I am not checking my emails until Nov 14th, 2025. Thanks, Samaneh On Nov 7, 2025, at 5:32 PM, ThreatHunt Alerts via NANOG <[email protected]> wrote:
Would this not require supporting Jumbo TCP SYN? +ADs-P Nathan Fowler Director, Information Security Operations Threat Hunting, Countermeasures, and Detection Engineering First Citizens Bank Alabama +IBM- Remote Firstcitizens.com Internal -----Original Message----- From: Andrew Kirch via NANOG +ADw-nanog+AEA-lists.nanog.org+AD4- Sent: Friday, November 7, 2025 10:17 To: North American Network Operators Group +ADw-nanog+AEA-lists.nanog.org+AD4- Cc: Andrew Kirch +ADw-trelane+AEA-trelane.net+AD4- Subject: +AFs-EXTERNAL+AF0- Re: my finance department cares deeply about 2+ACU- NOTICE: External Sender. Please exercise caution when opening attachments or clicking links. Just think of the savings. Call the finance department and implement jumbo frames everywhere, immediately, and without testing. We can decrease that waste more than 6x+ACE- Andrew On Fri, Nov 7, 2025 at 11:15+IC8-AM Tom Beecher via NANOG +ADw-nanog+AEA-lists.nanog.org+AD4- wrote: +AD4- +AD4- +AD4- +AD4- Hence, it is just a wastage of 2+ACU- of Internet for nothing. +AD4- +AD4- +AD4- Standard internet MTU +AD0- 1500 bytes. +AD4- +AD4- IPv4 header is 1.33+ACU- of the standard 1500 byte packet size. ( Assuming +AD4- IHL +AD0- 5, so no options, 20B) +AD4- IPv6 header is 40B, so this becomes 2.67+ACU-. ( 1.33+ACU- +ACo- 2 ) +AD4- +AD4- You can of course rant on about how this is 1.33+ACU- more +ACI-wasted+ACI-, oh noes+ACE- +AD4- But do you make the same argument to the application developers that +AD4- pull 1GB of data over the network when they really only need about +AD4- 200KB for the thing they are doing? How many more 1500B packets are +ACI-wasted+ACI- there? +AD4- +AD4- There are lots of reasonable complaints about things related to IPv6. +AD4- Complaining that the header is +ACI-wasting+ACI- bits on the wire is +AD4- absolutely NOT one of them. +AD4- +AD4- +AD4- +AD4- +AD4- On Fri, Nov 7, 2025 at 1:19+IC8-AM Vasilenko Eduard via NANOG +ADw- +AD4- nanog+AEA-lists.nanog.org+AD4- wrote: +AD4- +AD4- +AD4- It depends on what is the benefit for any expense. +AD4- +AD4- +AD4- +AD4- For example, encryption cost is high, but there is a motivation that +AD4- +AD4- many people would accept (and create the pressure on the financial +AD4- +AD4- department +AD4- to +AD4- +AD4- tolerate it). +AD4- +AD4- +AD4- +AD4- For the case of half IPv6 address bits wastage, it was initially +AD4- +AD4- +ACI-OSI layer violation to put MAC inside IP address just because some +AD4- +AD4- IPX politicians have big enough weight+ACI- that was later replaces by +AD4- +AD4- +ACI-randomize IP address to make more difficult to guess it or scan+ACI-. +AD4- +AD4- Number of people who would support this madness would be very small +AD4- +AD4- - OTTs have hundreds +AD4- of +AD4- +AD4- ways to de-anonymize users. Hence, it is just a wastage of 2+ACU- of +AD4- +AD4- Internet for nothing. +AD4- +AD4- Ed/ +AD4- +AD4- -----Original Message----- +AD4- +AD4- From: nanog--- via NANOG +ADw-nanog+AEA-lists.nanog.org+AD4- +AD4- +AD4- Sent: Thursday, November 6, 2025 20:58 +AD4- +AD4- To: North American Network Operators Group +ADw-nanog+AEA-lists.nanog.org+AD4- +AD4- +AD4- Cc: nanog+AEA-immibis.com +AD4- +AD4- Subject: RE: my finance department cares deeply about 2+ACU- +AD4- +AD4- +AD4- +AD4- fun fact I forgot to mention: if you use ipv6 on cellphone +AD4- +AD4- connections, your site loads more than 2+ACU- faster and uses less than +AD4- +AD4- 98+ACU- as much electricity, due to avoiding the expensive and +AD4- +AD4- computation-hungry NAT process itself, as well as not needing to be +AD4- +AD4- physically routed to that +AD4- big +AD4- +AD4- centralised server and back. So if you care about 2+ACU-, you'll use IPv6. +AD4- +AD4- +AD4- +AD4- +AD4- +AD4- On 