[55095] in North American Network Operators' Group
Re: Level3 routing issues?
daemon@ATHENA.MIT.EDU (Gary Coates)
Sat Jan 25 08:34:51 2003
Date: Sat, 25 Jan 2003 08:01:59 +0000
From: Gary Coates <gary@newnet.co.uk>
To: dies@pulltheplug.com
Cc: hc <haesu@towardex.com>, Joel Perez <jperez@numind.net>,
Alex Rubenstein <alex@nac.net>, nanog@merit.edu
Errors-To: owner-nanog-outgoing@merit.edu
Appears to relate to this cert advisory
http://www.cert.org/advisories/CA-1996-01.html
We have it totally blocked on our network but the routers are working
over time just rejecting packets.
The only way to stop it is to stop MySQL or kill the hosts network
connection.
dies@pulltheplug.com wrote:
>
> It is global.
>
> 01:42:04.040462 194.87.13.21.1812 > x.x.x.x.1434: rad-account-req
> 376 [id 1] Attr[ User User User User User User User User User User User
> User User User User User User User User User User User User User User User
> User User User User User User User [|radius]
>
> That is the traffic...
>
>
> On Sat, 25 Jan 2003, hc wrote:
>
>
>>I am on Verizon-GNI via Qwest and Genuity and seeing the same problem as
>>well.
>>
>>-hc
>>
>>Joel Perez wrote:
>>
>>
>>>I am also seeing increased traffic on my network. It has gotten so bad for one of my edge routers that i cant telnet into it.
>>>But i am on Qwest and GBLX.
>>>
>>> -----Original Message-----
>>> From: Alex Rubenstein [mailto:alex@nac.net]
>>> Sent: Sat 1/25/2003 1:04 AM
>>> To: hc
>>> Cc: nanog@merit.edu
>>> Subject: Re: Level3 routing issues?
>>>
>>>
>>>
>>>
>>>
>>> I dunno about that. But, I am seeing, in the last couple hours, all kinds
>>> of new traffic.
>>>
>>> like, customers who never get attacked or anything, all of a sudden:
>>>
>>> http://mrtg.nac.net/switch9.oct.nac.net/3865/switch9.oct.nac.net-3865.html
>>>
>>>
>>> We are seeing this on ports all across out network -- nearly 1/2 our ports
>>> are in delta alarm right now.
>>>
>>> Anyone else?
>>>
>>> I will dig more to look at the traffic.
>>>
>>>
>>>
>>>
>>> On Sat, 25 Jan 2003, hc wrote:
>>>
>>> >
>>> > Anyone seeing routing problems with Level3 at this hour? I just
>>> > witnessed tons of prefixes behind level3's network withdraw. Any
>>> > information on what is happening (if you know) would be great. Thanks!
>>> >
>>> > -hc
>>> >
>>> >
>>> >
>>>
>>> -- Alex Rubenstein, AR97, K2AHR, alex@nac.net, latency, Al Reuben --
>>> -- Net Access Corporation, 800-NET-ME-36, http://www.nac.net --
>>>
>>>
>>>
>>>
>>>
>>>
>>
>>
>>
>>
>
--
____________________________________________________
Message scanned for viruses and dangerous content by
<http://www.newnet.co.uk/av/> and believed to be clean
