|
|
| Author |
Message |
aryeh
|
|
down again?
| 
Mar 27 07:01 UTC 2003 |
whats up with this:
traceroute to m-net.arbornet.org (209.142.209.161), 64 hops max, 40 byte
packets
1 10.0.0.1 (10.0.0.1) 0.546 ms 0.507 ms 0.452 ms
2 10.96.128.1 (10.96.128.1) 7.713 ms 9.331 ms 14.570 ms
3 dstswr1-vlan-2.rh.nantny.cv.net (67.83.252.161) 8.384 ms 17.946 ms
8.736 ms
4 r1-ge-11-0.mhe.prnynj.cv.net (67.83.252.129) 9.560 ms 9.314 ms 9.978
ms
5 r1-srp-1-0.cr.prnynj.cv.net (67.83.239.49) 9.433 ms 8.123 ms 9.103 ms
6 r2-srp13-0.in.nycmny83.cv.net (167.206.12.148) 11.184 ms 11.909 ms
9.401 ms
7 so-2-0-0.gar2.NewYork1.Level3.net (167.206.8.62) 10.759 ms 10.315 ms
11.025 ms
8 unknown.Level3.net (209.247.9.205) 13.191 ms 10.876 ms 12.096 ms
9 so-0-0-0.mp1.Detroit1.Level3.net (64.159.0.193) 48.693 ms 48.387 ms
47.497 ms
10 gige9-0.hsipaccess2.Detroit1.Level3.net (64.159.0.206) 46.737 ms !H *
49.558 ms !H
|
| 42 responses total. |
naftee
|
|
response 1 of 42:
|
Mar 27 14:13 UTC 2003 |
YUPS DOWN-EEEEEEDDD
[naftee@austin naftee]$ ping arbornet.org
Warning: no SO_TIMESTAMP support, falling back to SIOCGSTAMP
PING arbornet.org (209.142.209.161) from 209.196.48.203 : 56(84) bytes of
data.
--- arbornet.org ping statistics ---
10 packets transmitted, 0 packets received, 100% packet loss
[naftee@austin naftee]$
|
iggy
|
|
response 2 of 42:
|
Mar 27 14:57 UTC 2003 |
so.. any info? any official or un-official word?
|
aryeh
|
|
response 3 of 42:
|
Mar 27 15:07 UTC 2003 |
I have my personal opinions but I whould piss of most of the staff with them
so I will not say anything
|
mynxcat
|
|
response 4 of 42:
|
Mar 27 15:20 UTC 2003 |
This response has been erased.
|
jor
|
|
response 5 of 42:
|
Mar 27 15:47 UTC 2003 |
oh no . . we wouldn't want to *piss off*
any mnet staff . .
|
jor
|
|
response 6 of 42:
|
Mar 27 15:59 UTC 2003 |
This just in.
Republican Guard paratroopers have siezed the
Ann Arbor Municipal Airport, opening a second
front in the war against M-Net.
|
mynxcat
|
|
response 7 of 42:
|
Mar 27 16:02 UTC 2003 |
This response has been erased.
|
styles
|
|
response 8 of 42:
|
Mar 27 16:24 UTC 2003 |
i'm not sure what aryeh is getting at, but he can feel free to share his
thoughts here. think we were BUFFER OVERFLOWED? HAXORED? all possible, i
guess.
i talked to wwnet. someone launched a DoS against us last night and our ip
address is being filtered. hopefully the attack has stopped and our address
will stop being filtered again. makes me feel really great that people care
so much about public access systems these days.
|
tonster
|
|
response 9 of 42:
|
Mar 27 18:22 UTC 2003 |
Yeah, we were null routed late last night. I'm on m-net right now
though. :) Of course, it's through the serial port of ratbert. :)
|
tonster
|
|
response 10 of 42:
|
Mar 27 18:25 UTC 2003 |
a little update: wwnet is not the one that has filters in place, it's
level3. level3 is wwnet's upstream provider. It's pretty bad when we
piss off our ISP's ISP. :)
|
tod
|
|
response 11 of 42:
|
Mar 27 18:59 UTC 2003 |
This response has been erased.
|
furs
|
|
response 12 of 42:
|
Mar 27 19:01 UTC 2003 |
re #6. That reminds me. I was driving home from work on Tuesday, and
when I was getting on to the highway, there were 6 Appache helecopters
up in the sky right to the left of me. I thought "Holy Shit, what's
going on." and just then the traffic dude came on and said not to be
alarmed cause they were just on a transport mission from Fort Carson,
WY to Colo. Springs.
heh
|
tod
|
|
response 13 of 42:
|
Mar 27 19:36 UTC 2003 |
This response has been erased.
|
styles
|
|
response 14 of 42:
|
Mar 27 19:48 UTC 2003 |
mmm....sweaty, sweaty ray liotta.
|
tod
|
|
response 15 of 42:
|
Mar 27 20:02 UTC 2003 |
This response has been erased.
|
styles
|
|
response 16 of 42:
|
Mar 27 20:16 UTC 2003 |
...and if you're sally struthers, YELL REAL LOUD.
|
tod
|
|
response 17 of 42:
|
Mar 27 20:19 UTC 2003 |
This response has been erased.
|
tod
|
|
response 18 of 42:
|
Mar 27 20:52 UTC 2003 |
This response has been erased.
|
polytarp
|
|
response 19 of 42:
|
Mar 27 21:44 UTC 2003 |
WE SHOULD IMPEACH HIM / WE DID IT TO VOID!
|
iggy
|
|
response 20 of 42:
|
Mar 27 22:09 UTC 2003 |
how are things going re getting ,mnet up?
|
tod
|
|
response 21 of 42:
|
Mar 27 22:26 UTC 2003 |
This response has been erased.
|
tonster
|
|
response 22 of 42:
|
Mar 27 22:44 UTC 2003 |
resp:18,resp:19,resp:20,resp:21 : I've talked to Rex, and he's
aware of the issue. WWNet does not wish to call Level3 or XO (their 2
providers, who are currently null routing us) until EOB today, because if the
attack is still ongoing, they do not wish to have their customers impacted. We
understand this. Dave will contact both Level3 and XO this evening and have
those null routes removed and plug m-net back into the wwnet network. Here is
the information I received from james this afternoon regarding the exact
circumstances of the incident:
03/27/2003 @ 13:14:40 james: well last night there was a huge DoS attack
on them... so they are unplugged here, as well as being null routed at
level3 and xo
03/27/2003 @ 13:14:54 james: dave said it was enough to take down all of
xo michigan
03/27/2003 @ 13:18:35 james: it looked like it was a botnet that was
spoofing packets.... some of the IPs were real, but most of them were
not valid IPs
03/27/2003 @ 13:21:30 james: i dont know if the attack is still going
on, but we need to contact level3 to have them remove the filters when
its stopped
03/27/2003 @ 13:23:37 james: oh yeah, we only have 20Mbits from them and
it was full... but the amount of bandwidth wasnt the major problem it
was the packets per second that hurt
03/27/2003 @ 16:02:54 james: dave said he wasn't going to try to get it
removed from level3 until after business hours... if it was still going
on and it gets removed it would fuck everything up
|
aryeh
|
|
response 23 of 42:
|
Mar 27 23:04 UTC 2003 |
sounds like a bunch of your liberal friends decided that shutting
down m-net as a civil disobedance act to protest the war.
|