<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40"><head><META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=us-ascii"><meta name=Generator content="Microsoft Word 14 (filtered medium)"><style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman","serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:"Calibri","sans-serif";
color:#1F497D;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></head><body lang=EN-US link=blue vlink=purple><div class=WordSection1><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I’ve pulled my PIPE IX after an incident two weeks ago that I’m still trying to get to the bottom of.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>Someone on the QLD Pipe IX, not sure who, not sure if deliberately or not, poisoned my BGP.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>We’re still running over the details and trying to see exactly what went on, there is perhaps a misconfiguration on a peer somewhere, or there’s a peer playing silly buggers.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>I thought it was just me until now, and I don’t know if todays events are related to what happened to me a week or not ago, but I thought I’d mention it.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'>My spidey-sense tells me someone’s trying to play silly buggers, and if that person is you, and you’re reading this, I have enough info to trawl through to find you and null route your grandmother.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><br>Sean.<o:p></o:p></span></p><p class=MsoNormal><span style='font-size:11.0pt;font-family:"Calibri","sans-serif";color:#1F497D'><o:p> </o:p></span></p><p class=MsoNormal><b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'>From:</span></b><span style='font-size:10.0pt;font-family:"Tahoma","sans-serif"'> ausnog-bounces@lists.ausnog.net [mailto:ausnog-bounces@lists.ausnog.net] <b>On Behalf Of </b>Christopher Cowling<br><b>Sent:</b> Thursday, December 13, 2012 4:02 PM<br><b>To:</b> Mark Tees<br><b>Cc:</b> ausnog@ausnog.net<br><b>Subject:</b> Re: [AusNOG] Pipe IX NSW - QLD<o:p></o:p></span></p><p class=MsoNormal><o:p> </o:p></p><p class=MsoNormal>Seeing the same thing here. We lost 1/2 of our QLD peering traffic at approx 4:17 today. Didn't go anywhere till we dropped the route.<o:p></o:p></p><div><p class=MsoNormal><o:p> </o:p></p></div><div><p class=MsoNormal>Chris.<o:p></o:p></p></div><div><p class=MsoNormal style='margin-bottom:12.0pt'><o:p> </o:p></p><div><p class=MsoNormal>On Thu, Dec 13, 2012 at 3:54 PM, Mark Tees <<a href="mailto:mark.tees@digitalpacific.com.au" target="_blank">mark.tees@digitalpacific.com.au</a>> wrote:<o:p></o:p></p><p class=MsoNormal>Seeing similar problems in Sydney with one of the route servers flapping around for a subset of peers.<o:p></o:p></p><div><p class=MsoNormal><br>On 13/12/2012, at 4:52 PM, James Braunegg wrote:<br><br>> Hey Guys<br>><br>> Just a heads up that we noticed at 4:17pm today a lot of packet loss for NSW IX and QLD IX which is still happening.<br>><br>> Called pipe Noc..and well they can’t see any issues…<br>><br>> That being said we noticed on pipe graphs web central interfaces in both vic, nsw and qld died totally at the same time, and everyone else is receiving 50mbits+ of traffic… to me it smells like a layer 2 link loop… or something because we shut down our BGP interfaces and we are still seeing traffic on them !<br>><br>> Kindest Regards<br>><br>> James Braunegg<br>> W: 1300 769 972 | M: 0488 997 207 | D: (03) 9751 7616<br>> E: <a href="mailto:james.braunegg@micron21.com">james.braunegg@micron21.com</a> | ABN: <a href="tel:12%20109%20977%20666">12 109 977 666</a><br>><o:p></o:p></p></div><p class=MsoNormal>> <image001.jpg><o:p></o:p></p><div><p class=MsoNormal>><br>> This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.<br>><o:p></o:p></p></div><p class=MsoNormal>> _______________________________________________<br>> AusNOG mailing list<br>> <a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>> <a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br><br>_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><o:p></o:p></p></div><p class=MsoNormal><o:p> </o:p></p></div></div></body></html>