Re: Fed Bill Would Restrict Web Server Logs

2006-02-14 Thread David G. Andersen
On Tue, Feb 14, 2006 at 09:47:50AM -0500, Jon R. Kibler scribed: http://www.politechbot.com/docs/markey.data.deletion.bill.020806.pdf to delete information about visitors, including e-mail addresses, if the data is no longer required for a legitimate business purpose. Original

Re: multi homing pressure

2005-10-19 Thread David G. Andersen
On Wed, Oct 19, 2005 at 10:19:28PM +, Paul Vixie scribed: [EMAIL PROTECTED] (Jared Mauch) writes: it will be interesting to see if this has acutal impact on ASN allocation rates globally. i don't think so. multihoming without bgp isn't as hard as qualifying for PI space. i

Re: multi homing pressure

2005-10-19 Thread David G. Andersen
On Thu, Oct 20, 2005 at 03:18:35AM +0100, Paul Jakma scribed: On Wed, 19 Oct 2005, David G. Andersen wrote: If you can run Squid, you can multihome your web connections today. It's a little bit awkward to configure, but then again, so is Squid. People are welcome to poke at, fold, spindle

Sites wanted for research boxes

2005-01-24 Thread David G. Andersen
I sent a similar mail out a couple of years ago and greatly appreciate the response I got. Time and entropy have done their dirty work, so we're looking for a few (more) good hosts. We've been running a moderate sized (30 node) overlay network and general network research testbed for the last

Re: BCP38 making it work, solving problems

2004-10-19 Thread David G. Andersen
On Tue, Oct 19, 2004 at 07:14:32PM +0200, JP Velders scribed: Date: Tue, 19 Oct 2004 09:21:46 -0700 From: Randy Bush [EMAIL PROTECTED] Subject: Re: BCP38 making it work, solving problems For example, how many ISPs use TCP MD5 to limit the possibility of a BGP/TCP connection

Re: That MIT paper

2004-08-12 Thread David G. Andersen
On Thu, Aug 12, 2004 at 01:35:36PM +0200, Niels Bakker scribed: * [EMAIL PROTECTED] (David G. Andersen) [Thu 12 Aug 2004, 02:55 CEST]: Global impact is greatest when the resulting load changes are concentrated in one place. The most clear example of that is changes that impact the root

Re: That MIT paper

2004-08-11 Thread David G. Andersen
On Wed, Aug 11, 2004 at 04:49:18PM +, Paul Vixie scribed: what i meant by act globally, think locally in connection with That MIT Paper is that the caching effects seen at mit are at best representative of that part of mit's campus for that week, and that Totally agreed. The paper was

Re: that MIT paper again

2004-08-09 Thread David G. Andersen
Regarding both Paul's message below and Simon Walter's earlier message on this topic... Simon Walters scribed: I'm slightly concerned that the authors think web traffic is the big source of DNS, they may well be right (especially given one of the authors is talking about his own network),

L3 burp today - what happened?

2004-02-23 Thread David G. Andersen
Anyone know what happened to L3 during the last hour? They seem to have developed an appetite for dropping packets in San Jose for customers on the Genuity portion of their network, but I'm curious if anyone has a slightly more detailed explanation about the failure. The failure seems to have

Re: Does anyone think it was a good thing ? (was Re: VeriSign Capitulates

2003-10-03 Thread David G. Andersen
On Fri, Oct 03, 2003 at 05:34:05PM -0400, jeffrey.arnold quacked: On Fri, 3 Oct 2003, Mike Tancsa wrote: :: OK, so was ANYONE on NANOG happy with :: a) Verisign's site finder :: b) How they launched it :: Disregarding their implementation issues, the product is pretty good. I've

Re: anycast (Re: .ORG problems this evening)

2003-09-22 Thread David G. Andersen
On Thu, Sep 18, 2003 at 02:38:18PM -0400, Todd Vierling quacked: On Thu, 18 Sep 2003, E.B. Dreger wrote: : EBD That's why one uses a daemon with main loop including : EBD something like: : EBD : EBDsuccess = 1 ; : EBDfor ( i = checklist ; i-callback != NULL ; i++ ) :

Re: News of ISC Developing BIND Patch

2003-09-17 Thread David G. Andersen
On Wed, Sep 17, 2003 at 02:50:51AM -0700, Vadim Antonov quacked: In fact, we do have an enormously useful and popular way of doing exactly that - this is called search engines and bookmarks. What is needed is an infrastructure for allocation of unique semantic-free end point identifiers

Re: Private port numbers?

