Re: backtracking forged packets?

[Charles Polisher via NANOG]

On 2020-03-13 23:23, William Herrin wrote:
> Can anyone suggest tools, techniques and helpful contacts for
> backtracking spoofed packets? At the moment someone is forging TCP
> syns from my address block. I'm getting the syn/ack and icmp
> unreachable backscatter. Enough that my service provider briefly
> classified it a DDOS. I'd love to find the culprit.

FWIW, Bellovin et al proposed an ICMP traceback mechanism in 2001
( https://tools.ietf.org/html/draft-ietf-itrace-04 ), but it seems
not to have progressed. Abstract:

 It is often useful to learn the path that packets take through the
 Internet, especially when dealing with certain denial-of-service
 attacks. We propose a new ICMP message, emitted randomly by routers
 along the path and sent randomly to the destination (to provide
 useful information to the attacked party) or to the origin (to
 provide information to decipher reflector attacks).

-- 
Chuck Polisher

Re: COVID-19 vs. our Networks

[Scott Weeks]

--- alexandre.petre...@gmail.com wrote:
From: Alexandre Petrescu 
  
That map does not show Texas, as far as I know America 
(USA) geography. 
---


Being raised in Texas in a family that've been there 
for a buncha generations, I know that at least some 
folks there would challange that... :)

https://en.wikipedia.org/wiki/Texas_secession_movements

It was a nation unto itself for over decade:

https://en.wikipedia.org/wiki/Republic_of_Texas



Many old timers are a pretty independent type of people.


scott
ps. traffic is still normal here

Re: DHS letters for fuel and facility access

[Ben Cannon]

It’s true, we’re all here, and we’re standing by.  Also if anyone on NANOG 
needs something we can do, please reach out to me via email and I will make it 
happen.  You’re not alone during times of crisis.
-Ben.

-Ben Cannon
CEO 6x7 Networks & 6x7 Telecom, LLC 
b...@6by7.net 




> On Mar 16, 2020, at 4:24 PM, George Herbert  wrote:
> 
> 
> The SF Bay Area shelter in place rules specifically exempt news media, 
> telecommunications and internet including infrastructure services thereof 
> (presumably large internet companies, network and security vendors, etc), 
> fuel deliveries.
> 
> I could use infrastructure vendors excuse but $current_client_company is on 
> mandatory WFH for next five weeks and team had filtered out doing it 
> informally before it became official.  
> 
> I’d name the company but someone might contact me for an emergency and I have 
> nothing to do with the customer incidents team.  I don’t even know who to 
> forward stuff to.  Suffice it to say that everyone doing network security 
> infra at all the vendors is being as safe as possible under the 
> circumstances.  We’re trying to keep all the lights on for you.
> 
> 
> -George 
> 
> Sent from my iPhone
> 
>> On Mar 16, 2020, at 1:21 PM, Sean Donelan  wrote:
>> 
>> 
>> On some other mailing lists, FCC licensed operators are reporting they have 
>> received letters from the Department of Homeland Security authorizing 
>> "access" and "fuel" priority.
>> 
>> Occasionally, DHS issues these letters after natural disasters such as 
>> hurricanes for hospitals and critical facilities.  I haven't heard of them 
>> issued for pandemics.
>> 

Re: DHS letters for fuel and facility access

[George Herbert]

The SF Bay Area shelter in place rules specifically exempt news media, 
telecommunications and internet including infrastructure services thereof 
(presumably large internet companies, network and security vendors, etc), fuel 
deliveries.

I could use infrastructure vendors excuse but $current_client_company is on 
mandatory WFH for next five weeks and team had filtered out doing it informally 
before it became official.  

I’d name the company but someone might contact me for an emergency and I have 
nothing to do with the customer incidents team.  I don’t even know who to 
forward stuff to.  Suffice it to say that everyone doing network security infra 
at all the vendors is being as safe as possible under the circumstances.  We’re 
trying to keep all the lights on for you.


-George 

Sent from my iPhone

> On Mar 16, 2020, at 1:21 PM, Sean Donelan  wrote:
> 
> 
> On some other mailing lists, FCC licensed operators are reporting they have 
> received letters from the Department of Homeland Security authorizing 
> "access" and "fuel" priority.
> 
> Occasionally, DHS issues these letters after natural disasters such as 
> hurricanes for hospitals and critical facilities.  I haven't heard of them 
> issued for pandemics.
> 

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 23:18, Chris Boyd a écrit :



On Mar 16, 2020, at 3:15 PM, Alexandre Petrescu  
wrote:

Please tell me about your city: do you know the numbers in your city?  How did 
you get the info?

Austin’s health department has a web page with the current confirmed infection 
count, as well as a bunch of recommendations for various groups, in multiple 
languages.

http://www.austintexas.gov/COVID19

Almost all the tech companies here have told everyone to work from home.  We’re 
seeing lower utilization on our office connections due to split-horizon VPN 
policies.



Thank you very much.  Ah how far we are from that way of giving info.

Please, when you say 'various groups' - what do you mean more 
precisely?  Is it like age groups, or minority nationality groups, or 
skin color or what?  In France there was talk some time about this being 
mostly for elderly but recentl one hears Doctors/MEdicals saying this is 
any age group.  But we dont see any number.  I think it is forbidden to see.


Or do you mean groups like: COVID-19 group, Pediatric Flu group, Vaping 
group?


When on that page they say Phase 1, 2... 5.  In France we have Stade 1, 
2, 3 and no more.  At some point they hesitated a lot between 2 and 3, 
there was some darkness.  Now it's 3 and that's it.


Thank you,

Alex



—Chris

Re: sflow -> aggregated aspath visualization?

[Peter Phaal]

You could use Prometheus / Grafana to build the dashboards.

The following example is a starting point (top ASNs / Countries by traffic
volume):
https://grafana.com/grafana/dashboards/11146

The example could be modified to make the make router / interface
selectable, or cloned to create separate per router / interface dashboards.

On Sat, Mar 14, 2020 at 12:33 PM Adam Thompson 
wrote:

> I’m looking for product recommendations:
>
>
>
> We’ve noticed that about 20% of our traffic here lately has decamped from
> the free (or, at least, flat-rate) connection to CANARIE (our R network)
> and its various connected content-delivery networks, and onto our
> commercial provider.
>
> While this is presumptively a legitimate shift, we’d like to better
> understand these changes when they occur, in a way that our executive can
> understand at a glance.
>
> We do have sFlow (et al.) going to an Arbor PeakFlow box for analysis, but
> it’s lacklustre at best at understanding changes like this.
>
> I want:
>
>- Top #n ASNs by traffic volume, per router/interface, stacked chart
>- Some way to visualize large jumps in that dataset, e.g. if
>Cloudflare ditched their CANARIE connection and now that traffic all goes
>commercial, I don’t know what sort of graphic would be useful, maybe a
>stacked polar chart so you could see when an AS jumped from one sector to
>another?  Even stacked bar charts could be useful.
>
>
>
> If anyone knows of tools capable of generating easy-to-understand reports,
> dashboards, including historical “what changed this week”-type data, please
> let me know.
>
>
>
> For that matter, if you have a technique of collecting this data and using
> Excel to do the reporting, that would work too.
>
>
>
> (Yes, I could theoretically build this off of existing open source tools…
> eventually)
>

Re: COVID-19 vs. our Networks

[Chris Boyd]

> On Mar 16, 2020, at 3:15 PM, Alexandre Petrescu 
>  wrote:
> 
> Please tell me about your city: do you know the numbers in your city?  How 
> did you get the info?

Austin’s health department has a web page with the current confirmed infection 
count, as well as a bunch of recommendations for various groups, in multiple 
languages.

http://www.austintexas.gov/COVID19

Almost all the tech companies here have told everyone to work from home.  We’re 
seeing lower utilization on our office connections due to split-horizon VPN 
policies.

—Chris

Re: DHS letters for fuel and facility access

[Tim Požár]

As an ex-broadcaster, I have never seen one of these letters.  Even 
during our 1989 earthquake.   In fact, I knew of one station that 
ordered a genset as power was down after the earthquake for several days 
and it was commandeered by LE as they were being driven to the 
transmitter site, three times!  Three different gensets!




On 3/16/20 1:20 PM, Sean Donelan wrote:


On some other mailing lists, FCC licensed operators are reporting they 
have received letters from the Department of Homeland Security 
authorizing "access" and "fuel" priority.


Occasionally, DHS issues these letters after natural disasters such as 
hurricanes for hospitals and critical facilities.  I haven't heard of 
them issued for pandemics.

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 22:19, Owen DeLong a écrit :

[SNIP]


Has worked very well for me  in Santa Clara County so far.



How is Santa Clara County informing their citizens?  Some website or 
some SMS (short text message on cellular)?



My city sent me two paper letters Saturday, but no numbers about 
cases.  I had to go to pharmacy and ask the pharmacist what she 
heard; she heard from somebdoy else about 2 cases in nearby village.  
That was 3 days ago.


Thats how I get informed.



https://www.sccgov.org/sites/phd/Pages/phd.aspx

https://www.sccgov.org/sites/phd/DiseaseInformation/novel-coronavirus/Pages/home.aspx



Thanks.  It says clearly number of cases 138 as of March 14th, we 
are16th.  I hope they'll update it soon.


There's no history data.

One cant understand the speed of evolution.  But it could be found by 
comparison.  One could find another equivalent of a County in another 
country where there were 138 cases at point x, and then tell how that 
evolved. For my part, I can only say that we say 'Comté' for County.  
Maybe in other country one can find things.


But its' great for people living in Santa Clara County to at least know 
somehow their numbers.  I really hope they keep updating it and dont 
stop it at some point because impossible to track.


It also seems people have restricted movement there, just as here (France).

For my part, I just got an SMS on my 2G phone with a 2 line 
black-and-white screen.  It does display, it works.  It is the first 
time I received such an SMS.  It is in that class of '1st time' we 
talked about earlier :-)


But I consider these things to be bad things, they make me sad.

Alex










At the very least adhere to their orders and recommendations.



