February 2005 - NANOG - lists.nanog.org

Qwest wierdness..
by Peter Kranz 18 Feb '05

18 Feb '05

Anyone running into odd problems at Qwest lately.. One of our /22s is getting dropped whenever it hits Qwest, but unfortunately Qwest is announcing a BGP path for the /22.. so all Qwest routing for this /22 is dead.. The subnet is 204.11.104.0/22 .. if someone at Qwest can resolve or explain the source of this issue, please contact us, as opening a trouble ticket has not gone anywhere yet. Peter Kranz Founder/CEO - Unwired Ltd Mobile: 510-207-0000 pkranz(a)unwiredltd.com

1 0

Re: Kornet/ChinaNet was Re: ChinaNet Contacts
by Suresh Ramasubramanian 18 Feb '05

18 Feb '05

On Fri, 18 Feb 2005 09:43:05 +0000, Alex Bligh <alex(a)alex.org.uk> wrote: > --On 18 February 2005 08:32 +0000 Simon Waters <simonw(a)zynet.net> wrote: > > > Whilst I can appreciate that Kornet may have issues with a lot of > > broadband users, but the other big Korean company seems to have it > > solved. What I see is what appear to be (using whois data!) US companies > > buying transit from them. > > How are US companies with Korean offices meant to take connectivity > then? I think what Simon has been seeing is the Wholesalebandwidth AS -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

1 0

Qwest to counter Verizon and bid again for MCI
by Fergie (Paul Ferguson) 18 Feb '05

18 Feb '05

Apparently, the fat lady ain't sung yet. :-) http://www.washingtonpost.com/wp-dyn/articles/A32801-2005Feb17.html - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

1 0

More on Vonage "blocking"...
by Fergie (Paul Ferguson) 18 Feb '05

18 Feb '05

SBC, Verizon Say They Didn't Block Vonage http://www.advancedippipeline.com/60401872 - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 18 Feb '05

18 Feb '05

This report has been generated at Fri Feb 18 21:44:32 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 11-02-05 154341 104239 12-02-05 151889 104225 13-02-05 151910 104234 14-02-05 151896 104250 15-02-05 152013 104373 16-02-05 152053 104256 17-02-05 151806 104586 18-02-05 152286 104607 AS Summary 18888 Number of ASes in routing system 7728 Number of ASes announcing only one prefix 1443 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 90784256 Largest address span announced by an AS (/32s) AS721 : DNIC DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 18Feb05 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 152569 104699 47870 31.4% All ASes AS4323 1024 222 802 78.3% TWTC Time Warner Telecom AS18566 767 7 760 99.1% CVAD Covad Communications AS4134 870 205 665 76.4% CHINANET-BACKBONE No.31,Jin-rong Street AS721 1152 582 570 49.5% DNIC DoD Network Information Center AS22773 472 26 446 94.5% CXA Cox Communications Inc. AS27364 464 34 430 92.7% ARMC Armstrong Cable Services AS7018 1443 1023 420 29.1% ATTW AT&T WorldNet Services AS6197 861 458 403 46.8% BNS-14 BellSouth Network Solutions, Inc AS3602 495 136 359 72.5% SPCA Sprint Canada Inc. AS6478 499 187 312 62.5% ATTW AT&T WorldNet Services AS17676 396 88 308 77.8% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS9929 340 36 304 89.4% CNCNET-CN China Netcom Corp. AS4766 575 283 292 50.8% KIXS-AS-KR Korea Telecom AS1239 948 662 286 30.2% SPRN Sprint AS14654 259 6 253 97.7% WAYPOR-3 Wayport AS9443 378 126 252 66.7% INTERNETPRIMUS-AS-AP Primus Telecommunications AS6140 382 138 244 63.9% IMPSA ImpSat AS7545 499 260 239 47.9% TPG-INTERNET-AP TPG Internet Pty Ltd AS4355 293 62 231 78.8% ERSD EARTHLINK, INC AS25844 244 16 228 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS6198 451 226 225 49.9% BNS-14 BellSouth Network Solutions, Inc AS15270 249 35 214 85.9% PDP-14 PaeTec.net -a division of PaeTecCommunications, Inc. AS22909 420 218 202 48.1% CMCS Comcast Cable Communications, Inc. AS2386 821 620 201 24.5% ADCS-1 AT&T Data Communications Services AS5668 450 255 195 43.3% CIH-12 CenturyTel Internet Holdings, Inc. AS6517 306 120 186 60.8% YIPS Yipes Communications, Inc. AS9498 238 54 184 77.3% BBIL-AP BHARTI BT INTERNET LTD. AS19632 191 8 183 95.8% Metropolis Intercom AS6167 260 78 182 70.0% CELLCO Cellco Partnership AS16852 240 64 176 73.3% FDCI Focal Data Communications of Illinois Total 15987 6235 9752 61.0% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.38.0/24 AS25994 NPGCAB NPG Cable, INC 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 64.17.32.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.17.33.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.17.37.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.57.160.0/19 AS3561 SAVVI-3 Savvis 64.92.128.0/19 AS3561 SAVVI-3 Savvis 64.127.0.0/18 AS7018 ATTW AT&T WorldNet Services 64.209.192.0/18 AS3561 SAVVI-3 Savvis 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 ELISA-AS Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS11814 IGST Information Gateway Services - Toronto 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.153.144.0/21 AS721 DNIC DoD Network Information Center 192.172.0.0/19 AS721 DNIC DoD Network Information Center 192.188.208.0/20 AS721 DNIC DoD Network Information Center 192.200.100.0/24 AS7018 ATTW AT&T WorldNet Services 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS721 DNIC DoD Network Information Center 198.97.80.0/20 AS721 DNIC DoD Network Information Center 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.240.0/20 AS721 DNIC DoD Network Information Center 198.97.247.0/24 AS3475 DEPART-52 Department of the Navy 198.101.4.0/22 AS721 DNIC DoD Network Information Center 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.160.171.0/24 AS7046 UU UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS721 DNIC DoD Network Information Center 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.96.44.0/23 AS19092 360NE-1 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NE-1 360Networks (USA) Inc. 199.114.0.0/21 AS721 DNIC DoD Network Information Center 199.114.128.0/18 AS721 DNIC DoD Network Information Center 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.134.0/24 AS3541 DISAUN DISA/UNRRA 199.114.136.0/24 AS27044 DNIC DoD Network Information Center 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS27033 DNIC DoD Network Information Center 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS27034 DNIC DoD Network Information Center 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DNIC DoD Network Information Center 199.123.0.0/18 AS721 DNIC DoD Network Information Center 199.123.16.0/20 AS721 DNIC DoD Network Information Center 199.123.80.0/21 AS721 DNIC DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 201.239.0.0/16 AS22047 VTR BANDA ANCHA S.A. 202.72.240.0/20 AS24320 RAILCOM Mongolian Railway Commercial Center Railcom 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 TELEONE-HK TeleTeleOne (HK) Limited 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.170.14.0/23 AS6648 ASN-SKYINTERNET BAYANTEL-SKY INTERNET TIER 1 ISP in the Philippines 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 206.108.96.0/19 AS577 BAC-14 Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIIN VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 208.138.48.0/20 AS7955 SOURCE-48 SourceNet Corporation 209.27.51.0/24 AS14132 INTERN-582 Internet Gateway Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.48.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.49.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 216.37.110.0/23 AS4264 CERFN California Education and Research Federation Network 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.185.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.186.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.187.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.188.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.189.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.190.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.191.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org swinog(a)swinog.ch