2003-08-14 Thread David G. Andersen
On Wed, Aug 13, 2003 at 10:40:30PM +, Christopher L. Morrow quacked: what about ports that start as 'private' and are eventually ubiquitously used on a public network? (Sean Donelan noted that 137-139 were originally intended to be used in private networks... and they became 'public'

Complaint of the week: Ebay abuse mail (slightly OT)

2003-08-03 Thread David G. Andersen
from eBay Safe Harbor [EMAIL PROTECTED] - Date: Sat, 02 Aug 2003 22:58:01 -0700 From: eBay Safe Harbor [EMAIL PROTECTED] Subject: Your message to [EMAIL PROTECTED] was not received (KMM86277800V90276L0KM) To: David G. Andersen [EMAIL PROTECTED] Auto-Submitted: auto-replied Reply-To: eBay Safe

Re: North America not interested in IP V6

2003-07-31 Thread David G. Andersen
On Thu, Jul 31, 2003 at 11:02:14AM -0600, Irwin Lazar quacked: As one person noted in response to Christian's speech. If there is no addressing shortage, why do I have to pay $75 a month for a DSL connection with a static IP address when a floating IP address only costs me $40 per month? I

Re: Latency generator?

2003-06-25 Thread David G. Andersen
On Wed, Jun 25, 2003 at 12:48:29PM -0400, Temkin, David quacked: Does anyone know of any free, cheap, or potentially rentable latency generators? Ideally I'd like something that just sits between two ethernet devices to induce layer 2/3 latency in traffic, but am open to any options...

Re: NAT for an ISP

2003-06-05 Thread David G. Andersen
On Wed, Jun 04, 2003 at 12:51:51PM -0700, Christopher J. Wolff quacked: Hello, I would like to know if any service providers have built their access networks out using private IP space. It certainly would benefit the global IP pool but it may adversely affect users with special

Re: NAT for an ISP

2003-06-05 Thread David G. Andersen
On Wed, Jun 04, 2003 at 07:07:28PM -0400, Andy Dills quacked: I've got a friend who puts all of his internal servers, routers, and _customers_ on RFC1918 space and pipes them out thrugh a PNAT. Fairly small ISP - maybe 15 megabits of bandwidth - operating at the state local level.

Re: Non-GPS derived timing sources (was Re: NTp sources that work in a datacenter)

2003-06-02 Thread David G. Andersen
On Sun, Jun 01, 2003 at 08:13:08AM -0700, Peter Lothberg quacked: I don't expect GPS to spin out of control soon.. So GPS tracks TAI and the difference is published (2 months after the fact..) But it's simple to build a 'jamer' that makes GPS reception not work in a limited area, same

Re: 923Mbits/s across the ocean

2003-03-09 Thread David G. Andersen
On Sun, Mar 09, 2003 at 02:25:25PM +0100, Iljitsch van Beijnum quacked: On Sat, 8 Mar 2003, Joe St Sauver wrote: you will see that for bulk TCP flows, the median throughput is still only 2.3Mbps. 95th%-ile is only ~9Mbps. That's really not all that great, throughput wise, IMHO.

Re: 923Mbits/s across the ocean

2003-03-08 Thread David G. Andersen
On Sat, Mar 08, 2003 at 03:29:56PM -0500, [EMAIL PROTECTED] quacked: High speeds are not important. High speeds at a *reasonable* cost are important. What you are describing is a high speed at an *unreasonable* cost. To paraphrase many a california sufer, dude, chill out. The bleeding edge

Re: 923 Mbps across the Ocean ...

