Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Joel Jaeggli
deles...@gmail.com wrote: > Not to turn this into an ethical typ discussion but this arguement > would have to assume you could sue the telco not the 'vandal' due to > a loss of life if it occured, and that, that dollar amt would be > greater then 'securing' all cables. Internet lawyering is a dif

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread JC Dill
Ravi Pina wrote: Also not to get sensationalist, but less expensive than a life that could be lost if an emergency call can't be put through? Remember the exploding Ford Pinto? http://www.calbaptist.edu/dskubik/pinto.htm

Fwd: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Paul Ferguson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I've really got ask if this thread has run it's course. Given the nature of earlier discussions of off-topic issues, I think we've pretty much jumped the shark with people's personal anecdotes of how to disable fiber connectivity. - - ferg -

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread deleskie
Not to turn this into an ethical typ discussion but this arguement would have to assume you could sue the telco not the 'vandal' due to a loss of life if it occured, and that, that dollar amt would be greater then 'securing' all cables. The cost to fix all pintos' gas tanks was only $11 per c

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Ravi Pina
On Thu, Apr 09, 2009 at 10:22:41PM -0700, JC Dill wrote: > Ravi Pina wrote: > > > >That said one would *hope* vault access > >is not trivial and there are mechanisms in place to alert of > >unauthorized, unlawful entry. > > I regularly drove on these roads when these lines were being put in > up

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread JC Dill
Ravi Pina wrote: That said one would *hope* vault access is not trivial and there are mechanisms in place to alert of unauthorized, unlawful entry. I regularly drove on these roads when these lines were being put in up-and-down the SF Peninsula. There are 4 manhole covers every 1/4 mile or

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Rubens Kuhl
On shared media like radio access, every unwanted packet means less performance you will get out of the network. This can be done by NAT, stateful filtering with public IPs or stateless filtering with public IPs; the advantage of doing NAT is making it easier for the end-point software to know that

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread Jorge Amodio
On Thu, Apr 9, 2009 at 9:52 PM, Ravi Pina wrote: > The reports seem to be settling on 2 distinct sites -- South > San Jose and San Carlos.  The former had 4 cuts and latter > just 1. AT&T already put a statement mentioning the two sites and offering a $100K reward http://www.att.com/gen/press-ro

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Matthew Moyle-Croft
Charles Wyble wrote: So allow me to think out loud for a minute 1) Why wasn't the fiber protected by some sort of hardened/locked conduit? Is this possible? Does it add extensive cost or hamper normal operation? Some people do lock their vaults/pits/manholes. But, to be honest, I'm not

RE: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Lee, Steven (NSG Malaysia)
Hi Charles/Skywing, is Verizon filter the unsolicated inbound traffic on the firewall or on the border router? Regards, Steven Lee -Original Message- From: Charles Wyble [mailto:char...@thewybles.com] Sent: Friday, April 10, 2009 6:09 AM To: Skywing Cc: NANOG list Subject: Re: Do we st

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread Ravi Pina
The reports seem to be settling on 2 distinct sites -- South San Jose and San Carlos. The former had 4 cuts and latter just 1. -r On Thu, Apr 09, 2009 at 06:27:53PM -0700, John Martinez wrote: > has anyone been able to pin point the cut? > There have been mentions of Redwood City, San Carlos, Sa

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread Joe Abley
On 9 Apr 2009, at 22:25, Joe Abley wrote: On 9 Apr 2009, at 21:32, John Martinez wrote: Quick search on Google. Looks like there is a colo at 200 Paul Ave. San Francisco, CA 94124 I can confirm that indeed there is, hence my mail :-) Hence my mail to the outages list, I mean, which is wha

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread Joe Abley
On 9 Apr 2009, at 21:32, John Martinez wrote: Quick search on Google. Looks like there is a colo at 200 Paul Ave. San Francisco, CA 94124 I can confirm that indeed there is, hence my mail :-)

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Aaron Glenn
On Thu, Apr 9, 2009 at 4:55 PM, Rod Beck wrote: > Hold on. Who says this sabotage? the hacksaw that was taken to two manholes within two hours of each other? I'd love to see the RFO explaining an accident like that.

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread John Martinez
Quick search on Google. Looks like there is a colo at 200 Paul Ave. San Francisco, CA 94124 --- Selected businesses at this address: BT Americas? Core 180 Inc? Day & Nite Trade Bindery? Facebook Inc? - 1 review Hallo Communications? Minute Factory The? Net Logic?

