Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Charles N Wyble
Guillaume FORTAINE wrote: Misters, No comments ? http://docs.google.com/viewer?url=http://www.loud-fat-bloke.co.uk/obeseus2.pdf http://docs.google.com/viewer?url=http://www.parliament.uk/documents/upload/F012Interoute121109.pdf http://barometer.interoute.com/barom_main.php The paper is

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Dear Mister Wyble, Thank you for your reply. On 03/15/2010 07:00 AM, Charles N Wyble wrote: The paper is pretty high level, and the software doesn't appear to be available for download. http://www.loud-fat-bloke.co.uk/obeseus.html http://www.loud-fat-bloke.co.uk/tools/obeseusvB.tar.gz

RE: Network Naming Conventions

2010-03-15 Thread Paul Stewart
I have yet to see a core router named Luke or Bart... ;) -Original Message- From: Joe Greco [mailto:jgr...@ns.sol.net] Sent: March-14-10 11:11 PM To: Rubens Kuhl Cc: Paul Stewart; NANOG list Subject: Re: Network Naming Conventions On Sat, Mar 13, 2010 at 6:01 PM, Paul Stewart

Re: Network Naming Conventions

2010-03-15 Thread James Jones
It was a small network. On 3/13/10 2:58 PM, Randy Bush wrote: On my last network I named all the routers after simpsons characters. scaled well?

RE: Network Naming Conventions

2010-03-15 Thread Adcock, Matt [HISNA]
I've used a Jimmy Buffett theme in test labs before.    Matt Adcock, Manager 334-481-6629 (w) / 334-312-5393 (m) / madc...@hisna.com 700 Hyundai Blvd. / Montgomery, AL 36105 P The average office worker uses 10,000 sheets of paper = 1.2 trees, per year By not printing this email, you’ve saved

Re: Network Naming Conventions

2010-03-15 Thread Greg Whynott
We use confidence inspiring names here for our devices, shakey, broken, jitter, crusty G - Original Message - From: Adcock, Matt [HISNA] madc...@hisna.com To: Ravi Pina r...@cow.org; Randy Bush ra...@psg.com Cc: nanog@nanog.org nanog@nanog.org Sent: Mon Mar 15 09:10:40 2010

Re: Network Naming Conventions

2010-03-15 Thread Andrew D Kirch
Nice, I've used mountains (Denali, Everest, Olympus, etc) in the past to name systems. Used profanity for awhile to name machines, there's really quite a bit of it, and every language has it's own set, giving a large pool to choose from. Sadly, when outages occurred, it was somewhat difficult to

Re: Network Naming Conventions

2010-03-15 Thread Joel Esler
Being in the IDS business mostly involved with Snort, I've given my sensors pig names in the past. Wilbur, Arnold, Lechoncito On Mar 15, 2010, at 9:57 AM, Andrew D Kirch wrote: Nice, I've used mountains (Denali, Everest, Olympus, etc) in the past to name systems. Used profanity for

Re: Network Naming Conventions

2010-03-15 Thread Nathan Ward
On 16/03/2010, at 2:10 AM, Adcock, Matt [HISNA] wrote: I've used a Jimmy Buffett theme in test labs before. Naming themes are fine in test labs, because devices have a different function/role several times per day, a name acts like an asset tag in that it sticks with it through its lifetime.

Re: Network Naming Conventions

2010-03-15 Thread Greg Whynott
ours is a small network, so is ok to have fun. 8) we do use CNAMES to provide useful information(and make managers happy).. and name servers after the service the provide, eg ldap1.auth.mgt here is an example: gwhyn...@ops:~$ host rma.mgt rma.mgt.oicr.on.ca is an alias for

RE: Network Naming Conventions

2010-03-15 Thread Frank A. Coluccio
On-net we use law enforcement agency names, and for those off-net we use the names of reigning mafia families in NFL cities and South American drug cartels. --- madc...@hisna.com wrote: From: Adcock, Matt [HISNA] madc...@hisna.com To: Ravi Pina r...@cow.org, Randy Bush ra...@psg.com Cc:

RE: Network Naming Conventions

2010-03-15 Thread Sachs, Marcus Hans (Marc)
I used to use dead presidents to name devices. Lincoln, Washington, Jefferson, etc. Humorous yet patriotic. Marc

