[outages] General slowness, TCP re-transmissions on multiple ISPs in Thailand accessing servers/content/apps in North America.
Randy Bush
randy at psg.com
Sat May 6 20:57:09 EDT 2017
hi roland,
two things. first, you get the header award of the year, see appended.
second, can you point me to stealable (with attribution) slides which do
a brief description of things such as botnets, ddos, etc. last year in
the bhutan nog security workshop over half the audience hadno idea of
such things.
randy
From: Roland Dobbins via Outages <outages at outages.org>
Subject: Re: [outages] General slowness, TCP re-transmissions on multiple ISPs in Thailand accessing servers/content/apps in North America.
To: "Outages at outages.org" <outages at outages.org>
Date: Sat, 6 May 2017 21:01:38 +0700
Return-path: <outages-bounces at outages.org>
Received: from psg.com ([2001:418:1::62])
by ran.psg.com with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256)
(Exim 4.86_2)
(envelope-from <outages-bounces at outages.org>)
id 1d70Ho-0003SB-Ny
for randy at ran.psg.com; Sat, 06 May 2017 14:02:16 +0000
Received: from [204.42.254.5] (helo=puck.nether.net)
by psg.com with esmtp (Exim 4.89 (FreeBSD))
(envelope-from <outages-bounces at outages.org>)
id 1d70Hn-0001ua-CX
for randy at psg.com; Sat, 06 May 2017 14:02:15 +0000
Received: from puck.nether.net (localhost [IPv6:::1])
by puck.nether.net (Postfix) with ESMTP id E7299540CEF;
Sat, 6 May 2017 10:02:10 -0400 (EDT)
X-Original-To: outages at outages.org
Delivered-To: outages at outages.org
Received: from NAM03-CO1-obe.outbound.protection.outlook.com
(mail-co1nam03on0138.outbound.protection.outlook.com [104.47.40.138])
(using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits))
(No client certificate requested)
by puck.nether.net (Postfix) with ESMTPS id A195D540C63
for <outages at outages.org>; Sat, 6 May 2017 10:01:51 -0400 (EDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=thescout.onmicrosoft.com; s=selector1-arbor-net; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version; bh=4MPWCCCSD2UHBEkNgISR+2lZLeIXARzYfjMTIqPLut0=; b=cKHSByrY9tWWigFR80Djyw5Ly0ADCUlNvP7AB+gZko2W5A96VFs5o8wwFk/nZR79rxVog9HYLGvaHS84dyZgz/qSIZxxA7gG6jAcEb1pRfGeAeJOMgD1/ZfZf/2yf8APWYDIaUDxNLrtrCjqR4EQhfIExdwfKKdui7Q4kZ4cM4M=
Authentication-Results: outages.org; dkim=none (message not signed) header.d=none;outages.org; dmarc=none action=none header.from=arbor.net;
Received: from [172.21.0.16] (68.68.47.52) by
BN3PR0101MB1028.prod.exchangelabs.com (10.160.182.16) with Microsoft SMTP
Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256_P256) id
15.1.1075.11; Sat, 6 May 2017 14:01:48 +0000
Message-ID: <872A699F-6AED-40FB-82C0-2241BC97D968 at arbor.net>
In-Reply-To: <E1E41AB2-BE9D-426E-A13B-B3D9E95BA569 at arbor.net>
References: <E1E41AB2-BE9D-426E-A13B-B3D9E95BA569 at arbor.net>
MIME-Version: 1.0
X-Mailer: MailMate (1.9.6r5347)