YEs I do.  It says this: tomorrow noon all stay  indoors, out only 
for pharmacy, alimentaiton or criticial job.  Thats it.



What more do you want? That’s the best advice that exists today.


They also use other words that I will not type here.



lol



ok lol if you wish :-)


Just at the use of  “other words that I will not type here.” from a 
public health agency.


Owen

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

a tv news report a few hours ago about status in America (USA) says the 
map is this.


on another hand, a close person to me, speaking from Texas, he says 9 
cases in his city in Texas.  That map does not show Texas, as far as I 
know America (USA) geography.


Now, it might be that some regions might be more important than others; 
yet, every pereson is equal.


Or, it might be that the map builder (a respected person, reporter, TV 
man) di wrong job or so.


Or, it might be Texas does not want to confine.  At which point - one 
wonders.  Its the same about UK not want to confine.


so, doubcle check always good



Le 16/03/2020 à 21:15, Alexandre Petrescu a écrit :



Le 16/03/2020 à 20:08, Owen DeLong a écrit :



On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
mailto:alexandre.petre...@gmail.com>> 
wrote:



Le 16/03/2020 à 14:58, Mark Tinka a écrit :


On 15/Mar/20 00:12, Eric M. Carroll wrote:



There is good news here. The infrastructure has never been better
positioned to support this kind of mass event. We can shop from home,
work from home, get groceries from home, order drugs, get
entertainment, all via IP. The ISP community needs to be ready to
respond to the magnitude of what is happening.

If the Internet was as large in 2003 when SARS hit as it is now in 2020
under the Coronavirus, I think we'd have seen the same issues back 
then.


Nowadays, information gets around a lot faster and with more fuss and
fanfare than before. On average, by the time you see a shared video 
clip

on WhatsApp, you'll be receiving it from 100 other contacts inside of a
30 minutes.

As readier as the Internet is today, part of the mega spread of the
fallout from the Coronavirus is because information is not only
traveling way faster, a lot of it is also not (necessarily) verified or
moderated before being shared with is consumers.



There is no other way to do that information filterning now. Nobody 
has any authority of knowing better than others.


This simply isn’t true…

Listen to qualified medical professionals, especially those who 
specialize in infectious diseases and epidemiology.



Doctors are many.  Some speak urgent: they say stay home.

Others say this, and yet others say that.




The information on the CDC and WHO websites remains the primary 
source of trustworthy information. It may be
incomplete, but if someone is contradicting something there, they’re 
very likely to be wrong.



Stay home.




OTOH, anyone selling “survive COVID” or “cure COVID” etc. is 
completely untrustworthy and guaranteed to be lying to

you in order to sell a product. Despicable, but common place.



Yes.




There’s no authoritative way to get false information off the 
internet, so we have to combat it as best we can with good
information and education. Even in my own household, this is a 
constant battle as my GF continues to bring home
odd superstitious rumors and embellishments from a variety of 
inaccurate sources and I constantly have to correct her

perspective.

For up to date local information, check with the local public health 
authority in your jurisdiction.



I tell you I did.  There is 0 info from official channels telling 
where precisely are the cases.  I had to google the cityname and the 
virus word.


The official information here says number of cases, and names the 
REgions most affected (large regions).  Thats it.


Please tell me about your city: do you know the numbers in your city?  
How did you get the info?





In the US, that will usually
be your county public health agency. In some cases, individual 
municipalities also have public health departments.



Please try it and tell me if it works.




At the very least adhere to their orders and recommendations.



YEs I do.  It says this: tomorrow noon all stay  indoors, out only for 
pharmacy, alimentaiton or criticial job.  Thats it.


They also use other words that I will not type here.

Alex



Owen

Re: DHS letters for fuel and facility access

[james jones]

I get that thanks, wasn’t trying to be snarky just genuinely curious.

Sent from my iPhone

> On Mar 16, 2020, at 4:46 PM, Sean Donelan  wrote:
> 
> 
> In response to a snarky question offlist.  Yes, the DHS letters are just 
> copies.  Yes, the DHS letters are easy to counterfeit.
> 
> Not a lawyer, but counterfeiting an official federal document during a 
> national state of emergency likely violates many federal and state laws.
> 
> DON'T DO IT.
> 
> 
>> On Mon, 16 Mar 2020, Sean Donelan wrote:
>> On some other mailing lists, FCC licensed operators are reporting they have 
>> received letters from the Department of Homeland Security authorizing 
>> "access" and "fuel" priority.
>> 
>> Occasionally, DHS issues these letters after natural disasters such as 
>> hurricanes for hospitals and critical facilities.  I haven't heard of them 
>> issued for pandemics.

Re: COVID-19 vs. our Networks

[Owen DeLong]

[SNIP]

>> Has worked very well for me  in Santa Clara County so far.
> 
> How is Santa Clara County informing their citizens?  Some website or some SMS 
> (short text message on cellular)?
> 
> 
> 
> My city sent me two paper letters Saturday, but no numbers about cases.  I 
> had to go to pharmacy and ask the pharmacist what she heard; she heard from 
> somebdoy else about 2 cases in nearby village.  That was 3 days ago.
> 
> Thats how I get informed.
> 
> 
> 
https://www.sccgov.org/sites/phd/Pages/phd.aspx

https://www.sccgov.org/sites/phd/DiseaseInformation/novel-coronavirus/Pages/home.aspx


>> 
>>> 
 
 At the very least adhere to their orders and recommendations.
>>> 
>>> YEs I do.  It says this: tomorrow noon all stay  indoors, out only for 
>>> pharmacy, alimentaiton or criticial job.  Thats it.
>>> 
>> What more do you want? That’s the best advice that exists today.
>> 
>>> They also use other words that I will not type here.
>>> 
>> 
>> lol
> 
> ok lol if you wish :-)
> 
> 
Just at the use of  “other words that I will not type here.” from a public 
health agency.

Owen

Re: DHS letters for fuel and facility access

[james jones]

Got it!

Sent from my iPhone

> On Mar 16, 2020, at 4:26 PM, Jared Mauch  wrote:
> 
> 
> 
>> On Mar 16, 2020, at 4:24 PM, james jones  wrote:
>> 
>> Fuel priority? They expecting shortage and/or power outages?
>> 
> 
> I suspect it’s more to solve issues with truck drivers going to work and 
> their job is to deliver fuel.  Some areas have been instituting curfews and 
> this would satisfy the local authorities who may stop such a driver.
> 
> - Jared
> 

Re: DHS letters for fuel and facility access

[Ben Cannon]

We (Verizon not me) lost a central office during 9/11 because it ran out of 
fuel - the tankers were staged but we’re not allowed to enter Manhattan.  

This clears that pathway for us now, and it’s fairly standard protocol since.

-Ben

> On Mar 16, 2020, at 1:20 PM, Sean Donelan  wrote:
> 
> 
> On some other mailing lists, FCC licensed operators are reporting they have 
> received letters from the Department of Homeland Security authorizing 
> "access" and "fuel" priority.
> 
> Occasionally, DHS issues these letters after natural disasters such as 
> hurricanes for hospitals and critical facilities.  I haven't heard of them 
> issued for pandemics.
> 

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 21:58, Owen DeLong a écrit :



On Mar 16, 2020, at 13:15 , Alexandre Petrescu 
mailto:alexandre.petre...@gmail.com>> 
wrote:



Le 16/03/2020 à 20:08, Owen DeLong a écrit :



On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
> wrote:



Le 16/03/2020 à 14:58, Mark Tinka a écrit :


On 15/Mar/20 00:12, Eric M. Carroll wrote:



There is good news here. The infrastructure has never been better
positioned to support this kind of mass event. We can shop from home,
work from home, get groceries from home, order drugs, get
entertainment, all via IP. The ISP community needs to be ready to
respond to the magnitude of what is happening.
If the Internet was as large in 2003 when SARS hit as it is now in 
2020
under the Coronavirus, I think we'd have seen the same issues back 
then.


Nowadays, information gets around a lot faster and with more fuss and
fanfare than before. On average, by the time you see a shared 
video clip
on WhatsApp, you'll be receiving it from 100 other contacts inside 
of a

30 minutes.

As readier as the Internet is today, part of the mega spread of the
fallout from the Coronavirus is because information is not only
traveling way faster, a lot of it is also not (necessarily) 
verified or

moderated before being shared with is consumers.



There is no other way to do that information filterning now. Nobody 
has any authority of knowing better than others.


This simply isn’t true…

Listen to qualified medical professionals, especially those who 
specialize in infectious diseases and epidemiology.



Doctors are many.  Some speak urgent: they say stay home.

Others say this, and yet others say that.




Doctors are many. Epidemiologists are fewer. Virtually all of the 
epidemiologists and specialists in infectious disease are

saying the same thing… Urget — stay home — flatten the curve.

The information on the CDC and WHO websites remains the primary 
source of trustworthy information. It may be
incomplete, but if someone is contradicting something there, they’re 
very likely to be wrong.



Stay home.



Yes.



OTOH, anyone selling “survive COVID” or “cure COVID” etc. is 
completely untrustworthy and guaranteed to be lying to

you in order to sell a product. Despicable, but common place.



Yes.




There’s no authoritative way to get false information off the 
internet, so we have to combat it as best we can with good
information and education. Even in my own household, this is a 
constant battle as my GF continues to bring home
odd superstitious rumors and embellishments from a variety of 
inaccurate sources and I constantly have to correct her

perspective.

For up to date local information, check with the local public health 
authority in your jurisdiction.



I tell you I did.  There is 0 info from official channels telling 
where precisely are the cases.  I had to google the cityname and the 
virus word.


The official information here says number of cases, and names the 
REgions most affected (large regions).  Thats it.


Please tell me about your city: do you know the numbers in your 
city?  How did you get the info?





What do you care where the already diagnosed cases are… But the time a 
location has already diagnosed cases that can be reported,
there are likely 100s if not 1000s of other cases going unnoticed in 
the area. Stay home now, regardless of where you are.



In the US, that will usually
be your county public health agency. In some cases, individual 
municipalities also have public health departments.



Please try it and tell me if it works.



Has worked very well for me  in Santa Clara County so far.



How is Santa Clara County informing their citizens?  Some website or 
some SMS (short text message on cellular)?



My city sent me two paper letters Saturday, but no numbers about cases.  
I had to go to pharmacy and ask the pharmacist what she heard; she heard 
from somebdoy else about 2 cases in nearby village.  That was 3 days ago.


Thats how I get informed.








At the very least adhere to their orders and recommendations.



YEs I do.  It says this: tomorrow noon all stay  indoors, out only 
for pharmacy, alimentaiton or criticial job.  Thats it.



What more do you want? That’s the best advice that exists today.


They also use other words that I will not type here.



lol



ok lol if you wish :-)

Alex



Owen

Re: COVID-19 vs. our Networks

[Owen DeLong]

> On Mar 16, 2020, at 13:37 , Alexandre Petrescu  
> wrote:
> 
> a tv news report a few hours ago about status in America (USA) says the map 
> is this.
> 
> 
That’s like a 2-3 week old map of state in US.

> on another hand, a close person to me, speaking from Texas, he says 9 cases 
> in his city in Texas.  That map does not show Texas, as far as I know America 
> (USA) geography.
> 

Indeed, Texas is not shown on that map.

> Now, it might be that some regions might be more important than others; yet, 
> every pereson is equal.
> 
> Or, it might be that the map builder (a respected person, reporter, TV man) 
> di wrong job or so.
> 
> 
It mostly just looks to be old data.

> Or, it might be Texas does not want to confine.  At which point - one 
> wonders.  Its the same about UK not want to confine.
> 

US isn’t basing its actions on maps issued by CNEWS, I promise. Likely, neither 
is UK.

> so, doubcle check always good
> 
> 
Sure… News is not reliable. I go direct to public health web sites and 
encourage others to do same. Not always completely up to date, but apparently 
better than some news.

Owen

> 
> 
> 
> 
> 
> Le 16/03/2020 à 21:15, Alexandre Petrescu a écrit :
>> 
>> Le 16/03/2020 à 20:08, Owen DeLong a écrit :
>>> 
>>> 
 On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
 mailto:alexandre.petre...@gmail.com>> wrote:
 
 
 Le 16/03/2020 à 14:58, Mark Tinka a écrit :
> 
> On 15/Mar/20 00:12, Eric M. Carroll wrote:
> 
> 
>> There is good news here. The infrastructure has never been better
>> positioned to support this kind of mass event. We can shop from home,
>> work from home, get groceries from home, order drugs, get
>> entertainment, all via IP. The ISP community needs to be ready to
>> respond to the magnitude of what is happening.
> If the Internet was as large in 2003 when SARS hit as it is now in 2020
> under the Coronavirus, I think we'd have seen the same issues back then.
> 
> Nowadays, information gets around a lot faster and with more fuss and
> fanfare than before. On average, by the time you see a shared video clip
> on WhatsApp, you'll be receiving it from 100 other contacts inside of a
> 30 minutes.
> 
> As readier as the Internet is today, part of the mega spread of the
> fallout from the Coronavirus is because information is not only
> traveling way faster, a lot of it is also not (necessarily) verified or
> moderated before being shared with is consumers.
 
 
 There is no other way to do that information filterning now. Nobody has 
 any authority of knowing better than others.
>>> 
>>> This simply isn’t true…
>>> 
>>> Listen to qualified medical professionals, especially those who specialize 
>>> in infectious diseases and epidemiology.
>> 
>> Doctors are many.  Some speak urgent: they say stay home.
>> 
>> Others say this, and yet others say that.
>> 
>> 
>> 
>>> 
>>> The information on the CDC and WHO websites remains the primary source of 
>>> trustworthy information. It may be
>>> incomplete, but if someone is contradicting something there, they’re very 
>>> likely to be wrong.
>> 
>> Stay home.
>> 
>> 
>> 
>>> 
>>> OTOH, anyone selling “survive COVID” or “cure COVID” etc. is completely 
>>> untrustworthy and guaranteed to be lying to
>>> you in order to sell a product. Despicable, but common place.
>> 
>> Yes.
>> 
>> 
>> 
>>> 
>>> There’s no authoritative way to get false information off the internet, so 
>>> we have to combat it as best we can with good
>>> information and education. Even in my own household, this is a constant 
>>> battle as my GF continues to bring home
>>> odd superstitious rumors and embellishments from a variety of inaccurate 
>>> sources and I constantly have to correct her
>>> perspective.
>>> 
>>> For up to date local information, check with the local public health 
>>> authority in your jurisdiction.
>> 
>> I tell you I did.  There is 0 info from official channels telling where 
>> precisely are the cases.  I had to google the cityname and the virus word.
>> 
>> The official information here says number of cases, and names the REgions 
>> most affected (large regions).  Thats it.
>> 
>> Please tell me about your city: do you know the numbers in your city?  How 
>> did you get the info?
>> 
>> 
>> 
>> 
>> 
>>> In the US, that will usually
>>> be your county public health agency. In some cases, individual 
>>> municipalities also have public health departments.
>> 
>> Please try it and tell me if it works.
>> 
>> 
>> 
>>> 
>>> At the very least adhere to their orders and recommendations.
>> 
>> YEs I do.  It says this: tomorrow noon all stay  indoors, out only for 
>> pharmacy, alimentaiton or criticial job.  Thats it.
>> 
>> They also use other words that I will not type here.
>> 
>> Alex
>> 
>>> 
>>> Owen
>>> 

Re: COVID-19 vs. our Networks

[Owen DeLong]

> On Mar 16, 2020, at 13:15 , Alexandre Petrescu  
> wrote:
> 
> 
> 
> Le 16/03/2020 à 20:08, Owen DeLong a écrit :
>> 
>> 
>>> On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
>>> mailto:alexandre.petre...@gmail.com>> wrote:
>>> 
>>> 
>>> Le 16/03/2020 à 14:58, Mark Tinka a écrit :
 
 On 15/Mar/20 00:12, Eric M. Carroll wrote:
 
 
> There is good news here. The infrastructure has never been better
> positioned to support this kind of mass event. We can shop from home,
> work from home, get groceries from home, order drugs, get
> entertainment, all via IP. The ISP community needs to be ready to
> respond to the magnitude of what is happening.
 If the Internet was as large in 2003 when SARS hit as it is now in 2020
 under the Coronavirus, I think we'd have seen the same issues back then.
 
 Nowadays, information gets around a lot faster and with more fuss and
 fanfare than before. On average, by the time you see a shared video clip
 on WhatsApp, you'll be receiving it from 100 other contacts inside of a
 30 minutes.
 
 As readier as the Internet is today, part of the mega spread of the
 fallout from the Coronavirus is because information is not only
 traveling way faster, a lot of it is also not (necessarily) verified or
 moderated before being shared with is consumers.
>>> 
>>> 
>>> There is no other way to do that information filterning now. Nobody has any 
>>> authority of knowing better than others.
>> 
>> This simply isn’t true…
>> 
>> Listen to qualified medical professionals, especially those who specialize 
>> in infectious diseases and epidemiology.
> 
> Doctors are many.  Some speak urgent: they say stay home.
> 
> Others say this, and yet others say that.
> 
> 

Doctors are many. Epidemiologists are fewer. Virtually all of the 
epidemiologists and specialists in infectious disease are
saying the same thing… Urget — stay home — flatten the curve.

>> The information on the CDC and WHO websites remains the primary source of 
>> trustworthy information. It may be
>> incomplete, but if someone is contradicting something there, they’re very 
>> likely to be wrong.
> 
> Stay home.
> 
> 
> 
Yes.

>> 
>> OTOH, anyone selling “survive COVID” or “cure COVID” etc. is completely 
>> untrustworthy and guaranteed to be lying to
>> you in order to sell a product. Despicable, but common place.
> 
> Yes.
> 
> 
> 
>> 
>> There’s no authoritative way to get false information off the internet, so 
>> we have to combat it as best we can with good
>> information and education. Even in my own household, this is a constant 
>> battle as my GF continues to bring home
>> odd superstitious rumors and embellishments from a variety of inaccurate 
>> sources and I constantly have to correct her
>> perspective.
>> 
>> For up to date local information, check with the local public health 
>> authority in your jurisdiction.
> 
> I tell you I did.  There is 0 info from official channels telling where 
> precisely are the cases.  I had to google the cityname and the virus word.
> 
> The official information here says number of cases, and names the REgions 
> most affected (large regions).  Thats it.
> 
> Please tell me about your city: do you know the numbers in your city?  How 
> did you get the info?
> 
> 

What do you care where the already diagnosed cases are… But the time a location 
has already diagnosed cases that can be reported,
there are likely 100s if not 1000s of other cases going unnoticed in the area. 
Stay home now, regardless of where you are.

>> In the US, that will usually
>> be your county public health agency. In some cases, individual 
>> municipalities also have public health departments.
> 
> Please try it and tell me if it works.
> 
> 
Has worked very well for me  in Santa Clara County so far.

> 
>> 
>> At the very least adhere to their orders and recommendations.
> 
> YEs I do.  It says this: tomorrow noon all stay  indoors, out only for 
> pharmacy, alimentaiton or criticial job.  Thats it.
> 
What more do you want? That’s the best advice that exists today.

> They also use other words that I will not type here.
> 

lol

Owen

Re: COVID-19 vs. our Networks

[Shane Ronan]

It goes down to county level.