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread John Martinez
has anyone been able to pin point the cut? There have been mentions of Redwood City, San Carlos, San Francisco. Where exactly is the cut? William R. Lorenz wrote: > On Thu, 9 Apr 2009, Joe Abley wrote: > >> I am hearing from multiple people about connectivity problems in the >> bay area, and th

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Mike Lewinski
Rod Beck wrote: Hold on. Who says this sabotage? By the time the second plane hit WTC, intent was apparent. I think in this case intent is also apparent based on proximity (and the previously mentioned reward AT&T has posted for the capture of "vandals"). Mike

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread jamie rishaw
On Thu, Apr 9, 2009 at 7:00 PM, Charles Wyble wrote: > I tried to be very careful to say that it appears to have been sabatoage, > but that it's not confirmed. T is offering a 6-figure bounty already for anyone with info.. I'd say it's pretty safe to assume.. -jamie

On a lighter note..

2009-04-09 Thread jamie rishaw
It's amusing to see the media's (misdirected) focus on the event. Expected : MULTIPLE COORDINATED FIBER CUTS TAKE OUT 911, PHONE, CELL, INTERNET TO TENS OF THOUSANDS Google News: AT&T uses Twitter ... (link) *shakes head*

Re: Fiber cut in SF area

2009-04-09 Thread George William Herbert
Scott Doty wrote: >(Personally, I can think of a "MAE-Clueless" episode that was worse than >this, but that was in the 90's...) The gas main strike out front of the building in Santa Clara? Or something else? -george william herbert gherb...@retro.com

Re: Fiber cut in SF area

2009-04-09 Thread Robert M. Enger
No RF, no WPS. If all the base stations are knocked out in a region, and there is no "over" coverage from towers out of the affected region then there are no channels to which priority access can be allotted. A potential remedy (at least for conventional cell phones) would be to scatter bac

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Patrick W. Gilmore
On Apr 9, 2009, at 6:04 PM, Charles Wyble wrote: Seriously though I want to start some discussion around outside plant protection. This isn't the middle of the ocean or desert after all. There were multiple fiber cuts in a major metropolitan area, resulting in the loss of critical infrast

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Ravi Pina
On Thu, Apr 09, 2009 at 03:04:16PM -0700, Charles Wyble wrote: > Seriously though I want to start some discussion around outside plant > protection. This isn't the middle of the ocean or desert after all. > > There were multiple fiber cuts in a major metropolitan area, resulting > in the loss of

Re: Fiber cut in SF area

2009-04-09 Thread jamie rishaw
On Thu, Apr 9, 2009 at 5:52 PM, Ben Scott wrote: > > #ifdef CONSPIRACY_THEORIST > > What if this isn't simple vandalism? > > #endif > If my read is correct, this is multiple cuts in multiple locations. To answer the what-if ("What if this isn't simple vandalism?") : It's not. -jamie

Re: PPPoE PPP authentication attempts

2009-04-09 Thread Tom Wright
Sounds like the NAS spitting this out has been ACL'd from the RAD's somehow... Bruce Anthony Grobler wrote: Hi Everyone, Please can someone assist me with this wierdness DEAD: RADIUS server server3:1812,1813 is not responding. Apr 9 2009 21:28:42.001 UTC: %RADIUS-4-RADIUS_ALIVE: RADIUS serve

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Charles Wyble
I didn't say it was sabatoage... It would appear > that this was a deliberate act I tried to be very careful to say that it appears to have been sabatoage, but that it's not confirmed. Also this isn't the middle of the ocean, but cable underground. That usually doesn't get cut unless it's

RE: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Rod Beck
Hold on. Who says this sabotage? These incidents happen all the time without sabotage being involved. A ship sank off the coast of Pakistan and took out both international cables serving the country ... We had the undersea earthquake that seven seven cables in the Taiwan straits. The truth i

Re: Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Jim Popovitch
On Thu, Apr 9, 2009 at 18:04, Charles Wyble wrote: > Seriously though I want to start some discussion around outside plant > protection. This isn't the middle of the ocean or desert after all. I'll pipe in with this: No amount of money can deter a determined entity. If there is a will, there is

Re: Fiber cut in SF area

2009-04-09 Thread Sean Donelan
On Thu, 9 Apr 2009, Jared Mauch wrote: That AT&T has stopped provisioning protection fiber for automatic restoral is mind boggling. Only helps with N-1 breaks. Unfortunately, sometimes there are N+1 breaks. Check the NANOG archives, I believe there were 5 breaks in one day in the 1990's; an

