- Test - lists.nanog.org

Recent AGIS problems
by Phil Lawlor 17 Apr '97

17 Apr '97

Dear Customer: Unfortunately, we must inform you that AGIS has suffered a concentrated and systematic attack of our network. At this time we cannot provide any further details, except to inform you that a federal investigation is underway, and, that AGIS is fully cooperating in every facet of this investigation. We empathize with your frustration in communicating with AGIS as of late. If our corporate communications have seemed insufficient, it is not a reflection our customer service policy or technical competence. Please understand, over the last few weeks we have been under specific disclosure restrictions pursuant to the investigation. Further, we want to assure you that increased security measures have been implemented and no private information was comprised. Regards, Phil Lawlor President AGIS Voice - 313-730-1130 Fax - 313-563-6119

1 0

VitalSigns: Event Report: (Server, Slow or failed connection, red) (fwd)
by Dean Gaudet 17 Apr '97

17 Apr '97

I can't believe this. This piece of software has a spam^H^H^H^Hmail the webmaster button to tell the webmaster of the site you're "testing" that things are too slow. Dean ---------- Forwarded message ---------- Date: Tue, 15 Apr 1997 15:19:54 -0400 (EDT) From: XXX@YYY To: webmaster(a)ZZZ.com Subject: VitalSigns: Event Report: (Server, Slow or failed connection, red) I would like to inform you about a potential problem I've experienced with your service. To assist you in understanding or remedying the problem, I have included below a brief description and report of the conditions I have experienced. I have frequently noticed that establishing a connection to your server takes a long time. You may find the following information useful. Subsystem: Server Event: Slow or failed connection Status: Failure to perform operation. Date and Time of Occurrence: Mon Apr 14 19:25 Client Hostname: XXX.XXX.XXX Client IP Address: A.B.C.D URL: Browser: (Netscape Navigator 3.0) OS Platform: Windows 95 User Name: Joe Luser Email Address: XXX@YYY Phone Number: 555-555-5555 Some of the information above has been provided by Net.Medic from VitalSigns Software. To learn more about how Net.Medic gathers information about on-line activity and how to interpret the information provided above, please visit the technical support room at http://www.vitalsigns.com. Net.Medic from VitalSigns Software uses analysis techniques which calculate performance measurements as accurately as practical within the limits of the Microsoft Windows and Internet environments. Because of these limits, and because Net.Medic was designed to minimize diagnostic traffic over the Internet, the results calculated by Net.Medic are close approximations, not absolute measurements.

6 5

Re: info
by fehnb＠jerseycape.net 16 Apr '97

16 Apr '97

Just what are the qualifications for employment at Sprint's Networking Division these days? A pulse...? >Hi, > My name is Tony Radzwon I am a new employee at Sprint Internet >Services. I have recieved a report that was sent to called CIDR. I am >trying to get all the information about this report that I can find. I >was thinking you may have some information about this you could share >with me.If so please e--mail me or page me at 1-800-sprint1 pin#3828941. >Thank you for your time. > >P.S. I am also curious what merit.com is. > > Thank You > > Tony Radzwon > Sprint Internet Services > > Robert J. Fehn Sr.,President and CEO Jersey Cape Information Systems Inc. 609-390-0061 www.jerseycape.net

4 3

Re: info
by Paul G. Donner 16 Apr '97

16 Apr '97

At 10:37 PM 4/11/97 -0400, Robert J. Fehn Sr. wrote: >OK, OK, I'm sorry... <G> Can't blame the trend toward less informed personel >on the personel... At least he is seeking out information on his own. Afterall, look at it this way, it takes a lot of guts to ask a basic question on this list. Besides, the sooner we inform him the faster he'll be up to speed. By the the same token, the aquatic thread has been providing some needed refreshment. > > >>> these days? A pulse...? >> >>Come on, I spoke with Tony and explained...give him a break. He's only >>looking for information. >> >>-ron >> >> >> >> > >Robert J. Fehn Sr.,President and CEO >Jersey Cape Information Systems Inc. >609-390-0061 www.jerseycape.net > > > >

2 1

ARIN Discussion from Feb NANOG Notes on line
by sob＠academ.com 16 Apr '97

16 Apr '97

Check http://www.academ.com/nanog/feb1997/ARIN.html. -- Stan | Academ Consulting Services |internet: sob(a)academ.com Olan | For more info on academ, see this |uucp: {mcsun|amdahl}!academ!sob Barber | URL- http://www.academ.com/academ |Opinions expressed are only mine.