On Mon, Mar 16, 2020, 4:48 PM Alexandre Petrescu <
alexandre.petre...@gmail.com> wrote:

>
> Le 16/03/2020 à 21:42, sro...@ronan-online.com a écrit :
>
> https://hgis.uw.edu/virus
>
>
> It does not say by City.  I cant find my city, department not even region.
>
> I know all these URLs with maps, I can paste them if y ou wish.
>
> I watch them every day.
>
> Alex
>
>
> Sent from my iPhone
>
> On Mar 16, 2020, at 4:17 PM, Alexandre Petrescu
>   wrote:
>
> 
>
>
> Le 16/03/2020 à 20:08, Owen DeLong a écrit :
>
>
>
> On Mar 16, 2020, at 07:04 , Alexandre Petrescu <
> alexandre.petre...@gmail.com> wrote:
>
>
> Le 16/03/2020 à 14:58, Mark Tinka a écrit :
>
>
> On 15/Mar/20 00:12, Eric M. Carroll wrote:
>
>
> There is good news here. The infrastructure has never been better
> positioned to support this kind of mass event. We can shop from home,
> work from home, get groceries from home, order drugs, get
> entertainment, all via IP. The ISP community needs to be ready to
> respond to the magnitude of what is happening.
>
> If the Internet was as large in 2003 when SARS hit as it is now in 2020
> under the Coronavirus, I think we'd have seen the same issues back then.
>
> Nowadays, information gets around a lot faster and with more fuss and
> fanfare than before. On average, by the time you see a shared video clip
> on WhatsApp, you'll be receiving it from 100 other contacts inside of a
> 30 minutes.
>
> As readier as the Internet is today, part of the mega spread of the
> fallout from the Coronavirus is because information is not only
> traveling way faster, a lot of it is also not (necessarily) verified or
> moderated before being shared with is consumers.
>
>
>
> There is no other way to do that information filterning now. Nobody has
> any authority of knowing better than others.
>
>
> This simply isn’t true…
>
> Listen to qualified medical professionals, especially those who specialize
> in infectious diseases and epidemiology.
>
>
> Doctors are many.  Some speak urgent: they say stay home.
>
> Others say this, and yet others say that.
>
>
>
> The information on the CDC and WHO websites remains the primary source of
> trustworthy information. It may be
> incomplete, but if someone is contradicting something there, they’re very
> likely to be wrong.
>
>
> Stay home.
>
>
>
> OTOH, anyone selling “survive COVID” or “cure COVID” etc. is completely
> untrustworthy and guaranteed to be lying to
> you in order to sell a product. Despicable, but common place.
>
>
> Yes.
>
>
>
> There’s no authoritative way to get false information off the internet, so
> we have to combat it as best we can with good
> information and education. Even in my own household, this is a constant
> battle as my GF continues to bring home
> odd superstitious rumors and embellishments from a variety of inaccurate
> sources and I constantly have to correct her
> perspective.
>
> For up to date local information, check with the local public health
> authority in your jurisdiction.
>
>
> I tell you I did.  There is 0 info from official channels telling where
> precisely are the cases.  I had to google the cityname and the virus word.
>
> The official information here says number of cases, and names the REgions
> most affected (large regions).  Thats it.
>
> Please tell me about your city: do you know the numbers in your city?  How
> did you get the info?
>
>
>
> In the US, that will usually
> be your county public health agency. In some cases, individual
> municipalities also have public health departments.
>
>
> Please try it and tell me if it works.
>
>
>
> At the very least adhere to their orders and recommendations.
>
>
> YEs I do.  It says this: tomorrow noon all stay  indoors, out only for
> pharmacy, alimentaiton or criticial job.  Thats it.
>
> They also use other words that I will not type here.
>
> Alex
>
>
> Owen
>
>

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 21:42, sro...@ronan-online.com a écrit :

https://hgis.uw.edu/virus 



It does not say by City.  I cant find my city, department not even region.

I know all these URLs with maps, I can paste them if y ou wish.

I watch them every day.

Alex



Sent from my iPhone

On Mar 16, 2020, at 4:17 PM, Alexandre Petrescu 
 wrote:





Le 16/03/2020 à 20:08, Owen DeLong a écrit :



On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
> wrote:



Le 16/03/2020 à 14:58, Mark Tinka a écrit :


On 15/Mar/20 00:12, Eric M. Carroll wrote:



There is good news here. The infrastructure has never been better
positioned to support this kind of mass event. We can shop from home,
work from home, get groceries from home, order drugs, get
entertainment, all via IP. The ISP community needs to be ready to
respond to the magnitude of what is happening.
If the Internet was as large in 2003 when SARS hit as it is now in 
2020
under the Coronavirus, I think we'd have seen the same issues back 
then.


Nowadays, information gets around a lot faster and with more fuss and
fanfare than before. On average, by the time you see a shared 
video clip
on WhatsApp, you'll be receiving it from 100 other contacts inside 
of a

30 minutes.

As readier as the Internet is today, part of the mega spread of the
fallout from the Coronavirus is because information is not only
traveling way faster, a lot of it is also not (necessarily) 
verified or

moderated before being shared with is consumers.



There is no other way to do that information filterning now. Nobody 
has any authority of knowing better than others.


This simply isn’t true…

Listen to qualified medical professionals, especially those who 
specialize in infectious diseases and epidemiology.



Doctors are many.  Some speak urgent: they say stay home.

Others say this, and yet others say that.




The information on the CDC and WHO websites remains the primary 
source of trustworthy information. It may be
incomplete, but if someone is contradicting something there, they’re 
very likely to be wrong.



Stay home.




OTOH, anyone selling “survive COVID” or “cure COVID” etc. is 
completely untrustworthy and guaranteed to be lying to

you in order to sell a product. Despicable, but common place.



Yes.




There’s no authoritative way to get false information off the 
internet, so we have to combat it as best we can with good
information and education. Even in my own household, this is a 
constant battle as my GF continues to bring home
odd superstitious rumors and embellishments from a variety of 
inaccurate sources and I constantly have to correct her

perspective.

For up to date local information, check with the local public health 
authority in your jurisdiction.



I tell you I did.  There is 0 info from official channels telling 
where precisely are the cases.  I had to google the cityname and the 
virus word.


The official information here says number of cases, and names the 
REgions most affected (large regions).  Thats it.


Please tell me about your city: do you know the numbers in your 
city?  How did you get the info?





In the US, that will usually
be your county public health agency. In some cases, individual 
municipalities also have public health departments.



Please try it and tell me if it works.




At the very least adhere to their orders and recommendations.



YEs I do.  It says this: tomorrow noon all stay  indoors, out only 
for pharmacy, alimentaiton or criticial job.  Thats it.


They also use other words that I will not type here.

Alex



Owen

Re: DHS letters for fuel and facility access

[Sean Donelan]

In response to a snarky question offlist.  Yes, the DHS letters are just 
copies.  Yes, the DHS letters are easy to counterfeit.


Not a lawyer, but counterfeiting an official federal document during a 
national state of emergency likely violates many federal and state laws.


DON'T DO IT.


On Mon, 16 Mar 2020, Sean Donelan wrote:
On some other mailing lists, FCC licensed operators are reporting they have 
received letters from the Department of Homeland Security authorizing 
"access" and "fuel" priority.


Occasionally, DHS issues these letters after natural disasters such as 
hurricanes for hospitals and critical facilities.  I haven't heard of them 
issued for pandemics.

Re: COVID-19 vs. our Networks

[sronan]

https://hgis.uw.edu/virus

Sent from my iPhone

> On Mar 16, 2020, at 4:17 PM, Alexandre Petrescu 
>  wrote:
> 
> 
> 
> 
> Le 16/03/2020 à 20:08, Owen DeLong a écrit :
>> 
>> 
 On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
  wrote:
 
 
 Le 16/03/2020 à 14:58, Mark Tinka a écrit :
> 
> On 15/Mar/20 00:12, Eric M. Carroll wrote:
> 
> 
>> There is good news here. The infrastructure has never been better
>> positioned to support this kind of mass event. We can shop from home,
>> work from home, get groceries from home, order drugs, get
>> entertainment, all via IP. The ISP community needs to be ready to
>> respond to the magnitude of what is happening.
> If the Internet was as large in 2003 when SARS hit as it is now in 2020
> under the Coronavirus, I think we'd have seen the same issues back then.
> 
> Nowadays, information gets around a lot faster and with more fuss and
> fanfare than before. On average, by the time you see a shared video clip
> on WhatsApp, you'll be receiving it from 100 other contacts inside of a
> 30 minutes.
> 
> As readier as the Internet is today, part of the mega spread of the
> fallout from the Coronavirus is because information is not only
> traveling way faster, a lot of it is also not (necessarily) verified or
> moderated before being shared with is consumers.
 
 
 There is no other way to do that information filterning now. Nobody has 
 any authority of knowing better than others.
>>> 
>>> This simply isn’t true…
>>> 
>>> Listen to qualified medical professionals, especially those who specialize 
>>> in infectious diseases and epidemiology.
>> 
>> Doctors are many.  Some speak urgent: they say stay home.
>> 
>> Others say this, and yet others say that.
>> 
>> 
>> 
>> 
>> The information on the CDC and WHO websites remains the primary source of 
>> trustworthy information. It may be
>> incomplete, but if someone is contradicting something there, they’re very 
>> likely to be wrong.
> 
> Stay home.
> 
> 
> 
>> 
>> OTOH, anyone selling “survive COVID” or “cure COVID” etc. is completely 
>> untrustworthy and guaranteed to be lying to
>> you in order to sell a product. Despicable, but common place.
> 
> Yes.
> 
> 
> 
>> 
>> There’s no authoritative way to get false information off the internet, so 
>> we have to combat it as best we can with good
>> information and education. Even in my own household, this is a constant 
>> battle as my GF continues to bring home
>> odd superstitious rumors and embellishments from a variety of inaccurate 
>> sources and I constantly have to correct her
>> perspective.
>> 
>> For up to date local information, check with the local public health 
>> authority in your jurisdiction.
> 
> I tell you I did.  There is 0 info from official channels telling where 
> precisely are the cases.  I had to google the cityname and the virus word.
> 
> The official information here says number of cases, and names the REgions 
> most affected (large regions).  Thats it.
> 
> Please tell me about your city: do you know the numbers in your city?  How 
> did you get the info?
> 
> 
> 
> 
> 
>> In the US, that will usually
>> be your county public health agency. In some cases, individual 
>> municipalities also have public health departments.
> 
> Please try it and tell me if it works.
> 
> 
> 
>> 
>> At the very least adhere to their orders and recommendations.
> 
> YEs I do.  It says this: tomorrow noon all stay  indoors, out only for 
> pharmacy, alimentaiton or criticial job.  Thats it.
> 
> They also use other words that I will not type here.
> 
> Alex
> 
>> 
>> Owen
>> 

Fwd: Your message to NANOG awaits moderator approval

[Alexandre Petrescu]

fyi

my figure of the map was cut by mailman software at nanog



 Message transféré 
Sujet : Your message to NANOG awaits moderator approval
Date :  Mon, 16 Mar 2020 20:37:58 +
De :nanog-ow...@nanog.org
Pour :  alexandre.petre...@gmail.com



Your mail to 'NANOG' with the subject

Re: COVID-19 vs. our Networks

Is being held until the list moderator can review it for approval.

