Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Robert Kisteleki
However, from several sites, either on IPv4 or IPv6, I cannot ping(6) them. Is it by design, or it's an issue? I believe g-root never answered ping requests. Others have been for a looong time (ever?) with some exceptions - those enabled it a few years ago. Robert

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Lukas Tribus
On Tue, 16 May 2023 at 05:38, Willy Manga wrote: > > Hi, > > DNS speaking, I can query G root servers; at least, that's the most > important. > > However, from several sites, either on IPv4 or IPv6, I cannot ping(6) > them. Is it by design, or it's an issue? It's certainly not an outage: https:/

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Jeroen Massar via NANOG
> On 16 May 2023, at 06:46, Matthew Petach wrote: > [..] > I admit, I'm perhaps a little behind on the latest netflow whiz-bangs, > but I've never seen a netflow record type that included HTTP cookies > or PCAP data before. Take your pick from the "latest" ~2009 IPFIX Information Elements:

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread borg
So, DoD does NOT have capacity to answer those little ICMP echo request packets? Heh.. Anyway, this is IMO terrible practice. Many many times I have to deal w/ "products" that do exacly the same because its so much "secure" to not respond to ping. Any basic network security researcher know that the

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Lou Devictoria
ISP capture traffic samplings in both directions Upstream at aggregation points , Downstream at ingress and your DNS queries but the last part everyone knows . Some of the most expensive gear is used to sample and aggregate that data On Mon, May 15, 2023 at 7:01 PM Michael Thomas wrote: > > And

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Rishi Panthee
I’ve got Akvorado and netflow to identify where traffic comes in/goes to so we can improve our peering and make less traffic go via transit. I did see an article about Team Cymru selling netflow data from ISPs to governments though. https://www.vice.com/en/article/dy3z9a/fbi-bought-netflow-data-

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Tom Beecher
Two simple rules for most large ISPs. 1. If they can see it, as long as they are not legally prohibited, they'll collect it. 2. If they can legally profit from that information, in any way, they will. Now, ther privacy policies will always include lots of nice sounding clauses, such as 'We don't

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Tom Beecher
> > I did see an article about Team Cymru selling netflow data from ISPs to > governments though. > Team Cymru sold the same thing to the FBI Cyber Crimes division that any of us could purchase if we wanted to pay for it. On Tue, May 16, 2023 at 8:52 AM Rishi Panthee wrote: > I’ve got Akvorado

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Josh Luthman
Our ISP does not collect (nor obviously sell) customer information/traffic. People volunteer all of their information on Facebook/Twitter/etc already, I'm not sure I see a concern. On Tue, May 16, 2023 at 9:07 AM Tom Beecher wrote: > I did see an article about Team Cymru selling netflow data fr

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Livingood, Jason via NANOG
+1 to what Josh writes below. I would also differentiate between mobile networks (service provisioned to individual devices & often carrier s/w on the device) and wireline networks (home devices behind a router/gateway/NAT). I just don't think sale of data is a business for wireline ISPs. If it

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Saku Ytti
I can't tell what large is. But I've worked for enterprise ISP and consumer ISPs, and none of the shops I worked for had capability to monetise information they had. And the information they had was increasingly low resolution. Infraprovider are notoriously bad even monetising their infra. I'm sur

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Steve Sullivan
Hi Willy, I will ping the OARC team on your email.  Something might be up with the list. Steve On 5/15/2023 8:38 PM, Willy Manga wrote: Hi, DNS speaking, I can query G root servers; at least, that's the most important. However, from several sites, either on IPv4 or IPv6, I cannot ping(6)

Looking for Contact : MTN South Africa (AS16637)

2023-05-16 Thread Tom Beecher
Looking for a technical contact at MTN South Africa, not having a lot of success through standard pathways. If you are from MTN, or know someone, please let me know offlist. Thanks.