Re: Fiber cut in SF area

2009-04-09 Thread Mike Lyon
Appears I can get to Yahoo without 4000ms of latency now too and I don't have to be routed from San Jose, Ca to Philly to DC. -Mike On Thu, Apr 9, 2009 at 3:02 PM, Carlos Alcantar wrote: > Looks like our circuit out of 200 paul from abovenet is back up. > > -Original Message- > From:

Re: Fiber cut in SF area

2009-04-09 Thread Ben Scott
On Thu, Apr 9, 2009 at 5:29 PM, Jared Mauch wrote: >> That our crack (or on crack) govt contracting/emergency-preparedness staff >> didn't demand protected facilities for 911 is another mind boggling issue. > >  This costs $$$ and usually isn't a problem as there are other ways to > communicate.

Re: Fiber cut in SF area

2009-04-09 Thread Ravi Pina
On Thu, Apr 09, 2009 at 02:06:04PM -0600, David Edwards wrote: > At 12:55 PM 4/9/2009, you wrote: > >>From the news coverage it appears to be in the general area of > >http://cow.org/r/?545c > > > >-r > > Interesting. The report I got from a vendor was that it is Above.net > with a fiber cut in

Re: Fiber cut in SF area

2009-04-09 Thread Charles Wyble
Jared Mauch wrote: On Apr 9, 2009, at 3:58 PM, Robert M. Enger wrote: That AT&T has stopped provisioning protection fiber for automatic restoral is mind boggling. That our crack (or on crack) govt contracting/emergency-preparedness staff didn't demand protected facilities for 911 is ano

Re: Fiber cut in SF area

2009-04-09 Thread Raul D. Rincon
http://i.gizmodo.com/5205952/att-putting-up-10-reward-for-cable-cutting-vandals r On Apr 9, 2009, at 2:00 PM, Jeffrey Ollie wrote: On Thu, Apr 9, 2009 at 2:44 PM, Michael Holstein wrote: First one is in this proximity : 37°15'20.79"N 121°48'9.38"W Street view shows a few manholes in

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Charles Wyble
Yep verizon does indeed filter all unsolicated inbound traffic to the EVDO network. It can be a blessing or a curse. :) Skywing wrote: Verizon filters unsolicited inbound traffic for their EVDO customers in my experience. - S -Original Message- From: Roland Dobbins Sent: Thursday, A

Re: Fiber cut in SF area

2009-04-09 Thread Scott Doty
David Edwards wrote: At 12:55 PM 4/9/2009, you wrote: >From the news coverage it appears to be in the general area of http://cow.org/r/?545c -r Interesting. The report I got from a vendor was that it is Above.net with a fiber cut in Redwood City which is affecting a circuit of mine between

Outside plant protection, fiber cuts, interwebz down oh noes!

2009-04-09 Thread Charles Wyble
Seriously though I want to start some discussion around outside plant protection. This isn't the middle of the ocean or desert after all. There were multiple fiber cuts in a major metropolitan area, resulting in the loss of critical infrastructure necessary to many peoples daily lives (though

RE: Fiber cut in SF area

2009-04-09 Thread Carlos Alcantar
Looks like our circuit out of 200 paul from abovenet is back up. -Original Message- From: David Edwards [mailto:da...@reliablehosting.com] Sent: Thursday, April 09, 2009 1:06 PM To: nanog@nanog.org Subject: Re: Fiber cut in SF area At 12:55 PM 4/9/2009, you wrote: > >From the news covera

Re: [outages] fibre cut near 200 Paul, San Francisco

2009-04-09 Thread William R. Lorenz
On Thu, 9 Apr 2009, Joe Abley wrote: I am hearing from multiple people about connectivity problems in the bay area, and they all seem to have 200 Paul in common. ISC is reporting a fibre cut between 529 Bryant, Palo Alto and 200 Paul, SF. At least one Unitedlayer customer in 200 Paul seems to

Re: Fiber cut in SF area

2009-04-09 Thread JC Dill
Robert M. Enger wrote: That AT&T has stopped provisioning protection fiber for automatic restoral is mind boggling. That our crack (or on crack) govt contracting/emergency-preparedness staff didn't demand protected facilities for 911 is another mind boggling issue. 911 centers can work ju

Re: Fiber cut in SF area

2009-04-09 Thread Joel Jaeggli
David Edwards wrote: > At 12:55 PM 4/9/2009, you wrote: >> >From the news coverage it appears to be in the general area of >> http://cow.org/r/?545c >> >> -r > > Interesting. The report I got from a vendor was that it is Above.net > with a fiber cut in Redwood City which is affecting a circuit