The reason it is being held:

Message body is too big: 288150 bytes with a limit of 100 KB

Either the message will get posted to the list, or you will receive
notification of the moderator's decision. If you would like to cancel
this posting, please visit the following URL:

https://mailman.nanog.org/mailman/confirm/nanog/546fda0d60c3e64480862eb9af611a55fe8a0ea6

Re: DHS letters for fuel and facility access

[Sean Donelan]

Its a form letter.

Same letter is printed no matter what disaster its for.  I don't think 
they are expecting power outages (unless there is a co-disaster at the 
same time).  Its just the standard form.



On Mon, 16 Mar 2020, james jones wrote:


Fuel priority? They expecting shortage and/or power outages?
-James

On Mon, Mar 16, 2020 at 4:21 PM Sean Donelan  wrote:

  On some other mailing lists, FCC licensed operators are
  reporting they
  have received letters from the Department of Homeland Security
  authorizing
  "access" and "fuel" priority.

  Occasionally, DHS issues these letters after natural disasters
  such as
  hurricanes for hospitals and critical facilities.  I haven't
  heard of them
  issued for pandemics.

Re: DHS letters for fuel and facility access

[Jared Mauch]

> On Mar 16, 2020, at 4:24 PM, james jones  wrote:
> 
> Fuel priority? They expecting shortage and/or power outages?
> 

I suspect it’s more to solve issues with truck drivers going to work and their 
job is to deliver fuel.  Some areas have been instituting curfews and this 
would satisfy the local authorities who may stop such a driver.

- Jared

Re: DHS letters for fuel and facility access

[james jones]

Fuel priority? They expecting shortage and/or power outages?

-James

On Mon, Mar 16, 2020 at 4:21 PM Sean Donelan  wrote:

>
> On some other mailing lists, FCC licensed operators are reporting they
> have received letters from the Department of Homeland Security authorizing
> "access" and "fuel" priority.
>
> Occasionally, DHS issues these letters after natural disasters such as
> hurricanes for hospitals and critical facilities.  I haven't heard of them
> issued for pandemics.
>
>

DHS letters for fuel and facility access

[Sean Donelan]

On some other mailing lists, FCC licensed operators are reporting they 
have received letters from the Department of Homeland Security authorizing 
"access" and "fuel" priority.


Occasionally, DHS issues these letters after natural disasters such as 
hurricanes for hospitals and critical facilities.  I haven't heard of them 
issued for pandemics.

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 20:08, Owen DeLong a écrit :



On Mar 16, 2020, at 07:04 , Alexandre Petrescu 
mailto:alexandre.petre...@gmail.com>> 
wrote:



Le 16/03/2020 à 14:58, Mark Tinka a écrit :


On 15/Mar/20 00:12, Eric M. Carroll wrote:



There is good news here. The infrastructure has never been better
positioned to support this kind of mass event. We can shop from home,
work from home, get groceries from home, order drugs, get
entertainment, all via IP. The ISP community needs to be ready to
respond to the magnitude of what is happening.

If the Internet was as large in 2003 when SARS hit as it is now in 2020
under the Coronavirus, I think we'd have seen the same issues back then.

Nowadays, information gets around a lot faster and with more fuss and
fanfare than before. On average, by the time you see a shared video clip
on WhatsApp, you'll be receiving it from 100 other contacts inside of a
30 minutes.

As readier as the Internet is today, part of the mega spread of the
fallout from the Coronavirus is because information is not only
traveling way faster, a lot of it is also not (necessarily) verified or
moderated before being shared with is consumers.



There is no other way to do that information filterning now. Nobody 
has any authority of knowing better than others.


This simply isn’t true…

Listen to qualified medical professionals, especially those who 
specialize in infectious diseases and epidemiology.



Doctors are many.  Some speak urgent: they say stay home.

Others say this, and yet others say that.




The information on the CDC and WHO websites remains the primary source 
of trustworthy information. It may be
incomplete, but if someone is contradicting something there, they’re 
very likely to be wrong.



Stay home.




OTOH, anyone selling “survive COVID” or “cure COVID” etc. is 
completely untrustworthy and guaranteed to be lying to

you in order to sell a product. Despicable, but common place.



Yes.




There’s no authoritative way to get false information off the 
internet, so we have to combat it as best we can with good
information and education. Even in my own household, this is a 
constant battle as my GF continues to bring home
odd superstitious rumors and embellishments from a variety of 
inaccurate sources and I constantly have to correct her

perspective.

For up to date local information, check with the local public health 
authority in your jurisdiction.



I tell you I did.  There is 0 info from official channels telling where 
precisely are the cases.  I had to google the cityname and the virus word.


The official information here says number of cases, and names the 
REgions most affected (large regions).  Thats it.


Please tell me about your city: do you know the numbers in your city?  
How did you get the info?





In the US, that will usually
be your county public health agency. In some cases, individual 
municipalities also have public health departments.



Please try it and tell me if it works.




At the very least adhere to their orders and recommendations.



YEs I do.  It says this: tomorrow noon all stay  indoors, out only for 
pharmacy, alimentaiton or criticial job.  Thats it.


They also use other words that I will not type here.

Alex



Owen

Re: COVID-19 vs. our Networks

[Ca By]

On Mon, Mar 16, 2020 at 8:51 AM Livingood, Jason <
jason_living...@comcast.com> wrote:

> > Folks saw congestion from a massive free content drop this past week.
> > But as folks had called out, that was the CDN angle of distributing that
> content rather than the actual game play. There is a rather long discussion
> about that in the "akamai yesterday - what in the world was that" thread
> from Jan/Feb/March.
> > Whether people end up adjusting plans around large content distribution
> at this time, I guess remains to be seen.
>
> (*this is 100% my personal opinion**) Perhaps we are approaching at time
> when large content distribution events such as the one noted above will be
> configured so as to minimize any potential network effects (e.g. pushing to
> off-peak or applying server-side per connection rate limits). The Internet
> is a shared resource and as such we all share responsibility to work
> together and act in a way as to maintain the performance & reliability of
> the Internet as a whole.
>
> JL


Sadly, both marketing headlines and peering contracts / requirements reward
pushing ever higher peaks instead of smartly filling troughs.

CB



>
>
>

Re: COVID-19 vs. our Networks

[Owen DeLong]

> On Mar 16, 2020, at 07:04 , Alexandre Petrescu  
> wrote:
> 
> 
> Le 16/03/2020 à 14:58, Mark Tinka a écrit :
>> 
>> On 15/Mar/20 00:12, Eric M. Carroll wrote:
>> 
>> 
>>> There is good news here. The infrastructure has never been better
>>> positioned to support this kind of mass event. We can shop from home,
>>> work from home, get groceries from home, order drugs, get
>>> entertainment, all via IP. The ISP community needs to be ready to
>>> respond to the magnitude of what is happening.
>> If the Internet was as large in 2003 when SARS hit as it is now in 2020
>> under the Coronavirus, I think we'd have seen the same issues back then.
>> 
>> Nowadays, information gets around a lot faster and with more fuss and
>> fanfare than before. On average, by the time you see a shared video clip
>> on WhatsApp, you'll be receiving it from 100 other contacts inside of a
>> 30 minutes.
>> 
>> As readier as the Internet is today, part of the mega spread of the
>> fallout from the Coronavirus is because information is not only
>> traveling way faster, a lot of it is also not (necessarily) verified or
>> moderated before being shared with is consumers.
> 
> 
> There is no other way to do that information filterning now. Nobody has any 
> authority of knowing better than others.

This simply isn’t true…

Listen to qualified medical professionals, especially those who specialize in 
infectious diseases and epidemiology.

The information on the CDC and WHO websites remains the primary source of 
trustworthy information. It may be
incomplete, but if someone is contradicting something there, they’re very 
likely to be wrong.

OTOH, anyone selling “survive COVID” or “cure COVID” etc. is completely 
untrustworthy and guaranteed to be lying to
you in order to sell a product. Despicable, but common place.

There’s no authoritative way to get false information off the internet, so we 
have to combat it as best we can with good
information and education. Even in my own household, this is a constant battle 
as my GF continues to bring home
odd superstitious rumors and embellishments from a variety of inaccurate 
sources and I constantly have to correct her
perspective.

For up to date local information, check with the local public health authority 
in your jurisdiction. In the US, that will usually
be your county public health agency. In some cases, individual municipalities 
also have public health departments.

At the very least adhere to their orders and recommendations.

Owen

Re: COVID-19 vs. our Networks

[Livingood, Jason]

On this subject, this is worth a read:

https://transition.fcc.gov/pshs/docs/emergency-information/Pandemic_Comms_Impact_Study_%28December%202007%29.pdf
Department of Homeland Security
Pandemic Influenza Impact on Communications Networks Study
Dec 2007

JL

From: NANOG  on behalf of Tom Beecher 

Date: Monday, March 16, 2020 at 2:10 PM
To: Mike Bolitho 
Cc: NANOG 
Subject: Re: COVID-19 vs. our Networks

Mike-

The TSP program provides for priority treatment for only 2 things : 
provisioning of new capacity, and restoration of capacity. It provides no 
accommodations for intermittent degradation events upstream.

