80 Gbps ?
I'm looking at a site named the digital attack map (dot com). There's one attack that lists an attack at some near 80 Gbps inbound. ( Clip Cap at http://screencast.com/t/M59qmJhcWSW ) Some questions. Maybe I've just been lucky... but, A) /Seriously/ ? 80 Gbps ? B) Other than dropping routes / changing DNS and filtering at the borders are there controls that operators employ that help mitigate multi-Gbps attacks? I understand if - by the nature of talking about it, 'we' give attackers insight, so I'm willing to entertain private discussions; However, this seems to be a semi appropriate place as a catalyst. I'd be interested in a discussion, a ML, or resources that any people can provide, via this list or off list. -jamie -- jamie rishaw // .com.arpa@j - reverse it. ish. *Reality defeats prejudice.* - *Rep. Barney Frank*
Re: abha ahuja
I met her briefly at the Phoenix NANOG back when. (I want to say she was speaking with Guy Tal at the time and that's who introduced me but not sure.) I was shocked to hear that she passed not all that long afterwards. She was bright and full of energy and not someone you would expect to see an obituary on just two or three years later. On Sun, Oct 20, 2013 at 01:36:13AM +0300, Randy Bush wrote: abha ahuja, researcher and operator, died this day in 2001 at a tragically early age. if you did not know her, search a bit. she did a lot, and with an open mind and heart. randy --- Wayne Bouchard w...@typo.org Network Dude http://www.typo.org/~web/
Re: 80 Gbps ?
On Oct 22, 2013, at 8:19 AM, jamie rishaw j...@arpa.com wrote: A) /Seriously/ ? 80 Gbps ? 100gb/sec+ DDoS attacks have been seen for the last 3 years or more - 80gb/sec isn't that rare, unfortunately. Most (but not all) of these very high-bandwidth DDoS attacks are DNS, SNMP, ntp, or game-server reflection/amplification attacks. B) Other than dropping routes / changing DNS and filtering at the borders are there controls that operators employ that help mitigate multi-Gbps attacks? S/RTBH, shutting down links, cooperative multi-operator mitigation, BCP38/84, etc. - Roland Dobbins rdobb...@arbor.net
FW: SSIAI Call for Papers 2014 San Diego California April 4-6
Listkeeper, Can you help us get the word out? Brian Dr. Brian Nutter, PE Associate Professor Associate Chairman for Undergraduate Studies Department of Electrical and Computer Engineering Texas Tech University MS 3102 (806) 742-3533 From: Nutter, Brian Sent: Monday, October 21, 2013 12:40 PM Subject: SSIAI Call for Papers 2014 San Diego California April 4-6 Colleagues, On behalf of the SSIAI Organizing Committee, I'd like to invite you to join us at IEEE SSIAI 2014. The Southwest Symposium on Image Analysis and Interpretation (SSIAI) is a biennial conference dedicated to all aspects of computational analysis and interpretation of images and video. SSIAI brings together researchers and practitioners in academia, industry, and government to share and discuss the latest advances in this field. SSIAI 2014 will be held at the spectacular Humphreys Half Moon Inn Suites in San Diego, California, U.S.A. The symposium seeks original contributions reporting novel research directions, results, and applications. Important Dates December 16, 2013: Papers Due February 10, 2014: Acceptance Notification February 24, 2014: Camera-Ready Papers Due April 6-8, 2014: SSIAI 2014 Conference Paper Submission Submit a paper (4 pages max. including figures and references) in double-column IEEE conference format. Submission will be electronic using the PDF format. Accepted full papers will be of the same format with a four-page limit. For further details, please visit www.ssiai.orghttp://www.ssiai.org . Each accepted paper will be published in the conference proceedings, provided at least one author registers in advance at the non-student rate and gives a presentation at the conference. An author's non-student registration may be applied to up to three papers by that author. Topics of Interest (not limited to) Mathematical models and methods Statistical and learning methods Features and invariants Segmentation and grouping Object detection and tracking Activity detection and analysis Image and video indexing and retrieval Biomedical image analysis Neuro-signal processing Biometrics and bioinformatics Biologically inspired computer vision Multiscale and multispectral analysis Remote sensing Compressive sensing and processing Stereoscopic and 3-D analysis Multisensor analysis and processing Color analysis and processing Shape representation and recognition Scene modeling and interpretation Computational photography Human computer interaction Automated inspection Real-time analysis Optimization methods Performance evaluation Computer vision for robotics Image and video quality assessment Computer architectures for image/video processing Brian Dr. Brian Nutter, PE Associate Professor Associate Chairman for Undergraduate Studies Department of Electrical and Computer Engineering Texas Tech University MS 3102 (806) 742-3533
Possible DNS issues at Networksolutions aka WORLDNIC.COM?
Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, -- Mark Keymer
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
Yes I am seeing this also, getting calls from many clients that cant resolve domains with netsol dns chris On Tue, Oct 22, 2013 at 12:59 PM, Mark Keymer m...@viviotech.net wrote: Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, -- Mark Keymer
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
On 10/22/2013 9:59 AM, Mark Keymer wrote: Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, Yep. One of my clients domains seems to be gone.
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
I can also confirm that nearly all of the 'NSXX.WORLDNIC.COM' servers are either slow to respond or down completely. I just posted this message to the 'outages.org' mailing list: Anyone else seeing massive DNS issues this morning, particularly with Network Solutions' hosted zone servers? langsam:~# whois carywiedemann.com | grep Domain servers -A 3 Domain servers in listed order: NS43.WORLDNIC.COM205.178.190.22 NS44.WORLDNIC.COM206.188.198.22 langsam:~# host carywiedemann.com 206.188.198.22 ;; connection timed out; no servers could be reached Seems to be affecting far more than just my personal domain: langsam:~# whois blueridgenetworks.com | grep -A 3 Domain servers Domain servers in listed order: NS23.WORLDNIC.COM205.178.190.12 NS24.WORLDNIC.COM206.188.198.12 langsam:~# host blueridgenetworks.com 206.188.198.12 ;; connection timed out; no servers could be reached langsam:~# whois blueridge.com | grep -A 3 Domain servers Domain servers in listed order: NS33.WORLDNIC.COM205.178.190.17 NS34.WORLDNIC.COM206.188.198.17 langsam:~# host blueridge.com 206.188.198.17 ;; connection timed out; no servers could be reached I don't believe any of these NSXX.WORLDNIC.COM servers are anycasted... is anyone else having trouble? Not a peep out of their Twitter feed. Thanks everyone. - Cary Wiedemann On Tue, Oct 22, 2013 at 1:00 PM, chris tknch...@gmail.com wrote: Yes I am seeing this also, getting calls from many clients that cant resolve domains with netsol dns chris On Tue, Oct 22, 2013 at 12:59 PM, Mark Keymer m...@viviotech.net wrote: Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, -- Mark Keymer
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
On 10/22/2013 10:10 AM, Roy wrote: On 10/22/2013 9:59 AM, Mark Keymer wrote: Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, Yep. One of my clients domains seems to be gone. I am getting very slow responses from their DNS servers. Maybe a DDOS against their DNS?
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
On 10/22/2013 9:59 AM, Mark Keymer wrote: Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Yes. We started getting calls from customers with domains using *.worldnic.com (i.e. Network Solutions) in the last 15 minutes or so. -Bobby
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
I noticed Kaiser uses them, sites not resolving.. This should be a fun day for call centers :( Robert Glover wrote: On 10/22/2013 9:59 AM, Mark Keymer wrote: Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Yes. We started getting calls from customers with domains using *.worldnic.com (i.e. Network Solutions) in the last 15 minutes or so. -Bobby
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
not doubting the call-center thing, but: ;; ANSWER SECTION: kaiserpermanente.com. 86400 IN NS ea-dns14.kp.org. kaiserpermanente.com. 86400 IN NS ea-dns36.kp.org. kaiserpermanente.com. 86400 IN NS ea-dns25.kp.org. ;; ANSWER SECTION: kaiser.com. 7200IN NS ns65.worldnic.com. kaiser.com. 7200IN NS ns66.worldnic.com. Registrant: Kaiser Interests 338 Clayton St #10 Denver, CO 80220 US Domain Name: KAISER.COM Promote your business to millions of viewers for only $1 a month Learn how you can get an Enhanced Business Listing here for your domain name. Learn more at http://www.NetworkSolutions.com/ Administrative Contact: Kaiser, Hal kai...@kaiser.com 435 CLAYTON ST DENVER, CO 80206-4230 US sure that's the kaiser you're looking for? On Tue, Oct 22, 2013 at 1:26 PM, Steve Noble sno...@sonn.com wrote: I noticed Kaiser uses them, sites not resolving.. This should be a fun day for call centers :( Robert Glover wrote: On 10/22/2013 9:59 AM, Mark Keymer wrote: Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Yes. We started getting calls from customers with domains using *.worldnic.com (i.e. Network Solutions) in the last 15 minutes or so. -Bobby