Re: Fiber cut in SF area

2009-04-09 Thread Mike Lyon
There were multiple cuts. South san jose and san carlos. Yours would be the san carlos one :) On 4/9/09, David Edwards wrote: > At 12:55 PM 4/9/2009, you wrote: >> >From the news coverage it appears to be in the general area of >>http://cow.org/r/?545c >> >>-r > > Interesting. The report I got f

Re: Fiber cut in SF area

2009-04-09 Thread Charles Wyble
Yep it leads to: Activity Type Code Desc: PROGRESS COMMENTS Activity Type Code: PROG OTDR readings were taken by AT&T West and a cut was located 1600 ft from the San Jose, CA central office. AT&T West technicians are onsite working to isolate the exact location of the cut. There are 4 ca

PPPoE PPP authentication attempts

2009-04-09 Thread Bruce Anthony Grobler
Hi Everyone, Please can someone assist me with this wierdness DEAD: RADIUS server server3:1812,1813 is not responding. Apr 9 2009 21:28:42.001 UTC: %RADIUS-4-RADIUS_ALIVE: RADIUS server server3:1812,1813 has returned. Apr 9 2009 21:28:43.953 UTC: %RADIUS-4-RADIUS_DEAD: RADIUS server server1:1

Re: Fiber cut in SF area

2009-04-09 Thread Jared Mauch
On Apr 9, 2009, at 3:58 PM, Robert M. Enger wrote: That AT&T has stopped provisioning protection fiber for automatic restoral is mind boggling. That our crack (or on crack) govt contracting/emergency-preparedness staff didn't demand protected facilities for 911 is another mind boggling

RE: Fiber cut in SF area

2009-04-09 Thread Murphy, Jay, DOH
A sobering touché. Jay Murphy IP Network Specialist NM Department of Health ITSD - IP Network Operations Santa Fe, New Mexico 87502 Bus. Ph.: 505.827.2851 "We move the information that moves your world." -Original Message- From: Robert M. Enger [mailto:en...@enger.us] Sent:

Re: Fiber cut in SF area

2009-04-09 Thread JC Dill
Michael Holstein wrote: Anyone know where the actual cut is? Based on the previously posted news articles .. First one is in this proximity : 37°15'20.79"N 121°48'9.38"W Second one is in this proximity : 37°29'44.00"N 122°14'44.31"W First one is along a highway .. second one is along

Re: Fiber cut in SF area

2009-04-09 Thread Jeffrey Ollie
On Thu, Apr 9, 2009 at 2:44 PM, Michael Holstein wrote: > > First one is in this proximity :  37°15'20.79"N 121°48'9.38"W Street view shows a few manholes in the vicinity. > Second one is in this proximity :  37°29'44.00"N 122°14'44.31"W Didn't see anything obvious here. -- Jeff Ollie

Re: Fiber cut in SF area

2009-04-09 Thread John A. Kilpatrick
On Thu, 9 Apr 2009, George William Herbert wrote: "The fiber-optic cables were severed shortly before 1:30 a.m. along Monterey Highway north of Blossom Hill Road in south San Jose, police Sgt. Ronnie Lopez said." The fact that it's vandalism is VERY annoying. Sadly it also shows how vulnerabl

Re: Fiber cut in SF area

2009-04-09 Thread Gadi Evron
Jorge Amodio wrote: On Thu, Apr 9, 2009 at 1:20 PM, Christopher Morrow wrote: isn't there a mailing list for this sort of thing? outages@ I think it is? Jared put together long time ago seems to still be active and receiving reports about this one. Virenda Rode started the outages mailing

RE: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Skywing
Verizon filters unsolicited inbound traffic for their EVDO customers in my experience. - S -Original Message- From: Roland Dobbins Sent: Thursday, April 09, 2009 09:32 To: NANOG list Subject: Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ? On Apr 9, 2009, at 11:48 PM, Lee

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Mike Dimayuga
Hello Steven, There seems to be an underlying assumption to your question - that a firewall exists for Gi traffic only because of the NAT requirement. This is not necessarily a safe assumption to make. The NAT functionality may be needed to conserve IP space but does not take away from the impor

Re: Fiber cut in SF area

2009-04-09 Thread David Edwards
At 12:55 PM 4/9/2009, you wrote: >From the news coverage it appears to be in the general area of http://cow.org/r/?545c -r Interesting. The report I got from a vendor was that it is Above.net with a fiber cut in Redwood City which is affecting a circuit of mine between 200 Paul in SF and PA

