- Test - lists.nanog.org

Re: Nat
by Larry Sheldon 17 Dec '15

17 Dec '15

On 12/16/2015 19:22, Randy Bush wrote: >> We need to put some pain onto everyone that is IPv4 only. > > this is the oppress the workers so they will revolt theory. load of > crap. > > make ipv6 easier to deploy, especially in enterprise. repeat the > previous sentence 42 times. > > what keeps the cows in the pasture is the quality of the grass not > the height of the fence. Have you considered national politics? The world needs you. -- sed quis custodiet ipsos custodes? (Juvenal)

1 0

Call for Presentations - DNS-OARC Spring Workshop, March/April 2016
by Wessels, Duane 16 Dec '15

16 Dec '15

The 24th DNS-OARC Workshop will take place in Buenos Aires, Argentina between March 31st and April 1st 2016, Thursday and Friday before IETF95. This will be the first time DNS-OARC is held in the Southern Hemisphere. To attract the best DNS minds and local audience, DNS-OARC is requesting proposals for presentations, with a preference for Operational Practices Reports, and "How we solved this problem" presentations. This workshop intends to build from previous strong DNS-OARC workshops, where both operational content and research are welcome. Presentations from DNS operators are particularly desired, as well as from DNS researchers. All DNS-related subjects are accepted. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. A timeslot will be available for lightning talks (5-10 minutes) on April 1st, for which submissions will be accepted during March 31st on a first-come first-served basis. Workshop Milestones • 30th November 2015, Call for Presentations posted and open for submissions • 29th January 2016, Deadline for submission • 16th February 2016, Final Program published • 28th March 2016, Final deadline for slideset submission Details for abstract submission are published here: https://indico.dns-oarc.net/event/22/call-for-abstracts/ The workshop presentations will be organized by common themes, depending on the topics and the timing of each presentation. There are 30-minute and 15-minute slots, let us know your preference in your submission. To ensure the quality of the workshop, submissions including draft slides will get extra points during evaluation. You can contact the Programme Committee (https://www.dns-oarc.net/oarc/programme) via <submissions(a)dns-oarc.net> if you have questions or concerns. OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) Duane Wessels, on behalf of the OARC Program Committee

1 0

Re: reliably detecting the presence of a bridge?
by Carsten Bormann 16 Dec '15

16 Dec '15

[Dave asked me to repost this to the list -- not sure how useful this little lead is; haven't worked on this for more than half a decade.] I don't have a good platform to test this on today, but one way to detect a wireless bridge a couple of years ago was to send a SNAP packet (actually anything with an Ethernet length -- as opposed to ethertype -- in it) that is shorter than Ethernet minimum length (14 + 46), and then see whether the padding you put in on one end survives over to the other end. That of course only works with bridges that actually optimize this case (plus you can detect those that completely mess up this case -- there are quite a few of those). Hope that helps; would need to do experiments with real hardware to say anything more substantive. Grüße, Carsten PS.: In case you wonder what the work was that led to this observation: https://tools.ietf.org/html/draft-bormann-rohc-over-802-02

1 0

John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app
by Jay Ashworth 15 Dec '15

15 Dec '15

Is McAfee just talking to dry his teeth here? This isn't actually practical, is it? Carriers would notice, right? http://www.ibtimes.co.uk/john-mcafee-massive-ddos-attack-internet-was-smart… -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

12 11

Opinions on Cologix data centers?
by David H 15 Dec '15

15 Dec '15

Hello; was curious if anyone has opinions on Cologix? Any aspect would be of interest; management, financials, colo quality (power, a/c, etc). The specific facility I'm looking at is their Lakeland FL building which began life under a company called Colo 5 that they purchased; it's only two years old. They seem to have been on a buying spree recently with other colo buildings. Thanks, David

4 3

Turkey .tr domains un-resolvable over IPv4 ?
by Francesco Ciocchetti 15 Dec '15

15 Dec '15

Is anyone seeing the same ? I am only able to reach any of the tr. 172800 IN NS ns2.nic.tr. tr. 172800 IN NS ns4.nic.tr. tr. 172800 IN NS ns5.nic.tr. tr. 172800 IN NS ns1.nic.tr. tr. 172800 IN NS ns3.nic.tr. over IPv6 right now , Short time ago traceroute was showing routing loops for ipv4 - www.nic.tr * 27. 144.122.1.21 91.7% 12 351.2 351.2 351.2 351.2 0.0* * 28. ?? 100.0 12 0.0 0.0 0.0 0.0 0.0* * 29. 144.122.1.21 90.0% 10 336.2 336.2 336.2 336.2 0.0* * 30. 144.122.1.22 88.9% 9 159.9 159.9 159.9 159.9 0.0* same for ns1.nic.tr : 144.122.95.51 Francesco Ciocchetti -- Mintel Group Ltd | 11 Pilgrim Street | London | EC4V 6RN Registered in England: Number 1475918. | VAT Number: GB 232 9342 72 Contact details for our other offices can be found at http://www.mintel.com/office-locations. This email and any attachments may include content that is confidential, privileged or otherwise protected under applicable law. Unauthorised disclosure, copying, distribution or use of the contents is prohibited and may be unlawful. If you have received this email in error, including without appropriate authorisation, then please reply to the sender about the error and delete this email and any attachments.

2 1

Survey on Middlebox modeling and troubleshooting
by Zhang, Ying 14 Dec '15

14 Dec '15

Dear All, We are researchers in HP Labs and Duke university. We are currently working on a project related to Middlebox modeling and troubleshooting. We are currently conducting a survey and gathering feedback from operators. Can you help us by providing some answers? Please feel free to email us if you have any additional suggestions. https://www.surveymonkey.com/r/5SFP6G8 Thanks! -Ying

1 0

bway.net contact?
by Earp, John 14 Dec '15

14 Dec '15

Would someone from bway.net ISP contact me off list please? Thank you.

1 0

Amazon - Detecting wrong location
by John Cenile 14 Dec '15

14 Dec '15

Hello, Amazon's website is currently suggesting Amazon India, rather than Amazon USA. So I'm guessing whatever GeoIP database they're using is out of date, but I have updated as many public GeoIP databases I could find. I have emailed their noc@ email address multiple times, but have not heard back from them. Does anyone know where I can fix this up, or who I can contact to resolve this?

1 0

Fwd: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app
by Jonathan Hall 13 Dec '15

13 Dec '15

Stupid me forgot to CC the NANOG list. Begin forwarded message: From: Jonathan Hall <jhall(a)futuresouth.us<mailto:jhall@futuresouth.us>> Date: 13 December 2015 at 11:13:31 GMT+1 To: Jay Ashworth <jra(a)baylink.com<mailto:jra@baylink.com>> Subject: Re: John McAfee: Massive DDoS attack on the internet was from smartphone botnet on popular app DDoS attacks launched from massive botnets are not unusual, and mobile phones being used as participants of said botnets has been a well known thing since android came to market. People seem to have forgotten about AgoBot/PhatBot/GaoBot. Once upon a time, it was dubbed “The Swiss Army Knife of The Internet,” being fully cross-platform. It compiled on Linux, BSD and Windows with no problem, and as such, had spreading capabilities to infect cross-platform just the same. It was purely P2P at core, but also supported IRC. The P2P portion was for the developers. Anyone who had botnets generally only used and knew of the the IRC control point, and the code was watermarked originally to prevent any random Joe Blow from compiling. The botnets of those who had the code from Ago, Phatty and Wonk (the originators of the first release) were able to be controlled by a select group of friends of the developers. This put more than 4 million bots at the disposal of that group. Examining the synflood code that was contained within would show that the spoofing had multiple options, one of which was 100% completely random spoofed address per a packet. My personal favourite is the 0.0.0.0 source spoof, which spoofs from various random hosts in 0.0.0.0/8 . Good luck filtering those out with ACL’s and mitigation techniques… I’m not certain that would work today, but it most certainly did in 2004. Concepts like this do not die off and just fade away into /dev/null land. People simply get smarter and quieter about it. Ago/Phatty/Wonk got hit in Operation Cyber Slam in 2004 and the bulk of it all was kept very quiet. Coincidentally, Ago’s young brother, Nills, was the developer of msblaster, too. But, alas, I digress... Considering all of that, why would anyone be shocked to find massive attacks being launched from what is technically the easiest point of infection: phones? In this case, all that’s done is an app gets put up and the users download it. And with thinks such as android roots and iPhone jailbreaks being common knowledge and point-and-click easy to do? More and more people are unlocking their devices just for the sake of saying, “My phone is rooted.” And as phones become more and more powerful, as well as bandwidth climbing to record highs on mobile platforms, you can only be assured that this sort of attack vector will continue to increase in popularity. I do think that jumping up and saying, “ISIS is taking over US phones!” is a bit of a wild leap. But at the same time, why would anyone think they aren’t already using this method to fund themselves? Botnets = money, period. Do you have any idea how much money people pay for usage of botnets to launch attacks? Just pure chance says there are members of ISIL as well as present and potentially future supporters of ISIL that have botnets. After all, twelve year old kids with Guy Fawkes masks in their mothers basements have botnets these days… On 12 Dec 2015, at 07:18, Jay Ashworth <jra(a)baylink.com<mailto:jra@baylink.com>> wrote: Is McAfee just talking to dry his teeth here? This isn't actually practical, is it? Carriers would notice, right? http://www.ibtimes.co.uk/john-mcafee-massive-ddos-attack-internet-was-smart… -- Sent from my Android device with K-9 Mail. Please excuse my brevity.

1 0