Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Matt Hoppes
Are you contacting your LEO? Or is this so spammy just hit delete? I feel like even spam chosen poorly comes with consequences. On 10/19/21 8:29 AM, Travis Garrison wrote: Yup, same here Travis *From:* NANOG *On Behalf Of *Shawn L via NANOG *Sent:* Tuesday, October 19, 2021 7:25 AM *To:*

RE: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Robert Berlin
We received 2, and I heard from other operators that they had received it as well. This is the second or third "threat" in a matter of a couple of weeks. Seems like someone scraped some information from somewhere. From: Travis Garrison Sent: 10/19/21

Re: Geolocation accuracy

2021-10-19 Thread Siyuan Miao
You can try IPInsight.io. We've been using it for years and its accuracy is better than MaxMind, usually. On Tue, Oct 19, 2021 at 8:28 PM Jeroen Massar via NANOG wrote: > On 2021-10-19 13:39, Hank Nussbacher wrote: > > Can anyone recommend a geo-location service with high city accuracy? > >

RE: PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Steven Shalita via NANOG
Dell S4148 is based on Broadcom Maverick. S4048 is Trident2 (4048-T is Trident2+) and S5248 is Trident3. *From:* NANOG *On Behalf Of *Drew Weaver *Sent:* Tuesday, October 19, 2021 6:09 AM *To:* 'nanog@nanog.org' *Subject:* PowerSwitch S4100 (S4148-ON) chipset Hello all, I’ve been

Geolocation accuracy

2021-10-19 Thread Hank Nussbacher
Can anyone recommend a geo-location service with high city accuracy? Maxmind, for most countries (broadband, which does move) is below 50% accuracy (they claim 68% accuracy for USA cities): https://www.maxmind.com/en/geoip2-city-accuracy-comparison?country==city=excluding Thanks, Hank

Re: PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Stefano Sasso
With OS10 you should be able to see it with: system "sudo hshell -c 'show unit 0'" i.e., from a S4128F-ON: PLAT-SW-A-1# system "sudo hshell -c 'show unit 0'" Unit 0 chip BCM56762_B0 (current) driver BCM56560_B0 (apache) (should be Trident 2+) -Stefano Il giorno mar 19 ott 2021 alle ore

Re: PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Colton Conor
What is the Broadcom Maverick chipset primarily used or designed for? This seems like a not commonly used chip to me. On Tue, Oct 19, 2021 at 8:27 AM Steven Shalita via NANOG wrote: > > > > Dell S4148 is based on Broadcom Maverick. S4048 is Trident2 (4048-T is > Trident2+) and S5248 is

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Siyuan Miao
Yes, it's from the operator of bytefend and they have been sending numerous threatening emails for months. You can check the statement from the victim Frantech from the link below: https://frantech.ca/ On Tue, Oct 19, 2021 at 9:34 PM Ray Bellis wrote: > > > On 19/10/2021 13:29, Travis

Re: PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Tim Jackson
It's a lower bandwidth Trident2+ with some different I/O options iirc. Same featureset, but a mix of 10G and 25G serdes, targeted at like 48x10g+4x100G boxes. -- Tim On Tue, Oct 19, 2021 at 8:42 AM Colton Conor wrote: > What is the Broadcom Maverick chipset primarily used or designed for? >

Re: Geolocation accuracy

2021-10-19 Thread Jeroen Massar via NANOG
On 2021-10-19 13:39, Hank Nussbacher wrote: Can anyone recommend a geo-location service with high city accuracy? Maxmind, for most countries (broadband, which does move) is below 50% accuracy (they claim 68% accuracy for USA cities):

PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Drew Weaver
Hello all, I've been googling around trying to figure out which Broadcom silicon is in the S4148-ON. I haven't really been able to make much of a determination. Does anyone know which chipset this is? Trident 1? Trident 2? Trident 3? Thanks so much if anyone has already figured this out.

RE: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Shawn L via NANOG
we received it as well -Original Message- From: "Matt Hoppes" Sent: Tuesday, October 19, 2021 8:21am To: "North American Network Operators' Group" Subject: Anyone else getting the 'spam' bomb threat? I've now heard from several operators - our selves included - about getting an

RE: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Milt Aitken
I got one and I don’t have a datacenter. I’d better check my pockets…. From: NANOG [mailto:nanog-bounces+milt=net2atlanta@nanog.org] On Behalf Of Travis Garrison Sent: Tuesday, October 19, 2021 8:29 AM To: Matt Hoppes Cc: Nanog@nanog.org Subject: RE: Anyone else getting the 'spam'