Re: Fiber cut in SF area

2009-04-09 Thread Mike Lyon
Yeah, that's about the right amount of time to crawl out of a man hole, cover it back up, get in the car, drive to a 24 hour starbucks, pick up some coffee and drive up to San Carlos, open man-hole, repeat process... On Thu, Apr 9, 2009 at 12:31 PM, George William Herbert wrote: > > I had writt

Re: Fiber cut in SF area

2009-04-09 Thread Matthew Kaufman
Robert M. Enger wrote: We posture and orate about being prepared for terrorist attacks and natural disasters, and then events like these reveal the reality: The emperor has no clothes. You wouldn't have clothes either if you could double your profit by not wearing any. Matthew Kaufman

Re: Fiber cut in SF area

2009-04-09 Thread Robert M. Enger
That AT&T has stopped provisioning protection fiber for automatic restoral is mind boggling. That our crack (or on crack) govt contracting/emergency-preparedness staff didn't demand protected facilities for 911 is another mind boggling issue. That there is no over-under wide-area back-up c

Re: Fiber cut in SF area

2009-04-09 Thread Jorge Amodio
> My cellphones show one or no bars.   Normally they are all four bars. hmmm, probably not related but could be that some cellphone operators are restricting coverage to give priority to emergency svcs communications.

Re: Fiber cut in SF area

2009-04-09 Thread George William Herbert
I had written in a NANOG reply: >Mike Lyon writes: >Anyone know where the actual cut is? > >According to SF Chronicle: >http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2009/04/09/BAP816VTE6.DTL&tsp=1 > >"The fiber-optic cables were severed shortly before 1:30 a.m. along Monterey >Highway north of

Re: Fiber cut in SF area

2009-04-09 Thread Michael Holstein
Anyone know where the actual cut is? Based on the previously posted news articles .. First one is in this proximity : 37°15'20.79"N 121°48'9.38"W Second one is in this proximity : 37°29'44.00"N 122°14'44.31"W First one is along a highway .. second one is along railroad tracks. Google

Re: Fiber cut in SF area

2009-04-09 Thread Charles Wyble
Yeah. It's on outages. Not much useful there. Christopher Morrow wrote: isn't there a mailing list for this sort of thing? outages@ I think it is? (not that I mind, just a little advert for the appropriate forum, and a place that MAY have some useful info on this topic) -chris On Thu, Apr 9, 2

Re: Verizon EVDO Issues

2009-04-09 Thread Joe Provo
On Thu, Apr 09, 2009 at 11:45:08AM -0400, Robert E. Seastrom wrote: > Daniel Senie writes: > > We observe this same kind of behavior with firewalls in the path > > watching for dead sessions they can clean up. Appears they send RSTs > > to both end points when they decide a session has gone away,

Re: Fiber cut in SF area

2009-04-09 Thread Christian Koch
nice article on bitgravity blog regarding the cuts.. http://sandbox.bitgravity.com/blog/2009/04/09/destroy-the-internet-with-a-hacksaw/ On Thu, Apr 9, 2009 at 11:22 AM, Charles Wyble wrote: > > > Ravi Pina wrote: > >> News coverage: >> >> http://cow.org/r/?5459 >> http://cow.org/r/?545a >> >>

Re: Fiber cut in SF area

2009-04-09 Thread Alex H. Ryu
Hey Chris, Yes. outa...@outages.org is the one. Alex Christopher Morrow wrote: > isn't there a mailing list for this sort of thing? outages@ I think it is? > > (not that I mind, just a little advert for the appropriate forum, and > a place that MAY have some useful info on this topic) > -chris

Re: attacks on MPLS?

2009-04-09 Thread Christian Koch
oh and heres the vid so you can see the demos http://www.shmoocon.org/2009/videos/AllYourPackets-Rey.m4v On Thu, Apr 9, 2009 at 11:28 AM, Christian Koch wrote: > They presented on the same topic at shmoocon, not sure if the info is any > more updated for BH EUROPE, but here is the pres they di

Re: Fiber cut in SF area

2009-04-09 Thread Jorge Amodio
On Thu, Apr 9, 2009 at 1:20 PM, Christopher Morrow wrote: > isn't there a mailing list for this sort of thing? outages@ I think it is? Jared put together long time ago seems to still be active and receiving reports about this one. List archive is at https://puck.nether.net/pipermail/outages/ M