2003-03-07 Thread David G. Andersen
On Fri, Mar 07, 2003 at 10:09:51PM +0100, Mikael Abrahamsson quacked: On Fri, 7 Mar 2003, Richard A Steenbergen wrote: Production commercial networks need not apply, 'lest someone realize that they blow away these speed records on a regular basis. What kind of production environment

Re: anti-spam vs network abuse

2003-02-28 Thread David G. Andersen
On Fri, Feb 28, 2003 at 03:11:00PM -0600, Jack Bates quacked: Should we outlaw a potentially beneficial practice due to its abuse by criminals? Okay. What happens if you make a mistake and overload one of my devices costing my company money. I guarantee you, the law will look favorably

Re: scripts to map IP to AS?

2003-02-20 Thread David G. Andersen
On Thu, Feb 20, 2003 at 08:09:31AM -0500, William Allen Simpson quacked: Anybody have a pointer to scripts to map IP to AS? There are still 10K-20K hosts spewing M$SQL slammer/sapphire packets, and I'd like to start blocking routing to those irresponsible AS's that haven't blocked

Re: scripts to map IP to AS?

2003-02-20 Thread David G. Andersen
I should have been a bit more specific. The hacked up traceroute-ng queries the radb, not a whoisd. I've never had problems being blocked when doing radb queries, but YMMV, of course. I also suggest that people be nice and rate-limit their queries so that others don't have to do it for them...

Re: Level3 routing issues?

2003-01-27 Thread David G. Andersen
On Sun, Jan 26, 2003 at 12:17:20AM -0500, Tim Griffin mooed: hc wrote: I am on Verizon-GNI via Qwest and Genuity and seeing the same problem as well. here's a plot showing the impact on BGP routing tables from seven ISPs (plotted using route-views data):

Re: Level3 routing issues?

2003-01-27 Thread David G. Andersen
On Mon, Jan 27, 2003 at 06:15:33PM -0800, Randy Bush mooed: Wow, for a minute I thought I was looking at one of our old plots, except for the fact that the x-axis says January 2003 and not September 2001 :) :) seeing that the etiology and effects of the two events were quite

Re: New worm / port 1434?'

2003-01-25 Thread David G. Andersen
On Sat, Jan 25, 2003 at 10:49:01AM -0500, Eric Gauthier mooed: Ok, I'm not sure if this helps at all. Our campus has two primary connections - the main Internet and something called Internet2. Internet2 has a routing table of order 10,000 routes and includes most top-tier research

Re: can you ping mount everest?

2003-01-23 Thread David G. Andersen
On Wed, Jan 22, 2003 at 11:36:14PM -0800, Mike Lyon mooed: The link wants you to log in with a New York Times login... -Mike You can always learn from other mailing lists. username: cipherpunks3 password: cipherpunks -Dave

Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-19 Thread David G. Andersen
On Mon, Jan 20, 2003 at 12:25:27AM -0500, Deepak Jain mooed: As long as the car _moves_ under its own power across the highway, its essentially not the car manufacturers' (or the consumers') immediate concern. That's really not true. Before car companies sell cars, they pass (lots of)

Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-17 Thread David G. Andersen
On Fri, Jan 17, 2003 at 06:38:08PM +, Christopher L. Morrow mooed: has something called Source Path Isolation Engine (SPIE). There This would be cool to see a design/whitepaper for.. Kelly? The long version of the SPIE paper is at:

Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-16 Thread David G. Andersen
On Thu, Jan 16, 2003 at 08:48:03PM -0500, Brad Laue mooed: By way of quick review, such an attack is carried out by forging the source address of the target host and sending large quantities of packets toward a high-bandwidth middleman or several such. One method that comes to mind that

Re: Is there a line of defense against Distributed Reflective attacks?

2003-01-16 Thread David G. Andersen
On Fri, Jan 17, 2003 at 01:11:14AM -0500, David G. Andersen mooed: b) Ioannidis and Bellovin proposed a mechanism called Pushback for automatically establishing router-based rate limits to staunch packet flows during DoS attacks. [NDSS 2002, Implementing Pushback

Re: Weird networking issue.