Re: Network Naming Conventions

2010-03-15 Thread Marshall Eubanks
On Mar 15, 2010, at 11:37 AM, Sachs, Marcus Hans (Marc) wrote: I used to use dead presidents to name devices. Lincoln, Washington, Jefferson, etc. Humorous yet patriotic. We used to use deceased musicians. Popular (i.e., rock) for Linux servers. Classical musicians for everything

Re: Network Naming Conventions

2010-03-15 Thread R.A. Hettinga
For Shipwright.com, it's Donald McKay's ships http://en.wikipedia.org/wiki/Donald_McKay and famous clippers (shortened) (Flying) cloud, (Neptune's) car, cet, then Jack Aubrey's commands http://en.wikipedia.org/wiki/Jack_Aubrey (sophie, surprise...), and, finally, the names of various sentient

Re: Network Naming Conventions

2010-03-15 Thread Malte von dem Hagen
Hi there, we brainstormed alot about this topic some time ago, following some conclusions: - anything trademarked might be a problem (so Zoidberg might be cool for a router, but I couldn't take a router named Zapp for serious, and Farnsworth is going mad would be considered as normal

RE: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Deepak Jain
At first blush, I would say it's an interesting idea but won't actually resolve anything of the scariest DDOS attacks we've seen. (Unless I've missed something obvious about your doodle). The advantage/disadvantage of 100,000+ host drone armies is that they don't actually *have* to flood you,

Request for Youtube tech contact.

2010-03-15 Thread drrtuy
Hello. Recently I have faced with youtube content access problem. It looks, that our subnets got banned in some way. I would be very pleased to get Youtube or maybe Google technical contact. WBR Roman A. Nozdrin ISP Tis-Dialog LLC

Need some info about Clean pipe

2010-03-15 Thread sakthi vadivel
Hi, Is there any one has idea about what is clean pipe ? what exactly upstream providers do using this term clean pipe? whether would it add any latency in the traffic flow ? Please if you have any link or draft , please share it. Planning to implement it in our peering pipes ? thanks and

Re: Need some info about Clean pipe

2010-03-15 Thread Michael Holstein
Is there any one has idea about what is clean pipe ? what exactly upstream providers do using this term clean pipe? Call it managed DDOS protection .. sort of like the SaS model, but for networking. Simple ASCII artwork : Internet - ISP (big pipe) - DDOS gear - (your circuit) - you. In

Re: Network Naming Conventions

2010-03-15 Thread Antonio Querubin
On Mon, 15 Mar 2010, Greg Whynott wrote: We use confidence inspiring names here for our devices, shakey, broken, jitter, crusty Ah, try endangered plants/animals :) Antonio Querubin 808-545-5282 x3003 e-mail/xmpp: t...@lava.net

Re: Need some info about Clean pipe

2010-03-15 Thread Dobbins, Roland
On Mar 16, 2010, at 1:06 AM, Michael Holstein wrote: In short, instead of paying for a (n*)gbps circuit and buying your own DDOS prevention gear, you buy $n worth of bandwidth that has somebody actively managing the DDOS protection. And of course, if one's organization is an SP, one can in

Re: Need some info about Clean pipe

2010-03-15 Thread Al Iverson
On Mon, Mar 15, 2010 at 1:58 PM, Brandon Kim brandon@brandontek.com wrote: Is this a new concept? I've never heard of this before. It's very interesting. Not that I personally have a need for it, but companies are always finding more services to provide for youerrrmanage for

Re: Request for Youtube tech contact.

2010-03-15 Thread andrew wales
On 15 March 2010 17:36, drrtuy drr...@ya.ru wrote: Recently I have faced with youtube content access problem. It looks, that our subnets got banned in some way. I would be very pleased to get Youtube or maybe Google technical contact. You're not using 1.0.0.0/8 on your network are you?

Re: Network Naming Conventions

2010-03-15 Thread Bill Stewart
- Beers (the main server got to be anchor, which made our ex-Navy boss happy and seemed more professional than some others - Mountains, mostly volcanic - Psychoactive chemicals (the database is on speed, the development project's on prozac...) - Friends at Princeton used quarks (Up is down today.)

