Re: [Nanog-futures] Conference Network Experiment policy

2009-04-10 Thread Martin Hannigan
Its pretty easy to assign a Creative Commons license to the work and share it, for example. What could the possible objections be? Best, Marty On 4/9/09, Joel Jaeggli joe...@bogus.com wrote: Martin Hannigan wrote: On Wed, Apr 8, 2009 at 5:14 PM, Joe Provo nanog-...@rsuc.gweep.net

Re: [Nanog-futures] Conference Network Experiment policy

2009-04-10 Thread Martin Hannigan
On Fri, Apr 10, 2009 at 4:34 PM, Joel Jaeggli joe...@bogus.com wrote: So, in the distant past we (there are several we's in this case) experimentally deployed IDSes and or inline sniffers with the permission of merit staff under the requirement that all the data collected be destroyed when

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread deleskie
Not to turn this into an ethical typ discussion but this arguement would have to assume you could sue the telco not the 'vandal' due to a loss of life if it occured, and that, that dollar amt would be greater then 'securing' all cables. The cost to fix all pintos' gas tanks was only $11 per

Fwd: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've really got ask if this thread has run it's course. Given the nature of earlier discussions of off-topic issues, I think we've pretty much jumped the shark with people's personal anecdotes of how to disable fiber connectivity. - - ferg -

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread JC Dill
Ravi Pina wrote: Also not to get sensationalist, but less expensive than a life that could be lost if an emergency call can't be put through? Remember the exploding Ford Pinto? http://www.calbaptist.edu/dskubik/pinto.htm

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Joel Jaeggli
deles...@gmail.com wrote: Not to turn this into an ethical typ discussion but this arguement would have to assume you could sue the telco not the 'vandal' due to a loss of life if it occured, and that, that dollar amt would be greater then 'securing' all cables. Internet lawyering is a

Vandalism Likely In Big South Bay Phone Outage [Was: Re: Outside plant protection, fiber cuts, interwebz down oh noes!]

2009-04-10 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 More on this: [snip] SAN JOSE (CBS 5 / KCBS / AP / BCN) -- Vandals severed multiple fiber optic cables on Thursday, leaving thousands of people in Santa Clara, Santa Cruz and San Benito counties without cell phone, Internet and landline service,

SIP - perhaps botnet? anyone else seeing this?

2009-04-10 Thread Leland E. Vandervort
Hi All, Over the past couple of days we have been seeing an exponential increase (about 200-fold) in the amount of UDP SIP Control traffic in our netflow data. The past 24 hours, for example, has shown a total of nearly 300 GB of this traffic incoming and over 400 GB outgoing -- this despite

Re: SIP - perhaps botnet? anyone else seeing this?

2009-04-10 Thread Leland E. Vandervort
Legally speaking, we can't grab packets in this sense without a specific validated complaint, court orders, and that kind of thing... So all we can do in the the absence of a specific complaint is in the context of our day to day traffic analysis from the netflow data to identify anomalies..

Re: SIP - perhaps botnet? anyone else seeing this?

2009-04-10 Thread Roland Dobbins
On Apr 10, 2009, at 4:45 PM, Leland E. Vandervort wrote: UDP SIP Control traffic in our netflow data. Have you grabbed some packets in order to ensure it's actually SIP, vs. something else on the same ports? If it really is SIP-related, this could be caused by botted hosts launching a

Re: SIP - perhaps botnet? anyone else seeing this?

2009-04-10 Thread Roland Dobbins
On Apr 10, 2009, at 5:32 PM, Leland E. Vandervort wrote: legally speaking, we can't grab packets in this sense without a specific validated complaint, court orders, and that kind of thing... IANAL, but I suggest you check again with your legal department - I doubt this is actually the

Re: SIP - perhaps botnet? anyone else seeing this?

2009-04-10 Thread Leland E. Vandervort
On Fri, 10 Apr 2009, Roland Dobbins wrote: IANAL, but I suggest you check again with your legal department - I doubt this is actually the case (your jurisdiction may vary, but in most Western nations, you can grab packets for diagnostic/ troubleshooting/forensics purposes). Already did

Re: SIP - perhaps botnet? anyone else seeing this?

2009-04-10 Thread Randy Bush
to answer your question, as opposed to telling you how to run your business, yes. we are seeing a low level, distributed source, sip probing across a wide swath of target space. it goes back a long time. randy

Re: attacks on MPLS?

