<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">The more relevant question is. Why was mitigation implemented after the last time this happened. <div><br><br><div dir="ltr"><div><br></div><div>-- </div><div>/* Matt Perkins</div><div> Direct 1300 137 379 Spectrum Networks Ptd. Ltd.</div><div> Office 1300 133 299 matt@spectrum.com.au</div><div> Fax 1300 133 255 Level 6, 350 George Street Sydney 2000</div><div> SIP 1300137379@sip.spectrum.com.au</div><div> Google Talk MattAPerkins@gmail.com</div><div> PGP/GNUPG Public Key can be found at http://pgp.mit.edu</div><div>*/</div></div><div dir="ltr"><br><blockquote type="cite">On 23 Sep 2020, at 4:58 pm, Abhi Gudidevuni <abhi1g@gmail.com> wrote:<br><br></blockquote></div><blockquote type="cite"><div dir="ltr"><div dir="ltr"><p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:11pt">Hi Ryan,</span></p><p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:11pt">The Sydney Mega IX experienced a customer initiated broadcast
storm. We are investigating mitigation actions. If you have not already, please
lodge a support request and the team will provide a report.</span><br></p>
<p class="MsoNormal" style="margin:0cm 0cm 8pt;line-height:107%;font-size:11pt;font-family:Calibri,sans-serif">Regards,</p>
<p class="MsoNormal" style="margin:0cm;line-height:normal;font-size:11pt;font-family:Calibri,sans-serif"><span style="font-size:12pt;font-family:"Times New Roman",serif">-- </span></p>
<p class="MsoNormal" style="line-height:normal;margin:0cm 0cm 8pt;font-size:11pt;font-family:Calibri,sans-serif"><b><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:rgb(102,102,102)">Abhi </span></b><b><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:red">Gudidevuni</span></b><span style="font-size:9pt;font-family:Helvetica,sans-serif;color:rgb(102,102,102)"><br>
</span><i><span style="font-size:8.5pt;font-family:Helvetica,sans-serif;color:rgb(204,204,204)">Head of Customer & Network Services</span></i></p></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Wed, Sep 23, 2020 at 4:37 PM Karl Hardisty <<a href="mailto:karl@mothership.co.nz">karl@mothership.co.nz</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div style="overflow-wrap: break-word;">Hi Ryan,<div><br></div><div>You’re a little late to the party; there was an ARP storm on Mega-IX Sydney yesterday. </div><div><br></div><div>Much hilarity ensued. Particularly if peers had default Juniper ARP policers. </div><div><br></div><div>TL:DR it wasn’t just you. It was most of Au and NZ (sucking at the teat of MegaIX in Sydney). </div><div><br><div>
<div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div style="color:rgb(0,0,0);letter-spacing:normal;text-align:start;text-indent:0px;text-transform:none;white-space:normal;word-spacing:0px"><div><div>Kind regards,</div><div><br></div><div>Karl</div><div><br><div><span style="font-family:Calibri,sans-serif;font-size:15px"><b><span lang="EN-GB" style="font-family:"Gill Sans MT",sans-serif;color:rgb(192,0,0)"><span style="color:rgb(0,0,0);font-family:Calibri,sans-serif;font-weight:normal"><b><span lang="EN-GB" style="font-family:"Gill Sans MT",sans-serif;color:rgb(192,0,0)">l</span></b><b><span style="font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42)">E</span></b><span style="font-size:10pt;font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42)"> <a href="mailto:karl@mothership.co.nz" target="_blank">karl@mothership.co.nz</a> </span><b><span lang="EN-GB" style="font-family:"Gill Sans MT",sans-serif;color:rgb(192,0,0)">l</span></b><b><span style="font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42)">W <font size="3"><span style="font-size:13px;font-weight:normal"><a href="http://mothership.co.nz/" target="_blank">mothership.co.nz</a> </span></font></span></b></span>l</span></b></span><span style="color:rgb(81,81,81);font-family:Calibri,sans-serif;font-size:15px"><b><span lang="EN-GB" style="font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42)">A</span></b></span><span style="color:rgb(81,81,81);font-family:Calibri,sans-serif;font-size:15px"><span lang="EN-GB" style="font-size:10pt;font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42)"> PO Box 99814, Newmarket</span></span><span style="color:rgb(81,81,81);font-family:Calibri,sans-serif;font-size:15px"><span lang="EN-GB"> </span></span><span