<HTML><HEAD>
<STYLE id=eMClientCss>
blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weight: normal; font-style: normal; white-space: pre-wrap; }
a img { border: 0px; }body {font-family: Tahoma;font-size: 12pt;}
.plain pre, .plain tt {font-family: Tahoma;font-size: 12pt;}</STYLE>
</HEAD>
<BODY>
<DIV>If I receive some traffic at an<EM> </EM>IX<EM> </EM>peering router interface, I might want to know how I got it.</DIV>
<DIV>If it is a stream of bad traffic I might want to ask my upstream peer to help turn it off.</DIV>
<DIV> </DIV>
<DIV>How do I find out who did send it to me?</DIV>
<DIV>If I capture a sample packet I could see the source MAC address. Now I have to identify who owns the device with that MAC.</DIV>
<DIV> </DIV>
<DIV>Is there any guidance from the IX operators on how to do this?</DIV>
<DIV>I'm sure phone calls to Ops teams are not cost effective or time efficient for anyone.</DIV>
<DIV>A common programmatic method across IXes would suit my use-case admirably.</DIV>
<DIV> </DIV>
<DIV>I'd like to hear from anybody who either has a method in an IX, or who would like a method to exist.</DIV>
<DIV> </DIV>
<DIV>Regards</DIV>
<DIV>Steve</DIV>
<DIV> </DIV>
<DIV id=signature_old>
<DIV align=left><SPAN lang=EN-US style="FONT-SIZE: 10pt; FONT-FAMILY: Arial; mso-ansi-language: EN-US">
<DIV dir=ltr><B style="FONT-SIZE: 12px"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(31,73,125)">Steve Nash CEng MIET </SPAN></B><SPAN style="FONT-SIZE: 12px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(31,73,125)"> </SPAN><SPAN style="FONT-SIZE: 12px; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(31,73,125)">|</SPAN><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(31,73,125)"> Consultant Engineer EMEA </SPAN></DIV>
<DIV dir=ltr>
<P style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(34,34,34); FONT: 12px arial, sans-serif; WIDOWS: 1; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><B><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(107,164,44)">Arbor Networks</SPAN></B></P>
<P style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(34,34,34); FONT: 12px arial, sans-serif; WIDOWS: 1; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><SPAN style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri, sans-serif; COLOR: rgb(31,73,125)">+44 7720 291359 (m)</SPAN><SPAN style="FONT-SIZE: 11pt; FONT-FAMILY: Calibri, sans-serif; COLOR: rgb(31,73,125)"></SPAN></P>
<P style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(34,34,34); FONT: 12px arial, sans-serif; WIDOWS: 1; LETTER-SPACING: normal; BACKGROUND-COLOR: rgb(255,255,255); TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px"><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Arial, sans-serif; COLOR: rgb(31,73,125)"><A style="COLOR: rgb(17,85,204)" href="http://www.arbornetworks.com/">www.arbornetworks.com</A></SPAN></P></SPAN></DIV></DIV>
<DIV>
<TABLE style="WHITE-SPACE: normal; WORD-SPACING: 0px; TEXT-TRANSFORM: none; COLOR: rgb(0,0,0); FONT: medium 'Times New Roman'; WIDOWS: 1; LETTER-SPACING: normal; TEXT-INDENT: 0px; -webkit-text-stroke-width: 0px" cellSpacing=0 cellPadding=0 width=600 border=0>
<TBODY>
<TR>
<TD width=600><A href="https://responder.excellenceplatform.com/register/invite/197?source=Aefthreat"><IMG style="BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px; DISPLAY: block" alt="" src="http://images.enigma-hosting.co.uk/arbor/16506/threat-investigation.gif" width=600 height=100></A></TD></TR></TBODY></TABLE></DIV></DIV>
<DIV> </DIV></BODY></HTML>