[47659] in North American Network Operators' Group
Re: Qwest outage In NY
daemon@ATHENA.MIT.EDU (Eric Gauthier)
Wed May 8 16:11:11 2002
Date: Wed, 8 May 2002 16:10:39 -0400
From: Eric Gauthier <eric@roxanne.org>
To: nanog@merit.edu
Message-ID: <20020508161039.A18137@roxanne.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <NBBBJIEKALGDEJIOOKLDOEOGBCAB.pmcevilly@harvard.edu>; from pmcevilly@harvard.edu on Wed, May 08, 2002 at 12:32:00PM -0400
Errors-To: owner-nanog-outgoing@merit.edu
> Qwest has confirmed a DOS attach against two of their Juniper routers in the
> NY POP. I believe they had a UDP attack last week also (maybe on Saturday).
> This time the DOS was a TCP attack on the 100Mb management interface on the
> Juniper, leaving the box unable to pass packets, hence BGP stays up and a
> full routing table but you cannot get anywhere.
The story I just got from Qwest (from a NOCie who was reading from
their ticket, so take this with a grain of salt) made it sound like
that were flooded with bogus routes from some BGP peer. I tend to
believe what you wrote above though. I mean, getting a bunch of bogus
routes via a BGP peer doesn't seem like the kind of thing where you'd
call the vendor onsite (several Qwest NOC'ies stated that Juniper was onsite)
whereas a large-scale DOS might... Anyways, that's the scoop that I've got
/me returns to lurking
Eric :)