style="font-family:Calibri,sans-serif;font-size:15px"><b><span lang="EN-GB" style="color:rgb(192,0,0);font-family:"Gill Sans MT",sans-serif">l</span><span lang="EN-GB" style="font-family:"Gill Sans MT",sans-serif"><font color="#4a442a">M </font></span></b></span><span style="color:rgb(74,68,42);font-family:"Gill Sans MT",sans-serif;font-size:13px">021 999 990 </span><span style="color:rgb(81,81,81);font-family:Calibri,sans-serif;font-size:15px"><b><span lang="EN-GB" style="font-family:"Gill Sans MT",sans-serif;color:rgb(192,0,0)">l</span></b></span><span style="color:rgb(81,81,81);font-family:Calibri,sans-serif;font-size:15px"><b><span style="font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42)">P</span></b></span><span style="color:rgb(81,81,81);font-family:Calibri,sans-serif;font-size:15px"><span style="font-family:"Gill Sans MT",sans-serif;color:rgb(74,68,42);font-size:10pt"> 09 974 3171</span></span></div></div></div><div><br></div></div><br></div><br><br>
</div>
<div><br><blockquote type="cite"><div>On 23/09/2020, at 6:32 PM, Ryan van Klaveren <<a href="mailto:ryan.vanklaveren@comvergence.com.au" target="_blank">ryan.vanklaveren@comvergence.com.au</a>> wrote:</div><br><div><div dir="ltr">Hey all,<br><br>Did anyone else experience any irregularities yesterday (22 Sept) between 10:39am - 11:50am ? (I know that sounds a bit vague) - but this is what we experienced during this window:<div><br></div><div><div>* Our nameservers failing to do resolution</div></div><div>* Sydney transit routers had BGP flaps to IX NSW peers</div><div>* Sydney ASR router generated 143 logs of: PUNT_INJECT-5-DROP_PUNT_CAUSE: punt cause policer drop packet casue 7 (ARP request or response)</div><div><br></div><div>Spoke to IX, who said: <br><span style="color:rgb(43,46,47);font-family:"Lucida Sans Unicode","Lucida Grande",Tahoma,Verdana,sans-serif;font-size:14px">"Yep we did, yesterday another IX had an outage (I believe a broadcast storm occurred) around the timestamps in your logs, a number of our members that had remote ends also connected to the other IX were affected by that outage and that is likely the reason for their session to flap towards us</span>" </div><div><br></div><div><br></div><div>Just trying to see if anyone else experienced it, and better yet have any more details as to what may have caused it?</div><div><br></div><div><br></div><div><div dir="ltr"><p style="font-family:arial,sans-serif;font-size:12.8px"><br>Kind regards,<br>Ryan van Klaveren<br><br>Main: 1300 550 125<br>Fax: 1300 550 121</p><p style="font-family:arial,sans-serif;font-size:12.8px"><img src="http://www.comvergence.com.au/wp-content/themes/comvergence/img/logo.gif" alt="" width="208" height="88" border="0" data-unique-identifier=""><br> <a href="http://www.comvergence.com.au/" target="_blank">www.comvergence.com.au</a> <br>Level 2, 38-40 Garden Street, South Yarra, VIC 3141</p><br style="font-family:arial,sans-serif;font-size:12.8px"><p style="font-family:arial,sans-serif;font-size:12.8px"><strong>Converging Tomorrow Today</strong><br>Confidentiality Note: This e-mail is sent to and intended for use by the named addressees only. It contains confidential information. If you receive this e-mail in error, please telephone Comvergence on <a>1300 550 125</a>, and then delete this message immediately. Further, you should not disclose, print, re-transmit, copy, store, or reveal the contents of this message to any third party.</p>
<br></div></div></div>
_______________________________________________<br>AusNOG mailing list<br><a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br><a href="http://lists.ausnog.net/mailman/listinfo/ausnog" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br></div></blockquote></div><br></div></div>_______________________________________________<br>
AusNOG mailing list<br>
<a href="mailto:AusNOG@lists.ausnog.net" target="_blank">AusNOG@lists.ausnog.net</a><br>
<a href="http://lists.ausnog.net/mailman/listinfo/ausnog" rel="noreferrer" target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a><br>
</blockquote></div>
<span>_______________________________________________</span><br><span>AusNOG mailing list</span><br><span>AusNOG@lists.ausnog.net</span><br><span>http://lists.ausnog.net/mailman/listinfo/ausnog</span><br></div></blockquote></div></body></html>