Re: Saying goodnight to my GSR

2014-09-22 Thread Alain Hebert
, exactly, is it vulnerable to? -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Daniel Sterling Sent: Saturday, 20 September, 2014 12:06 To: Bacon Zombie Cc: nanog@nanog.org Subject: Re: Saying goodnight to my GSR Again, you're focusing resentment towards

RE: Saying goodnight to my GSR

2014-09-22 Thread David Hubbard
Got you beat by nine weeks with a Foundry 9604. :-) #sh ver SW: Version 03.3.01aTc1 Copyright (c) 1996-2004 Foundry Networks, Inc. Compiled on Feb 01 2005 at 11:21:12 labeled as FES03301a (2057881 bytes) from Primary foundry-FES/FES03301a.bin Boot Monitor: Version 03.2.00Tc4

RE: Saying goodnight to my GSR

2014-09-22 Thread Justin M. Streiner
On Mon, 22 Sep 2014, David Hubbard wrote: Got you beat by nine weeks with a Foundry 9604. :-) I might have a Cat5505 or two on our out-of-band management network with uptimes that approach this. jms #sh ver SW: Version 03.3.01aTc1 Copyright (c) 1996-2004 Foundry Networks, Inc.

RE: Saying goodnight to my GSR

2014-09-22 Thread Drew Weaver
The best thing about having GSRs around is trading them in for ASR 9900s. The freight is a ding, though. -Drew -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Matthew Crocker Sent: Saturday, September 20, 2014 10:19 AM To: NANOG Subject: Saying goodnight to

RE: Saying goodnight to my GSR

2014-09-22 Thread Jim Devane
22, 2014 10:58 AM To: 'Matthew Crocker' Cc: 'nanog@nanog.org' Subject: RE: Saying goodnight to my GSR The best thing about having GSRs around is trading them in for ASR 9900s. The freight is a ding, though. -Drew -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf

RE: Saying goodnight to my GSR

2014-09-22 Thread Justin M. Streiner
-Original Message- From: NANOG [mailto:nanog-bounces+jdevane=switchnap@nanog.org] On Behalf Of Drew Weaver Sent: Monday, September 22, 2014 10:58 AM To: 'Matthew Crocker' Cc: 'nanog@nanog.org' Subject: RE: Saying goodnight to my GSR The best thing about having GSRs around is trading

Re: Saying goodnight to my GSR

2014-09-22 Thread Ken Matlock
-bounces+jdevane=switchnap@nanog.org] On Behalf Of Drew Weaver Sent: Monday, September 22, 2014 10:58 AM To: 'Matthew Crocker' Cc: 'nanog@nanog.org' Subject: RE: Saying goodnight to my GSR The best thing about having GSRs around is trading them in for ASR 9900s. The freight is a ding

Re: Saying goodnight to my GSR

2014-09-22 Thread Larry Sheldon
On 9/22/2014 06:38, Alain Hebert wrote: Properly configured, it is less a security issue than newer devices. Pretty impressive from Matthew to have the patience/skills to not simply reload that fridge over the years. Whew! I was afraid I was the one who thought so anymore. -- The

Re: Saying goodnight to my GSR

2014-09-22 Thread Larry Sheldon
On 9/22/2014 08:35, David Hubbard wrote: Got you beat by nine weeks with a Foundry 9604. :-) The system uptime is 3411 days 7 hours 52 minutes 20 seconds The system started at 01:38:44 Eastern Sat May 21 2005 That's the kind of waving I like to see. -- The unique Characteristics of System

Re: Saying goodnight to my GSR

2014-09-21 Thread Tom Hill
On 20/09/14 20:26, Jared Mauch wrote: OpenSNMPProject has some of this data for devices that respond to the string ‘public’. Lots of old stuff out there. That might make for quite an interesting talk, Jared. :) -- Tom

Re: Saying goodnight to my GSR

2014-09-20 Thread Jeroen Massar
On 2014-09-20 16:18, Matthew Crocker wrote: [..] IOS (tm) GS Software (GSR-P-M), Version 12.0(30)S3, RELEASE SOFTWARE (fc2) [..] gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Thank you for finally taking a vulnerable system of the Internet! Greets, Jeroen

Re: Saying goodnight to my GSR

2014-09-20 Thread James R Cutler
On Sep 20, 2014, at 10:18 AM, Matthew Crocker matt...@corp.crocker.com wrote about his old router: SNIP/ gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Uptime for this control processor is 9 years, 2 weeks, 2 days, 18 minutes System returned to ROM by Stateful Switchover at