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread michael brooks - ESC
First NANOG post, the topic compels me to chime in. For me, the question also implies that user-side we are attempting to scrub any of the data we volunteer on social media (or other) platforms. I am careful about what I volunteer up to the Internetz, and have been since my first AOL floppy experi

Re: Looking for Contact : MTN South Africa (AS16637)

2023-05-16 Thread Darwin Da Costa
Hi Tom, > On 16. May 2023, at 18:24, Tom Beecher wrote: > > Looking for a technical contact at MTN South Africa, not having a lot of > success through standard pathways. > > If you are from MTN, or know someone, please let me know offlist. Sharing it off list. > > Thanks. Darwin-.

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Christopher Morrow
On Tue, May 16, 2023 at 4:37 AM wrote: > > So, DoD does NOT have capacity to answer those little ICMP echo > request packets? Heh.. Anyway, this is IMO terrible practice. why? > Cutting PING means you are hurting your basic troubleshooting. > Is that thing even plugged in? Maybe Firewall misconf

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread William Herrin
On Tue, May 16, 2023 at 11:00 AM Christopher Morrow wrote: > On Tue, May 16, 2023 at 4:37 AM wrote: > > Cutting PING means you are hurting your basic troubleshooting. > > Is that thing even plugged in? Maybe Firewall misconfiguration? > > it means you need to use the tool (dig, host, nslookup) th

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Michael Thomas
On 5/15/23 9:46 PM, Matthew Petach wrote: On Mon, May 15, 2023 at 6:42 PM Dave Phelps wrote: I think it's safe to assume they are selling such data. https://www.techdirt.com/2021/08/25/isps-give-netflow-data-to-third-parties-who-sell-it-without-user-awareness-consent/ https:/

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Michael Thomas
On 5/16/23 7:35 AM, Livingood, Jason via NANOG wrote: +1 to what Josh writes below. I would also differentiate between mobile networks (service provisioned to individual devices & often carrier s/w on the device) and wireline networks (home devices behind a router/gateway/NAT). I just don'

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Michael Thomas
On 5/16/23 7:55 AM, Saku Ytti wrote: Of course there are other monetisation opportunities via other mechanism than data-in-the-wire, like DNS And with DoH, that doesn't sound like a very long term opportunity. Mike

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Matthew Petach
On Tue, May 16, 2023 at 1:10 AM Jeroen Massar wrote: > > > > On 16 May 2023, at 06:46, Matthew Petach wrote: > > [..] > > I admit, I'm perhaps a little behind on the latest netflow whiz-bangs, > > but I've never seen a netflow record type that included HTTP cookies > > or PCAP data before. > > T

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Christopher Morrow
On Tue, May 16, 2023 at 2:35 PM William Herrin wrote: > > On Tue, May 16, 2023 at 11:00 AM Christopher Morrow > wrote: > > On Tue, May 16, 2023 at 4:37 AM wrote: > > > Cutting PING means you are hurting your basic troubleshooting. > > > Is that thing even plugged in? Maybe Firewall misconfigurat

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread William Herrin
On Tue, May 16, 2023 at 1:38 PM Christopher Morrow wrote: > On Tue, May 16, 2023 at 2:35 PM William Herrin wrote: > > Ping is used by some versions of traceroute which can help the > > I think you mean 'icmp' here. yes. I contend that traceroute (udp or > icmp or tcp) > TOWARDS a destination can

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Steve Sullivan
Issue addressed on the dns-operations mailing list. Thanks for letting me know Willy. I wanted to bring your attention to the DNS Affinity Group here in the NANOG Community and to the OARC Community Chat server on our self-hosted

Re: G root servers unreachable via ICMP(v6)

2023-05-16 Thread Christopher Morrow
On Tue, May 16, 2023 at 4:59 PM William Herrin wrote: > > On Tue, May 16, 2023 at 1:38 PM Christopher Morrow > wrote: > > On Tue, May 16, 2023 at 2:35 PM William Herrin wrote: > > > Ping is used by some versions of traceroute which can help the > > > > I think you mean 'icmp' here. yes. I conten

Re: Do ISP's collect and analyze traffic of users?

2023-05-16 Thread Mark Tinka
On 5/16/23 16:55, Saku Ytti wrote: I can't tell what large is. But I've worked for enterprise ISP and consumer ISPs, and none of the shops I worked for had capability to monetise information they had. And the information they had was increasingly low resolution. Infraprovider are notoriously