RE: BitTorrent is 35% of traffic ?

2004-11-05 Thread Matt Ryan
Cachelogic put appliances into the network that both monitor traffic (semi-deep packet inspection) and also cache P2P content to take the load of your network. While I don't think they made the figures up it's worth bearing in mind they are selling a 'solution' to the problem they highlight. For

Re: BitTorrent is 35% of traffic ?

2004-11-05 Thread Bastiaan Spandaw
On Fri, 2004-11-05 at 02:12, Marshall Eubanks wrote: Reality check This week's netflow for the Internet 2 http://netflow.internet2.edu/weekly/20041025/ has BitTorrent taking up about 4.8 % of the traffic, http is 15 to 18%, and all file sharing is about 10%, down from 50% 2 years ago.

The Cidr Report

2004-11-05 Thread cidr-report
This report has been generated at Fri Nov 5 21:44:44 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table

Re: The Cidr Report

2004-11-05 Thread Patrick W Gilmore
On Nov 5, 2004, at 6:00 AM, [EMAIL PROTECTED] wrote: Recent Table History Date PrefixesCIDR Agg [...] 05-11-04156315 103781 Well, we broke 150K prefixes - and without someone deaggregating the classical B space. :) Impressive. Remember when the 'Net was

Light Reading: PIX Source Code For Sale

2004-11-05 Thread frank
Black Market Offers Cisco's PIX [Firewall Source Code] NOVEMBER 05, 2004 Source code for Cisco Systems Inc.'s (Nasdaq: CSCO - message board) PIX firewall is up for sale. Too bad it's not Cisco doing the selling. An underground group known as the Source Code Collective is offering PIX

Fwd: The Cidr Report

2004-11-05 Thread David Barak
--- [EMAIL PROTECTED] wrote: AS701 6090 892 519885.4% UU UUNET Technologies, Inc. AS705 2258 1009 124955.3% UU UUNET Technologies, Inc. Top 20 Net Increased Routes per Originating AS Prefixes Change ASnum AS Description

Re: BitTorrent is 35% of traffic ?

2004-11-05 Thread Christian Kuhtz
On 11/4/04 8:12 PM, Marshall Eubanks [EMAIL PROTECTED] wrote: Reality check This week's netflow for the Internet 2 http://netflow.internet2.edu/weekly/20041025/ Yes, but, netflow (in terms of ip src/dst, protocol type, port numbers) is a poor way of classifying traffic that works

Re: Network Monitoring System - Recommendations?

2004-11-05 Thread Chris A. Epler
MIDAS looks interesting...a little confusing at first to setup but not too bad once you figure out what the various MIDASa/b/c/etc things do (Still working on that part... ;) ) http://midas-nms.sourceforge.net/ -- /\ \ / ASCII RIBBON CAMPAIGN XAGAINST HTML MAIL

Sweet 16 for Morris Worm....

2004-11-05 Thread Fergie (Paul Ferguson)
Just ran across a reminder that at around midnight on Nov. 2, 1988, the Morris worm was released. Happy belated 16th birthday. :-) - ferg -- Fergie, a.k.a. Paul Ferguson Engineering Architecture for the Internet [EMAIL PROTECTED] or [EMAIL PROTECTED]

what's a good way to annoy the hell out of somebody at chello.be?

2004-11-05 Thread Paul Vixie
a customer of chello.be has been repeating a dns dynamic update against my zone every four minutes since october 20. chello's abuse reporting channel is no doubt full of spam reports. their noc no doubt doesn't care about end-user problems. i nmap'd the offending box: Starting nmap 3.50 (

Re: what's a good way to annoy the hell out of somebody at chello.be?

2004-11-05 Thread Randy Bush
we all have this kind of problem. if you're on freebsd, man ipfw. i am sure there are similar on other oss. randy

Weekly Routing Table Report

2004-11-05 Thread Routing Table Analysis
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to [EMAIL PROTECTED] If you have any comments please contact Philip Smith [EMAIL PROTECTED]. Routing Table Report 04:00 +10GMT Sat 06 Nov, 2004

rfc1978 help

2004-11-05 Thread adrian kok
Hi all Sth I want to clarify: 1/ 240.0.0.0/5 - Class E Reserved 248.0.0.0/5 - Unallocated Sometimes I got it should /4 or /5 ? 240.0.0.0/4 - Class E Reserved 248.0.0.0/4 - Unallocated 2/ Can I block it in the firewall for 255.255.255.255/32 - Broadcast? deny ip

Re: rfc1978 help

2004-11-05 Thread Jeroen Massar
On Sat, 2004-11-06 at 02:07 +0800, adrian kok wrote: Hi all Sth I want to clarify: 1/ 240.0.0.0/5 - Class E Reserved 248.0.0.0/5 - Unallocated Sometimes I got it should /4 or /5 ? 240.0.0.0/4 - Class E Reserved 248.0.0.0/4 - Unallocated Look at the

Re: what's a good way to annoy the hell out of somebody at chello.be?

