- Test - lists.nanog.org

Re: Information re: Cyberpromo
by Mark E Larson 09 Jun '97

09 Jun '97

Hmmmm. Let's see. Shutoff peering with AGIS. Tell all their customers to leave. Hoping for some business :) At 11:30 PM 6/2/97 -0700, you wrote: > >AGIS has some 175 or so reseller customers, some of whom are largeish. >A number of those are dual-homed or peer with "nearly everyone" at >one or more exchange points, though. In the last few weeks, I've seen >over 10 midsized ISPs announce they were leaving AGIS, many more are talking >about doing so. Both because of ongoing spam support and their low >quality of service (some inherent, some apparently people attacking >Cyberpromo and/or AGIS after being spammed, unfortunately) I now >recommend to all the ISPs I do or have consulted with that are >AGIS customers that they leave. > >I've never actually seen a large network kill itself before. >It looks like they've got circa 6 months to live at this rate. >This is an interesting process... > >-george william herbert >gherbert(a)crl.com >Disclaimer: I speak for nobody, not even my cats. > > Mark E Larson Chief Engineer Senior Network Architect RUSTnet Inc. ----------------------------------------------- R U S T N E T I N C. A member of the Verio Group http://www.rust.net -----------------------------------------------

1 0

Re: NSP ... New Information
by Bill Sommerfeld 09 Jun '97

09 Jun '97

Date: Mon, 9 Jun 1997 00:34:03 -0400 (EDT) From: Edward Fang <edfang(a)visi.net> This is all great and dandy, but then why does it appear that anybody with a cable modem this side of the sun are using static IP's. Huh? When I switched from dialup ISDN to cable-modem service (MediaOne) I went from a static address to a DHCP address. I've been forcably renumbered at least once since then due to a topology change.

1 0

Re: Top 100 Nameservers (Serving the most Domains)
by Havard.Eidnes＠runit.sintef.no 09 Jun '97

09 Jun '97

Hi, nice report! It's not entirely clear what your data source is; I guess it's the zone files for the domains currently under InterNIC's administration, yes? To prevent anyone from taking this report and relabel it as "The Internet's top 100 name servers (by domains served)" (even in their own minds...), I just want to point out that there exists other TLDs on the Internet than those maintained by the InterNIC, and I know for a fact that some name servers in other areas would be included in your list if you had analyzed the data. Regards, - Håvard

3 2

Notes from June 1997
by sob＠academ.com 09 Jun '97

09 Jun '97

The full agenda page is up and some of the presentations (the InterNIC and ARIN updates as well as the Welcome and Closing) are now available. More to come.