6 November 2025 18:52:07 CET, nanog--- via NANOG +ADw- +AD4- nanog+AEA-lists.nanog.org+AD4- +AD4- +AD4- wrote: +AD4- +AD4- +AD4-So you use header compression on all your links, right? No sense +AD4- reducing +AD4- +AD4- your 1Gbps main uplink to 0.98Gbps. The checksum (removed in v6) is +AD4- +AD4- already 5+ACU- of each IP packet header. Speaking of headers I take it +AD4- +AD4- you're using SLIP instead of Ethernet? And you avoid TLS like the +AD4- +AD4- plague? I hope you replaced your 15W LED bulbs with 14.7W bulbs as +AD4- +AD4- well - your finance department will thank you. This is asinine. +AD4- +AD4- +AD4- +AD4- +AD4- +AD4- +AD4- +AD4- +AD4-On 6 November 2025 13:11:16 CET, Vasilenko Eduard via NANOG +ADw- +AD4- +AD4- nanog+AEA-lists.nanog.org+AD4- wrote: +AD4- +AD4- +AD4APg-Tell any financial department that 2+ACU- does not matter and see the +AD4- +AD4- +AD4APg-reaction. +AD4- +AD4- +AD4APg-Ed/ +AD4- +AD4- +AD4APg------Original Message----- +AD4- +AD4- +AD4APg-From: Marco Moock via NANOG +ADw-nanog+AEA-lists.nanog.org+AD4- +AD4- +AD4- +AD4APg-Sent: Thursday, November 6, 2025 14:53 +AD4- +AD4- +AD4APg-To: North American Network Operators Group +ADw-nanog+AEA-lists.nanog.org+AD4- +AD4- +AD4- +AD4APg-Cc: Marco Moock +ADw-mm+AEA-dorfdsl.de+AD4- +AD4- +AD4- +AD4APg-Subject: Re: Artificial Juniper SRX limitations preventing IPv6 +AD4- +AD4- +AD4APg-deployment (and sales) +AD4- +AD4- +AD4APg- +AD4- +AD4- +AD4APg-On 06.11.2025 07:12 Vasilenko Eduard wrote: +AD4- +AD4- +AD4APg- +AD4- +AD4- +AD4APgA+- The issue that 128bits (64+-64) are wasted in every packet. +AD4- +AD4- +AD4APgA+- Formally, for +ACI-privacy+ACI-. Content providers are lathing from such +AD4- +AD4- +AD4APgA+- form or privacy. But it is 2+ACU- of the internet capacity. +AD4- +AD4- +AD4APg- +AD4- +AD4- +AD4APg-No one cares nowadays. The amount of other crap traffic (scrapers, +AD4- +AD4- +AD4APg-AI, +AD4- +AD4- spam, DDoS attacks) is a real problem, the additional bits in the +AD4- +AD4- header aren't. +AD4- +AD4- +AD4APg-The time of slow dialup connections where every bit matters, is over. +AD4- +AD4- +AD4APgBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8- +AD4- +AD4- +AD4APg-NANOG mailing list +AD4- +AD4- +AD4APg-https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/ +AD4- +AD4- +AD4APg-nanog+AEA-lists.nanog.org/message/GQ+AF8AXwA7ACEAIQ-OgNkHJCYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEk +AD4- +AD4- +AD4APg-zGQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC238TnPEfXH4DsFZF6Jmc +AD4- +AD4- +AD4APg-R+AF8-RKduks9jye+ACQ- +AD4- +AD4- +AD4APg-5AQ75WAWRXFYS54QLFQAUMDGCM4QV4/ +AD4- +AD4- +AD4APgBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8- +AD4- +AD4- +AD4APg-NANOG mailing list +AD4- +AD4- +AD4APg-https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/ +AD4- +AD4- +AD4APg-nanog+AEA-lists.nanog.org/message/3W+AF8AXwA7ACEAIQ-OgNkHJCYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEk +AD4- +AD4- +AD4APg-zGQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC238TnPEfXH4DsFZF6Jmc +AD4- +AD4- +AD4APg-R+AF8-RKds+AF8-sYQtG+ACQ- +AD4- +AD4- +AD4APg-JNGJSN3R252QI7CWBDOTAL37LNQFIH/ +AD4- +AD4- +AD4AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBf- +AD4- +AD4- +AD4-NANOG mailing list +AD4- +AD4- +AD4-https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/n +AD4- +AD4- +AD4-anog+AEA-lists.nanog.org/message/ZYN+AF8AXwA7ACEAIQ-OgNkHJCYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEkz +AD4- +AD4- +AD4-GQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC238TnPEfXH4DsFZF6JmcR+AF8- +AD4- +AD4- +AD4-RKduJ8UKhd+ACQ- +AD4- +AD4- +AD4-MIDYAXYZMGQJT2VX36DZIEY5XHNYC/ +AD4- +AD4- +AF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXw- +AD4- +AD4- NANOG mailing list +AD4- +AD4- +AD4- +AD4- +AD4- https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/nano +AD4- g+AEA-lists.nanog.org/message/EI7EM7BXCFKDS3WR7HNRLREHECTMUCR7/+AF8AXwA7ACEAIQ-OgNkHJ +AD4- CYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEkzGQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC2 +AD4- 38TnPEfXH4DsFZF6JmcR+AF8-RKdgSu7E55+ACQ- +AD4- +AD4- +AF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXw- +AD4- +AD4- NANOG mailing list +AD4- +AD4- +AD4- +AD4- +AD4- https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/nano +AD4- g+AEA-lists.nanog.org/message/P47JM32L2IYAYYSHNGVBRQFWEIMTEFYQ/+AF8AXwA7ACEAIQ-OgNkHJ +AD4- CYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEkzGQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC2 +AD4- 38TnPEfXH4DsFZF6JmcR+AF8-RKdgH2OUlw+ACQ- +AD4- +AD4- +AD4- +AF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXw- +AD4- NANOG mailing list +AD4- +AD4- https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/nano +AD4- g+AEA-lists.nanog.org/message/4MNK4EWXVHEAXEXYZCLX3JKVPH5Z6QEQ/+AF8AXwA7ACEAIQ-OgNkHJ +AD4- CYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEkzGQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC2 +AD4- 38TnPEfXH4DsFZF6JmcR+AF8-RKdjUSMPRd+ACQ- +AF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXw- NANOG mailing list https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/nanog+AEA-lists.nanog.org/message/MCBRJN3H3GX5KBSLNU2PWFIVHN3OL5EH/+AF8AXwA7ACEAIQ-OgNkHJCYlf+AF8-CHg+ACE-dEvJjT+AF8-OFfRXEkzGQ2dCnkZJGxRYgwYW5anCp5g9pqvGHnJqlLG2VLOOYqoC238TnPEfXH4DsFZF6JmcR+AF8-RKdsI3Mh6P+ACQ- ---------------------------------------------------------------------- This electronic mail and any files transmitted with it are confidential and are intended solely for the use of the individual or entity to whom they are addressed. If you are not the intended recipient or the person responsible for delivering the electronic mail to the intended recipient, be advised that you have received this electronic mail in error and that any use, dissemination, forwarding, printing, or copying of this electronic mail is strictly prohibited. If you have received this electronic mail in error, please immediately notify the sender by return mail. First-Citizens Bank +ACY- Trust Company, as well as its divisions, subsidiaries, and affiliates (together, First Citizens) are U.S. financial institutions and provide products and services to non-U.S. clients on a cross-border basis from the United States of America. First Citizens is not licensed or regulated as a bank or any other type of financial institution outside of the United States of America. Please review our International Disclosures at https://urldefense.com/v3/+AF8AXw-https://www.firstcitizens.com/international-disclosures+AF8AXwA7ACEAIQ-PtGJab4+ACE-44Hu3nfLnb2Lg-50bTKFvjHRNyc59-CBw1ska6RXRU7+AF8-Qn2Atu2261ywUlpfRVRtTGz4kf13ZFqH-3cI8m-tsgYSLHM+ACQ- +AFs-firstcitizens+AFs-.+AF0-com+AF0- for more information. Visit us online at https://urldefense.com/v3/+AF8AXw-http://www.firstcitizens.com+AF8AXwA7ACEAIQ-PtGJab4+ACE-44Hu3nfLnb2Lg-50bTKFvjHRNyc59-CBw1ska6RXRU7+AF8-Qn2Atu2261ywUlpfRVRtTGz4kf13ZFqH-3cI8m-tlsTkHn4+ACQ- +AFs-firstcitizens+AFs-.+AF0-com+AF0- or call 1-888-FC DIRECT (1-888-323-4732). First Citizens Bank. Forever First+AK4-. Member FDIC. --------------------------------------------------------------------------------------------------- +AF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXwBfAF8AXw- NANOG mailing list https://urldefense.com/v3/+AF8AXw-https://lists.nanog.org/archives/list/nanog+AEA-lists.nanog.org/message/7NV3XY2MSDE4X4OVI6OXB2ZBZTNUEJHV/+AF8AXwA7ACEAIQ-PtGJab4+ACE-44Hu3nfLnb2Lg-50bTKFvjHRNyc59-CBw1ska6RXRU7+AF8-Qn2Atu2261ywUlpfRVRtTGz4kf13ZFqH-3cI8m-tSQeWVmg+ACQ- +AFs-lists+AFs-.+AF0-nanog+AFs-.+AF0-org+AF0- _______________________________________________ NANOG mailing list https://lists.nanog.org/archives/list/[email protected]/message/RQC6KUP4252LPNWFESSFCIPE2BN44PLI/