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
It's at least permanente.net which they use for some of their sites: http://kp.org/mydoctor/denisearvay redirects to permanente.net Oops! Google Chrome could not find www.permanente.net Administrative Contact, Technical Contact: Sadayappan, Princeprince.i.sadayap...@kp.org Kaiser Permanente 1800 Harrison st Oakland, CA 94612 US 510-625-6996 Record expires on 12-Nov-2017. Record created on 12-Nov-1999. Database last updated on 22-Oct-2013 12:38:41 EDT. Domain servers in listed order: NS51.WORLDNIC.COM205.178.190.26 NS52.WORLDNIC.COM206.188.198.26 Christopher Morrow wrote: not doubting the call-center thing, but: ;; ANSWER SECTION: kaiserpermanente.com. 86400 IN NS ea-dns14.kp.org. kaiserpermanente.com. 86400 IN NS ea-dns36.kp.org. kaiserpermanente.com. 86400 IN NS ea-dns25.kp.org. ;; ANSWER SECTION: kaiser.com. 7200IN NS ns65.worldnic.com. kaiser.com. 7200IN NS ns66.worldnic.com. Registrant: Kaiser Interests 338 Clayton St #10 Denver, CO 80220 US Domain Name: KAISER.COM Promote your business to millions of viewers for only $1 a month Learn how you can get an Enhanced Business Listing here for your domain name. Learn more at http://www.NetworkSolutions.com/ Administrative Contact: Kaiser, Hal kai...@kaiser.com 435 CLAYTON ST DENVER, CO 80206-4230 US sure that's the kaiser you're looking for? On Tue, Oct 22, 2013 at 1:26 PM, Steve Noblesno...@sonn.com wrote: I noticed Kaiser uses them, sites not resolving.. This should be a fun day for call centers :( Robert Glover wrote: On 10/22/2013 9:59 AM, Mark Keymer wrote: Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Yes. We started getting calls from customers with domains using *.worldnic.com (i.e. Network Solutions) in the last 15 minutes or so. -Bobby
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
On Tue, Oct 22, 2013 at 1:45 PM, Steve Noble sno...@sonn.com wrote: It's at least permanente.net which they use for some of their sites: http://kp.org/mydoctor/denisearvay redirects to permanente.net super awesome! why not use the infra they have for kp.org one wonders? controlling your own destiny... over rated, they say. Oops! Google Chrome could not find www.permanente.net Administrative Contact, Technical Contact: Sadayappan, Princeprince.i.sadayap...@kp.org Kaiser Permanente 1800 Harrison st Oakland, CA 94612 US 510-625-6996 Record expires on 12-Nov-2017. Record created on 12-Nov-1999. Database last updated on 22-Oct-2013 12:38:41 EDT. Domain servers in listed order: NS51.WORLDNIC.COM205.178.190.26 NS52.WORLDNIC.COM206.188.198.26 Christopher Morrow wrote: not doubting the call-center thing, but: ;; ANSWER SECTION: kaiserpermanente.com. 86400 IN NS ea-dns14.kp.org. kaiserpermanente.com. 86400 IN NS ea-dns36.kp.org. kaiserpermanente.com. 86400 IN NS ea-dns25.kp.org. ;; ANSWER SECTION: kaiser.com. 7200IN NS ns65.worldnic.com. kaiser.com. 7200IN NS ns66.worldnic.com. Registrant: Kaiser Interests 338 Clayton St #10 Denver, CO 80220 US Domain Name: KAISER.COM Promote your business to millions of viewers for only $1 a month Learn how you can get an Enhanced Business Listing here for your domain name. Learn more at http://www.NetworkSolutions.com/ Administrative Contact: Kaiser, Hal kai...@kaiser.com 435 CLAYTON ST DENVER, CO 80206-4230 US sure that's the kaiser you're looking for? On Tue, Oct 22, 2013 at 1:26 PM, Steve Noblesno...@sonn.com wrote: I noticed Kaiser uses them, sites not resolving.. This should be a fun day for call centers :( Robert Glover wrote: On 10/22/2013 9:59 AM, Mark Keymer wrote: Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Yes. We started getting calls from customers with domains using *.worldnic.com (i.e. Network Solutions) in the last 15 minutes or so. -Bobby
Is there anyone from AOL messaging on here?