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Matt Hoppes
Honestly, for how 'spammy' that e-mail looked it's hard to believe anyone took it seriously - but also, you never know. On 10/19/21 12:51 PM, Jon Sands wrote: The kid sending these (if it is Bytefend, who has a history/tweets of bragging about attacking Frantech within the past month if I

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Baldur Norddahl
On Tue, 19 Oct 2021 at 19:20, Kain, Becki (.) wrote: > The thing is, who is in office to care? Oh wait, guess equipment *is* > important > > For how long did you keep up with the evacuation of the equipment? :-)

Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Matt Hoppes
I've now heard from several operators - our selves included - about getting an e-mail bomb threat to our datacenters asking for $5,000 USD or the "bomb will be detonated". Is this being seen on a wide spread e-mail blast to the RIR contacts, or am I just unlucky to know like 6 other data

RE: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Travis Garrison
Yup, same here Travis From: NANOG On Behalf Of Shawn L via NANOG Sent: Tuesday, October 19, 2021 7:25 AM To: Matt Hoppes Cc: North American Network Operators' Group Subject: RE: Anyone else getting the 'spam' bomb threat? we received it as well -Original Message- From: "Matt

Re: PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Tim Jackson
https://people.ucsc.edu/~warner/Bufs/S4148.html Seems to be BCM Maverick which is pretty close to a Trident2+ iirc.. -- Tim On Tue, Oct 19, 2021 at 8:14 AM Drew Weaver wrote: > Hello all, > > > > I’ve been googling around trying to figure out which Broadcom silicon is > in the S4148-ON. > > >

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Ray Bellis
On 19/10/2021 13:29, Travis Garrison wrote: > Yup, same here and here. For now we're just ignoring it, but if anyone wants to quote us (ISC, a DNS root server operator) in the event of law enforcement action please let me know. Ray

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Sadiq Saif
On Tue, 19 Oct 2021, at 08:40, Matt Hoppes wrote: > Are you contacting your LEO? Or is this so spammy just hit delete? > > I feel like even spam chosen poorly comes with consequences. I hit delete after I saw Frantech had already reported it the FBI as per their website. Whoever this is seems

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Neil Hanlon
scammers and attackers aren't well known for their eloquent prose... As soon as you decide to not take one thing seriously, how do you draw the line? three spelling mistakes and the wrong tense of a verb means its fake? I'd rather not play chicken with peoples' lives. On Tue, Oct 19, 2021,

RE: PowerSwitch S4100 (S4148-ON) chipset

2021-10-19 Thread Steven Shalita via NANOG
I think that Dell is one of the few vendors using it AFAIK? My understanding same class as T2+, with lower cost, but there are some limitations. https://www.broadcom.com/products/ethernet-connectivity/switching/strataxgs/bcm56760 I thought this was a good explanation:

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Jon Sands
The kid sending these (if it is Bytefend, who has a history/tweets of bragging about attacking Frantech within the past month if I understand correctly) is going to be looking at serious jail time given the amount of evacuations he's caused already. A brief list:

Re: S.Korea broadband firm sues Netflix after traffic surge

2021-10-19 Thread Tom Beecher
> > Vs. an ISP that is causing the problem or trying to run a protection > racket against content providers, I think it wouldn’t be hard for the > content > provider to supply appropriate messaging inserted at the front end of > playback to explain the situation to their mutual customers. Instead

Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Miles Fidelman
Matt Hoppes wrote: I've now heard from several operators - our selves included - about getting an e-mail bomb threat to our datacenters asking for $5,000 USD or the "bomb will be detonated". Is this being seen on a wide spread e-mail blast to the RIR contacts, or am I just unlucky to know

Your opinion on Internet monitoring and measurements - a 10min survey

2021-10-19 Thread Pavlos Sermpezis
Hi all, Do you use Internet monitoring and measurements (e.g., RIPEstat, RIPE RIS/Atlas, RouteViews, bgp.he.net, etc.) for your operations? What are your use cases? We (researchers) are trying to identify limitations and biases of the Internet monitoring infrastructure, and come up with ideas to

RE: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Kain, Becki (.)
The thing is, who is in office to care? Oh wait, guess equipment *is* important -Original Message- From: NANOG On Behalf Of Sadiq Saif Sent: Tuesday, October 19, 2021 9:11 AM To: nanog@nanog.org Subject: Re: Anyone else getting the 'spam' bomb threat? WARNING: This message originated

Re: [External] Re: Anyone else getting the 'spam' bomb threat?

2021-10-19 Thread Hunter Fuller via NANOG
We have a distinct abuse address (not just abuse@) and that is where the messages were sent. We didn't receive the bomb threat ones. We only received the (somewhat more amusing) messages entitled "Your network has been PWNED" and "Fuck you". The situation loses its humor entirely with the