Re: How to tell if something is anycasted?

2006-05-16 Thread Edward B. DREGER
DH> Date: Tue, 16 May 2006 18:05:10 -0400 DH> From: David Hubbard DH> So I'm looking at a company who offers anycasted DNS; DH> how do I tell if it's really anycasted? Just hop on DH> different route servers to see if I can find different DH> AS paths and then do traceroutes to see if they sugge

Re: Troubles with HE's Tunnelbroker

2006-05-16 Thread Greg Taylor
Hurricane Electric's Tunnelbroker, to my knowledge, is operated by one of their Administrators.. on his personal time. Last I knew, they didn't really have a support staff so to speak... you might want to talk to mike in the NOC at Hurricane Electric. Also, tunnels do not effect network o

Re: Proxad? (Was: Drone Armies)

2006-05-16 Thread Dave Rand
[In the message entitled "Re: Proxad? (Was: Drone Armies)" on May 16, 18:34, Rich Kulawiec writes:] > > On Tue, May 16, 2006 at 03:57:20PM -0600, Michael Loftis wrote: > > Now this is interesting to me, because proxad has been at least as big a > > pain in my side as far as drones and SPAM sour

Re: How to tell if something is anycasted?

2006-05-16 Thread Steve Gibbard
On Tue, 16 May 2006, David Hubbard wrote: So I'm looking at a company who offers anycasted DNS; how do I tell if it's really anycasted? Just hop on different route servers to see if I can find different AS paths and then do traceroutes to see if they suggest the packets are not ending in the s

Troubles with HE's Tunnelbroker

2006-05-16 Thread Dan Mahoney, System Admin
I know at least some people here (srs?) use HE.net's tunnelbroker service. Has anyone else been experiencing issues? I have three different tunnels that I've noticed are down (to various data centers), and calling their support department (and emailing) thusfar have proved to be less than he

Re: Proxad? (Was: Drone Armies)

2006-05-16 Thread Rich Kulawiec
On Tue, May 16, 2006 at 03:57:20PM -0600, Michael Loftis wrote: > Now this is interesting to me, because proxad has been at least as big a > pain in my side as far as drones and SPAM sources. [snip] > > Anyone else seeing the same amount of problems with these guys? Yes. My current list shows

How to tell if something is anycasted?

2006-05-16 Thread David Hubbard
So I'm looking at a company who offers anycasted DNS; how do I tell if it's really anycasted? Just hop on different route servers to see if I can find different AS paths and then do traceroutes to see if they suggest the packets are not ending in the same location? >From my routers' perspective I

Proxad? (Was: Drone Armies)

2006-05-16 Thread Michael Loftis
--On May 16, 2006 7:47:43 AM -0500 [EMAIL PROTECTED] wrote: <...> Top 20 ASNes by number of active suspect C&Cs. These counts are determined by the number of suspect domains or IPs located within the ASN completed a connection request.

Re: Geo location to IP mapping

2006-05-16 Thread Charles Cala
--- Marshall Eubanks <[EMAIL PROTECTED]> wrote: (snip) > You can't do geolocation using network timing to much better than > about 10 milliseconds because > you don't control either paths or the routers etc. in those paths. > (This requires absolute timing; > differential measurements can

Re: Geo location to IP mapping

2006-05-16 Thread Marshall Eubanks
On May 16, 2006, at 2:00 PM, Charles Cala wrote: --- Marshall Eubanks <[EMAIL PROTECTED]> wrote: I seriously doubt this would work to better than the regional area. My zip code (20124) region is about 5 km across, which would be 15 microseconds in vacuum, and maybe at most 50 micro seco

Re: Geo location to IP mapping

2006-05-16 Thread Charles Cala
--- Marshall Eubanks <[EMAIL PROTECTED]> wrote: > > I seriously doubt this would work to better than the regional area. > > My zip code (20124) region is about 5 km across, which would be 15 > microseconds in vacuum, and > maybe at most 50 micro seconds in glass. So, you would need > accu

Re: Geo location to IP mapping

2006-05-16 Thread Edward B. DREGER
PC> Date: Tue, 16 May 2006 11:17:10 + (UTC) PC> From: Peter Corlett PC> Beyond that, you're paying lots of money for information that has a PC> finer granularity but is arguably no more accurate. It's precision versus accuracy -- one of the most basic concepts in the sciences and engineering

Re: Geo location to IP mapping

2006-05-16 Thread Valdis . Kletnieks
On Mon, 15 May 2006 22:55:40 PDT, Bill Woodcock said: > > On Mon, 15 May 2006, Roland Perry wrote: > > > http://www.hostip.info/use.html, which looks good, at least from a > > > API/ ease of use prespective. > > > > I just tried that, says I'm 100 miles south of where I real

