rv2 outage

Mon Aug 20 05:19:13 UTC 2007

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -- Sean Donelan <sean at donelan.com> wrote:

>On Sun, 19 Aug 2007, Randy Bush wrote:
>> did anyone else see an rv2 outage yesterday?
>>    from Aug 18 04:17:30
>>    to   Aug 18 08:21:45
>>
>> are these logged so longitudinal analysis can do a bit less 'heuristic'
>> guessing?
>
>I'm guessing you mean route-views2.
>
>Some folks found a command that crashed the CLI on some public route-views
>or looking-glass systems this week.
>

Although I have still NOT seen any evidence to either support
or dispell this report, I did see this report regarding some
sort of "show ip bgp regexp" DoS exploit circulating on Friday:

http://www.heise-security.co.uk/news/94526/


$.02,

- - ferg

-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.2 (Build 2014)

wj8DBQFGySROq1pz9mNUZTMRAkt7AJ98ul+Q4ghYBuAEYUsozpQlKHU5LgCfapI3
7E/+E/wmYjfsmbyscsXsVTc=
=1vbd
-----END PGP SIGNATURE-----


--
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawg(at)netzero.net
 ferg's tech blog: http://fergdawg.blogspot.com/