AfNOG@May 8, 2009

Date: Fri, 8 May 2009 07:12:21 -0700 (PDT)
Subject: [afnog] Breaking News: Kenyan Internet Community comes face
to face with new Legislation


Apologies for cross-posting:

It took a KENIC (KEnya Network Information Center, www.kenic.or.ke) Annual General Meeting for the Kenyan Internet community to digest the implication of the a Kenyan ICT Legislation passed more than five months ago. The law which included sections that touched on the Media, IT, Telecommunication and Postal Services has faced stiff resistance from the Media fraternity while the Internet Community kept a low if not a dead profile.



It was at the KENIC general meeting held today in Nairobi that the Internet Community grappled with the implication of the IT section on the operation of the .KE namespace. The law specifies that all second level .KE internet domain names must be licensed by the country's converged Regulator, Communication Commission of Kenya. The law requires that all Registries - those who manage the internet domains - must apply for a license by the 2nd of June 2009.



KENIC, a public-private-partnership has under the ICANN Policies been managing the .KE namespace including the 2nd level sub-domains such as xyz.CO.KE, xyz.OR.KE, etc. From 2nd June 2009, KENIC must seek permission from the Regulator to continue managing these sub-domains. In an effort to comply with the law, the KENIC Board requested the community to support a resolution that a new legal entity (Special Purpose Vehicle, SPV) be created in order to apply for the license from the Regulator as well as compete with other potential entities that are set to fight in that space.



The proposals opened up heated discussions with some members wondering if KENIC was ceding its hard-won rights & control over the .KE namespace to an exclusive and single entity. The current governance structure for KENIC provides for a Multistakeholder Partnership over the whole .KE namespace and has the Govt, Academia, Private Sector/Telcos and Civil Society Board Representation that is wholly accountable to Internet Users during Annual General Meetings. Effectively, the new law takes part of this mandate and places it under one or two of these Stakeholders that is the Regulator/Govt.



Members wondered about the criteria that would be used by the Regulator to award the management licenses to various competitors. Others wondered about the potential conflict between the local legislation and the ICANN policies given that KENIC has currently been operating under ICANN policies but now has to take cognizance of the local law. For example, if the Regulator granted a license to someone else to manage the "co.ke" subdomain BUT the local internet community for one reason or the other instructed the KENIC Board NOT to accept and transfer the delegation from KENIC how would that be resolved? And yet other members wondered to what extend the proposed SPV would cannibalize their existing markets and services.



It has taken five months of silence but clearly, the Kenyan Internet community is just beginning to understand and feel the heat of some sections in the ICT law that had previously been hijacked and labeled "Media law" at the expense of IT practitioners. It will be interesting to see how this plays out before and after the 2nd of June 2009 - the date when all subdomain managers must be licensed by the Regulator.



walu


ケニアにてメディアに関するIT関連の法律の適用に関して。
今後こういう動きが増えてくるのかな。

AfNOG@Apr 13, 2009

Date: Mon, 13 Apr 2009 00:23:01 +0000 (GMT)
From: Dany Mustapha
Subject: [afnog] logiciel charge r?seau
To: afnog@afnog.org
Message-ID: <687245.6837.qm@web27907.mail.ukl.yahoo.com>
Content-Type: text/plain; charset="iso-8859-1"



bonjour

je suis ? la recherche d'un logiciel qui me permettra de calculer? la charge du traffic de mon r?seau, pour des raisons de redimensionnement? ,.Si quelqu'un parmi vous peut m'aider sur ce point je lui serait reconnaissant

Merci


拡張性を含めた帯域設計用のツールってあるかな？という質問。
eHealth(旧NetHealth)のようなツールのことかな？
Freewareでは聞いたことがないなぁ。(別に質問ではFreeware/OSSという指定は無いが)

AfNOG@Mar 30, 2009

Date: Mon, 30 Mar 2009 21:34:47 -0400
From: Hervey Allen
Subject: [afnog] Detecting and Scanning for Conficker
To: AFNOG
Message-ID: <49D17337.6090805@nsrc.org>
Content-Type: text/plain; charset=ISO-8859-1

>From various posts to various Network Operator Group lists:

NMAP now has a beta version for scanning for Conficker:

http://insecure.org/

There is a standalone tool (for Windows) packaged up by Dan Kaminsky
here:

http://www.doxpara.com/

Which he has put together from source here:

http://iv.cs.uni-bonn.de/wg/cs/applications/containing-conficker/

The Honeynet Project has information as well here:

https://www.honeynet.org/node/389

Cheers,
- Hervey


明日、猛威を振るうはずの「Conficker」についての情報シェア。
自分の身は自分で守らないとね。

AfNOG@Mar 30, 2009

Date: Mon, 30 Mar 2009 18:18:40 +0800
From: Mark Tinka
Subject: [afnog] Google over IPv6
To: afnog@afnog.org
Message-ID: <200903301818.41455.mtinka@globaltransit.net>
Content-Type: text/plain; charset="iso-8859-1"

In case anyone missed it:

http://www.google.com/intl/en/ipv6/

Cheers,

Mark.


NANOGで話題になったIPv6化されたGoogleの告知。
ここでも情報の伝播が見えて楽しい。

AfNOG@Mar 27, 2009

Date: Fri, 27 Mar 2009 00:14:28 +0100 (MET)
From: "Thomas M. Knoll"
Subject: [afnog] Traffic separation between ASes
To: afnog@afnog.org
Message-ID:

Content-Type: TEXT/PLAIN; format=flowed; charset=US-ASCII

Dear Sirs,

excuse me please for bothering you with the following information, but I
thought it could be of use for you as well.

