January 2003 - NZNOG - lists.nznog.org

CAIDA skitter in New Zealand
by Joerg Micheel 29 Jan '03

29 Jan '03

Cheers everyone, this is a request for help in the interest of research / community. For the past four years the WAND network research group at the University of Waikato has been hosting the only skitter system in the South Pacific rim. http://www.caida.org/tools/measurement/skitter/ The system measures and displays a number of important network properties on a global scale and tracks changes on short, medium and long time scales. Waikato has been the beacon on the map, making sure NZ shows up on the radar screen of the Internet (research) community. The problem in running a skitter system is with the amount of traffic generated, it can easily exceed 1 GByte per day, and with traffic charging in place, this adds up to something like NZ$50,000 per annum for us. We have been coping with a mix of external and internal funding, but those sources have finally dried out. The sad result is that we had to shut down the system last week. No backup solutions so far. This note to you to explore if any of you have an idea on alternative placements, preferably with no volume charging in place at all, or, with a nominal fee. There is little chance we can keep operating a machine here in NZ if the amount of funding required is going to be substancial. Thanks. Joerg -- Joerg B. Micheel Email: <joerg(a)nlanr.net> NLANR MNA at SDSC/UCSD Page: <joerg(a)vodafone.net.nz> The University of Waikato, CompScience Phone: +64 7 8384794 Private Bag 3105 Fax: +64 7 8585095 Hamilton, New Zealand Plan: PMA, TINE and the DAG's - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

5 4

Uniforum 03 Student discounts
by Matthew Lamb 28 Jan '03

28 Jan '03

Someone mentioned a discount for students attending, anyone know anything about them / where I can find some more info? Thanks Matt Lamb NZPages.Net - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Last Call for 2U cases
by Mark Frater 28 Jan '03

28 Jan '03

Hi List, I'm ordering 2U 19" wide by (only) 19" deep cases from Taiwan direct from manufacturer. These shallow cases are ideal for 600mm deep cabinets. Takes standard ATX moboWe have deployed both P4 and Athlon boards in these cases already and they have been fine. Here is a PDF cad drawing. http://www.quicksilver.net.nz/272-dia.pdf. Made by Comix International. $US200 for case, 400W PSU and 3xPCI Riser card. PLUS freight, gst and handling. Total cost worked out at NZ$612.88/case last time after shipping, customs charges and GST were added. This time might be slightly better with more cases and a better exchange rate. Realistically, about 3-4 weeks delivery ( ie 1 week to get deposits, 1 week for Comix to process order, 1 week for airfreight, 1 week for NZcustoms clearance. Pickup from Quicksilver Internet, Textile Centre, Kenwyn St, Parnell, or for a small fee we could arrange for a courier from here. I'd like to get a deposit of say NZ$400 per case off people before placing the order. Make out cheques to Mercury Telecommunications Ltd and send to: Attn: Mark Frater, Mercury Telecommunications Ltd P.O.Box 99856 New Market Contact me off list TODAY if you are interested. Mark Frater Quicksilver Internet ph 9160300 - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

NZNOG 2003 - Last Call for Votes
by Donald Neal 27 Jan '03

27 Jan '03

Days since I asked people who expect to attend to express a preference: 19 Preferring UniForum: 10 Preferring Waikato: 8 Will attend either, not worried: 3 Volunteering to help: 2 The University of Waikato expect an attendance from them which is about five higher if the Waikato option is chosen. I don't see a clear outcome here. but if we're going to anything a decision of some sort is needed. Could I please have any further expressions of interest by noon (NZDT) on Thursday, 30 January? People who liked the idea of doing both UniForum NZ in July 2003 and Waikato in February 2004: 2 - Donald Neal ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------

4 3

RE: NZNOG 2003 - Last Call for Votes
by Donald Neal 27 Jan '03

27 Jan '03

Chris, When I first floated the idea of what became last year's face to face gathering, I got 22 responses. Asking people without quoting dates, prices or a programme will tend, I think, to produce less interest than a specific proposal. - Donald Neal > -----Original Message----- > From: Chris Hellberg [mailto:odysseus(a)soa.co.nz] > Sent: Tuesday, 28 January 2003 12:50 > To: Donald Neal > Cc: nznog(a)list.waikato.ac.nz > Subject: Re: NZNOG 2003 - Last Call for Votes > > > I hope this isn't a guage of the interest for NZNOG 2003 - 23 people. > The calibre of last year's event was pretty impressive and no > doubt that this year will be just as good; I know I'm looking > forward to it. > > It would be a real shame to miss out on the best event of its > type in NZ for lack of support. I'm sure there are more out there who > have heard of IP or 2day.com-sponsored bar tabs. > > Hopefully I got enough superlatives in ;) > > Cheers, > > Chris > ------------------------------------------------------------------------------ "This communication, including any attachments, is confidential. If you are not the intended recipient, you should not read it - please contact me immediately, destroy it, and do not copy or use any part of this communication or disclose anything about it. Thank you." ------------------------------------------------------------------------------ - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

[OT] 19" Coms Rack Cabinet...
by Dan Clark 27 Jan '03

27 Jan '03

Hi all, Sorry for the OT but would anyone out there have any spare 19" Coms Rack Cabinets surplus/for sale? Especially in the Dunedin area. We are in need of a 1/2 height (24U ish). Please contact off list. Kind Regards, Dan Clark Network Manager Scarfies.Net Ltd