1 0

Top 100 Nameservers (Serving the most Domains)
by Rusty H. Hodge 09 Jun '97

09 Jun '97

>From the June 7th Zone Files - Domains served by each nameserver... the Top 100: 1. 23799 NS2.NAMESERVERS.NET 2. 23232 NS.NAMESERVERS.NET 3. 22137 NSX.NTX.NET 4. 21897 NSB.NTX.NET 5. 15053 NS2.FREEVIEW.COM 6. 15053 NS1.FREEVIEW.COM 7. 14953 NS2.BEST.COM 8. 13751 NS.GEN.COM 9. 13545 NS3.BEST.COM 10. 12812 NIC.GEN.COM 11. 12317 NS2.MCI.NET 12. 12293 NS1.SECURE.NET 13. 12241 NS2.SECURE.NET 14. 11055 NS.MCI.NET 15. 10385 NS.BEST.COM 16. 9969 NS3.MAILBANK.COM 17. 9969 NS4.MAILBANK.COM 18. 9965 NS1.NOC.NETCOM.NET 19. 9900 PRI2.DNS.PSI.NET 20. 9880 PRI1.DNS.PSI.NET 21. 9520 PRI3.DNS.PSI.NET 22. 9504 NS.DIGEX.NET 23. 9478 NS2.NETCOMI.COM 24. 8998 ZORK.TIAC.NET 25. 8832 SUNDOG.TIAC.NET 26. 7680 NIC.NEAR.NET 27. 7646 NS1.SPRINTLINK.NET 28. 7003 DAFFY.CADVISION.COM 29. 6883 HUEY.CADVISION.COM 30. 6844 NS1.PBI.NET 31. 6551 NS1.NETCOMI.COM 32. 6540 NS2.NOC.NETCOM.NET 33. 6525 DNS2.PRIMEHOST.COM 34. 6404 DNS1.PRIMEHOST.COM 35. 6179 NS1.BEST.COM 36. 6119 HEARSAY.MSPRING.NET 37. 6109 NS1.EARTHLINK.NET 38. 6082 NS3.EARTHLINK.NET 39. 6071 SPEAKEASY.MSPRING.NET 40. 5935 NS2.EARTHLINK.NET 41. 5900 NS4.EARTHLINK.NET 42. 5799 KNOCK.SER.BBNPLANET.NET 43. 5575 NS.DIGIWEB.COM 44. 5365 NS0.NS0.COM 45. 5257 NS2.DIGEX.NET 46. 4690 AUTH02.NS.UU.NET 47. 4649 NS2.DIGIWEB.COM 48. 4600 AUTH03.NS.UU.NET 49. 4597 NS.CLEVER.NET 50. 4582 NS2.PSI.NET 51. 4551 NS2.CLEVER.NET 52. 4512 NS1.WEBCREATIONS.COM 53. 4468 NS2.WEBCREATIONS.COM 54. 4348 NS1.WESTNET.NET 55. 4320 AUTH51.NS.UU.NET 56. 3965 GRAPEVINE.MSPRING.NET 57. 3948 GOSSIP.MSPRING.NET 58. 3942 NS.PSI.NET 59. 3925 NS2.REQUEST.NET 60. 3905 NS1.REQUEST.NET 61. 3890 NS0.DEMON.CO.UK 62. 3882 NIC3.BARRNET.NET 63. 3861 NS2.WEBCOM.COM 64. 3843 NS.IDT.NET 65. 3838 NS.WEBCOM.COM 66. 3827 NS4.EROLS.COM 67. 3794 NS3.EROLS.COM 68. 3675 NS1.OTTAWA.ISTAR.NET 69. 3659 NS2.VALUEWEB.NET 70. 3620 NS.VALUEWEB.NET 71. 3535 NS2.SPRINTLINK.NET 72. 3295 NS1.SOFTAWARE.COM 73. 3241 NS2.ANAWAVE.COM 74. 3225 NS1.ANAWAVE.COM 75. 3184 NS3.ANAWAVE.COM 76. 3150 NS.MR.NET 77. 3073 AUTH00.NS.UU.NET 78. 3053 NS3.NAMESERVERS.NET 79. 3000 WW2.COVESOFT.COM 80. 2923 NS3.NETCOMI.COM 81. 2916 NOC.CERF.NET 82. 2910 NS-1.CSN.NET 83. 2848 NS.UU.NET 84. 2835 DNS1.PRIMENET.NET 85. 2819 NS3.DIGIWEB.COM 86. 2758 NS2.NEWACCOUNT.COM 87. 2754 NS.NEWACCOUNT.COM 88. 2729 NWNEXUS.WA.COM 89. 2675 NS0.PIPEX.NET 90. 2661 DNS2.PRIMENET.NET 91. 2632 NS1.DEMON.CO.UK 92. 2632 NS2.DEMON.NET 93. 2600 NS3.SPRINTLINK.NET 94. 2580 DNS3.PRIMENET.NET 95. 2515 NIC1.INTERNEX.NET 96. 2503 WHITE.555-1212.COM 97. 2468 NS2.WEBSERVICES.NET 98. 2458 AUTH50.NS.UU.NET 99. 2414 DNS2.SIMPLENET.COM 100. 2410 NS1.NEW-YORK.NET 101. 2403 DNS1.SIMPLENET.COM 102. 