2003-01-07 Thread David G. Andersen
Rule number 1 with any ethernet: Check to make sure you have the duplex and rate statically configured, and configured identically on both ends of the connection. I'd wager you've got half duplex set on one side, and full on the other... -Dave On Tue, Jan 07, 2003 at 02:19:10PM -0500, Drew

Re: DNS issues various

2002-10-24 Thread David G. Andersen
On Thu, Oct 24, 2002 at 04:07:18PM -0400, Richard A Steenbergen mooed: We're still working on the distributed attacks, but eventually we'll come up with something just as effective. If it was as easy to scan for networks who don't spoof filter as it is to scan for networks with open

Re: Hunting for bogus BGP announcement for 204.106.93.155

2002-10-03 Thread David G. Andersen
On Thu, Oct 03, 2002 at 06:48:53PM +0200, Jesper Skriver mooed: On Thu, Oct 03, 2002 at 04:35:45PM +0100, [EMAIL PROTECTED] wrote: For the last two days, between approximately 7pm to 2am Eastern time, a spammer hijacked a piece of our address space, presumably by announcing some size

Re: IP over in-ground cable applications.

2002-09-12 Thread David G. Andersen
On Thu, Sep 12, 2002 at 03:04:35PM -0400, Deepak Jain mooed: You would need multicast speakers (routers, etc) along the cable route to effectively multiple your bandwidth at all. Since cable is already multicasting (1 stream to many/all) I don't think I see any advantage. Unless, of

Re: Bad bad routing problems?

2002-08-31 Thread David G. Andersen
In the last few days, it's been advertised, but often withdrawn. Perhaps the timing of the announces and withdrawls will help you: MIT saw it advertised via 1 701 8001 4276: http://bgp.lcs.mit.edu/bgpview.cgi?time=dayprefix=216.223.192.0%2F19rel=eqtable=updatesaction=list PSG (Randy Bush's

Re: Standalone Stratum 1 NTP Server

2002-08-28 Thread David G. Andersen
On Tue, Aug 27, 2002 at 11:07:10PM -0700, Jim Hickstein mooed: --On Wednesday, August 28, 2002 12:51 AM -0400 David G. Andersen [EMAIL PROTECTED] wrote: At work, it's all steel studs and foil-backed wallboard, and the windows (for a patch GPS antenna) are _way over there_. *sigh* I'd

Re: Standalone Stratum 1 NTP Server

2002-08-27 Thread David G. Andersen
On Tue, Aug 27, 2002 at 11:57:39PM -0400, John Todd mooed: Hmm... $2400 is still in the pricey range to be throwing out bunches of these across a network in wide distribution. (Pardon me [...] One would think that a vendor could come up with a 1u rackmount box with a GPS and

Re: looking glass

2002-07-18 Thread David G. Andersen
On Thu, Jul 18, 2002 at 12:00:38PM -0700, Scott Granados mooed: What are people using for looking glass software. Is it just some simple perl code which grabs data from the router or is it more complex than that? It's just perl. I have a copy of it at

Re: ARIN IP allocation questionn

2002-06-27 Thread David G. Andersen
Technically, you can't sell them to someone else. -Dave On Thu, Jun 27, 2002 at 07:37:34AM -0400, Ralph Doncaster mooed: There's lots of old C's that aren't being announced any more. You might be able to find one that someone can lend you to use. Strangley a search for portable class C

Re: Testing Bandwidth performance

2002-06-26 Thread David G. Andersen
On Wed, Jun 26, 2002 at 06:18:00AM -0700, todd glassey mooed: Oh and use something like a SNIFFER to generate the traffic. Most of what we know of as commercial computer's cannot generate more than 70% to 80% capacity on whatever network they are on because of driver overhead and OS

Re: Global view increase (was:BGP route explosion)

2002-05-02 Thread David G. Andersen
This is more w.r.t. the huge burst of announcements yesterday, not a persistent increase in the routing table sizes, but.. We saw absolutely huge amounts of announcements from 1 3459 17676 (sometimes with padding) For example, see:

BGP route update propagation questions

2002-04-16 Thread David G. Andersen
I'm trying to get a better feel for the dynamics of some maybe-necessary BGP routing traffic, and had a few questions: Under what circumstances will BGP send an update (of any sort) to a peer when there is an internal failure that does _not_ result in the complete isolation of a prefix? For