nanog mailing list archives

Re: Level3 routing issues?


From: Alex Rubenstein <alex () nac net>
Date: Sat, 25 Jan 2003 02:20:36 -0500 (Eastern Standard Time)




This is definately a world-wide problem.

Many networks are reporting all sorts of things. Nothing clear, except
that it's all aimed at 1434.

01:28:33.331686 64.21.34.210.28295 > 238.192.142.61.1434:  udp 376 [ttl 1]
01:28:33.331720 207.99.21.121.1917 > 226.39.19.228.1434:  udp 376 [ttl 1]
01:28:33.331772 64.247.0.168.1379 > 239.194.46.210.1434:  udp 376 [ttl 1]
01:28:33.331841 207.99.77.34.3894 > 227.154.8.29.1434:  udp 376 [ttl 1]
01:28:33.331992 207.99.21.120.2558 > 231.16.91.78.1434:  udp 376 [ttl 1]


FYI:

ms-sql-m        1434/tcp   #Microsoft-SQL-Monitor
ms-sql-m        1434/udp   #Microsoft-SQL-Monitor







On Sat, 25 Jan 2003, hc wrote:


I am on Verizon-GNI via Qwest and Genuity and seeing the same problem as
well.

-hc

Joel Perez wrote:

I am also seeing increased traffic on my network. It has gotten so bad for one of my edge routers that i cant telnet 
into it.
But i am on Qwest and GBLX.

    -----Original Message-----
    From: Alex Rubenstein [mailto:alex () nac net]
    Sent: Sat 1/25/2003 1:04 AM
    To: hc
    Cc: nanog () merit edu
    Subject: Re: Level3 routing issues?





    I dunno about that. But, I am seeing, in the last couple hours, all kinds
    of new traffic.

    like, customers who never get attacked or anything, all of a sudden:

            http://mrtg.nac.net/switch9.oct.nac.net/3865/switch9.oct.nac.net-3865.html


    We are seeing this on ports all across out network -- nearly 1/2 our ports
    are in delta alarm right now.

    Anyone else?

    I will dig more to look at the traffic.




    On Sat, 25 Jan 2003, hc wrote:

    >
    > Anyone seeing routing problems with Level3 at this hour? I just
    > witnessed tons of prefixes behind level3's network withdraw. Any
    > information on what is happening (if you know) would be great. Thanks!
    >
    > -hc
    >
    >
    >

    -- Alex Rubenstein, AR97, K2AHR, alex () nac net, latency, Al Reuben --
    --    Net Access Corporation, 800-NET-ME-36, http://www.nac.net   --








-- Alex Rubenstein, AR97, K2AHR, alex () nac net, latency, Al Reuben --
--    Net Access Corporation, 800-NET-ME-36, http://www.nac.net   --



Current thread: