising it from the other box; in the same AS, etc. So I withdraw the first advertisement. 15 minutes later, I am still waiting for it to completely disappear from the net. My reference points are route-views.oregon-ix.net (multihop route-only peering to over a dozen ASes), route-server.cerf.net and nitrous.digex.net. At this point it has flapped up to 7 times on some paths. We are AS6171. Right now, we only advertise routes to AS852. They advertise to 1691, 577 and 1239. An example advertisement that we were seeing (which flapped enough that it was dampened!) came through the path (from route-views): 3333 1103 3300 7018 6478 1 701 814 7189 1691 852 6171, (suppressed due to dampening) 193.0.0.244 (inaccessible) from 193.0.0.242 Origin IGP, metric 20, localpref 100, valid, external Dampinfo: penalty 2729, flapped 5 times in 00:03:32, reuse in 00:27:50 The paths for some of the routes got even longer than this as time went on before they finally stopped being advertised. When it was all done, and the route was finally withdrawn everywhere I could see, an example history entry was: 3333 6905 5623 1136 3300 7018 6478 1 701 814 7189 1691 852 6171 (history entry) 193.0.0.244 from 193.0.0.242 Origin IGP, metric 20, localpref 100, external Dampinfo: penalty 2952, flapped 7 times in 00:12:09 Am I the only one that has a problem with this? You withdraw a route once, and it has flapped enough to be dampened in numerous places. I could have been half convinced that we had gone back to distance vector routing seeing this going on... Right after it was finally withdrawn everywhere, I started advertising the route again from the other box and did not have reasonable complete connectivity until 45 minutes after the start of this whole thing due to dampening. In fact, the act of dampening it causes a significant amount more flapping in some cases, although it certainly saves a lot in others. While I'm not a complete moron and understand the basic concept behind why this happens, I'm not really involved with Internet backbone engineering or operations right now and I wasn't aware that the Internet had grown enough to have this effect become so significant... Are there some networks around with very high advertisement intervals that are making this effect more pronounced, or is the Internet just that big now, or is something else going on? Comments?

1 0

Re: Rumored Large Fiber Break
by Alex Bligh 01 Feb '98

01 Feb '98

FYI a train derailment between Newark NJ and NY cut many fiber bundles, and completely isolated Worldcom Switch #14 as well as affecting several other carriers very severely. EBONE/ICM's STM-1 to the states from Stockholm went down, along with a lot of other European stuff. Our East coast circuit came back 10 minutes ago, apparently due to a reroute rather than a fix; other's are coming back "slowly". Of course I had to tell the Worldcom Intl NOC what the problem with their network was :-( -- Alex Bligh GX Networks (formerly Xara Networks)

2 1

mae-west dead?
by andrew khoo 01 Feb '98

01 Feb '98

we are seeing dead sessions at mae-west commencing 11pm AEST, which is 4am Pacific. anyone else dead? ============================================================== andrew khoo - rebel leader aus: +61-2-9223-2777 Ourworld Global Network, Australia usa: +1-415-902-8820 ============================================================== -- We Bite (tm) --

1 0

noncooperation in tracing an attack
by Brian Holt 31 Jan '98

31 Jan '98

I'm very unhappy to have to post a message here to get someone at globalcenter.net to help in tracing an attack that has been going on for several hours now. Their NOC notified our NOC that they would not be able to get security involved in this attack until monday, which is completely unacceptable. If anyone cares, the target for the attack is a single IP address of 207.227.138.15 and it has been spoofed to be coming from several different IP addresses over the past few hours. The first few addresses used were 1.1.1.1 and 2.2.2.2, now the current traffic flow is said to be coming from 207.227.138.15. I personally have no problem with blocking this attack to stop it, but it sure would be nice to actually nab one of these people once in awhile. Thanks for the lack of help, Brian

1 0

Rumored Large Fiber Break
by Rodney Joffe 31 Jan '98

31 Jan '98

GXN Networks is reporting a major fiber break that has affect most of the European/US connectivity. Does anyone have any more details?

5 4

New NAP
by Rodney Joffe 31 Jan '98

31 Jan '98

Has anyone heard about a new MFS NAP being planned/built in Texas area?

3 2