RE: About Cisco NM-2FE2W-v2

2006-05-16 Thread Carl Kloppenborg
Correct, the NM-2FE2W-v2 is not supported by 2800 series routers. See http://www.cisco.com/en/US/products/hw/routers/ps259/products_data_sheet 09186a00801aa71c.html under Orderability, Availability, Compatability, Minimum Software, and Memory Requirements. -Original Message- From: [EMAIL

Re: About Cisco NM-2FE2W-v2

2006-05-16 Thread Andrew D Kirch
Md. kamal Hossain wrote: Hi all I purchase a Cisco-2851 and NM-2FE2W-v2 module because i need 4 Fastethernet interface but when i plug the module IOS don't detect the module.Is there any specific IOS for the NM-2FE2W-v2 module?.now IOS version is 12.3.If any one have any idea pls reply me

Re: Geo location to IP mapping

2006-05-16 Thread Daniel Senie
At 10:39 AM 5/16/2006, Tao Wan wrote: Here is a tech report with a survey on geolocation and evasion techniques: http://www.scs.carleton.ca/~jamuir/papers/TR-06-05.pdf This document seems to miss one other fairly common way in which geolocation fails: VPN. Whether a single user VPN session

Re: Geo location to IP mapping

2006-05-16 Thread Tao Wan
Here is a tech report with a survey on geolocation and evasion techniques: http://www.scs.carleton.ca/~jamuir/papers/TR-06-05.pdf Thanks, Tao Wan http://www.scs.carleton.ca/~twan

Re: Geo location to IP mapping

2006-05-16 Thread sgorman1
Well I must admit that zip code was best case under ideal conditions ;-) There are always plenty of exceptions that put sand in the gears. Putting on my conservative hat the approach is more granular than guessing the right country as was being discussed before. My intention was only to inf

Drone Armies C&C Report - 16 May 2006

2006-05-16 Thread c2report
This is a periodic public report from the ISOTF's affiliated group 'DA' (Drone Armies (botnets) research and mitigation mailing list / TISF DA) with the ISOTF affiliated ASreport project (TISF / RatOut). For this report it should be noted that we base our analysis on the data we have accumulate

Re: Geo location to IP mapping

2006-05-16 Thread Peter Corlett
Ashe Canvar <[EMAIL PROTECTED]> wrote: > Can any of you please recommend some IP-to-geo mapping database / web > service ? It's mostly dead reckoning with a thick layer of marketing on top to make it look credible. The 90% solution is to take the freely-available GeoIP country database and use t

Re: Geo location to IP mapping

2006-05-16 Thread Roland Perry
In article <[EMAIL PROTECTED]> , [EMAIL PROTECTED] writes I just tried that, says I'm 100 miles south of where I really am. That's quite a long way out in a small country like England. I live in London and use BT Broadband. But geolocation shows me being in Ipswich up in East Anglia, a

Re: Geo location to IP mapping

2006-05-16 Thread Roland Perry
In article <[EMAIL PROTECTED]>, Bill Woodcock <[EMAIL PROTECTED]> writes > I just tried that, says I'm 100 miles south of where I really am. That's > quite a long way out in a small country like England. 1.3ms is longer in small countries like England? I'm virtually certain it's not be

Re: Geo location to IP mapping

2006-05-16 Thread Michael . Dillon
> I just tried that, says I'm 100 miles south of where I really am. That's > quite a long way out in a small country like England. I live in London and use BT Broadband. But geolocation shows me being in Ipswich up in East Anglia, a long way from London. I assume this is because the geolocation

Re: Geo location to IP mapping

2006-05-16 Thread Michael . Dillon
> I can solve the visualization part and the GIS issues. But comes down > to the accuracy of the geo-ip database in the end. According to the Brand X localisation database which was rated tops in the Brand Y Web Magazine survey in 2005, our top customers are located in these cities. Who said mar

Re: Geo location to IP mapping

2006-05-16 Thread Michael . Dillon
> As a major caveat, all geolocation services do have some degree of > inaccuracy, because the sources of data are very diverse. (Some ISPs > provide complete subnet maps to MaxMind and other providers, whereas > some data is scraped from WHOIS or provided by inference from > end-users.) And som

About Cisco NM-2FE2W-v2

2006-05-16 Thread Md. kamal Hossain
Hi all   I purchase a Cisco-2851 and  NM-2FE2W-v2 module because i need 4  Fastethernet interface but when i plug the module IOS don't detect the module.Is there any specific IOS for the NM-2FE2W-v2 module?.now IOS version is 12.3.If any one have any idea pls reply me.     thanks   Kamal--

About Cisco NM-2FE2W-v2

2006-05-16 Thread Md. kamal Hossain
Hi all   I purchase a Cisco-2851 and  NM-2FE2W-v2 module because i need 4  Fastethernet interface but when i plug the module IOS don't detect the module.Is there any specific IOS for the NM-2FE2W-v2 module?.now IOS version is 12.3.If any one have any idea pls reply me.     thanks   Kamal--