[150556] in North American Network Operators' Group
Re: Reliable Cloud host ?
daemon@ATHENA.MIT.EDU (Valdis.Kletnieks@vt.edu)
Mon Feb 27 14:55:31 2012
To: William Herrin <bill@herrin.us>
In-Reply-To: Your message of "Mon, 27 Feb 2012 14:02:04 EST."
<CAP-guGVq=OPwZP7Fdyzv0_Ety4_5zDvBqXwSY1sUMpJGXDiGug@mail.gmail.com>
From: Valdis.Kletnieks@vt.edu
Date: Mon, 27 Feb 2012 14:53:53 -0500
Cc: Nanog <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--==_Exmh_1330372433_3800P
Content-Type: text/plain; charset=us-ascii
On Mon, 27 Feb 2012 14:02:04 EST, William Herrin said:
> The net result is that when you switch the IP address of your server,
> a percentage of your users (declining over time) will be unable to
> access it for hours, days, weeks or even years regardless of the DNS
> TTL setting.
Amen brother.
So just for grins, after seeing William's I set up a listener on an address
that had an NTP server on it many moons ago. As in the machine was shut down
around 2002/06/30 22:49 and we didn't re-assign the IP address ever since
*because* it kept getting hit with NTP packets.. Yes, a decade ago.
In the first 15 minutes, 234 different IP's have tried to NTP to that address.
And the winner for "most confused host", which in addition to trying to NTP also did this:
14:23:24.518136 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:23:57.395525 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:24:28.536351 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:24:53.382719 IP 74.254.73.90.500 > 128.173.14.71.123: isakmp:
14:25:01.391268 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:25:32.522313 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:26:05.399885 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:26:36.529713 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:27:09.405922 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:27:40.528381 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:28:13.393794 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:28:20.971269 IP 74.254.73.90.69 > 128.173.14.71.123: 48 tftp-#6914
14:28:37.907704 IP 74.254.73.90.161 > 128.173.14.71.123: [id?P/x/27]
14:28:44.525585 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:29:17.399784 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:29:48.531804 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:30:21.398360 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:30:52.530148 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:31:25.403931 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:31:56.536594 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:32:29.404457 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
14:33:00.534956 IP 74.254.73.90.68 > 128.173.14.71.123: BOOTP/DHCP, unknown (0xdb), length 48
14:33:33.402336 IP 74.254.73.90.53 > 128.173.14.71.123: 56064 [b2&3=0x6ee] [3494a] [0q] [307au] (48)
Somewhere in BellSouth territory, a machine desperately needs to be whacked upside the head.
--==_Exmh_1330372433_3800P
Content-Type: application/pgp-signature
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Exmh version 2.5 07/13/2001
iQIVAwUBT0vfUAdmEQWDXROgAQJXTQ/9HjM3EhTu26z3EOvkLDdaCK39FnYFOdYG
Mm1sRYKMIeGpSFFCmmuuMZoUhyv/AlN3uDkXOIYIRmxWnGDnY6Hx6vEJkA+L1Zj2
An0Ow1MbYu2K4/72BU0zcBwMfcO2MICTUVFuz42BHsFM7652EH+Fj3XG9fj/4Yx2
KJhZ6lrujoVNUNXD6OeQKJflWwH78KO5aH9efPZ07vThsuLv9ZsOhcuJDx9Ex84V
1kjSieaWw7Oomln5FgJEOS+LFvpuHcGFdYKSJezVrOFRvO1N2cabIE81S7bME2MF
GLLBsYR3jNM1v35cwm4wZQZD1HsF+K0KwK0sMXKdc3QasJChU3erwmTCc2hay0hK
CN6S3KTXm9vfjs2gJXGZozvGCsQgIRfZj4qWOT9o27iz8dBxQm3f5GtmixkrPtZu
EH3F23mPdGU2jPMjtDdYoM7NLO5fIJpPIMGXv/JMxRa1g41gMglSRmcKlb0bHrE9
K96JhMkkmGkuZipwZW6NT9gyWsC9FHkkfXC/tTQNC77UZr21yMqHxYnWxe3C6NeA
FiZYpzjw975pJ9WJtpCT4W+VLhPdP9p7tWFI/ctoW3/PTVqTjJ8yRjf8JS0qpKlu
nfI8BU8IxtyWRQnVPDl/7Vjm+V/6wCrftcYUzbTp9WYkj45Ys5fTbphPVx0H+HfR
WF6n24IDHHk=
=ywr1
-----END PGP SIGNATURE-----
--==_Exmh_1330372433_3800P--