X-Originating-IP: [68.68.47.52]
X-ClientProxiedBy: BN6PR11CA0022.namprd11.prod.outlook.com (10.172.17.32) To BN3PR0101MB1028.prod.exchangelabs.com (10.160.182.16)
X-MS-PublicTrafficType: Email
X-MS-Office365-Filtering-Correlation-Id: 6c533686-ff73-4020-3ad9-08d4948870dd
X-Microsoft-Antispam: UriScan:; BCL:0; PCL:0; RULEID:(22001)(201703131423075)(201703031133081); SRVR:BN3PR0101MB1028;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 3:gU2j5RjCN7iwhfRi6d27xTRYWQL8/wzbEo3wd7VaXvh/cuC1eLo0zF0rNHV/aa0vlqSPFv9AeekgD8ic8NtRFw53JZYGg/q+I0o13ZPBHRsoqjP8RpWjZT5VRogSf0Mr0PyR8MxeQOzR4Gd9FRobUF5oB/+ZiZGgpEY5BTFUQiz3/9ANLnr+ow+/ojXc2PmxIc4NLBdCoq4MURi3hLobMzXvrdMH1sqQPEHWl9/xZE+QKQrs2Duwwm/bZxttz/6F54Ld/BzdXL+W1kRNCDLJWp/WdmsGFurPHESGv14J7jWl5FALOXJxFKeA3F6m4YrBO3GrfmwCFxDUiLIBmUijtw==; 25:j+N37ZOyE4JSRedon21mPFUVrNkZ11iajIkm9/9I3cBjJEjCIc4+YyI4/VhLPmTUfHp1YAQ4SWDk+URCvkc9kpVJpsuFnU1rg7Ambd+TaanM8IGjjXsmtyKkbXlNJL5QvwlJPSWCjr+iV1KD9lW0jYslyE/snF2uhV9J/d4ciRtsN8tZKjxAKufNbDRkw8bQmhthy9xAB7Dv/CL6aI8+lNEK2ORiDPDC2xppGMzsriUwOaeZvPznaCcDaJ21CcGTX61LRtRmRK9jdXk00AL2xAKPqxFZkVv1LF4GDqk6w/S/U31y/0KYI8Eh0PqkmZPTZKER7eQSzMb1HuBTP3tgqDssENTZTL8V76486axRPzZk0kflhJ2AMdCNdlgUHA+6ikmfKsL/jbdi4ZPYzAKyE2eW/71n8fliV7P5L05sAlaIz1adYopRI+ndCweqONS05lOgDAFpYV//a75dL7dNEwoOH4iZ5gVmH6CzO6Wg8IQ=
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 31:h/GXO2QjF/Qe5STCxP9dAW45qod/OO3+9lYDio7q0oeSuGhQeZd6mr6hZYAc4jaMR9i0iyRy/tmDY5W/4fcgF3HvBhmcNqY6BetjsDyQ0fiLe36iEm+GOy1nacrF7Pp9tVbPip68mUArkdGUmBPdZwsgynM0+deFSCdvwU2yC5MQ4cCvYxdiRd7jXpx45mRmKZfWS7TOllmf1wr7GDqbXT/VWONpAb2om4q0BsYF52/wmaMrqNuPbHJjItLTm/mp4s1LNx0v0q62x3J8AcUv4LxO2uhftYhefPcUsunDDVQ=; 20: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
X-Microsoft-Antispam-PRVS: <BN3PR0101MB102850DB1A4F565AD348FDBCCAE80 at BN3PR0101MB1028.prod.exchangelabs.com>
X-Exchange-Antispam-Report-Test: UriScan:;
X-Exchange-Antispam-Report-CFA-Test: BCL:0; PCL:0; RULEID:(6040450)(2401047)(8121501046)(5005006)(3002001)(10201501046)(93006095)(93001095)(6041248)(20161123555025)(20161123560025)(20161123564025)(20161123562025)(20161123558100)(201703131423075)(201702281528075)(201703061421075)(201703061406153)(6072148); SRVR:BN3PR0101MB1028; BCL:0; PCL:0; RULEID:; SRVR:BN3PR0101MB1028;
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 4:lzOswSjk8GQ7AUZ0Uix56a1PH7qgDMgr979SQPZmHaw57zwtom/7JEkGm9EZ6dQQZ4KEag59X/5YQKxNbJOn5gDx0pMgIKEQBYpS81PYX5wYLQ48tqzg6hL+Wd9zP9SPh8y2VwWISfloLE2ihjvzDDtdDN7OjuVqsnihMJb+r5ZNUABbXP+MSmgq4h/URrz/efzb9CAr/SBj4VaKQYqbsgH409YsNmxicd5AXrNYMRLRmal+qJwrfWOv+4AleIItx05Y8dUkyTzCdl199RcLQ5rgfITrXfyEjVLEFcgY6DnpLiOT2ANU8IdZUEdyI3FKo9y89moYbRMHRz1Ce7y5kNfJplLo/RisqDTIJ7f4CnrHZfux5G8ovmGYJJkv3vuHnfqjBUuxmccfMMi3IH6uKfg6df8Ijc/WOX2LICEYtYcBv9w+nMp/3B4cq/8KL+nZH5qZZEWzCmCJGsYLT+Cty9Sm1wYSd6XF6BVA7lUM3nHcgaD2Ixvbk/Mxj11cjyvyrITSFLjPu/f0Cy9a1jiQHZ89mtWp4X6pOUtBBGNTT4gWUFSAQjXFU3AX8l5bwWg86fB+h1fJ5EflICL63JRfEgZfYjFTtRjGTAXdUqvrKVB/xirL85dnNudpjCOydZmip6YwWafSMWM75hghs+7PuhjMvJ8qlIdckzyRQ05DuRbBBCDdrhDHZxfVlopttZ2U/h9ACf17vVK+yRfnnZrd3RByYkehp2fBiY+WI3In4Jbq6eehnGFkm7W6uMAz2ujW+kP7k4dkJZKLsf4xat/xGw==