1 0

Re: MCI outage
by Michael H. Lambert 16 Apr '97

16 Apr '97

>Often most of the major carriers will be using the same set of pipes >across >bridges and railway/highway overpasses. AT&T was advertising their >"redundant path" network where they supposedly made some effort to avoid >this. They were passing out maps and photos of spots with signs from >all the major carriers. > >Power, gas, etc. are often on those same bridges. So if the New Madrid fault were to let loose today with the Big One, how much transcontinental bandwidth would remain? Michael ----- Michael H. Lambert, Pittsburgh Supercomputing Center 4400 Fifth Avenue, Pittsburgh, PA 15213 Phone: +1 412 268-4960 Fax: +1 412 268-8200

1 0

excessive bgp withdraws
by Brett D. Watson 16 Apr '97

16 Apr '97

this might be of interest to some. we found a few weeks ago that we were suddenly on the "bad guys" list at merit, routing-problems(a)merit.edu. we were consistantly making the top ten offenders of "largest sources of bgp instability". we had upgraded to a new version of code in our peer router in san jose that had "lost" the fix to bgp to stop these excessive withdraws which had been discussed on nanog some time ago. we got a new image with the fix rolled back in 2 days ago and will be deploying soon. i don't know what version everyone is running but if you're making this list consistantly you might check with your vendor to see if your version of code is lacking this fix. here is yesterday's list for those that don't subscribe to routing-problems: Largest Sources of BGP Instability ---------------------------------- (announcements + withdraws = total) 1. ANS (AS1673) at Mae-East 7124 + 276413 = 283537 BGP prefix updates 2. INSnetUSA (AS6660) at Mae-East 11 + 250384 = 250395 BGP prefix updates 3. SPRINT (AS1239) at Mae-East 170072 + 69258 = 239330 BGP prefix updates 4. HLCnet (AS4565) at Mae-West 14 + 229402 = 229416 BGP prefix updates 5. GRIDNET (AS6113) at Mae-East 647 + 220572 = 221219 BGP prefix updates 6. GRIDNET (AS6113) at PacBell 646 + 195514 = 196160 BGP prefix updates 7. GRIDNET (AS6113) at Mae-West 640 + 193955 = 194595 BGP prefix updates 8. IconNet (AS3951) at Mae-East 36 + 190158 = 190194 BGP prefix updates 9. ANS (AS1673) at Mae-West 7757 + 174053 = 181810 BGP prefix updates 10. Genuity (AS3847) at Mae-West 1144 + 165556 = 166700 BGP prefix updates -brett

1 0

Sprint Filters - what are they?
by Gregory Hersh 16 Apr '97

16 Apr '97

A while ago we had a customer with some routing problems which were caused by Sprint filters (127/8 - 191/8, deny anything longer than /16). When customer called Sprint, he's been told by someone from tech support that 'Sprint doesn't filter anything'. When I called support, I've been told that on 127/8 - 191/8 range Sprint denies anything longer than /16. This morning the same customer called Sprint again, to confirm this information, and been told that for the above range Sprint denies anything longer than /19. It seems like each time you call Sprint support, you hear a different story. Will someone from Sprint _who knows_ confirm their filtering policy which I have as follows: 0/8 - 126/8, deny subnets of historical A's 127/8 - 191/8, deny anything longer than /16 192/8 - 205/8, deny anything longer than /24 206/8 - 223/8, dney anything longer than /19 192/8 [RIPE], deny anything longer than /19 It would be really nice to have it posted at NANOG web page as well (alas, only AGIS done so). Thanks, - Greg -

2 1

Outage (planned and unplanned) notification
by Sean Donelan 15 Apr '97

15 Apr '97

>Got off the phone w/Hector @MCI indicating that they are currently have >problems with their OC12 ckt in Illinois. Routing through their network >is getting beat up... I've noticed the sprint outage list has become very quiet, as has the MCI outage list. They seem to be quiet even during and after widely known problems. The same is true of most providers I bother to track. Even those providers I have signed agreements which include notification requirements. Since I still notice end-to-end interruptions of service, I don't think the network has really become as reliable as the lack of outage notifications might indicate. Are folks just not bothering to keep everyone informed? Should I go back to nagging your NOC folks with phone calls? Perhaps its just different expectations. For example, I don't bother to notify people about MAE-West outages that effect everyone because I assume the operator of MAE-West should handle that, and a NxN set of providers notifying each other isn't helpful. And a lot of the time extraneous notifications just muck up the trouble ticket system. Is there anything that will encourage pro-active notification? -- Sean Donelan, Data Research Associates, Inc, St. Louis, MO Affiliation given for identification not representation

5 4

Re: Eating My Collapse Column
by fehnb＠jerseycape.net 15 Apr '97

15 Apr '97

>Internet still needs much more cooperation among ISPs on managing its >operations, and perhaps we'll see some soon. Which is to say that, >despite eating my column, I stand by my story. > The spirit of you prediction lives on even if the fact has passed us by.... Robert J. Fehn Sr.,President and CEO Jersey Cape Information Systems Inc.

1 0