Re: Network Naming Conventions

2010-03-15 Thread Patrick W. Gilmore
Sub-atomic particles. Some people say there are not enough, but they just don't realize how many there are. Plus you can expand into elements, then compounds. -- TTFN, patrick

RE: 10GBase-t switch

2010-03-15 Thread George Bonser
-Original Message- From: Dave Temkin Sent: Thursday, March 11, 2010 12:51 PM To: Kevin Oberman Cc: nanog@nanog.org Subject: Re: 10GBase-t switch Can you point to another 1U box that has more than 16MB per-port buffer? -Dave Anyone know what the buffer depth is on the

Re: 10GBase-t switch

2010-03-15 Thread Joel Jaeggli
On 03/15/2010 04:30 PM, George Bonser wrote: -Original Message- From: Dave Temkin Sent: Thursday, March 11, 2010 12:51 PM To: Kevin Oberman Cc: nanog@nanog.org Subject: Re: 10GBase-t switch Can you point to another 1U box that has more than 16MB per-port buffer? -Dave

RE: Inside plant 10G fiber specs?

2010-03-15 Thread Michael Balasko
Bullpucky with regards to 10G optics cost. (1G we can agree on) You can do SPF+ 10G LRM for 220M of shiny-light goodness for 280 bucks. LR is nearly 4 times that much. We find that 220 gets us to most places in the building. Jeff- As far as fiber goes we spec sumitomo or corning and try to

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Dear Mister Jain, Thank you for your reply. You are speaking about EDoS (Economic Denial of Sustainability). Please see the following article : http://www.rationalsurvivability.com/blog/?s=EDos Consider a new take on an old problem based on ecommerce: Click-fraud. I frame this new

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Christopher Morrow
On Mon, Mar 15, 2010 at 9:44 PM, Guillaume FORTAINE gforta...@live.com wrote: Dear Mister Jain, Thank you for your reply. You are speaking about EDoS (Economic Denial of Sustainability). Please see the following article : http://www.rationalsurvivability.com/blog/?s=EDos Consider a new

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Dear Mister Morrow, Thank you for your reply. To quote : The advantage/disadvantage of 100,000+ host drone armies is that they don't actually *have* to flood you, per se. 10 pps (or less) each and you are going to crush almost everything without raising any alarms based on statistically

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Suresh Ramasubramanian
That's right M.Fortaine .. and your model does not, as yet, appear to address what you term as EDoS and what the general security community calls DDoS On Tue, Mar 16, 2010 at 7:29 AM, Guillaume FORTAINE gforta...@live.com wrote: From my point of view, it seems similar to the EDoS concept :

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Christopher Morrow
On Mon, Mar 15, 2010 at 10:02 PM, Suresh Ramasubramanian ops.li...@gmail.com wrote: That's right M.Fortaine .. and your model does not, as yet, appear to address what you term as EDoS and what the general security community calls DDoS eh.. I guess I'm splitting hairs. the goal of 100k bots

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Suresh Ramasubramanian
I got your point. What I was saying is that what he calls EDoS (and I'm sure he'll say obliterating infrastructure is the ultimate form of an economic dos) is just what goes on ... You may or may not be able to overload the AWS infrastructure by too many queries but you sure as hell will blow

Re: RE: Inside plant 10G fiber specs?

2010-03-15 Thread Jeff Kell
And a follow-up to my original question... I'm reading the Cisco SFP GBIC-SH spec for 50u OM3 and it shows a rating of 1000m? Really? That's better than the LH rating over the same fiber (550m)? Jeff

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Misters, Thank you for your reply. 1) First of all, I am absolutely not related to the Obeseus project. From my point of view, the interesting things were that : a) This project was unknown. http://www.google.com/search?q=obeseus+ddosbtnG=Searchhl=enesrch=FT1sa=2 b) This project comes

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Nathan Ward
If only there were other security experts on this list with a proven ability to make this thread even more absurd. On 16/03/2010, at 4:47 PM, Guillaume FORTAINE wrote: Misters, Thank you for your reply. 1) First of all, I am absolutely not related to the Obeseus project. From my point

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Dobbins, Roland
On Mar 16, 2010, at 10:47 AM, Guillaume FORTAINE wrote: Especially, where is Roland Dobbins ? At your service. ; --- Roland Dobbins rdobb...@arbor.net // http://www.arbornetworks.com Injustice is relatively easy to

Re: OBESEUS - A new type of DDOS protector

2010-03-15 Thread Guillaume FORTAINE
Dear Mister Dobbins, Thank you for your reply. What do you think about Obeseus ? I look forward to your answer, Best Regards, Guillaume FORTAINE On 03/16/2010 05:16 AM, Dobbins, Roland wrote: On Mar 16, 2010, at 10:47 AM, Guillaume FORTAINE wrote: Especially, where is Roland