<<< Date Index >>>     <<< Thread Index >>>

[IP] more on U.S. shuts down network that leaked 'Star Wars'





Begin forwarded message:

From: Richard Johnson <rdump@xxxxxxxxx>
Date: May 27, 2005 12:25:19 PM EDT
To: Carl Malamud <carl@xxxxxxxxx>
Cc: David Farber <dave@xxxxxxxxxx>, rdump@xxxxxxxxx
Subject: Re: [IP] more on U.S. shuts down network that leaked 'Star Wars'


At 07:39 -0400 on 2005-05-27, David Farber wrote:

From: Carl Malamud <carl@xxxxxxxxx>
Date: May 26, 2005 11:00:13 PM EDT
...
That, in turn, yields this traceroute:

15 unknown.level3.net (64.156.191.10) 62.733 ms 44.501 ms 45.521 ms
16  inet-sdsc-sdsc2--lax-isp-ge.cenic.net (137.164.24.206)  68.372
ms  47.105 ms  53.644 ms
17  medusa.sdsc.edu (132.249.30.10)  49.865 ms  48.938 ms  48.747 ms
18  www.dhs.gov (192.31.21.68)  52.224 ms  49.003 ms  47.183 ms

So, unless dhs is tunelling inside of sdsc, this looks like
it might be somewhat suspect.  :)



That may just be your "closest" akamai accelerator, or an akamai base node
of some kind if they have no cache close to you.

Here's a shorter traceroute from a workstation at a university with transit
through the frgp.net gigapop:

% host www.dhs.gov
www.dhs.gov is a nickname for www.dhs.gov.edgesuite.net
www.dhs.gov.edgesuite.net is a nickname for a830.g.akamai.net
a830.g.akamai.net has address 192.43.217.199
a830.g.akamai.net has address 192.43.217.200

% traceroute -q 1 www.dhs.gov
traceroute: Warning: a830.g.akamai.net has multiple addresses; using
192.43.217.199
traceroute to a830.g.akamai.net (192.43.217.199), 30 hops max, 40 byte packets
...
4 a192-43-217-199.deploy.akamaitechnologies.com (192.43.217.199) 12.298 ms

Of course, it's still suspect, just for other reasons. ;-)


Richard


-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/