Re: Saying goodnight to my GSR

2014-09-20 Thread Matthew S. Crocker
-48VDC. On Sep 20, 2014, at 10:58 AM, James R Cutler james.cut...@consultant.com wrote: On Sep 20, 2014, at 10:18 AM, Matthew Crocker matt...@corp.crocker.com wrote about his old router: SNIP/ gsr8-1 uptime is 9 years, 9 weeks, 2 days, 8 hours, 39 minutes Uptime for this control

Re: Saying goodnight to my GSR

2014-09-20 Thread Bacon Zombie
So when was the last time you patched this internet facing device? On Sep 20, 2014 7:12 PM, Matthew S. Crocker matt...@corp.crocker.com wrote: -48VDC. On Sep 20, 2014, at 10:58 AM, James R Cutler james.cut...@consultant.com wrote: On Sep 20, 2014, at 10:18 AM, Matthew Crocker

Re: Saying goodnight to my GSR

2014-09-20 Thread Bacon Zombie
OK thank you for decommissioning this.* * Only if you either had authority to do so for max 1 year or had no authority but were fighting to have it patches or replaced for years. On Sep 20, 2014 7:54 PM, Daniel Sterling sterling.dan...@gmail.com wrote: On Sat, Sep 20, 2014 at 1:37 PM, Bacon

Re: Saying goodnight to my GSR

2014-09-20 Thread Joel Jaeggli
On Sep 20, 2014, at 10:37, Bacon Zombie baconzom...@gmail.com wrote: So when was the last time you patched this internet facing device? Sunday sept 4 2005? Seems like a good run. If it hasn't been rooted or fallen over since then it's apparently pretty secure... On Sep 20, 2014 7:12 PM,

Re: Saying goodnight to my GSR

2014-09-20 Thread Daniel Sterling
On Sat, Sep 20, 2014 at 1:37 PM, Bacon Zombie baconzom...@gmail.com wrote: So when was the last time you patched this internet facing device? Isn't the better response, thank you for decommissioning it? Can someone from cisco set up a poll or release whatever numbers they have about how many

Re: Saying goodnight to my GSR

2014-09-20 Thread Daniel Sterling
Again, you're focusing resentment towards someone who did the right thing. Negative reinforcement will discourage others from taking action and will discourage them from encouraging others to take action. Let's focus on who still has vulnerable equipment and how to help them. Let's not shame

Re: Saying goodnight to my GSR

2014-09-20 Thread Jared Mauch
On Sep 20, 2014, at 1:54 PM, Daniel Sterling sterling.dan...@gmail.com wrote: On Sat, Sep 20, 2014 at 1:37 PM, Bacon Zombie baconzom...@gmail.com wrote: So when was the last time you patched this internet facing device? Isn't the better response, thank you for decommissioning it?

RE: Saying goodnight to my GSR

2014-09-20 Thread Keith Medcalf
And what, exactly, is it vulnerable to? -Original Message- From: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Daniel Sterling Sent: Saturday, 20 September, 2014 12:06 To: Bacon Zombie Cc: nanog@nanog.org Subject: Re: Saying goodnight to my GSR Again, you're focusing resentment

Re: Saying goodnight to my GSR

2014-09-20 Thread Ruairi Carroll
: NANOG [mailto:nanog-boun...@nanog.org] On Behalf Of Daniel Sterling Sent: Saturday, 20 September, 2014 12:06 To: Bacon Zombie Cc: nanog@nanog.org Subject: Re: Saying goodnight to my GSR Again, you're focusing resentment towards someone who did the right thing. Negative reinforcement

Re: Saying goodnight to my GSR

2014-09-20 Thread Saku Ytti
On (2014-09-20 14:25 -0600), Keith Medcalf wrote: And what, exactly, is it vulnerable to? Fair question. Felix Lindner has shown some ~0 budget attacks on IOS. But I'm not sure if there actually are known attack vectors for properly secured system (iACL, rACL in this case) Crash bugs are there

RE: Saying goodnight to my GSR

2014-09-20 Thread Keith Medcalf
September, 2014 14:57 To: Keith Medcalf Cc: Daniel Sterling; Bacon Zombie; nanog@nanog.org Subject: Re: Saying goodnight to my GSR And what, exactly, is it vulnerable to? Most of these, I'd imagine: http://www.cisco.com/c/en/us/td/docs/ios/12_0s/release/ntes/120SCAVS.html On 20 September 2014 14:25

Re: Saying goodnight to my GSR

2014-09-20 Thread Jay Ashworth
- Original Message - From: Matthew Crocker matt...@corp.crocker.com Has been running for a while, time to shut ‘er down. She (is a router a she?) used to handle all of my BGP GigE links but over the years has been demoted to OSPF and T1 aggregation. If anyone needs a boat anchor