- Test - lists.nanog.org

Subject: Call for Presentations - DNS-OARC Spring Workshop, May 2015
by list-nanog＠dragon.net 18 Dec '14

18 Dec '14

Apologies if you are on multiple lists and see multiple copies of this email. ------------- The next OARC Spring Workshop will take place in Amsterdam on May 9th and 10th, the weekend before RIPE70. OARC is requesting proposals for presentations, with a preference for DDoS attack reports and mitigation techniques. Reports and field stories can cover DNS-based DDoS attacks, attacks to DNS infrastructure or side effects suffered by cache resolver operators. This workshop intends to build from previous strong OARC workshops, where operational content and research is welcome. Presentations from DNS operators are particularly welcome, as well as from DNS researchers. All DNS-related subjects are accepted, introduction to new tools, visualizations, DNSSEC and novel uses of the DNS. If you are an OARC member, and have a sensitive topic you would like to present for members-only, we will accommodate those talks too. Adopting practice from other conferences, a timeslot for lighting talks will be available for short presentations (5 to 10 minutes). Workshop Milestones * 18 December 2014, Call for Presentations posted * 8 January 2015, Open for submissions * 5 March 2015, Deadline for submission * 26 March 2015, Final Program published * 7 May 2015, Final deadline for slideset submission Details for abstract submission will be published here: https://indico.dns-oarc.net//conferenceCFA.py?confId=21 The workshop will be organized on different tracks, depending on the topics and the timing of each presentation. If you are interested in a lightning talk, let us know at the time of submission. You can contact the Programme Committee: https://www.dns-oarc.net/oarc/programme via <submissions(a)dns-oarc.net> if you have questions or concerns. Sebastian Castro, for the OARC Programme Committee OARC is also seeking sponsorship for this workshop, please contact <sponsor(a)dns-oarc.net> if your organization is interested in becoming a sponsor. (Please note that OARC is run on a non-profit basis, and is not in a position to reimburse expenses or time for speakers at its meetings.) -------------

1 0

Multicast and switches
by Jean-Francois Mezei 18 Dec '14

18 Dec '14

In Bell Canada territory, on the copper, Bell uses 2 VLANs , 35 for data, and I think 36 for IPTV service. Multicast is of course enabled on VLAN 36 and on the IPTV aggregation network back up to the video servers which is separate from the data services. VLAN 35 is set to aggregate to the BRAS router somewhere upstream. Currently, independent ISP traffic is separated at the BRAS and PPPoE packets reach the ISP premises from BRAS via L2TP links. Multicast cannot be handled by this service. One of the proposals is to have ISPs connect at the CO directly into the switch feeding the DSLAMs. ISPs think that they can then do multicast without needing Bell's intervention. My concern is with ISP traffic still needing to pass through at least Bell 2 switches and the DSLAMs before reaching the end user. If ISPs pass through this equipment via a differerent VLAN (lets call it 37), would it just be a simple deal of telling those switches and VLAN to "enable multicast" on that VLAN, or would it require careful configurations to enable specific multicast IPs etc ? Would switches and DSLAMs handle multicast on separate VLANs as totally separate realms so that one need not worry about the other using same multicast IPs ? Or is this untested territory since there nobody ever tried this ? (I assume that on the Australian NBN, NBNCo would assign separate IP ranges to different IPtv providers and traffic would be handled as a single multicast system).

1 0

Is there a Lexis Nexis contact (AS14182) hanging out on this list?
by Justin Harris 18 Dec '14

18 Dec '14

If so please contact me off list. Having connectivity issues from AS36694 to AS14182. Thanks! Justin Harris Network Engineer t 407.949.0081 c 407.718.3919 Viewpost.com <http://viewpost.com/> Viewpost(tm) See business better.(tm) 2600 Lucien Way, Suite 100 Maitland, FL 32751 Electronic Privacy Notice: Use of email is inherently insecure. Confidential information, including account information, and personally identifiable information, should not be transmitted via email, or email attachment. This e-mail message, including any attachments, is for the sole use of the intended recipient(s). The information contained in this message is private and confidential, may contain legally protected information and may be subject to one or more non-disclosure agreements, or federal and state regulations. If you are not the intended recipient, please be advised that you are legally prohibited from retaining, using, copying, distributing, or otherwise disclosing this information in any manner. Instead, please reply to the sender that you have received this communication in error, and then immediately destroy all copies and the original message. Thank you in advance for your cooperation.

1 0

IXes and AS length
by Mike Hammett 18 Dec '14

18 Dec '14

So I just found out that the IX we're looking to hook up with (Equinix) doesn't allow downstream ASes. How does that functionally work? Stepping outside my ISP for a moment, I know a building owner with several buildings that provides Internet to his tenants. He's getting an AS so he can have upstream diversity. Unless carrier A or ISP B have direct private peering with whomever (Amazon, NetFlix, Google, FaceBook, etc., etc.), that building owner doesn't have a route to those services? They can't utilize carrier A or ISP B's public peering connection? How can that possibly bee with with every ISP being required to have their own physical presence on the exchange? That's just not practical. I understand not having parallel ASNs (advertising both ASN A and ASN B separately) from a sales perspective, but I don't understand ASN A advertising directly on the IX, but not allowing ASN A's downstream customers of ASNs B, C, D and E. Am I wrong or is this just an Equinix thing? ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com

4 3

Netscaler Help
by james jones 18 Dec '14

18 Dec '14

Are there any netscaler experts out there? Please contact me off list.