Re: Fiber cut in SF area

2009-04-09 Thread George William Herbert
Mike Lyon writes: >Anyone know where the actual cut is? According to SF Chronicle: http://www.sfgate.com/cgi-bin/article.cgi?f=/c/a/2009/04/09/BAP816VTE6.DTL&tsp=1 "The fiber-optic cables were severed shortly before 1:30 a.m. along Monterey Highway north of Blossom Hill Road in south San Jose, p

Re: Fiber cut in SF area

2009-04-09 Thread Chris Cariffe
Monterey Road just north of Blossom Hill, San Jose On Thu, Apr 9, 2009 at 11:11 AM, Mike Lyon wrote: > Anyone know where the actual cut is? > > On 4/9/09, David W. Hankins wrote: >> On Thu, Apr 09, 2009 at 08:14:15AM -0700, Craig Holland wrote: >>> Just dropping a note that there is a fiber cut

Re: Fiber cut in SF area

2009-04-09 Thread Ravi Pina
>From the news coverage it appears to be in the general area of http://cow.org/r/?545c -r On Thu, Apr 09, 2009 at 11:11:58AM -0700, Mike Lyon wrote: > Anyone know where the actual cut is? > > On 4/9/09, David W. Hankins wrote: > > On Thu, Apr 09, 2009 at 08:14:15AM -0700, Craig Holland wrote:

Re: Fiber cut in SF area

2009-04-09 Thread Christian Koch
Monterey Highway I think On Thu, Apr 9, 2009 at 11:11 AM, Mike Lyon wrote: > Anyone know where the actual cut is? > > On 4/9/09, David W. Hankins wrote: > > On Thu, Apr 09, 2009 at 08:14:15AM -0700, Craig Holland wrote: > >> Just dropping a note that there is a fiber cut in the SF area (I have

Re: Fiber cut in SF area

2009-04-09 Thread Roy
Service to South Santa Clara county is completely down: Internet, landline, and cellphones. Both Verizon and AT&T are affected. 911 is also down. My cellphones show one or no bars. Normally they are all four bars. The idea that all of that is lumped in one fiber bundle is mind boggling. On T

Re: attacks on MPLS?

2009-04-09 Thread Micheal Patterson
- Original Message - From: "Wayne E. Bouchard" To: "Charles Wyble" Cc: Sent: Thursday, April 09, 2009 12:31 PM Subject: Re: attacks on MPLS? Meh... Sure, it rehashes what we pretty well already know, "If a bad guy can get access to your network or your management tools, you're

Re: attacks on MPLS?

2009-04-09 Thread Christian Koch
They presented on the same topic at shmoocon, not sure if the info is any more updated for BH EUROPE, but here is the pres they did in Feb09 http://www.shmoocon.org/slides/rey_mende_all_your_packets_v05.pdf On Thu, Apr 9, 2009 at 10:15 AM, Hector Herrera wrote: > On Thu, Apr 9, 2009 at 9:56 AM

Re: Fiber cut in SF area

2009-04-09 Thread Charles Wyble
Ravi Pina wrote: News coverage: http://cow.org/r/?5459 http://cow.org/r/?545a And not that I expect any useful updates: http://twitter.com/attnews Lots of folks covering the same thing... http://search.twitter.com/search?q=fiber+cut http://search.twitter.com/search?q=outage Also report

Re: Fiber cut in SF area

2009-04-09 Thread Christopher Morrow
isn't there a mailing list for this sort of thing? outages@ I think it is? (not that I mind, just a little advert for the appropriate forum, and a place that MAY have some useful info on this topic) -chris On Thu, Apr 9, 2009 at 1:51 PM, Ravi Pina wrote: > News coverage: > > http://cow.org/r/?54

Re: attacks on MPLS?

2009-04-09 Thread Christopher Morrow
On Thu, Apr 9, 2009 at 1:31 PM, Wayne E. Bouchard wrote: > Meh... > > Sure, it rehashes what we pretty well already know, "If a bad guy can > get access to your network or your management tools, you're boned." actually... what it says is that 'hey, your "VPN' isn't really 'private' like an IPSEC

Re: Fiber cut in SF area

2009-04-09 Thread Mike Lyon
Anyone know where the actual cut is? On 4/9/09, David W. Hankins wrote: > On Thu, Apr 09, 2009 at 08:14:15AM -0700, Craig Holland wrote: >> Just dropping a note that there is a fiber cut in the SF area (I have a >> metro line down). AboveNet is reporting issues and I've heard unconfirmed >> repo