2004-11-05 Thread Bill Stewart
On Fri, 05 Nov 2004 17:54:03 +, Paul Vixie [EMAIL PROTECTED] wrote: a customer of chello.be has been repeating a dns dynamic update against my zone every four minutes since october 20. chello's abuse reporting channel is no doubt full of spam reports. their noc no doubt doesn't care

Re: what's a good way to annoy the hell out of somebody at chello.be?

2004-11-05 Thread Andreas Ott
Hi, On Fri, Nov 05, 2004 at 05:54:03PM +, Paul Vixie wrote: compose a 'written-by-a-lawyer' looking letter in plain text and print it out. I bet 515/udp is open as well and most printers can handle plain ASCII. 515/tcp open printer -andreas

AOL tarpitting?

2004-11-05 Thread Mark Jeftovic
had AOL tarpitting gotten quite a bit more aggressive in the last few days? It happened to us and we signed up for their feedback loop and rerouted our mail to them via another route. The new route was tarpitted within 24 hours and absolutely nothing was communicated to us about it via the

Re: rfc1978 help

2004-11-05 Thread Jess Kitchen
On Fri, 5 Nov 2004, Jeroen Massar wrote: [snip] 3/ I got the following. ls it normail? why there is connection to the broadcast address tcp0 1 202.64.230.8:33397 192.168.255.255:25 SYN_SENT 255.255 or anything ending in 255 doesn't need to be a broadcast

Re: Question for WHOIS query

2004-11-05 Thread Marshall Eubanks
On this subject, is there a mirror for TW Nic whois information ? I get nothing from http://whois.twnic.net/ or a direct whois query to twnic.net. Is this just down, or is it limited to Taiwan queries ? Regards Marshall Eubanks On Thu, 4 Nov 2004 02:04:45 -0500 Patrick W Gilmore [EMAIL

Re: AOL tarpitting?

2004-11-05 Thread Kee Hinckley
At 2:26 PM -0500 11/5/04, Mark Jeftovic wrote: had AOL tarpitting gotten quite a bit more aggressive in the last few days? One of the sites I run (hosted on cihost) recently started getting bad SMTP responses from AOL. We worked around by routing AOL and Compuserver mail through a gateway that

Re: rfc1978 help

2004-11-05 Thread Jeroen Massar
On Fri, 2004-11-05 at 14:29 -0600, Todd T. Fries wrote: I've been seeing MX's resolving to 127.0.0.1 for a few months now, and planning to write some sort of envelope from checking apparatus to refuse email who's envelope from MX resolves to 127.0.0.1 (and now that you mention it), rfc1918

Interland.net noc contact

2004-11-05 Thread Matt Hess
Anyone have a contact for Interland.net's noc? I don't see them on the noc list.. (http://puck.nether.net/netops/) and the interland customer care (HA!) reps have no concept of what the word proactive means. Drop me a line off list please.. thanks. begin:vcard fn:Matt Hess n:Hess;Matt

Re: what's a good way to annoy the hell out of somebody at chello.be?

2004-11-05 Thread Deepak Jain
Paul Vixie wrote: a customer of chello.be has been repeating a dns dynamic update against my zone every four minutes since october 20. chello's abuse reporting channel is no doubt full of spam reports. their noc no doubt doesn't care about end-user problems. i nmap'd the offending box: Hmmm..

Re: Question for WHOIS query

2004-11-05 Thread Suresh Ramasubramanian
Marshall Eubanks [05/11/04 15:43 -0500]: On this subject, is there a mirror for TW Nic whois information ? I get nothing from http://whois.twnic.net/ or a direct whois query to twnic.net. whois.twnic.net.tw works. srs

Re: what's a good way to annoy the hell out of somebody at chello.be?

2004-11-05 Thread Suresh Ramasubramanian
On 2004-11-05, Andreas Ott [EMAIL PROTECTED] wrote: compose a 'written-by-a-lawyer' looking letter in plain text and print it out. I bet 515/udp is open as well and most printers can handle plain ASCII. 515/tcp open printer Ron Guilmette used to notify operators of insecure machines