[AusNOG] Pipe IX NSW - QLD

[Sean K. Finn]

I've pulled my PIPE IX after an incident two weeks ago that I'm still trying to get to the bottom of.

Someone on the QLD Pipe IX, not sure who,  not sure if deliberately or not, poisoned my BGP.

We're still running over the details and trying to see exactly what went on, there is perhaps a misconfiguration on a peer somewhere, or there's a peer playing silly buggers.

I thought it was just me until now, and I don't know if todays events are related to what happened to me a week or not ago, but I thought I'd mention it.

My spidey-sense tells me someone's trying to play silly buggers, and if that person is you, and you're reading this, I have enough info to trawl through to find you and null route your grandmother.

Sean.

From: ausnog-bounces at lists.ausnog.net [mailto:ausnog-bounces at lists.ausnog.net] On Behalf Of Christopher Cowling
Sent: Thursday, December 13, 2012 4:02 PM
To: Mark Tees
Cc: ausnog at ausnog.net
Subject: Re: [AusNOG] Pipe IX NSW - QLD

Seeing the same thing here. We lost 1/2 of our QLD peering traffic at approx 4:17 today. Didn't go anywhere till we dropped the route.

Chris.

On Thu, Dec 13, 2012 at 3:54 PM, Mark Tees <mark.tees at digitalpacific.com.au<mailto:mark.tees at digitalpacific.com.au>> wrote:
Seeing similar problems in Sydney with one of the route servers flapping around for a subset of peers.

On 13/12/2012, at 4:52 PM, James Braunegg wrote:

> Hey Guys
>
> Just a heads up that we noticed at 4:17pm today a lot of packet loss for NSW IX and QLD IX which is still happening.
>
> Called pipe Noc..and well they can't see any issues...
>
> That being said we noticed  on pipe graphs web central interfaces in both vic, nsw and qld died totally at the same time, and everyone else is receiving 50mbits+ of traffic... to me it smells like a layer 2 link loop... or something because we shut down our BGP interfaces and we are still seeing traffic on them !
>
> Kindest Regards
>
> James Braunegg
> W:  1300 769 972  |  M:  0488 997 207 |  D:  (03) 9751 7616
> E:   james.braunegg at micron21.com<mailto:james.braunegg at micron21.com>  |  ABN:  12 109 977 666<tel:12%20109%20977%20666>
>
> <image001.jpg>
>
> This message is intended for the addressee named above. It may contain privileged or confidential information. If you are not the intended recipient of this message you must not use, copy, distribute or disclose it to anyone other than the addressee. If you have received this message in error please return the message to the sender by replying to it and then delete the message from your computer.
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
> http://lists.ausnog.net/mailman/listinfo/ausnog

_______________________________________________
AusNOG mailing list
AusNOG at lists.ausnog.net<mailto:AusNOG at lists.ausnog.net>
http://lists.ausnog.net/mailman/listinfo/ausnog

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20121213/bd0fe95c/attachment.html>