From henk at ripe.net Mon Feb 3 17:43:03 2003 From: henk at ripe.net (Henk Uijterwaal (RIPE-NCC)) Date: Mon, 3 Feb 2003 17:43:03 +0100 (CET) Subject: ANNOUNCEMENT: IPv6 support for RIPE NCC TTM Service Message-ID: Dear All, (Apologies for any duplicate mails). The RIPE NCC is pleased to announce full IPv6 support for its test-boxes and Test Traffic Measurement Service (TTM). This new version can do all the measurements that the previous version could do on IPv4 networks, but now on IPv6. Measurements can be done on IPv4 and IPv6 networks in parallel. Most of the porting work has been done by Florian Frotzler, an CS student doing an Internship at the RIPE NCC. It is described in more detail in an internal report available at: http://www.ripe.net/ttm/Documents/Various/florian_xmas.pdf as well as in the slides of his presentation at RIPE44 last week: http://www.ripe.net/ripe/meetings/archive/ripe-44/presentations/ripe44-tt-ipv6/ IPv6 support will be included on all test-boxes ordered after 1/2/2003. To order a test-box, please go to: http://www.ripe.net/ttm/Host_testbox/host_testbox.html If you are already hosting a test-box and want to upgrade to the IPv6 enabled version, then please find instructions for upgrading at the bottom of this mail. If anything is unclear, please contact us at ttm at ripe.net. More about the TTM service can be found at: http://www.ripe.net/ttm Kind regards, Henk Uijterwaal Instructions for upgrading test-boxes ===================================== If you already own a test-box and want to upgrade to the IPv6-capable version of the software, then this is the procedure: 1. Determine the version of your test-box. This can be series A, B, C or D. Series D boxes are 1u high and manufactured by Dell. Series C boxes are all boxes delivered after 1/1/2001. A or B are boxes delivered before 1/1/2001. 2. Your box is series A or B: 1. In this case, a hardware upgrade to a series D box will be necessary. The (usually 3-5 years) old hardware does not support v6. 2. Series D boxes cost 2,500 euro, however, if you return your old box, you will get a 500 euro discount. 3. Send an email with a v6 address to tt-ops at ripe.net 4. A new box will be configured and shipped. 5. Schedule a time to unplug the old box and plug in the new box with our operators. 3. Your box is series C or D: 1. Send an IPv6 address to tt-ops at ripe.net 2. Our operators will schedule a time for the upgrade 3. You will have to download a boot floppy from our ftp site. 4. At the time of the upgrade, boot with the floppy. Note that we will only do this upgrade if all outstanding invoices have been paid and the service contract for the existing box has been signed. ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal at ripe.net RIPE Network Coordination Centre WWW: http://www.ripe.net/home/henk P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ That problem that we weren't having yesterday, is it better? (Big ISP NOC) From henk at ripe.net Wed Feb 12 14:11:35 2003 From: henk at ripe.net (Henk Uijterwaal (RIPE-NCC)) Date: Wed, 12 Feb 2003 14:11:35 +0100 (CET) Subject: Analysis of the Sapphire/SQL Slammer Worm Message-ID: Dear All, (Apologies for duplicate messages). We have just released a report Sapphire/Slammer Worm -- Impact on Internet Performance on the TTM website at: http://www.ripe.net/ttm/worm/ This is an expanded write-up of the slides shown by Rene Wilhelm, Daniel Karrenberg and James Aldridge during RIPE44. Kind regards, Henk ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal at ripe.net RIPE Network Coordination Centre WWW: http://www.ripe.net/home/henk P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ That problem that we weren't having yesterday, is it better? (Big ISP NOC) From henk at ripe.net Thu Feb 27 21:51:39 2003 From: henk at ripe.net (Henk Uijterwaal (RIPE-NCC)) Date: Thu, 27 Feb 2003 21:51:39 +0100 (CET) Subject: RIPE NCC network affected by the DDoS attack (fwd) Message-ID: Dear Colleagues, You problably noticed this already through the delay alarms, but in case you didn't: ---------- Forwarded message ---------- Date: Thu, 27 Feb 2003 18:18:25 +0100 From: Andrei Robachevsky To: local-ir at ripe.net, db-wg at ripe.net, dns-wg at ripe.net Subject: [db-wg] RIPE NCC network affected by the DDoS attack Dear Colleagues, Starting from 14:00 UTC today, 27 February, RIPE NCC network suffered a large DDoS attack. It was a distributed ICMP echo attack. The attack caused various congestion related problems for the RIPE NCC's network, to the extent that our BGP peering sessions were affected, and non-ICMP traffic was being randomly dropped. The attack was successfully mitigated with cooperation of our peer networks at AMS-IX. Network condition returned back to normal at 16:30 UTC. As a result some of our services, including www.ripe.net (web), whois.ripe.net (RIPE Database), ns.ripe.net (DNS) and ftp.ripe.net (FTP) were not accessible during this timeframe. Now all services are back to normal. Regards, Andrei Robachevsky ----------- ps. We are currently looking at the data from both TTM and RIS and expect to publish a more detailed report on our website late tomorrow or early Monday morning. In the meantime, take a look at: http://tt01.ripe.net:10259/cgi-bin/multiple.cgi?all=all&delay=delay&loss=loss&RR D_START=now-11hours&RRD_END=start%2B12h&RRD_W=-h100&RRD_H=-w350&RRD_L=0&RRD_R=1& RRD_RIGID=-l0&LFORMAT=BOTH&Draw=Draw which shows the delay between tt01.ripe.net, a test-box near our border router and some 60 other hosts on the Internet. You can clearly see delays and losses going up around 2pm. Kind regards, Henk Uijterwaal ------------------------------------------------------------------------------ Henk Uijterwaal Email: henk.uijterwaal at ripe.net RIPE Network Coordination Centre WWW: http://www.ripe.net/home/henk P.O.Box 10096 Singel 258 Phone: +31.20.5354414 1001 EB Amsterdam 1016 AB Amsterdam Fax: +31.20.5354445 The Netherlands The Netherlands Mobile: +31.6.55861746 ------------------------------------------------------------------------------ That problem that we weren't having yesterday, is it better? (Big ISP NOC)