1 0

Level3 to Savvis/CenturyLink problems?
by Leah Reveliotty 18 Dec '14

18 Dec '14

We have an MPLS backbone from Level3 and are experiencing issues between two of our San Francisco Bay Area locations – namely our HQ in Burlingame, CA and our Savvis/CenturyLink Data Center in Santa Clara, CA. Ping response times between these 2 sites are within the normal range, but our Applications are timing out. We’ve obviously done a ton of troubleshooting on the Application side of things, but everything points back to a circuit issue and after a lot of testing we are scratching our heads trying to narrow down this issue. So I wanted to post to this list to see if anyone else has noticed issues with their Level3 circuits in the Bay Area over the last 2 days as well? Thanks for your feedback! Regards, Leah

2 1

Looking for a contact at Magix as9506 or someone at singtel who has insight into the operation of 9506
by joel jaeggli 18 Dec '14

18 Dec '14

We're have a little bit of trouble reaching your customers with a prefix advertised in SIN and there's little or no visibility from the 9506 vantage point. Thanks in Advance. Joel (as54113)

1 0

Anyone from Nike.com
by Di Li 17 Dec '14

17 Dec '14

Anyone from Nike.com willing to contact me off list to troubleshooting some IP space blocking issues -- Thanks, Di

1 0

automatic / intelligent fiber optic patch panel (iow SDN @ layer 0)
by Arnold Nipper 17 Dec '14

17 Dec '14

I'm looking for a modular, cost-effective automatic / intelligent fibre optic patch panel. I'm not looking at these photonic x-connects, but really for something which does the patching instead of a technician. TIA Arnold -- Arnold Nipper / nIPper consulting, Sandhausen, Germany email: arnold(a)nipper.de phone: +49 6224 5593407 2 mobile: +49 172 2650958 fax: +49 6224 5593407 9

8 13

Fwd: malware.watch rdns
by shawn wilson 17 Dec '14

17 Dec '14

I asked on this on another list I'm on and didn't get any reply, so I figured I might have better luck here Anyone know what malware.watch. is doing? Below is basically everything I could find: http://www.robtex.net/en/advisory/dns/watch/malware/ssl-scanning-015/ They've got a web page, but nothing there: % curl -I malware.watch HTTP/1.1 200 OK Date: Thu, 13 Nov 2014 19:17:29 GMT Content-Type: text/html Connection: keep-alive Set-Cookie: __cfduid= da37b063f68032dfe5adc07ae35fe27031415906249; expires=Fri, 13-Nov-15 19:17:29 GMT; path=/; domain=.malware.watch; HttpOnly X-Frame-Options: sameorigin Server: cloudflare-nginx CF-RAY: 188d4f4cd3cb0eeb-EWR What I saw was ssl-scanning-###.malware.watch, so after that curl I figured I'd start by blowing up their dns :) % printf '%03d\n' {0..999} | while read f; do dig=$(dig "ssl-scanning-${f}.malware.watch" +short); if [ -n "$dig" ]; then echo "$f: $dig"; fi; done ~ swlap1 015: 85.17.239.155 016: 104.200.21.140 017: 195.154.114.206 (It was pointed out to me this could be more easily written as: dig +noall +ans ssl-scanning-{000..999}.malware.watch) So they only have three in that block, on is in the Netherlands, the other is Linode (US), and the last is French: 8 21.28 ms as4436-1-c.111eighthave.ny.ibone.comcast.net (173.167.57.162) 9 17.01 ms vlan-75.ar2.ewr1.us.as4436.gtt.net (69.31.34.129) 10 15.73 ms as13335.xe-7-0-3.ar2.ewr1.us.as4436.gtt.net (69.31.95.70) 11 15.85 ms 104.28.19.47 7 10.07 ms he-1-15-0-0-cr01.350ecermak.il.ibone.comcast.net (68.86.85.70) 8 9.58 ms ae15.bbr02.eq01.wdc02.networklayer.com (75.149.228.94) 9 10.98 ms ae7.bbr01.eq01.wdc02.networklayer.com (173.192.18.194) 10 23.08 ms ae0.bbr01.tl01.atl01.networklayer.com (173.192.18.153) 11 43.01 ms ae13.bbr02.eq01.dal03.networklayer.com (173.192.18.134) 12 43.02 ms po32.dsr02.dllstx3.networklayer.com (173.192.18.231) 13 44.33 ms po32.dsr02.dllstx2.networklayer.com (70.87.255.70) 14 50.71 ms po2.car01.dllstx2.networklayer.com (70.87.254.78) 15 41.94 ms router1-dal.linode.com (67.18.7.90) 16 42.63 ms li799-140.members.linode.com (104.200.21.140) 7 11.36 ms he-0-13-0-1-pe04.ashburn.va.ibone.comcast.net (68.86.87.142) 8 10.95 ms xe-7-0-2.was10.ip4.gtt.net (77.67.71.193) 9 87.79 ms xe-4-2-0.par22.ip4.gtt.net (89.149.182.98) 10 87.80 ms online-gw.ip4.gtt.net (46.33.93.90) 11 91.82 ms 49e-s46-1-a9k1.dc3.poneytelecom.eu (195.154.1.77) 12 88.27 ms ssl-scanning-017.malware.watch (195.154.114.206)

1 0