X-Forefront-PRVS: 029976C540
X-Forefront-Antispam-Report: SFV:NSPM; SFS:(10019020)(4630300001)(6049001)(6009001)(39450400003)(39410400002)(39840400002)(39850400002)(39400400002)(24454002)(110136004)(38730400002)(82746002)(2501003)(90366009)(53936002)(33656002)(25786009)(6116002)(3846002)(47776003)(5003940100001)(2950100002)(50226002)(6246003)(66066001)(53546009)(83716003)(86362001)(2906002)(305945005)(8676002)(7736002)(229853002)(81166006)(6666003)(36756003)(77096006)(42186005)(6916009)(6486002)(50466002)(5660300001)(2351001)(50986999)(76176999)(478600001)(189998001); DIR:OUT; SFP:1102; SCL:1; SRVR:BN3PR0101MB1028; H:[172.21.0.16]; FPR:; SPF:None; MLV:sfv; LANG:en;
X-Microsoft-Exchange-Diagnostics: =?us-ascii?Q?1; BN3PR0101MB1028; 23:RCt9Ic7X/sJZjgsz/x7Atbx/bHqz2KzTINgX4Lc?= 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
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 6: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; 5:bGsQoGpB/DUjURQ2F0joXLFGebjK3MP7+KhAI9ifCYWS8qP6zTe9zdf31TEvdqrLAwlJzjkTWWsSUk/PJYiYx1t4Fb3LtGUrZgARVdqv2DHTA9+j1vUhpHmJt3YO+RxGOje4O6ov3+3PH92QvZntjg==; 24:AQ1kxIe6GD51dRh4Azf9njtYVPpd15ar4j6cmEqWhwT1nLZ/J8cN8C9AHZEQ7b5SOAtfUZ7txvdH+tyu2wMrrzpC7bGubbhhP61VhYaYhRY=
SpamDiagnosticOutput: 1:99
SpamDiagnosticMetadata: NSPM
X-Microsoft-Exchange-Diagnostics: 1; BN3PR0101MB1028; 7:vv37EElgt0AAoWAK6z+Q+1TPkjHUSqbsyOIIhHQJNr3yTbYlmX9X12+ifDd09Gdp7MJ68f6o/C1CssQ9LCIBK3uPpws7f6l341l59/ELuk3jCqr+WT7Us2pCE4QQGDLzKswZumE1RbbUXrGO4ILTqZH8Ei9nM1E7p8EoaKpmJonEZoSErN8sCou05JaREIhTcGRLmDBARLJvQ6r8yyIMxSX4HgVPcFg3pI5pyLRi65xm0QSGg7CttiuOsW0OfWXJ97kBFbXdTCfgScdaVOHHnAjEYatW5qjZie9Bp7vJhoowzFjKuAzs/lcyfBOOjrV3bmubQ+0fPBAxguRvIpK/Cg==
X-OriginatorOrg: arbor.net
X-MS-Exchange-CrossTenant-OriginalArrivalTime: 06 May 2017 14:01:48.5779 (UTC)
X-MS-Exchange-CrossTenant-FromEntityHeader: Hosted
X-MS-Exchange-Transport-CrossTenantHeadersStamped: BN3PR0101MB1028
X-BeenThere: outages at outages.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: "Outages \(planned & unplanned\) Reporting." <outages.outages.org>
List-Unsubscribe: <https://puck.nether.net/mailman/options/outages>, <mailto:outages-request at outages.org?subject=unsubscribe>
List-Archive: <https://puck.nether.net/pipermail/outages/>
List-Post: <mailto:outages at outages.org>
List-Help: <mailto:outages-request at outages.org?subject=help>
List-Subscribe: <https://puck.nether.net/mailman/listinfo/outages>, <mailto:outages-request at outages.org?subject=subscribe>
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset="us-ascii"; Format="flowed"
Errors-To: outages-bounces at outages.org
Sender: "Outages" <outages-bounces at outages.org>
More information about the Outages
mailing list