Re: Internet Monitoring Center

2003-01-31 Thread Jack Bates
From: Sean Donelan Who has the biggest wall of big screen monitors? To my knowledge, Norad still does. quoted from article The Global Early Warning Information System, (GEWIS, pronounced gee-whiz) [...] Mark Rasch, former head of the Justice Department's Computer Crime division, questioned

Re: Internet Monitoring Center

2003-01-31 Thread Valdis . Kletnieks
On Thu, 30 Jan 2003 04:21:40 CST, Jack Bates [EMAIL PROTECTED] said: in this. My question is why large providers couldn't interlink themselves and establish guidelines for notification and resolution of network issues. They manage it for peering, why not for overall performance and security

RE: Internet Monitoring Center

2003-01-31 Thread Kuhtz, Christian
I very much agree with Vladis here. I'm probably stating the obvious, but.. One of the major points visible during virtually any one of these significant security events is the way coordination works, how well processes are defined and how well they end up working in terms of tactical

Any commodity ISP support end-to-end MTUs 4470?

2003-01-31 Thread Joe St Sauver
Hi, Is anyone aware of a commodity ISP supporting end-to-end MTUs greater than 4470 octets (e.g., a 9180 octet jumbo frame-clean path, for example)? Feel free to drop me a note directly; I'll summarize for the list if I hear from anyone. Thanks, Joe St Sauver ([EMAIL PROTECTED]) University

Re: Internet Monitoring Center

2003-01-31 Thread Eliot Lear
I say to that... http://www.ofcourseimright.com/~lear/fishbowl.jpg

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Stephen Stuart
My posted comment was concerning if this technology of layer3 to layer1 integration/communication would have exacerbated the mSQL worm as it might have had more ability to grab larger peering pipes. Were that to have been the case, it would probably would also have been responsible for some

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Vijay Gill
Stephen Stuart [EMAIL PROTECTED] writes: Optical switch technology, and the control systems that cause the technology to implement the business rules of an exchange point, have a ways to go before they're ready for prime-time. We don't know anything we could do with 50ms provisioning without

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Jack Bates
From: Stephen Stuart Billing disputes in the exchange point now involve three parties, and become more complex as a result - this, in theory, results in the technology not reducing op-ex but shifting it from the operations department to the accounting and legal departments. If a proper

Re: Internet Monitoring Center

2003-01-31 Thread Sean Donelan
On Fri, 31 Jan 2003 [EMAIL PROTECTED] wrote: in this. My question is why large providers couldn't interlink themselves and establish guidelines for notification and resolution of network issues. They manage it for peering, why not for overall performance and security issues? I'll get

Re: Internet Monitoring Center

2003-01-31 Thread Jack Bates
From: Sean Donelan snip On the other hand, security is a much bigger win for a larger provider than for a small provider. As Willie Sutton use to say, he robbed banks because that's were the money was. Larger providers have more exposure, and more to loose. Even a non-directed attack such

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Stephen Stuart
Of course, I realize that to implement the necessary rules would add a complexity that could cost largs sums of money due to mistakes. Implementing the automation that can (correctly) implement the necessary rules is an enormous challenge, and it's unclear whether anyone in the marketplace

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Stephen Stuart
We don't know anything we could do with 50ms provisioning without making a disaster (c) smd 2001. indeed. but i sure would like one or two day provisioning, as opposed to 18 months. The space where that problem exists is within and and at the edge of carrier networks. I think we

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Iljitsch van Beijnum
On Fri, 31 Jan 2003, Jack Bates wrote: If a proper rulebased system were implemented, wouldn't this account for the issues? For example, implementation of an increase is only allowed by peer E if the traffic has been a gradual increase and X throughput has been met for T amount of time. Peer

Re: mSQL Attack/Peering/OBGP/Optical exchange

2003-01-31 Thread Jack Bates
From: Iljitsch van Beijnum If my regular saturday morning traffic is 50 Mbps and a worm generates another 100, then 150 Mbps is a valid need as being limited to my usual 50 Mbps would mean 67% packet loss, TCP sessions go into hibernation and I end up with 49.9% Mbps of worm traffic. But a

The Spread of the Sapphire/Slammer SQL Worm

2003-01-31 Thread vern
We have completed our preliminary analysis of the spread of the Sapphire/Slammer SQL worm. This worm required roughly 10 minutes to spread worldwide making it by far the fastest worm to date. In the early stages the worm was doubling in size every 8.5 seconds. At its peak, achieved