2009-04-10 Thread Florian Weimer
* Christopher Morrow: On Thu, Apr 9, 2009 at 12:56 PM, Steven M. Bellovin s...@cs.columbia.edu wrote: http://www.darkreading.com/securityservices/services/data/showArticle.jhtml?articleID=216403220 This is different from ATM or FRAME or Private lines how? In the end, MPLS is just a

BGP Update Report

2009-04-10 Thread cidr-report
BGP Update Report Interval: 09-Mar-09 -to- 09-Apr-09 (32 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS6389 331960 4.2% 75.6 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 2 - AS2386

The Cidr Report

2009-04-10 Thread cidr-report
This report has been generated at Fri Apr 10 21:13:42 2009 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date

Re: On a lighter note..

2009-04-10 Thread Steven M. Bellovin
On Thu, 9 Apr 2009 20:07:05 -0500 jamie rishaw j...@arpa.com wrote: It's amusing to see the media's (misdirected) focus on the event. Expected : MULTIPLE COORDINATED FIBER CUTS TAKE OUT 911, PHONE, CELL, INTERNET TO TENS OF THOUSANDS Google News: ATT uses Twitter ...

Re: attacks on MPLS?

2009-04-10 Thread Nicolas FISCHBACH
Steven M. Bellovin wrote: http://www.darkreading.com/securityservices/services/data/showArticle.jhtml?articleID=216403220 So 2001 (*), slide 46+ here: http://www.securite.org/presentations/secip/BHUS-IPBackboneSecurity.pdf (*) this slide deck is from a talk we've given in 2002 (and contains

Re: attacks on MPLS?

2009-04-10 Thread Truman Boyes
Modification to VPN labels in MPLS is interesting however it assumes that providers have exposed their core network to customers. Traffic can be injected into different MPLS VPNs by modifying vpn labels but this is not a trivial attack scenario. For one thing, it would mean the attacker

Re: Vandalism Likely In Big South Bay Phone Outage

2009-04-10 Thread Bob Bradlee
Sounds to me like an ongoing dispute may be close to the bottom of this. http://blogs.barrons.com/techtraderdaily/2009/04/06/att-union-contract-expires-threat-to-cap-ex/ ATT's answer is to place a $100k bounty on the vandals. The other Bob

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Valdis . Kletnieks
On Fri, 10 Apr 2009 01:51:16 EDT, Ravi Pina said: Also not to get sensationalist, but less expensive than a life that could be lost if an emergency call can't be put through? The alarm that goes off saying the lid got opened is only 2 minutes before the big red alarm that says you just lost 5

Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Marshall Eubanks
Hello; I work with FEC in various ways, mostly to protect video streams against packet loss, including as co-chair of the IETF FECFRAME WG and in the Video Services Forum. Most FEC is driven by congestion in the edge, RF issues on wireless LANs, etc., but there is always the chance of loss

Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Patrick W. Gilmore
On Apr 10, 2009, at 11:03 AM, Marshall Eubanks wrote: I work with FEC in various ways, mostly to protect video streams against packet loss, including as co-chair of the IETF FECFRAME WG and in the Video Services Forum. Most FEC is driven by congestion in the edge, RF issues on wireless LANs,

Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Mikael Abrahamsson
On Fri, 10 Apr 2009, Marshall Eubanks wrote: What level of packet loss would trigger response from network operators ? How bad does a sustained packet loss need to be before it is viewed as a problem to be fixed ? Conversely, what is a typical packet loss fraction during periods of good

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Martin Hannigan
Its all risk and cost. You possibly couldn't have spent enough to stop this event. The outside plant wasn't at fault, highly motivated and informed individuals were. Pretty much a non issue, IMHO. Best, Martin On 4/9/09, Charles Wyble char...@thewybles.com wrote: Seriously though I want to

Re: Vandalism Likely In Big South Bay Phone Outage

2009-04-10 Thread Martin Hannigan
The reward is effective and the one of the best uses of their funds in responding to this event. More outside plant spending is not effective when you are dealing with motivated individuals. I'd like to reemphasize that you can't spend enough on outside or inside plant to stop this type of thing.

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-10 Thread Eugeniu Patrascu
Roland Dobbins wrote: On Apr 9, 2009, at 11:48 PM, Lee, Steven (NSG Malaysia) wrote: Please share your thought and thanks in advance :) No, IMHO. Most broadband operators don't insert firewalls inline in front of their subscribers, and wireless broadband is no different. Some operators

[SPAM] Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Jean-Michel Planche
Le 11 avr. 09 à 00:03, Marshall Eubanks a écrit : What level of packet loss would trigger response from network operators ? How bad does a sustained packet loss need to be before it is viewed as a problem to be fixed ? Conversely, what is a typical packet loss fraction during periods of

Re: Vandalism Likely ...

2009-04-10 Thread bmanning
at least this year its been changed from Terrorists to Vandals. (when most likley, its over-aggressive metals recyclers who have run out of catalitic converters to steal...) --bill

Re: Vandalism Likely ...