Source :

DHC Office of Emergency Communications, TSP Program Office, TSP Vendor Handbook.

https://www.cisa.gov/sites/default/files/publications/OEC%20Service%20Vendor%20Handbook%20for%20TSP%2010-23-2017%20FINAL%20508C.pdf

On Mon, Mar 16, 2020 at 10:42 AM Mike Bolitho 
mailto:mikeboli...@gmail.com>> wrote:
I think there's a bit of a misunderstanding of what I'm trying to say here. We 
have dual private lines from two Tier I providers. These interconnect all major 
hospitals and our data centers. We also have a third metro connection that 
connects things regionally. We have DIA on top of that. I think people are 
vastly underestimating just how much $aaS there is within the medical field. 
TeleDoc, translation services, remote radiologists, the way prescriptions get 
filled, how staffing works, third party providers basically hoteling within our 
facilities, critical staff VPNed in because the government has locked things 
down, etc. Then there's things that we don't use but I'm sure other providers 
do, GoToMeeting, O365, VaaS, etc. There's no practical way to engineer your WAN 
to facilitate dozens of connections to these services.

This extends beyond just hospitals as well. Fire departments, police 
departments, water treatment etc. Regardless of whether or not those entities 
planned well (I think we did), the government should and will step in if 
critical services are degraded. And for what it's worth, Stephen, I know how 
things are built within the ISP world. I spent four years there. That doesn't 
change the fact that we're possibly heading into uncharted waters when it comes 
to utilization and the impact that will have on $aaS products that are 
interwoven into every single vertical, including entities that fall under TSP, 
critical national security and emergency preparedness functions, including 
those areas related to safety, maintenance of law and order, and public health. 
It's easy for all you guys to sit here and armchair quarterback other people's 
planning but when things really start to degrade, all bets are off. If you 
don't believe that, just look at the news. States are literally shutting down 
private businesses (restaurants, bars, night clubs, private schools) and 
banning people from associating in groups of larger than 50.
The opinions expressed here are my own and do not represent my employer or 
their views.

- Mike Bolitho

On Sun, Mar 15, 2020 at 6:12 PM Stephen Fulton 
mailto:s...@lists.esoteric.ca>> wrote:
In $dayjob I constantly see the lack of understanding of the difference
between what the Internet is and what a path engineered private circuit
is (eg. pseudowire, wave, whatever).  The latest fight is over SD-WAN
and those who think it will replace MPLS entirely and they won't need
those expensive routers anymore.  But I digress.

Mark's comment and others like it are the correct approach Mike.  If
your private WAN is most critical, then invest in and manage user
complaints about poor Internet service.  ISP's, IXP's and CDN's are not
going to twist themselves into knots to solve your problems, even if
someone calls it an emergency.  Sorry.

Stephen


On 2020-03-15 02:01, Mark Tinka wrote:
>
>
> On 14/Mar/20 19:14, Mike Bolitho wrote:
>
>> /
>> /
>>
>> I work for a hospital, we ran into some issues last week due to
>> congestion that was totally outside of our control that was off of our
>> WAN (Thanks Call Of Duty). Now, the issue we ran into was not mission
>> critical at the time but it was still disruptive. As more and more
>> people are driven home during this time, more and more people will be
>> using bandwidth intensive streaming and online gaming products. If
>> more and more TSP coded entities are running into issues, ISPs, IXPs,
>> and CDNs will be forced to act.
>
> Hmmh, if that level of priority is required, I'd probably build my own
> network, and not rely on public infrastructure like the Internet.
>
> Mark.

Re: sflow -> aggregated aspath visualization?

[Brandon Ewing]

On Fri, Mar 13, 2020 at 06:54:15PM +, Adam Thompson wrote:
> If anyone knows of tools capable of generating easy-to-understand reports, 
> dashboards, including historical “what changed this week”-type data, please 
> let me know.
> 

If you have access to a modern ELK stack, you could try out Elastiflow:
https://github.com/robcowart/elastiflow

My understanding is that tuning the number and settings of the Logstash
instances can be challenging, but it's very pretty when it's working
correctly.

-- 
Brandon Ewing (brandon.ew...@warningg.com)


pgpnrr3jIT3vf.pgp
Description: PGP signature

Re: COVID-19 vs. our Networks

[Tom Beecher]

Mike-

The TSP program provides for priority treatment for only 2 things :
provisioning of new capacity, and restoration of capacity. It provides no
accommodations for intermittent degradation events upstream.

Source :

DHC Office of Emergency Communications, TSP Program Office, TSP Vendor
Handbook.

https://www.cisa.gov/sites/default/files/publications/OEC%20Service%20Vendor%20Handbook%20for%20TSP%2010-23-2017%20FINAL%20508C.pdf

On Mon, Mar 16, 2020 at 10:42 AM Mike Bolitho  wrote:

> I think there's a bit of a misunderstanding of what I'm trying to say
> here. We have dual private lines from two Tier I providers. These
> interconnect all major hospitals and our data centers. We also have a third
> metro connection that connects things regionally. We have DIA on top of
> that. I think people are vastly underestimating just how much $aaS there
> is within the medical field. TeleDoc, translation services, remote
> radiologists, the way prescriptions get filled, how staffing works, third
> party providers basically hoteling within our facilities, critical staff
> VPNed in because the government has locked things down, etc. Then there's
> things that we don't use but I'm sure other providers do, GoToMeeting,
> O365, VaaS, etc. There's no practical way to engineer your WAN to
> facilitate dozens of connections to these services.
>
> This extends beyond just hospitals as well. Fire departments, police
> departments, water treatment etc. Regardless of whether or not those
> entities planned well (I think we did), the government should and will
> step in if critical services are degraded. And for what it's worth,
> Stephen, I know how things are built within the ISP world. I spent four
> years there. That doesn't change the fact that we're possibly heading into
> uncharted waters when it comes to utilization and the impact that will
> have on $aaS products that are interwoven into every single vertical,
> including entities that fall under TSP, critical national security and
> emergency preparedness functions, including those areas related to safety,
> maintenance of law and order, and public health. It's easy for all you
> guys to sit here and armchair quarterback other people's planning but when
> things really start to degrade, all bets are off. If you don't believe
> that, just look at the news. States are literally shutting down private
> businesses (restaurants, bars, night clubs, private schools) and banning
> people from associating in groups of larger than 50.
>
> *The opinions expressed here are my own and do not represent my employer
> or their views.*
>
> - Mike Bolitho
>
> On Sun, Mar 15, 2020 at 6:12 PM Stephen Fulton 
> wrote:
>
>> In $dayjob I constantly see the lack of understanding of the difference
>> between what the Internet is and what a path engineered private circuit
>> is (eg. pseudowire, wave, whatever).  The latest fight is over SD-WAN
>> and those who think it will replace MPLS entirely and they won't need
>> those expensive routers anymore.  But I digress.
>>
>> Mark's comment and others like it are the correct approach Mike.  If
>> your private WAN is most critical, then invest in and manage user
>> complaints about poor Internet service.  ISP's, IXP's and CDN's are not
>> going to twist themselves into knots to solve your problems, even if
>> someone calls it an emergency.  Sorry.
>>
>> Stephen
>>
>>
>> On 2020-03-15 02:01, Mark Tinka wrote:
>> >
>> >
>> > On 14/Mar/20 19:14, Mike Bolitho wrote:
>> >
>> >> /
>> >> /
>> >>
>> >> I work for a hospital, we ran into some issues last week due to
>> >> congestion that was totally outside of our control that was off of our
>> >> WAN (Thanks Call Of Duty). Now, the issue we ran into was not mission
>> >> critical at the time but it was still disruptive. As more and more
>> >> people are driven home during this time, more and more people will be
>> >> using bandwidth intensive streaming and online gaming products. If
>> >> more and more TSP coded entities are running into issues, ISPs, IXPs,
>> >> and CDNs will be forced to act.
>> >
>> > Hmmh, if that level of priority is required, I'd probably build my own
>> > network, and not rely on public infrastructure like the Internet.
>> >
>> > Mark.
>>
>

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 15:22, Mark Tinka a écrit :


On 16/Mar/20 16:04, Alexandre Petrescu wrote:



There is no other way to do that information filterning now. Nobody
has any authority of knowing better than others.

MUAs filters yes. (mail user agent)

Look at all data you receive, identify patterns, then act. That's all
one can do now.

There are easily identifiable patterns.

Develop trust.

I'd say "develop brains" :-).

A lot of people are only too happy to be led, they want to believe
anything that comes out of a leader's mouth, especially if that leader
said it on TV, or on Twitter.

Worse, a lot of people want to be "the 1st" to show that they knew
something before anyone else, so they can come off as "the source of
truth".



I must say I agree with you on that 'be the 1st to know' thing. Some 
behaviour like that of blogger (no offence, sorry), or of a person 
looking to create reputation quickly, ie create a safe situation quickly 
for self, is happening.  Whistle blower is one such case too.  I myself 
find myself often in such situation and, humanly, inherently, look some 
times to improve reputation.  I admit that for myself.


Some of these whistle blowers also some times act out of conviction, 
which is laudable.   Some law protects them.


But also, there are other things.  Under these circumnstances, there are 
many such people - 1st announcers.  But too many of them are in 
private.  Some worry their gov't might chain them, others worry it might 
not really be so, so their reputation is at risk, others worry to talk 
about their private data to public lists. Some look to reinforce their 
leadership position, others to go up on the ladder, others look to save, 
and probably more other reasons.


Despite all that, I believe it might be that there might not be enough 
of them, these "1st to know" announcers.  I still think that at this 
time there are still a majority of people that dont believe this is 
true, or that it is a conspiracy, or that it wont affect me, or tha 
tit's just a 'flu' (from Influenza).


For my part, I have a hard time to persuade members of my immediate 
circle of people about the dangerosity of this.  It's in steps: they 
accept some danger but not bigger, accept bigger but not even bigger.  
Few if any accept to go from 0 to total acceptance of what's happening 
in 1 day or so.  One can see that acceptance time in the time difference 
between the 2 weeks of inception, to the 3 months of the event up/down 
in China.  Looking now retrospectively, some question the following: if 
China quickly closed everything in 2 weeks after the first cases, would 
we still be where we are now?


But, as someone adviced on this list, I also look to save my energy.

Alex

PS: By this I also respond to another topic, to another poster on this 
email list, that I know from IETF, to share that a cousin of mine just 
got her long time planned surgery cancelled  (reported to a new date do 
be defined).  IT is a condition on which the bad thing can evolve badly, 
and shes unhappy no surgery now.