Increasing Internet traffic and the transfer of delay and loss critical
traffic may lead to congested interconnection links and dropping of the
"wrong" packets as a result.
This is particularly regrettable, if the interconnected partners both use
traffic differentiation in their networks and are cut back to best effort
interconnection (p2p or through IXPs).

I have proposed a concept for simple Inter-AS Class of Service
interconnection that allows for consistent traffic separation even across
interconnection points.

By means of this email, I would like to receive your feedback, whether the
described situation is currently seen or expected in the next months.
Furthermore, I would be interested to hear, whether there have already
been set up class of service based interconnections, which could make us
of such an automated CoS signalling concept.

Background information about the proposed and implemented concept can be
found at:
http://www3.ietf.org/proceedings/09mar/slides/idr-5.pdf
and
http://www.ripe.net/ripe/meetings/ripe-57/presentations/Knoll-Traffic_Categorisation_and_Inter-AS_Peering.pdf

Thank you in advance,
Thomas Knoll


P2PのトラフィックとUpstream/IXに向かうパケットを分けたい。どうしたらいい？というメール。
米国や日本、欧州各国では既に終わった話題のように感じられるがアフリカではまだこれから
このような問題に接することに。
技術情報が共有できるようになるといいと思うけど、考える力のないエンジニアが増えてもね・・・

AfNOG@Mar 22, 2009

Date: Sun, 22 Mar 2009 09:30:44 +0800
From: Mark Tinka
Subject: Re: [afnog] Data mining for African ISP
To: Global One Solutions
Cc: discuss , afnog@afnog.org
Message-ID: <200903220930.52725.mtinka@globaltransit.net>
Content-Type: text/plain; charset="iso-8859-6"

On Sunday 22 March 2009 03:30:42 am Global One Solutions
wrote:

> I would like to hear what our local ISP in African is
> using for data-mining, which helps them deal with (a)
> with DDoS attack, (b) Understand their traffic pattern,
> which helps them plan their capacity planning. I know
> DDoS attack is very critical to the operation folks and
> some of us used or still use home grown application. You
> can buzz offline if you want to. Any feedback is greatly
> appreciated.

These are typical applications of NetFlow/cflowd in IOS and
JunOS.

There's a lot of non-commercial flow collectors, e.g.,
Nfsen/Nfdump, as well as commercial products that work quite
well, e.g., Arbor Networks.

Other folks may use NTOP for the same, as well.

Cheers,

Mark.

DDoSアタックとか、トラフィック傾向とか知る為に、データマイニングに何を使えばいい？という質問に対する返答。
一般的にはIOSやJunOSで、お金を掛けないならNfsen/Nfdumpと、この辺りは先進国と状況変わらず。
あとのメールでもエンジニアのスキルとお金が必要という非常に的確なコメントも。

AfNOG@Mar 6, 2009

Date: Fri, 06 Mar 2009 10:56:11 +0300
From: Frank Habicht
Subject: Re: [afnog] Agregate traffic using MRTG
To: phyeroba@cfi.co.ug
Cc: afnog@afnog.org
Message-ID: <49B0D71B.2010807@geier.ne.tz>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

On 03/06/09 10:14, Hyeroba Peter wrote:
> Hi,
> I'm trying to aggregate traffic on an HP pro-curve switch. What I mean
> by aggregate is to have all traffic from all ports of the switch show up
> on one graph.
> Any body done this without having to login and create a vlan?
>
> Kind Regards

I have something like this towards the end of my mrtg.cfg

Target[tix_agg_traffic]: 1:community@switch.tix.or.tz +
9:community@switch.tix.or.tz + 17:community@switch.tix.or.tz +
18:community@switch.tix.or.tz + 19:community@switch.tix.or.tz +
20:community@switch.tix.or.tz + 21:community@switch.tix.or.tz +
22:community@switch.tix.or.tz + 23:community@switch.tix.or.tz +
24:community@switch.tix.or.tz + 25:community@switch.tix.or.tz +
26:community@switch.tix.or.tz + 27:community@switch.tix.or.tz +
28:community@switch.tix.or.tz + 29:community@switch.tix.or.tz +
30:community@switch.tix.or.tz + 31:community@switch.tix.or.tz +
32:community@switch.tix.or.tz + 33:community@switch.tix.or.tz +
34:community@switch.tix.or.tz + 35:community@switch.tix.or.tz +
36:community@switch.tix.or.tz + 37:community@switch.tix.or.tz +
38:community@switch.tix.or.tz + 39:community@switch.tix.or.tz +
40:community@switch.tix.or.tz:
Title[tix_agg_traffic]: Total TIX traffic
MaxBytes[tix_agg_traffic]: 100000000000

that was 3 lines ! remove the linebreaks. and adjust portnumbers,
community, hostname
and s/tix/uixp/g ;-)


list all the ports used and likely to be used....

Frank

AfNOGは基本的なTool類の質問の場になっていて見ていて暖かい気持ちになれる(笑)
NANOGやJANOGなどを見ていると口論、罵倒などが散見されるがここにはそういうものがない。Africaにいる人たちも自立しようと頑張っているし、世界中のエンジニアがこのMLにSubscribeしていて助けているのを見る。
#珠に自分も助かる情報が出ていたりする。