anyone have details about the attack on AGIS?
Seems that they were ping flooded, among other things. ------------------------------ ben@BL.COM Ben Liberman ------------------------------
On Sun, May 25, 1997 at 02:32:27AM -0500, Ben Liberman wrote:
Seems that they were ping flooded, among other things.
I've heard a few interesting rumours: 1. AGIS has been attacked (yes, this is only a rumour, the only "evidence" is on the AGIS web page) 2. Somebody was pingflooding the routers 3. Somebody was SYN-flooding the routers(???) 4. The culprit was inside the AGIS network 5. AGIS was doing some upgrades that went bad (again) Sure would be nice if AGIS was still friendly with other backbones, so we could all help trace down the culprit (even if it's just a typo in a router config), make it public among the NANOG community, and make sure that it doesn't happen to anybody else. ---------========== J.D. Falk <jdfalk@cybernothing.org> =========--------- | "I keep praying for answers on how to do routing and He keeps saying | | 'you got yourself into this mess, you figure it out.'" | | -- David Payer <david.payer@ia-omni.com> | ----========== http://www.cybernothing.org/jdfalk/home.html ==========----
On Sun, 25 May 1997, J.D. Falk wrote:
3. Somebody was SYN-flooding the routers(???)
4. The culprit was inside the AGIS network
5. AGIS was doing some upgrades that went bad (again)
Sure would be nice if AGIS was still friendly with other backbones, so we could all help trace down the culprit (even if it's just a typo in a router config), make it public among the NANOG community, and make sure that it doesn't happen to anybody else.
Yesterday our connection to Agis went dead suddenly. We called up the Agis NOC and were told that their Washington router was being flood pinged. OK ... except that we connect in NY, not DC, and the NY router looked to be dead. So we waited a while and reported the problem again. This time we were told that "they" were putting in some GRFs and hadn't even bothered to tell the Agis NOC. The NOC couldn't tell us if they were doing a router replacement in New York. Several hours later the line came back up. Stayed up for a while, went dead again. After a while, it came back up. Sure would be nice if Agis was still friendly with their customers. Or just anyone. -- Jim Dixon VBCnet GB Ltd http://www.vbc.net tel +44 117 929 1316 fax +44 117 927 2015
from the evidence at hand it seems that agis doesn't give a damn. to those who remember the beginning of agislist@interstice.com it is clear that then ( and I would presume so now) they had a technical staff made up primarily of newbies. Why their technical depth should be any greater now escapes me. I mean would *YOU* want 6 months to a year of employment at agis on YOUR resume? and if you are currently clueful would you wait more than a nanosecond before rejecting an employment offer from them? It is just a damned shame how many isps apparently didn't do their homework before signing up with agis. I wonder how long they can last? ************************************************************************ The COOK Report on Internet For subsc. pricing & more than 431 Greenway Ave, Ewing, NJ 08618 USA ten megabytes of free material (609) 882-2572 (phone & fax) visit http://cookreport.com/ Internet: cook@cookreport.com On line speech of critics under attack by Ewing NJ School Board, go to http://cookreport.com/sboard.shtml ************************************************************************ On Sun, 25 May 1997, J.D. Falk wrote:
On Sun, May 25, 1997 at 02:32:27AM -0500, Ben Liberman wrote:
Seems that they were ping flooded, among other things.
I've heard a few interesting rumours:
1. AGIS has been attacked (yes, this is only a rumour, the only "evidence" is on the AGIS web page)
2. Somebody was pingflooding the routers
3. Somebody was SYN-flooding the routers(???)
4. The culprit was inside the AGIS network
5. AGIS was doing some upgrades that went bad (again)
Sure would be nice if AGIS was still friendly with other backbones, so we could all help trace down the culprit (even if it's just a typo in a router config), make it public among the NANOG community, and make sure that it doesn't happen to anybody else.
---------========== J.D. Falk <jdfalk@cybernothing.org> =========--------- | "I keep praying for answers on how to do routing and He keeps saying | | 'you got yourself into this mess, you figure it out.'" | | -- David Payer <david.payer@ia-omni.com> | ----========== http://www.cybernothing.org/jdfalk/home.html ==========----
Sounds like the perfect place for a turn-around artist to come in, take over, and make it all right. Erik
They were quick to call us when via email we mentioned blocking their AS at our routers. But other than that they didn't seem to care. Tony On Mon, 26 May 1997, Gordon Cook wrote:
from the evidence at hand it seems that agis doesn't give a damn. to those who remember the beginning of agislist@interstice.com it is clear that then ( and I would presume so now) they had a technical staff made up primarily of newbies. Why their technical depth should be any greater now escapes me. I mean would *YOU* want 6 months to a year of employment at agis on YOUR resume?
and if you are currently clueful would you wait more than a nanosecond before rejecting an employment offer from them? It is just a damned shame how many isps apparently didn't do their homework before signing up with agis.
I wonder how long they can last?
************************************************************************ The COOK Report on Internet For subsc. pricing & more than 431 Greenway Ave, Ewing, NJ 08618 USA ten megabytes of free material (609) 882-2572 (phone & fax) visit http://cookreport.com/ Internet: cook@cookreport.com On line speech of critics under attack by Ewing NJ School Board, go to http://cookreport.com/sboard.shtml ************************************************************************
On Sun, 25 May 1997, J.D. Falk wrote:
On Sun, May 25, 1997 at 02:32:27AM -0500, Ben Liberman wrote:
Seems that they were ping flooded, among other things.
I've heard a few interesting rumours:
1. AGIS has been attacked (yes, this is only a rumour, the only "evidence" is on the AGIS web page)
2. Somebody was pingflooding the routers
3. Somebody was SYN-flooding the routers(???)
4. The culprit was inside the AGIS network
5. AGIS was doing some upgrades that went bad (again)
Sure would be nice if AGIS was still friendly with other backbones, so we could all help trace down the culprit (even if it's just a typo in a router config), make it public among the NANOG community, and make sure that it doesn't happen to anybody else.
---------========== J.D. Falk <jdfalk@cybernothing.org> =========--------- | "I keep praying for answers on how to do routing and He keeps saying | | 'you got yourself into this mess, you figure it out.'" | | -- David Payer <david.payer@ia-omni.com> | ----========== http://www.cybernothing.org/jdfalk/home.html ==========----
------------------------------------------------------------------------------ Tony Pardini Systems Engineer CompuNet, INC. tony@cmpu.net pgr 2145817737
participants (6)
-
Anthony Pardini
-
Ben Liberman
-
Erik E. Fair
-
Gordon Cook
-
J.D. Falk
-
Jim Dixon