Please contact me off-list. We've got a persistent spammer on your network that we can't get shut down through normal channels. Q
ipv6 and geolocation
Everyone loves IPv6, and it's a fantastic technology. However, I've been pondering a few quirks of v6, including the low priority of PTR, but I have a question I want to throw out there: Do you think IPv6 geolocatoin (GeoIP) will ever be viable? If so, when do you think this will happen? If not, what's the superseding solution? (The W3C location technology fails miserably for me 100% of the time even on IPv4). Two of the big four GeoIP providers don't even catalog IPv6, and the other two's IPv6 database is unremarkable and usually only has the country. (Or, in my case, a block that's clearly in the United States is deemed as simply (somewhere in) Asia.) What I'm getting at is: IPv6 geolocation is presently rather hopeless and useless. Eager to hear thoughts from my fellow network thinkers! - Blair
Re: ipv6 and geolocation
On 2013-10-22, at 15:16, Blair Trosper blair.tros...@gmail.com wrote: Everyone loves IPv6, and it's a fantastic technology. However, I've been pondering a few quirks of v6, including the low priority of PTR, Not sure what that means, but... but I have a question I want to throw out there: Do you think IPv6 geolocatoin (GeoIP) will ever be viable? To me it seems like an easier problem to solve than IPv4. There's no historical assignment swamp. Subnets are of fixed size. Many/most organisations who receive a direct assignment will never need a second. If so, when do you think this will happen? As soon as enough people using geo-located services start doing so over v6. Joe
RE: ipv6 and geolocation
it seems like solving your first complaint is the same work as solving your second: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. 1h IN PTR host.example.com. 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.8.b.d.0.1.0.0.2.ip6.arpa. 1h IN LOC 40 45 33 N 73 59 07 W 100m From: Blair Trosper [blair.tros...@gmail.com] Sent: Tuesday, October 22, 2013 3:16 PM To: nanog@nanog.org Subject: ipv6 and geolocation Everyone loves IPv6, and it's a fantastic technology. However, I've been pondering a few quirks of v6, including the low priority of PTR, but I have a question I want to throw out there: Do you think IPv6 geolocatoin (GeoIP) will ever be viable? If so, when do you think this will happen? If not, what's the superseding solution? (The W3C location technology fails miserably for me 100% of the time even on IPv4). Two of the big four GeoIP providers don't even catalog IPv6, and the other two's IPv6 database is unremarkable and usually only has the country. (Or, in my case, a block that's clearly in the United States is deemed as simply (somewhere in) Asia.) What I'm getting at is: IPv6 geolocation is presently rather hopeless and useless. Eager to hear thoughts from my fellow network thinkers! - Blair
Re: ipv6 and geolocation
I meant that PTR isn't a priority for ISPs. A la Comcast's rollout of IPv6 lacks PTR, as does Google in general for v4 and v6 (even though they have it internally). On Tue, Oct 22, 2013 at 2:21 PM, Joe Abley jab...@hopcount.ca wrote: On 2013-10-22, at 15:16, Blair Trosper blair.tros...@gmail.com wrote: Everyone loves IPv6, and it's a fantastic technology. However, I've been pondering a few quirks of v6, including the low priority of PTR, Not sure what that means, but... but I have a question I want to throw out there: Do you think IPv6 geolocatoin (GeoIP) will ever be viable? To me it seems like an easier problem to solve than IPv4. There's no historical assignment swamp. Subnets are of fixed size. Many/most organisations who receive a direct assignment will never need a second. If so, when do you think this will happen? As soon as enough people using geo-located services start doing so over v6. Joe
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
You can watch the trainwreck on twitter if you want to: https://twitter.com/search?q=Network%20Solutionssrc=typd On Tue, Oct 22, 2013 at 10:00 AM, chris tknch...@gmail.com wrote: Yes I am seeing this also, getting calls from many clients that cant resolve domains with netsol dns chris On Tue, Oct 22, 2013 at 12:59 PM, Mark Keymer m...@viviotech.net wrote: Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, -- Mark Keymer
Re: Possible DNS issues at Networksolutions aka WORLDNIC.COM?
Recommend alternatives? On Tue, Oct 22, 2013 at 10:10 AM, Roy r.engehau...@gmail.com wrote: On 10/22/2013 9:59 AM, Mark Keymer wrote: Hi, Anyone else seeing resolving issues on WORLDNIC.COM DNS servers? Sincerely, Yep. One of my clients domains seems to be gone.