2009-04-10 Thread Patrick W. Gilmore
On Apr 10, 2009, at 12:57 PM, bmann...@vacation.karoshi.com wrote: at least this year its been changed from Terrorists to Vandals. (when most likley, its over-aggressive metals recyclers who have run out of catalitic converters to steal...) I didn't see a smiley. And I seriously doubt metal

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Daryl G. Jurbala
On Apr 9, 2009, at 6:04 PM, Charles Wyble wrote: 3) From what I understand it's not trivial to raise a manhole cover. Most likely can't be done by one person. Can they be locked? Or were the carriers simply relying on obscurity/barrier to entry? Your understanding is incorrect. I'm an

Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Matthew Kaufman
Marshall Eubanks wrote: If there is some consensus around this, it would effectively set an upper bound for the need for FEC in network transit. The bit error rate of copper is better than 1 error in 10^9 bits. The bit error rate of fiber is better than 1 error in 10^12 bits. So the packet

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Andy Ringsmuth
On Apr 10, 2009, at 12:37 PM, Daryl G. Jurbala wrote: 3) From what I understand it's not trivial to raise a manhole cover. Most likely can't be done by one person. Can they be locked? Or were the carriers simply relying on obscurity/barrier to entry? Your understanding is incorrect.

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Matthew Kaufman
Charles Wyble wrote: So allow me to think out loud for a minute 1) Why wasn't the fiber protected by some sort of hardened/locked conduit? Is this possible? Does it add extensive cost or hamper normal operation? Cost, both in implementing (what are likely to be easily-circumvented)

Re: Vandalism Likely ...

2009-04-10 Thread Steven M. Callahan
On Fri, Apr 10, 2009 at 1:15 PM, Patrick W. Gilmore patr...@ianai.netwrote: I didn't see a smiley. And I seriously doubt metal recyclers are going 10 feet down into man holes, breaking into locked cabinets, cutting _fiber_optic_ cables (not copper), and doing it in exactly the right points

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Randy Fischer
On Fri, Apr 10, 2009 at 2:02 AM, deles...@gmail.com wrote: Not to turn this into an ethical typ discussion but this Maybe it's an ethical issue, with an ethical solution. Random news article from google: Workers are seeking to preserve the health care benefit packages, said Libby

Re: Vandalism Likely ...

2009-04-10 Thread Patrick W. Gilmore
On Apr 10, 2009, at 2:00 PM, Steven M. Callahan wrote: On Fri, Apr 10, 2009 at 1:15 PM, Patrick W. Gilmore patr...@ianai.netwrote: I didn't see a smiley. And I seriously doubt metal recyclers are going 10 feet down into man holes, breaking into locked cabinets, cutting _fiber_optic_ cables

Weekly Routing Table Report

2009-04-10 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-st...@lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-10 Thread Chris Hills
On 10/04/09 03:32, John Martinez wrote: BT Americas? Oh dear, and just after BT suffered a big cut in London. Who needs vandals when there's contractors about? http://www.theregister.co.uk/2009/04/08/bt_hole_hits_vodafone/ http://www.flickr.com/photos/23919...@n00/3426407496/

Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Lamar Owen
On Friday 10 April 2009 13:43:26 Matthew Kaufman wrote: The bit error rate of copper is better than 1 error in 10^9 bits. The bit error rate of fiber is better than 1 error in 10^12 bits. So the packet loss rate of the transport media is approximately zero.* This sounds pretty good, until you

Re: Vandalism Likely ...

2009-04-10 Thread Valdis . Kletnieks
On Fri, 10 Apr 2009 14:00:38 EDT, Steven M. Callahan said: The average copper thief normally isn't intelligent enough to know the difference between black PVC clad copper and black PVC clad fiber until they cut it. I wish I still had the link to the pictures - one company in Europe was laying

Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Matthew Kaufman
Lamar Owen wrote: On Friday 10 April 2009 13:43:26 Matthew Kaufman wrote: The bit error rate of copper is better than 1 error in 10^9 bits. The bit error rate of fiber is better than 1 error in 10^12 bits. So the packet loss rate of the transport media is approximately zero.* This sounds

Re: Forward Erasure Correction (FEC) and network performance

2009-04-10 Thread Mikael Abrahamsson
On Fri, 10 Apr 2009, Lamar Owen wrote: This sounds pretty good, until you realize that it means you can expect 36 errors in 10 hours on a 100% utilized gigabit fiber link. Well, it means this is still ok according to standard. In real life, if you engineer your network to be within the