1 0

ChinaNet Contacts
by Jon R. Kibler 18 Feb '05

18 Feb '05

I know that this is a REALLY sore point, but has anyone ever established any good working relations with anyone in CHINANET or other China-based ISPs? In recent weeks, over 80% of our port scans and various miscreant probes have originated from a very small number of IPs in China. Trying to contact the IP owner via email usually finds either the mailbox is full, the email address is invalid, or the mail server is not working. Anyone had any success in this area? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer A.S.E.T., Inc. Charleston, SC USA (843) 849-8214 ================================================== Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email.

13 14

Inktomi Contact
by Jeff Workman 17 Feb '05

17 Feb '05

Can a real, live human being from Inktomi please ping me offline wrt a phishing site on your network? -J -- Jeff Workman | jworkman(a)pimpworks.org | http:/www.pimpworks.org

1 0

RE: ChinaNet Contacts
by Hannigan, Martin 17 Feb '05

17 Feb '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Richard Cox > Sent: Thursday, February 17, 2005 2:01 PM > To: nanog(a)merit.edu > Subject: Re: ChinaNet Contacts > > > > On Thu, 17 Feb 2005 12:13:07 -0500 > "Jon R. Kibler" <Jon.Kibler(a)aset.com> wrote: > > > I know that this is a REALLY sore point, but has anyone ever > > established any good working relations with anyone in CHINANET > > or other China-based ISPs? > > Yes, indeed. And been out to Beijing to have meetings with them. I wouldn't go as far as label it systemic. Both Chinese and Korean organizations are participating in some of the behind the scenes security/mitigation activities going on and have been helpful. Not all. Some. -M<

4 3

RE: Vonage complains about VoIP-blocking
by Hannigan, Martin 17 Feb '05

17 Feb '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > John Levine > Sent: Tuesday, February 15, 2005 9:02 PM > To: nanog(a)nanog.org > Subject: Re: Vonage complains about VoIP-blocking > > > > >http://advancedippipeline.com/60400413 > > > >The FCC is investigating -- it's not even clear if it's > illegal to do > >that. > > For what it's worth, my ISP is owned by my rural ILEC, and I just > cancelled my Vonage service because it had become unusable. > > However, the problem was not TFTP, it was rotten inbound voice > quality, combined with a complete inability to contact anyone at > Vonage by e-mail or phone to do anything about it. My link is a T1, > and it has plenty of spare inbound capacity. Traceroutes suggest that > Vonage is suffering from packet loss problems at gateways between > their NSP and mine, or perhaps the packet loss within my NSP (Sprint) > was too much for it. > > I switched to Lingo which works fine. Its box uses NTP to set the > time, then http to configure. Odd regarding the Vonage connection. Their sitting on UU from where I can see and I have excellent transit to them from Comcast. I've tested Vonage, only because I had it, with the Semena NE2000 Network Test Device and introduced multiple error, path, and latency issues and it stood up very well. At one point, I jacked up the latency to 4000ms and I was still able to place, communicate, and drop calls effectively. I was very surprised at how it handled that large introduced latency. I don't know about Vonage support. Never tried it. -M<

5 5

Re: Choicepoint [was: Re: Break-In At SAIC Risks ID Theft]
by Fergie (Paul Ferguson) 17 Feb '05

17 Feb '05

Yes, this _is_ much worse. :-/ Thinking out loud here, but one's imagination runs wild at the prospect of how much it will take before more credence is given to a serious top-to-bottom security infrastructure revamp. And holding these firms $responsible_ ... $.02, - ferg -- Rich Kulawiec <rsk(a)gsp.org> wrote: It gets worse: Database giant gives access to fake firms http://www.msnbc.msn.com/id/6969799/ ---Rsk -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

3 2