2396 NS1.WEBSERVICES.NET 103. 2387 NS2.NEW-YORK.NET 104. 2355 NS0.BT.NET 105. 2348 NS1.HK.LINKAGE.NET 106. 2335 NS1.BARRNET.NET 107. 2280 NORTHSHORE.ECOSOFT.COM 108. 2262 NS2.AITCOM.NET 109. 2258 NWFOCUS.WA.COM 110. 2248 NS1.AITCOM.NET 111. 2203 NS2.HOMECOM.COM 112. 2201 NS2.HK.LINKAGE.NET 113. 2198 FOYER.HOMECOM.COM 114. 2196 NS1.INDIRECT.COM 115. 2171 NS.SCCSI.COM 116. 2143 NS2.INDIRECT.COM 117. 2137 NIC2.INTERNEX.NET 118. 2126 NS2.WEB2010.COM 119. 2107 AUTH2.NS.IDT.NET 120. 2105 NS3.NEW-YORK.NET 121. 2103 NS.WEB2010.COM 122. 2052 ARTEMIS.IBERNET.ES 123. 2039 BOLERO.RAHUL.NET 124. 2026 NS2.PROPAGATION.COM 125. 2017 SEC1.DNS.PSI.NET 126. 2015 NS.PROPAGATION.COM 127. 2015 NS2.SOFTAWARE.COM 128. 1985 NS.ONRAMP.NET 129. 1972 UUCP-GW-1.PA.DEC.COM 130. 1946 DNS1.UTELFLA.COM 131. 1925 MACU.MA.MT.NP.ELS-GMS.ATT.NET 132. 1921 NS1.PIPEX.NET 133. 1893 OHCU.OH.MT.NP.ELS-GMS.ATT.NET 134. 1881 NS1.ACCESSONE.COM 135. 1875 ORCU.OR.BR.NP.ELS-GMS.ATT.NET 136. 1869 NBN.NBN.COM 137. 1856 MNC.555-1212.COM 138. 1853 WYCU.WY.BR.NP.ELS-GMS.ATT.NET 139. 1843 AUTH01.NS.UU.NET 140. 1840 NS1.ROCKYMTN.NET 141. 1817 HUSTLE.RAHUL.NET 142. 1808 NS2.ROCKYMTN.NET 143. 1790 NS1.WCO.COM 144. 1765 NS3.SOFTAWARE.COM 145. 1752 NS1.AZLAN.NET 146. 1744 NS2.NW.COM 147. 1742 NOC.NEAR.NET 148. 1740 NS1.NW.COM 149. 1725 NS1.GLOBECOMM.NET 150. 1723 NS2.ONRAMP.NET 151. 1723 NS1.AIMNET.COM 152. 1720 NS2.GLOBECOMM.NET 153. 1701 NS2.WCO.COM 154. 1698 SPRUCE.CIC.NET 155. 1686 UUCP-GW-2.PA.DEC.COM 156. 1680 NS.HOLONET.NET 157. 1678 NS2.ADGRAFIX.COM 158. 1675 NS.CAIS.COM 159. 1666 NS3.ADGRAFIX.COM 160. 1661 NS1.ADGRAFIX.COM 161. 1654 HOMER.ALPHA.NET 162. 1647 NS2.ISC-BR.COM 163. 1646 ACE.GI.NET 164. 1643 NIS.ANS.NET 165. 1638 NS1.NAMESERVE.NET 166. 1636 NS2.NAMESERVE.NET 167. 1633 NS2.HOLONET.NET 168. 1632 WIZARD.PN.COM 169. 1627 NS2.MA.ULTRA.NET 170. 1626 SPARKYJR.SHORE.NET 171. 1623 NS1.MA.ULTRA.NET 172. 1621 NS1.BELLGLOBAL.COM 173. 1603 NS1.OAR.NET 174. 1603 NS2.ACCESSONE.COM 175. 1601 NS3.HOLONET.NET 176. 1596 NS4.SOFTAWARE.COM 177. 1575 NS1.IQUEST.NET 178. 1573 NS.ANS.NET 179. 1565 NS2.AIMNET.COM 180. 1549 DNS3.EE.NET 181. 1547 PHOENIX.AZC.COM 182. 1538 NS1.DELTANET.COM 183. 1535 NS1.AZC.COM 184. 1527 NS.IPRESENT.COM 185. 1507 NS2.AZLAN.NET 186. 1507 NS.UUNET.CA 187. 1505 NS2.FLASH.NET 188. 1499 NS1.FLASH.NET 189. 1492 DNS2.EE.NET 190. 1490 NS.STRUCTURED.NET 191. 1480 AUTH60.NS.UU.NET 192. 1477 NS2.SIRIUS.COM 193. 1477 NS2.NETCORPS.COM 194. 1476 NS0.DELTANET.COM 195. 1466 NS2.MEDIA3.NET 196. 1465 NS1.SIRIUS.COM 197. 1464 NS.MEDIA3.NET 198. 1455 MAIN.NETCORPS.COM 199. 1448 NS1.NI.NET 200. 1446 DNS2.DNAI.COM I've always been curious how well bind runs with 10,000+ domains in it. That's one big named.boot file. -- Rusty Hodge <rusty(a)hodge.com>, San Francisco