RE: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Carlos Alcantar
Your right about having the right tools whats a manhole hook cost $50 -carlos -Original Message- From: Daryl G. Jurbala [mailto:da...@introspect.net] Sent: Friday, April 10, 2009 10:37 AM To: Charles Wyble Cc: nanog@nanog.org Subject: Re: Outside plant protection, fiber cuts, interwebz

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Owen DeLong
I've had pretty good luck when necessary using a large screwdriver, a claw hammer, or a small crow-bar. I know others who claim it can be done with a spade, pick-axe, etc. although I have not tested those implements. Owen On Apr 10, 2009, at 12:05 PM, Carlos Alcantar wrote: Your right about

Re: Fiber cut in SF area

2009-04-10 Thread Scott Doty
George William Herbert wrote: Scott Doty wrote: (Personally, I can think of a MAE-Clueless episode that was worse than this, but that was in the 90's...) The gas main strike out front of the building in Santa Clara? Or something else? -george william herbert gherb...@retro.com

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Robert Glover
- Original Message - From: Ravi Pina r...@cow.org To: Charles Wyble char...@thewybles.com Cc: nanog@nanog.org Sent: Thursday, April 09, 2009 5:41 PM Subject: Re: Outside plant protection, fiber cuts, interwebz down oh noes! 2) Why didn't an alarm go off that someone had entered the

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Shane Ronan
On a side note, when I was passing the area this morning at around 10am PDT, there were two fiber-trailers working in two separate manholes. This is probably the result of having to splice in a new section of fiber, since it would probably have been difficult to splice the ends of

BGP FlowSpec support on provider networks

2009-04-10 Thread Fouant, Stefan
Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all. The few providers I've reached out to have indicated they do not support this and have no intention of supporting this any time in the near future. I'm also

Re: Fiber cut in SF area

2009-04-10 Thread Patrick W. Gilmore
On Apr 10, 2009, at 3:41 PM, Scott Doty wrote: George William Herbert wrote: Scott Doty wrote: (Personally, I can think of a MAE-Clueless episode that was worse than this, but that was in the 90's...) The gas main strike out front of the building in Santa Clara? Or something else?

Re: BGP FlowSpec support on provider networks

2009-04-10 Thread Seth Mattinen
Fouant, Stefan wrote: Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all. The few providers I've reached out to have indicated they do not support this and have no intention of supporting this any time in

BGP FlowSpec support on provider networks

2009-04-10 Thread Fouant, Stefan
Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all. The few providers I've reached out to have indicated they do not support this and have no intention of supporting this any time in the near future. I'm also

Re: BGP FlowSpec support on provider networks

2009-04-10 Thread Charles Wyble
Fouant, Stefan wrote: Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all. The few providers I've reached out to have indicated they do not support this and have no intention of supporting this any time in the

Re: BGP FlowSpec support on provider networks

2009-04-10 Thread John Payne
On Apr 10, 2009, at 4:27 PM, Fouant, Stefan stefan.fou...@neustar.biz wrote: Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all. The few providers I've reached out to have indicated they do not support

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Jay Hennigan
On Apr 10, 2009, at 12:05 PM, Carlos Alcantar wrote: Your right about having the right tools whats a manhole hook cost $50 Less than half that. http://www.toolup.com/condux/08023000.html -- Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net Impulse Internet Service -

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-10 Thread Joe Greco
On Apr 10, 2009, at 12:05 PM, Carlos Alcantar wrote: Your right about having the right tools whats a manhole hook cost $50 Less than half that. http://www.toolup.com/condux/08023000.html And maybe even less than half *that*. You don't actually need the tool in many cases. A good bit of

Re: BGP FlowSpec support on provider networks

2009-04-10 Thread McDonald Richards
In my experience it's vendor support that is lacking, not provider support On Sat, Apr 11, 2009 at 6:08 AM, Fouant, Stefan stefan.fou...@neustar.bizwrote: Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at

Re: BGP FlowSpec support on provider networks

2009-04-10 Thread Richard A Steenbergen
I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all. The few providers I've reached out to have indicated they do not support this and have no intention of supporting this any time in the near future. I'm also curious

Re: BGP FlowSpec support on provider networks

2009-04-10 Thread Christopher Morrow
On Fri, Apr 10, 2009 at 6:38 PM, John Payne j...@sackheads.org wrote: On Apr 10, 2009, at 4:27 PM, Fouant, Stefan stefan.fou...@neustar.biz wrote: Hi folks, I am trying to compile data on which providers are currently supporting BGP Flowspec at their edge, if there are any at all.  The

RE: Fiber cut in SF area

2009-04-10 Thread Jo¢
I'm confussed, but please pardon the ignorance. All the data centers we have are at minimum keys to access data areas. Not that every area of fiber should have such, but at least should they? Manhole covers can be keyed. For those of you arguing that this is not enough, I would say at least