[90674] in North American Network Operators' Group
Re: 2006.06.07 NANOG-NOTES Lightning talk notes
daemon@ATHENA.MIT.EDU (Rick Wesson)
Fri Jun 9 19:09:58 2006
Date: Fri, 09 Jun 2006 16:11:26 -0700
From: Rick Wesson <wessorh@ar.com>
To: Matthew Petach <mpetach@netflight.com>
Cc: "nanog@nanog.org" <nanog@nanog.org>
In-Reply-To: <63ac96a50606091549i4e9befferaa4afc65ff13e73a@mail.gmail.com>
Errors-To: owner-nanog@merit.edu
thanks for taking (and posting) notes matt!
[snip]
> NEXT:
> Rick Wesson, Support Intelligence [hehe]
> Understanding abuse, aggregate it, push it back to
> operators, let them know what they're doing to other
> people.
> [no slides, he does a live presentation of his tool]
>
> How do I believe you?
> realtime data visualization, Feb 8th, 2006
> visualization.
> 130 different data sources, 90% passive;
> 10,000 domain aggregated spam trap, very
> evil SMTP that filters and bans IP for some time.
> 1.2million events per day aggregated, about 700,000
> unique IPs for the global internet.
> BGP peers, aggregate based on announcements made.
> Put into tool so network operators can visualize
> their prefixes, drill in, and see abuse each
> prefix generates.
> hover over point, it shows the operator, IP address,
> and what the problem was (spam, insecure web server, etc)
>
> This shows problem areas that need to be addressed!
> disseminate this information, help ISPs clean up their
> networks.
>
> Can also pass along information of abuse that has
> happened to you.
> If you have an AS, he can tell you what your AS has
> been used for, abused for, owned, etc.
>
> email him for more info...except he didn't list
> his email info. ^_^;
my bad. rick@ar.com or rick@support-intelligence.com works.
always happy to help.
-rick