2 1

Information re: Cyberpromo
by Martin J. Hannigan 08 Jun '97

08 Jun '97

Can someone verify that this is the interface facing cyberpromo from AGIS? I called AGIS' NOC and they refused to tell me, so I want to make sure I'm cutting just them... a0.1.philadelphia1.agis.net (206.185.158.237) Regards, -- Martin Hannigan (hannigan(a)firefly.net) Voice: 617.528.1099 Firefly Network, Inc. - Network Operations Network Engineer www.firefly.net Semper Cabalis

11 13

Re: A question of stats..
by Daniel Senie 08 Jun '97

08 Jun '97

At 09:07 AM 6/8/97 -0400, Brian Horvitz wrote: >Here is something which has been troubling my mind lately. >The basic question is, how do I turn an in and an out into >an aggregate? Here is a scenario: I measure usage on a >customer's T1 at my router port. Every 5 minutes a sample >the port and figure the average bps both in and out for the >last five minutes. Now, I want to make a number that >represents the aggregate usage across that port but, I cannot >simply add the two ins and outs (as I am doing now) because >they were both averages over a period of time. Doing this >produces some strange effects which can show nice trends but >also lies about the real usage. Perhaps I simply lack the >math experience to do this correctly but I can't see a good >way to do it. If you're doing this for accounting (i.e. money collection) purposes, I see a cause for customers to be very alarmed. I've seen a lot of attacks lately that were ping floods or other such traffic, frequently originating from RFC1918 addresses. I know if my upstream charged by the packet, I'd be all over them to deduct from my bill EVERY packet I'm not interested in. Could cause providers a lot of trouble. Even charging for packets a site transmits is potentially at risk in such cases, if the systems send back ICMP unreachables or other rejection packets. Dan > > Brian Horvitz > WebSecure, Inc. > > > Daniel Senie mailto:dts@openroute.com Sr. Staff Engineer http://www.openroute.com/ OpenROUTE Networks, Inc. (a wholly owned subsidiary of Proteon, Inc.)

1 0

A question of stats..
by Brian Horvitz 08 Jun '97

08 Jun '97

Here is something which has been troubling my mind lately. The basic question is, how do I turn an in and an out into an aggregate? Here is a scenario: I measure usage on a customer's T1 at my router port. Every 5 minutes a sample the port and figure the average bps both in and out for the last five minutes. Now, I want to make a number that represents the aggregate usage across that port but, I cannot simply add the two ins and outs (as I am doing now) because they were both averages over a period of time. Doing this produces some strange effects which can show nice trends but also lies about the real usage. Perhaps I simply lack the math experience to do this correctly but I can't see a good way to do it. Brian Horvitz WebSecure, Inc.

1 0

rtrmon (router monitor) sample output
by Brett D. Watson 08 Jun '97

08 Jun '97

thought i'd show a few examples of bgp and ospf monitor notifications that rtrmon sends when peers/neighbors go down: Subject: rtrmon do bgp-summary watch last Peers *DOWN* on peer1.lax1.genuity.net: sandbox.ep.net (198.32.146.11) down for 4:28:06 Peers reset on border1.sjc1.genuity.net: border1-eth1.SanJose.fibernet.net (206.183.239.141) reset 0:04:16 ago the ospf example is from a router that had rebooted, i believe, between monitor runs: Subject: rtrmon do ospf-neighbors watch state Differences encountered on core1.nyc1.genuity.net: The following lines were added: Neighbor ID Pri State Address Interface core1.phx1.genu 1 FULL/ - 207.240.0.1 ATM0/0.601 core1.lax1.genu 1 FULL/ - 207.240.0.5 ATM0/0.602 core1.sjc1.genu 1 FULL/ - 207.240.0.9 ATM0/0.603 core1.ord1.genu 1 FULL/ - 207.240.0.17 ATM0/0.605 core1.wdc1.genu 1 FULL/ - 207.240.0.25 ATM0/0.607 core1.phx1.genu 1 FULL/ - 207.240.0.1 ATM1/0.611 core1.lax1.genu 1 FULL/ - 207.240.0.5 ATM1/0.612 core1.sjc1.genu 1 FULL/ - 207.240.0.9 ATM1/0.613 core1.ord1.genu 1 FULL/ - 207.240.0.17 ATM1/0.615 core1.wdc1.genu 1 FULL/ - 207.240.0.25 ATM1/0.617 peer1.nyc1.genu 1 FULL/ - 207.240.48.3 ATM1/0.618 -brett

2 1

Looking for a speaker from an ISP offering IP Telephony Services
by Jeff Pulver 07 Jun '97

07 Jun '97

Hi There, I'm Jeff Pulver and I'm producing a workshop in San Francisco on August 20th entitled "How an ISP can become a Telco". The focus of this workshop is to provide knowledge to both ISPs and Carriers which are looking at offering enhanced services such as: Fax over IP and Voice over IP. While I've been able to fill out the workshop with leading vendors in the Gateway space - both fax over IP and voice over IP - I'm looking for a speaker from an ISP that has begun offering "IP Telephony" services - and would be willing to talk about it at my August 20th workshop. If interested - please e-mail me directly. Please provide a little background information about yourself as well. Thanks for your time. Best Regards, --------------------------------------------------------------------------- Jeff Pulver Tel. 516.487.1424 President Fax. 516.487.7269 pulver.com http://pulver.com Workshop: How an ISP can become a Telco http://pulver.com/isp97 Conference: Fall '97 Voice on the Net http://pulver.com/von97

1 0