1 0

worldwide DDOS (sql server fun)
by Joe Abley 25 Jan '03

25 Jan '03

http://www.nextgenss.com/advisories/mssql-udp.txt Time to start applying some filters at your edges. This has taken some big networks off the air in the US (and at least one in NZ). term deny-dos { from { packet-length 404; protocol udp; destination-port 1434; } then { count codered-4; discard; } } term allow-rest { then accept; } - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

3 2

Re: worldwide DDOS (sql server fun)
by Ewen McNeill 25 Jan '03

25 Jan '03

In message <005701c2c4b1$165b1a80$0c01a8c0(a)saarinen.org>, "Juha Saarinen" writes: >Joe Abley <jabley(a)automagic.org> wrote: >> http://www.nextgenss.com/advisories/mssql-udp.txt > >http://news.bbc.co.uk/1/hi/technology/2693925.stm >Although I remain dubious about this claim: >"Unlike viruses, the worm exists only in memory, so it cannot be detected by >traditional anti-virus scanners." I'm not sure which bit you're dubious about: the "only in memory" or the "cannot be detected by traditional anti-virus scanners". The only in memory has been identified by various people starting to disassemble it. Various useful links (that have come through Bugtraq): >From "Jay D. Dyson" <jdyson(a)treachery.net>: http://www.kb.cert.org/vuls/id/370308 http://www.kb.cert.org/vuls/id/399260 http://www.kb.cert.org/vuls/id/484891 >From H D Moore <sflist(a)digitaloffense.net>: http://www.digitaloffense.net/worms/mssql_udp_worm/ (which contains some disassembly screen shots, and a unannotated disassembly) >From cstone <cstone(a)pobox.com> http://www.boredom.org/~cstone/worm-annotated.txt (which contains an annotated disassembly) >From what I can tell it's just a worm, spreading itself as fast as it can. Presumably the vulnerable hosts thus identified are then prime targets for something else to come in as a second wave. There's nothing in the annotated disassembly that indicates writing/sending data anywhere other than the Internet, hence "only in memory". Various people report that the infection can be cleared by stopping SQL server and/or rebooting -- with the obvious caveat that if it's not disconnected/firewalled from possible sources, it'll be reinfected quickly. As for "cannot be detected by traditional anti-virus scanners", that's probably a fall out of not writing anything to disk (which could be scanned), and memory protection in modern OS (which means the "memory scan" phase of DOS-based virus scanners is limited to the memory space the anti virus scanner is running in, without kernel support). Presumably a debug API or similar could be used to scan all memory, but I don't recall seeing that type of technique in (m)any anti-virus programs. Ewen - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1

RE: 2LD Review for *.nz ?
by Frank March 22 Jan '03

22 Jan '03

Although this matter is off-topic for this list, it might pay for me to clarify matters here. InternetNZ has a clearly laid out set of procedures for reviewing policies relating to .nz administration - please see the Domain Name Commissioners website at http://www.dnc.org.nz/ for more information. Included in these is the process for determining and reviewing policies and procedures. Briefly the review process requires the establishment of a review committee whose task it is, inter alia, to carry out a process of wide public consultation. In this case, the review committee composition has been discussed with the InternetNZ Council who have delegated final membership determination to the .nz Oversight Committee. It should be noted that the notice (and accompanying press release) went out on 13 December which is, even by the relaxed NZ standards at this time of the year, a reasonable time before Christmas/New Year. The review terms of reference have yet to be decided but will be wide (see http://www.dnc.org.nz/story/30064-35-1.html). The public consultation, apart from online discussions, will involve at least one forum session of some type, probably co-incident with a broader discussion of other InternetNZ matters of public interest, to be organised late in the first half of this year. Unfortunately, I cannot be more specific about dates and location as this is a matter for the InternetNZ Council and the new Executive Director to sort out. Best wishes, Frank March Chair, .nz Oversight Committee --- Frank March Senior Specialist Adviser, IT Policy Group Ministry of Economic Development, PO Box 1473, Wellington, New Zealand Phone (+64 4) 474 2908; Fax (+64 4) 474 2659; Mobile (+64) 21 042 9205 -----Original Message----- From: Paul Brislen [mailto:Paul_Brislen(a)idg.co.nz] Sent: Thursday, 23 January 2003 13:26 To: Mark Foster Cc: nznog(a)list.waikato.ac.nz Subject: Re: 2LD Review for *.nz ? I would be interested to hear from anyone who has applied as well - I thought the nomination process was a bit quick, especially with the Christmas/New Year/Holiday of your choice season smack in the middle of it. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog http://www.govt.nz - connecting you to New Zealand central & local government services Any opinions expressed in this message are not necessarily those of the Ministry of Economic Development. This message and any files transmitted with it are confidential and solely for the use of the intended recipient. If you are not the intended recipient or the person responsible for delivery to the intended recipient, be advised that you have received this message in error and that any use is strictly prohibited. Please contact the sender and delete the message and any attachment from your computer. - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

1 0

Re: 2LD Review for *.nz ?
by Paul Brislen 22 Jan '03

22 Jan '03

Sadly, it's too late - nominations/applications closed first week of January... Mark Foster <blakjak(a)blakjak.net>@list.waikato.ac.nz on 23/01/2003 12:03:11 Sent by: owner-nznog(a)list.waikato.ac.nz To: nznog(a)list.waikato.ac.nz cc: Subject: 2LD Review for *.nz ? http://www.idg.co.nz/webhome.nsf/UNID/E021027AAA37CF2DCC256CB6000704F1!open… (Apologies for any offtopicness, but I know there will be people here very interested in this...) Anyone going to volunteer? - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog - To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog

2 1