RE: Fiber cut in SF area

2009-04-09 Thread Geo.
Level3 is having problems in the 216 area code as well (Cleveland) George Roettger > -Original Message- > From: David Edwards [mailto:da...@reliablehosting.com] > Sent: Thursday, April 09, 2009 1:15 PM > To: nanog@nanog.org > Subject: Re: Fiber cut in SF area > > > Hello, > > Mercuryne

Re: Fiber cut in SF area

2009-04-09 Thread Matthew Kaufman
I saw my Sonic.net-over-AT&T ADSL go dark at 02:30 local and it is still down, served on a fiber remote out of SNCZCA01. (I'm guessing the 200 Paul outages are associated with where this ATM terminates and that's the cause, rather than the service in/out of Santa Cruz County, but I have no way

Re: attacks on MPLS?

2009-04-09 Thread Charles Wyble
Wayne E. Bouchard wrote: Meh... Sure, it rehashes what we pretty well already know, "If a bad guy can get access to your network or your management tools, you're boned." Naturally. If one gets to the control plane of your routers and/or management network you have big problems. :) However

Re: Fiber cut in SF area

2009-04-09 Thread Andreas Ott
Hi, On Thu, Apr 09, 2009 at 11:15:05AM -0600, David Edwards wrote: > Mercurynews.com is reporting telephone outages in Santa Clara and > Santa Cruz counties that started around 2:00 am local time. I > observed numerous carrier outages starting around 4:00 am local > time. Does anyone know if t

Re: Fiber cut in SF area

2009-04-09 Thread Ravi Pina
News coverage: http://cow.org/r/?5459 http://cow.org/r/?545a And not that I expect any useful updates: http://twitter.com/attnews -r On Thu, Apr 09, 2009 at 08:14:15AM -0700, Craig Holland wrote: > Just dropping a note that there is a fiber cut in the SF area (I have a > metro line down). Abo

Re: Fiber cut in SF area

2009-04-09 Thread David W. Hankins
On Thu, Apr 09, 2009 at 08:14:15AM -0700, Craig Holland wrote: > Just dropping a note that there is a fiber cut in the SF area (I have a > metro line down). AboveNet is reporting issues and I've heard unconfirmed > reports that ATT and VZW are affected as well. Confirmed VZW & ATT; http:

Re: attacks on MPLS?

2009-04-09 Thread Wayne E. Bouchard
Meh... Sure, it rehashes what we pretty well already know, "If a bad guy can get access to your network or your management tools, you're boned." It's still worth reminding folks that they need to take appropriate measures to defend and monitor these devices. Too many networks and servers get hack

RE: Fiber cut in SF area

2009-04-09 Thread Carlos Alcantar
Seeing the same thing have an oc48 down from abovenet out of 200 paul -carlos -Original Message- From: Aaron Hughes [mailto:aar...@bind.com] Sent: Thursday, April 09, 2009 9:13 AM To: Stefan Molnar Cc: NANOG Subject: Re: Fiber cut in SF area 200 Paul Ave is seeing several carriers down.

Re: Verizon EVDO Issues

2009-04-09 Thread Robert E. Seastrom
"Steven M. Bellovin" writes: >> Interesting. I never had that behavior exhibited on my old PCMCIA >> card on Verizon or on my u727 on Sprint. What OS platform were >> you on lappie-wise? > > I run NetBSD but I know that the problem also showed up on Linux -- a > friend who worked for an equipm

Re: attacks on MPLS?

2009-04-09 Thread Hector Herrera
On Thu, Apr 9, 2009 at 9:56 AM, Steven M. Bellovin wrote: > http://www.darkreading.com/securityservices/services/data/showArticle.jhtml?articleID=216403220 > > >                --Steve Bellovin, http://www.cs.columbia.edu/~smb I'll wait to read their full presentation, but according to the articl

Re: Fiber cut in SF area

2009-04-09 Thread David Edwards
Hello, Mercurynews.com is reporting telephone outages in Santa Clara and Santa Cruz counties that started around 2:00 am local time. I observed numerous carrier outages starting around 4:00 am local time. Does anyone know if this is due to the same fiber cut, or are these separate issues?

Re: attacks on MPLS?

2009-04-09 Thread Charles Wyble
Well if we pull apart the article a bit Quote 1) Network infrastructure security has been in the limelight lately, with researchers uncovering big vulnerabilities in the Domain Name System (DNS), the Border Gateway Protocol (BGP), TCP, and in Cisco routers. Wasn't aware of any big vuln

Re: attacks on MPLS?

2009-04-09 Thread Christopher Morrow
On Thu, Apr 9, 2009 at 12:56 PM, Steven M. Bellovin wrote: > http://www.darkreading.com/securityservices/services/data/showArticle.jhtml?articleID=216403220 This is different from ATM or FRAME or Private lines how? In the end, MPLS is just a transport layer for the private network, if you don't

Re: options for full routing table in 1 year?

2009-04-09 Thread Hector Herrera
On Thu, Apr 9, 2009 at 7:53 AM, Jeffrey Ollie wrote: > On Wed, Apr 8, 2009 at 8:33 PM, Jo Rhett wrote: >> I was chatting with someone the other day and we were trying to build a >> complete list of all units which can handle full routing tables 1 year from >> now, assuming current 4k/month growth

attacks on MPLS?

2009-04-09 Thread Steven M. Bellovin
http://www.darkreading.com/securityservices/services/data/showArticle.jhtml?articleID=216403220 --Steve Bellovin, http://www.cs.columbia.edu/~smb

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Roland Dobbins
On Apr 10, 2009, at 12:21 AM, Alexander Harrowell wrote: I would think that, however you are providing IP addresses, any ingress point to a GSM core network ought to be carefully policed on security grounds. Sure. But stateful firewalls aren't required to protect that infrastructure, st

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Roland Dobbins
On Apr 10, 2009, at 12:17 AM, Mikael Abrahamsson wrote: Todays GGSN and other devices should handle it, even though they didn't do it well 5+ years back. There's a lot of legacy (and not-so-legacy) gear out there with weak IP stacks; beyond that, the relevant BCPs like iACLs should be de

Re: Verizon EVDO Issues

2009-04-09 Thread Steven M. Bellovin
On Thu, 09 Apr 2009 11:12:57 -0400 "Robert E. Seastrom" wrote: > > I use a Verizon Wireless u727; before that, I used a PCMCIA card. > > I've never had problems with drops on idle. *However* -- if there > > was a packet from the wrong IP address, the older card would drop > > the connection -- a

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Alexander Harrowell
On Thursday 09 April 2009 16:48:32 Lee, Steven (NSG Malaysia) wrote: > Hi all, in most of the existing 2G/2.5G mobile PS-core (Packet Switch) > networks have Gi segment (interface between GGSN & IP Router/firewall). Due > to the IP address constraint, operator usually do NAT on the Gi firewall to >

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Roland Dobbins
On Apr 9, 2009, at 11:48 PM, Lee, Steven (NSG Malaysia) wrote: Please share your thought and thanks in advance :) No, IMHO. Most broadband operators don't insert firewalls inline in front of their subscribers, and wireless broadband is no different. The infrastructure itself must be prot

Re: Do we still need Gi Firewall for 3G/UMTS/HSPA network ?

2009-04-09 Thread Mikael Abrahamsson
On Thu, 9 Apr 2009, Lee, Steven (NSG Malaysia) wrote: Hi all, in most of the existing 2G/2.5G mobile PS-core (Packet Switch) networks have Gi segment (interface between GGSN & IP Router/firewall). Due to the IP address constraint, operator usually do NAT on the Gi firewall to NAT the private I

Re: Fiber cut in SF area

2009-04-09 Thread Aaron Hughes
200 Paul Ave is seeing several carriers down. I am also in Santa Cruz and cannot make or receive long distance calls on my land lines. Unconfirmed reports of Caltrain cut. Cheers, Aaron On Thu, Apr 09, 2009 at 03:37:14PM +, Stefan Molnar wrote: > > VZ in the South Bay (San Jose) is out.

Re: Fiber cut in SF area

2009-04-09 Thread Jason Evans
Yup. Abovenet fiber between 200 Paul SFO and 11 Great Oaks SJC is currently out of commission. jason On Thu, Apr 9, 2009 at 11:37 AM, Stefan Molnar wrote: > > VZ in the South Bay (San Jose) is out. As per news reports I watched at > 6am PDT. > > > --Original Message-- > From: Craig Ho

Verizon EVDO issues

2009-04-09 Thread Alexander Harrowell
On Thursday 09 April 2009 15:31:10 Daniel Senie wrote: > On Apr 9, 2009, at 7:15 AM, Robert E. Seastrom wrote: > > > > Interesting. When I got my Sprint EVDO card (u727) a year and a half > > ago, they were pretty nasty about gunning down (bidirectional spoofed > > RST coming out of the middle of

  1   2   >