  That is why the moment someone receives a fake "official memo"
from the Ministry of Education of some country saying that all school
lessons have been banned on a Sunday following the Friday the president
gave an official statement about the state of the Coronavirus in said
country, they can't take 60 seconds to see that the date on that letter
is 2 days before the president gave his statement, nor can they reason
as to how such a letter could be sent after the president never
mentioned a thing about shutting schools down during his official
presser, without a copy of it being on the government's official web
site or announced by the national news broadcaster.

We see folk potentially becoming presidents because they spent more
money and made the loudest noise. Nobody has time, anymore, to listen to
the issues and make up their own minds. They just want to be told what
to think based on who retweets the loudest.

People want to believe anything. People want to share everything. That's
one of the biggest consequences of the ubiquity of the Internet today,
and the Coronavirus has just amplified what has already been happening
for a few years now.

Mark.

Re: COVID-19 vs. our Networks

[Livingood, Jason]

> Folks saw congestion from a massive free content drop this past week.
> But as folks had called out, that was the CDN angle of distributing that 
> content rather than the actual game play. There is a rather long discussion 
> about that in the "akamai yesterday - what in the world was that" thread from 
> Jan/Feb/March.
> Whether people end up adjusting plans around large content distribution at 
> this time, I guess remains to be seen.

(*this is 100% my personal opinion**) Perhaps we are approaching at time when 
large content distribution events such as the one noted above will be 
configured so as to minimize any potential network effects (e.g. pushing to 
off-peak or applying server-side per connection rate limits). The Internet is a 
shared resource and as such we all share responsibility to work together and 
act in a way as to maintain the performance & reliability of the Internet as a 
whole.

JL

Re: backtracking forged packets?

[konrad]

On 2020-03-14 23:50, Damian Menscher  wrote:
> I don't recommend filtering the SYN-ACK packets.  That's what Octolus did,
> and the result was leaving half-open SYN_RECV connections on all the nodes
> used for reflection.  That has two downsides:
>
>   - the reflectors will retry the SYN-ACK (several times), which increases
> your PPS load (amplifying the attack)
>   - the providers may notice the large number of SYN_RECV connections from
> your network and put you on a blacklist

I work at Path Network; we're providing DDoS mitigation services for
Octolus. I wanted to follow up your message with a couple of points from
our POV.

The filter we have running for Octolus is a more generic stateful TCP
filter, designed primarily to curb spoofed TCP floods. The bigger
attacks we see are on the magnitude of 100s of Gbps/Mpps, and a simple
fact is that outright dropping an out-of-state packet is multiple times
less expensive for us than creating and responding with a RST.

We see spoofed TCP attacks much more frequently than a SYN-ACK
reflection, and in fact from our automation's point of view this looks
exactly like a SYN-ACK flood from randomized source addresses. Aside
from the resources cost, sending back RSTs for non-reflected attacks of
respectable volume might also not be appreciated by some networks.

Knowing the specifics of this long-running reflection attacks, we're
considering how to reply with RSTs so to not leave lingering SYN_RECVs
on reflectors' side.

On 2020-03-15 16:36, Jean | ddostest.me  wrote:
> I believe that Oculus blocked the RST and not the SYN/ACK.

The SYN-ACKs are dropped; letting them reach the end servers and
dropping outgoing RSTs instead would make for poor mitigation. :)

On 2020-03-14 23:50, Damian Menscher  wrote (cont.):
> I don't want to leave you with the impression that it's hopeless... these
> attacks aren't impossible to stop --- it just requires convincing the
> transit providers to care.
>
> Damian
>
> On Sat, Mar 14, 2020 at 1:31 PM Jean | ddostest.me via NANOG <
> nanog at nanog.org> wrote:
>
> Hi Bill,
>
> thanks for sharing the data. Indeed, I can't offer you a way to backtrack
> the spoofed packets.
>
> Anyway, I'm not sure what could you do legally as there is a very high
> chance that these people are not in the USA and the CFAA won't apply to
> them.
>
> Here is what I would do if I was in your situation.
>
> Since these packets are spoof and malformed, I would block all SYN/ACK
> based on the length.
>
> Depending on your hardware, it's very easy to inspect *only the SYN/ACK
> by length* if you have modern hardware. On linux/unix, it's also very
> straightforward. I'm not sure for windows though.
>
> Here is the details of the analysis:
>
> Today, all the SYN and SYN/ACK includes a minimum of options like MSS, WS,
> SACK, NOP (Only a spacer, sometimes 2) and extended TS. There might be
> others, but let's use the basic one.
>
> In your case, there are none. There is only MSS and the SYN length is 44
> bytes. These are spoof packets maybe generated by either TCP-AMP like
> reported earlier.
>
> I would try to block all SYN/ACK coming toward your network with a length
> of 44 bytes or lower. But, this is weird because it should be 54 bytes.
> Maybe there is some offloading of some sort in your gear.
>
> Now depending on your hardware, it could work or it could kill your router
> as it will punt the cpu. I guess you have some modern gear.
>
> What I do when I am not sure about the length, I start to accept and log
> at 60 bytes, then 58, 56, 54... 44 until I catch the gremlins.
>
> Once you found the sweet spot, you drop all SYN/ACK toward your /23 lower
> than X bytes. It won't kill or block anything legitimate if you do it
> properly. :)
>
> What will happen is that you will not reply to these spoof SYN/ACK with a
> RST and still allowing RST for legit SYN and SYN/ACK. Akamai and your
> service providers will be happy and should not penalize you.
>
> I'm pretty sure that it will help you as it did for me in the past.
>
> Let me know if it's not clear and/or which part is foggy and I'll try to
> give more details and better explanation.
>
> Regards,
>
> Jean St-Laurent
> On 2020-03-14 11:46, William Herrin wrote:
>
> On Sat, Mar 14, 2020 at 4:02 AM Jean | ddostest.me via NANOG  wrote:
>
> can you post some forged packets please? You can send them offlist if
> you prefer.
>
> Hi Jean,
>
> Here are a couple examples (PDT this morning):
>
> 08:22:43.413250 IP (tos 0x0, ttl 55, id 10108, offset 0, flags [none],
> proto ICMP (1), length 56)
> 45.89.93.26 > 199.33.225.218: ICMP host 45.89.93.26 unreachable -
> admin prohibited filter, length 36
> IP (tos 0x0, ttl 69, id 10108, offset 0, flags [DF], proto TCP
> (6), length 40)
> 199.33.225.218.9851 > 45.89.93.26.443: [|tcp]
> 0x:  4500 0038 277c  3701 28da 2d59 5d1a
> 0x0010:  c721 e1da 030d 4b61   4500 0028
> 0x0020:  277c 4000 4506 dae4 c721 e1da 2d59 5d1a
> 

Re: backtracking forged packets?

[Alain Hebert]

    In my opinion you can, just that the participants are not willing 
to do so due, in part, to the lack of acceptance of BCP38.


-
Alain Hebertaheb...@pubnix.net
PubNIX Inc.
50 boul. St-Charles
P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
Tel: 514-990-5911  http://www.pubnix.netFax: 514-990-9443

On 2020-03-14 07:35, na...@jack.fr.eu.org wrote:

This is the issue (and the leitmotiv) of forged packets: you cannot
trace their origin in real world situation


On 3/14/20 12:03 PM, Jean | ddostest.me via NANOG wrote:

Hi Bill,

can you post some forged packets please? You can send them offlist if
you prefer.

It seems to be similar to what Octopus experience few weeks ago on this
list.

Thanks

Jean St-Laurent | CISSP #634103

Re: COVID-19 vs. our Networks

[Carsten Bormann]

On 2020-03-16, at 15:40, Mike Bolitho  wrote:
> 
> I think people are vastly underestimating just how much $aaS there is within 
> the medical field.

I recently had to reschedule an X-ray because the license manager for the X-ray 
machine was acting up.  I don’t think people have a grasp for how much of the 
medical infrastructure no longer works when the Internet is down.

Grüße, Carsten

Re: COVID-19 vs. our Networks

[Mike Bolitho]

I think there's a bit of a misunderstanding of what I'm trying to say here.
We have dual private lines from two Tier I providers. These interconnect
all major hospitals and our data centers. We also have a third metro
connection that connects things regionally. We have DIA on top of that. I
think people are vastly underestimating just how much $aaS there is within
the medical field. TeleDoc, translation services, remote radiologists, the
way prescriptions get filled, how staffing works, third party providers
basically hoteling within our facilities, critical staff VPNed in because
the government has locked things down, etc. Then there's things that we
don't use but I'm sure other providers do, GoToMeeting, O365, VaaS, etc.
There's no practical way to engineer your WAN to facilitate dozens of
connections to these services.

This extends beyond just hospitals as well. Fire departments, police
departments, water treatment etc. Regardless of whether or not those
entities planned well (I think we did), the government should and will step
in if critical services are degraded. And for what it's worth, Stephen, I
know how things are built within the ISP world. I spent four years there.
That doesn't change the fact that we're possibly heading into uncharted
waters when it comes to utilization and the impact that will have on $aaS
products that are interwoven into every single vertical, including entities
that fall under TSP, critical national security and emergency preparedness
functions, including those areas related to safety, maintenance of law and
order, and public health. It's easy for all you guys to sit here and
armchair quarterback other people's planning but when things really start
to degrade, all bets are off. If you don't believe that, just look at the
news. States are literally shutting down private businesses (restaurants,
bars, night clubs, private schools) and banning people from associating in
groups of larger than 50.

*The opinions expressed here are my own and do not represent my employer or
their views.*

- Mike Bolitho

On Sun, Mar 15, 2020 at 6:12 PM Stephen Fulton  wrote:

> In $dayjob I constantly see the lack of understanding of the difference
> between what the Internet is and what a path engineered private circuit
> is (eg. pseudowire, wave, whatever).  The latest fight is over SD-WAN
> and those who think it will replace MPLS entirely and they won't need
> those expensive routers anymore.  But I digress.
>
> Mark's comment and others like it are the correct approach Mike.  If
> your private WAN is most critical, then invest in and manage user
> complaints about poor Internet service.  ISP's, IXP's and CDN's are not
> going to twist themselves into knots to solve your problems, even if
> someone calls it an emergency.  Sorry.
>
> Stephen
>
>
> On 2020-03-15 02:01, Mark Tinka wrote:
> >
> >
> > On 14/Mar/20 19:14, Mike Bolitho wrote:
> >
> >> /
> >> /
> >>
> >> I work for a hospital, we ran into some issues last week due to
> >> congestion that was totally outside of our control that was off of our
> >> WAN (Thanks Call Of Duty). Now, the issue we ran into was not mission
> >> critical at the time but it was still disruptive. As more and more
> >> people are driven home during this time, more and more people will be
> >> using bandwidth intensive streaming and online gaming products. If
> >> more and more TSP coded entities are running into issues, ISPs, IXPs,
> >> and CDNs will be forced to act.
> >
> > Hmmh, if that level of priority is required, I'd probably build my own
> > network, and not rely on public infrastructure like the Internet.
> >
> > Mark.
>

access to sealandqualityfoods.com from Calgary

[David Charlebois]

Hi
Anyone in the Calgary area able to do a quick test? I'm troubleshooting
access to sealandqualityfoods.com (resolving as 34.95.13.225 for me). Site
is fine from where I am in Ontario, but reported down in Calgary. I do not
know what, if any errror messages are being seen from a browser in Calgary.
Just looking for more details is the server responding, is there are
routing issue, etc.
I'm reviewing some BGP looking-glass output now to determine if there is
evidence of an issues
Thanks in advance.
Dave

Re: COVID-19 vs. our Networks

[Mark Tinka]

On 16/Mar/20 16:13, Rubens Kuhl wrote:

>
> Most misinformation is being carried nowadays by peer-to-peer
> messaging (like WhatsApp) and social networks (like Facebook and
> Instagram), so even if a miracle device appeared and was put in front
> of all mail systems,  it would have very little effect.

As a friend of mine and I always say, "Command & Control is dead &
gone". All the power is now with the consumer. "Leaders" can't "tell and
bully" anymore; they need to learn how to listen and engage. That's all
they can really do.

The traditionalists need to get over themselves; they are no longer the
smartest people in the room anymore. Everyone is now the smartest
guy/gal in the room, whether that's true or not.

The Internet has made sure everyone is hyper-connected, and information
is everywhere!

Mark.

Re: COVID-19 vs. our Networks

[Mark Tinka]

On 16/Mar/20 16:04, Alexandre Petrescu wrote:

>
>
> There is no other way to do that information filterning now. Nobody
> has any authority of knowing better than others.
>
> MUAs filters yes. (mail user agent)
>
> Look at all data you receive, identify patterns, then act. That's all
> one can do now.
>
> There are easily identifiable patterns.
>
> Develop trust.

I'd say "develop brains" :-).

A lot of people are only too happy to be led, they want to believe
anything that comes out of a leader's mouth, especially if that leader
said it on TV, or on Twitter.

Worse, a lot of people want to be "the 1st" to show that they knew
something before anyone else, so they can come off as "the source of
truth". That is why the moment someone receives a fake "official memo"
from the Ministry of Education of some country saying that all school
lessons have been banned on a Sunday following the Friday the president
gave an official statement about the state of the Coronavirus in said
country, they can't take 60 seconds to see that the date on that letter
is 2 days before the president gave his statement, nor can they reason
as to how such a letter could be sent after the president never
mentioned a thing about shutting schools down during his official
presser, without a copy of it being on the government's official web
site or announced by the national news broadcaster.

We see folk potentially becoming presidents because they spent more
money and made the loudest noise. Nobody has time, anymore, to listen to
the issues and make up their own minds. They just want to be told what
to think based on who retweets the loudest.

People want to believe anything. People want to share everything. That's
one of the biggest consequences of the ubiquity of the Internet today,
and the Coronavirus has just amplified what has already been happening
for a few years now.

Mark.

Re: COVID-19 vs. our Networks

[Rubens Kuhl]

>
>
>
>
> > As readier as the Internet is today, part of the mega spread of the
> > fallout from the Coronavirus is because information is not only
> > traveling way faster, a lot of it is also not (necessarily) verified or
> > moderated before being shared with is consumers.
>
>
> There is no other way to do that information filterning now. Nobody has
> any authority of knowing better than others.
>
> MUAs filters yes. (mail user agent)
>
> Look at all data you receive, identify patterns, then act. That's all
> one can do now.
>
> There are easily identifiable patterns.
>
> Develop trust.
>
>
Most misinformation is being carried nowadays by peer-to-peer messaging
(like WhatsApp) and social networks (like Facebook and Instagram), so even
if a miracle device appeared and was put in front of all mail systems,  it
would have very little effect.

Rubens

Re: COVID-19 vs. our Networks

[Alexandre Petrescu]

Le 16/03/2020 à 14:58, Mark Tinka a écrit :


On 15/Mar/20 00:12, Eric M. Carroll wrote:



There is good news here. The infrastructure has never been better
positioned to support this kind of mass event. We can shop from home,
work from home, get groceries from home, order drugs, get
entertainment, all via IP. The ISP community needs to be ready to
respond to the magnitude of what is happening.

If the Internet was as large in 2003 when SARS hit as it is now in 2020
under the Coronavirus, I think we'd have seen the same issues back then.

Nowadays, information gets around a lot faster and with more fuss and
fanfare than before. On average, by the time you see a shared video clip
on WhatsApp, you'll be receiving it from 100 other contacts inside of a
30 minutes.

As readier as the Internet is today, part of the mega spread of the
fallout from the Coronavirus is because information is not only
traveling way faster, a lot of it is also not (necessarily) verified or
moderated before being shared with is consumers.



There is no other way to do that information filterning now. Nobody has 
any authority of knowing better than others.


MUAs filters yes. (mail user agent)

Look at all data you receive, identify patterns, then act. That's all 
one can do now.


There are easily identifiable patterns.

Develop trust.

Alex



Mark.

Re: COVID-19 vs. our Networks

[Mark Tinka]

On 15/Mar/20 00:12, Eric M. Carroll wrote:


>
> There is good news here. The infrastructure has never been better
> positioned to support this kind of mass event. We can shop from home,
> work from home, get groceries from home, order drugs, get
> entertainment, all via IP. The ISP community needs to be ready to
> respond to the magnitude of what is happening.

If the Internet was as large in 2003 when SARS hit as it is now in 2020
under the Coronavirus, I think we'd have seen the same issues back then.

Nowadays, information gets around a lot faster and with more fuss and
fanfare than before. On average, by the time you see a shared video clip
on WhatsApp, you'll be receiving it from 100 other contacts inside of a
30 minutes.

As readier as the Internet is today, part of the mega spread of the
fallout from the Coronavirus is because information is not only
traveling way faster, a lot of it is also not (necessarily) verified or
moderated before being shared with is consumers.

Mark.

Re: COVID-19 vs. our Networks

[Eric M. Carroll]

I suggest the NANOG community needs to actively recognize this risks
becoming the largest north american wide test of mass work from home that
has happened since I got involved in the public internet back in 1986.

It may also drive some permanent changes in traffic patterns as high volume
remote work becomes the new normal.

There is good news here. The infrastructure has never been better
positioned to support this kind of mass event. We can shop from home, work
from home, get groceries from home, order drugs, get entertainment, all via
IP. The ISP community needs to be ready to respond to the magnitude of what
is happening.

In Toronto, municipal services are shut down, schools are closed,
university classes are cancelled, transit is reduced, Person is a ghost
town, mass gatherings are cancelled, multiple senior politicians are
self-isolating. Discussions are happening about closing malls. All this
happened in the last week. The downtown core was a ghost town on Friday. We
have a fraction of the cases in Canada as the US does.

I personally know numerous very large companies that have formally
activated their business continuity plans and have or are about to send
tens of thousands to work from home.

Numerous ISPs have waived overage fees

in consideration of the situation here.

I start formal work from home as of Monday *with no defined timeline for
recall as yet*. My current department went from thinking about it, to
testing BCP, to sending people home, inside of 1 week.

This is real. It is rapidly evolving. Be prepared and realize your
networks, if they were not before, are now safety critical.

Regards,

Eric Carroll

Re: China’s Slow Transnational Network

[Ben Cannon]

oops. missed a spot.

-Ben Cannon
CEO 6x7 Networks & 6x7 Telecom, LLC 
b...@6by7.net 




> On Mar 2, 2020, at 2:36 PM, David Burns  wrote:
> 
> Did you compare CERNET with commodity networks?  (My anecdotal observations 
> from a couple years ago suggest that Internet2 to CERNET is very good when 
> other paths are poor to unusable.)
> 
> --David Burns

Re: China’s Slow Transnational Network

[Mark Tinka]

On 15/Mar/20 22:51, Frank Habicht wrote:

>
> thanks for the "quotes", Mark. I agree.
>
> https://www.caida.org/publications/presentations/2018/investigating_causes_congestion_african_afrinic/investigating_causes_congestion_african_afrinic.pdf
>
> page 23:
> Results Overview
> • No evidence of widespread congestion
>- 2.2% of discovered link showed evidence of congestion at the end of
>  our measurements campaign
>
> page 34:
> Conclusions
> • Measured IXPs were congestion-free, which promotes peering in the
>   region
>
> https://conferences.sigcomm.org/imc/2017/papers/imc17-final182.pdf
>
> my conclusion: s/congestion/congestion or the lack thereof/g
>
> Frank Habicht
>
> PS: yes, i could name peers that once had inadequate links into an IXP.
> but for how long did that happen? (yes..., any minute is too long...)

Indeed.

There was a time when backhaul links between ISP routers at the exchange
point and their nearest PoP were based on E1's, wireless, e.t.c. But
that could be said of, pretty much, every exchange point that kicked off
inside of the last 2.5 decades.

Nowadays, such links, if they exist, are the very deep exception, not
the rule.

Mark.