May 2006 - NANOG - lists.nanog.org

RFC: public efforts in the botnets realm
by Gadi Evron 22 May '06

22 May '06

Hi, this is an FYI. A discussion will now commense on the DA list to try and measure if public efforts are indeed a good idea, and how much good vs. bad they cause in the fight against botnets, distributed denial of service attacks, Internet survivability and online crime, as it can indeed be measured. I would also like the community's opinion on the subject at hand, so that we can relay it and make a more client-oriented decision (take the needs of the community into consideration as well). Thanks, Gadi. ---------- Forwarded message ---------- Date: Mon, 22 May 2006 02:02:48 -0500 (CDT) From: Gadi Evron <ge(a)linuxbox.org> To: <closed botnets list> Subject: public efforts Hi guys. our public efforts in the botnet realm thus far consist of *mainly*: 1. The monthly C&C report. 2. Public botnet reporting to us. 3. Public discussion list. The monthly report is now largely accepted by most in the net-ops community as reliable, and it meets the test of scrutiny. We had some early bumps on how we represent data, what data we want to show and what information we want to deduce from it - but I think we are there now. Public botnet reporting to us is going great. I stopped relaying them to the list is it is extremely time consuming for me, but they are dealt with. As soon as a volunteer who doesn't just want to talk to the press and take them off my back but also do this work comes along, we will get these again here too. The public discussion list has in my opinion brought an immense public awareness, law enforcement interest and industry work. Little to no new information was divulged there that the Bad Guys would not already know with their gigs of bot sources and exchange networks (not to mention support web forums). That's just my opinion, feel free to chime in. The monthly reports are great, as is getting data from the public of net-ops and sys-admins. The discussion list is on a tight leash, but I would like those of you who have been monitoring it and disagree with me to do so here and tell us why we failed there. If we indeed see the botnets@ list as a success, I would like us to move forward and divulge more redundant already public information to the public, and help move the cause along further than by classifying every bit of useless information as top secret. Thanks, I am looking forward to your input, Gadi. -- "In a good cause, there are no failures, only delayed successes". ~Isaac Asimov, "In a Good Cause".

1 0

Mail delivery problem to AOL for Cloud 9
by Mark Hennessy 20 May '06

20 May '06

I'm seeing a problem with mail delivery to AOL subscribers for e-mails originating from my network. If someone from AOL is monitoring this list could you please contact me off-list about this? I have tried many times to contact members of your organization by phone but have not been able to get this matter resolved through the usual channels. You may contact me at mhennessy(a)cloud9.net or hostmaster(a)cloud9.net . -- Mark Hennessy Cloud 9 Internet +1 914 696-4000 http://www.cloud9.net

2 1

Weekly Routing Table Report
by Routing Analysis Role Account 19 May '06

19 May '06

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 20 May, 2006 Analysis Summary ---------------- BGP routing table entries examined: 188610 Prefixes after maximum aggregation: 104284 Unique aggregates announced to Internet: 92582 Total ASes present in the Internet Routing Table: 22230 Origin-only ASes present in the Internet Routing Table: 19345 Origin ASes announcing only one prefix: 9245 Transit ASes present in the Internet Routing Table: 2885 Transit-only ASes present in the Internet Routing Table: 64 Average AS path length visible in the Internet Routing Table: 3.5 Max AS path length visible: 20 Max AS path prepend of ASN (34527) 16 Prefixes from unregistered ASNs in the Routing Table: 8 Unregistered ASNs in the Routing Table: 6 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 10 Number of addresses announced to Internet: 1538347176 Equivalent to 91 /8s, 177 /16s and 80 /24s Percentage of available address space announced: 41.5 Percentage of allocated address space announced: 60.0 Percentage of available address space allocated: 69.1 Total number of prefixes smaller than registry allocations: 93291 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 39800 Total APNIC prefixes after maximum aggregation: 16690 Prefixes being announced from the APNIC address blocks: 37504 Unique aggregates announced from the APNIC address blocks: 18371 APNIC Region origin ASes present in the Internet Routing Table: 2561 APNIC Region origin ASes announcing only one prefix: 733 APNIC Region transit ASes present in the Internet Routing Table: 386 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 225925856 Equivalent to 13 /8s, 119 /16s and 90 /24s Percentage of available APNIC address space announced: 70.6 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 121/8, 122/7, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 97594 Total ARIN prefixes after maximum aggregation: 57782 Prefixes being announced from the ARIN address blocks: 71589 Unique aggregates announced from the ARIN address blocks: 26499 ARIN Region origin ASes present in the Internet Routing Table: 10721 ARIN Region origin ASes announcing only one prefix: 4019 ARIN Region transit ASes present in the Internet Routing Table: 988 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 18 Number of ARIN addresses announced to Internet: 292645120 Equivalent to 17 /8s, 113 /16s and 105 /24s Percentage of available ARIN address space announced: 75.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 37713 Total RIPE prefixes after maximum aggregation: 25238 Prefixes being announced from the RIPE address blocks: 34722 Unique aggregates announced from the RIPE address blocks: 23499 RIPE Region origin ASes present in the Internet Routing Table: 8039 RIPE Region origin ASes announcing only one prefix: 4217 RIPE Region transit ASes present in the Internet Routing Table: 1319 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 20 Number of RIPE addresses announced to Internet: 249979076 Equivalent to 14 /8s, 230 /16s and 96 /24s Percentage of available RIPE address space announced: 78.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 RIPE Address Blocks 62/8, 80/5, 88/6, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 11361 Total LACNIC prefixes after maximum aggregation: 3680 Prefixes being announced from the LACNIC address blocks: 9450 Unique aggregates announced from the LACNIC address blocks: 5513 LACNIC Region origin ASes present in the Internet Routing Table: 689 LACNIC Region origin ASes announcing only one prefix: 227 LACNIC Region transit ASes present in the Internet Routing Table: 131 Average LACNIC Region AS path length visible: 4.1 Max LACNIC Region AS path length visible: 16 Number of LACNIC addresses announced to Internet: 26970112 Equivalent to 1 /8s, 155 /16s and 136 /24s Percentage of available LACNIC address space announced: 40.2 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2134 Total AfriNIC prefixes after maximum aggregation: 894 Prefixes being announced from the AfriNIC address blocks: 1472 Unique aggregates announced from the AfriNIC address blocks: 970 AfriNIC Region origin ASes present in the Internet Routing Table: 156 AfriNIC Region origin ASes announcing only one prefix: 49 AfriNIC Region transit ASes present in the Internet Routing Table: 25 Average AfriNIC Region AS path length visible: 3.4 Max AfriNIC Region AS path length visible: 13 Number of AfriNIC addresses announced to Internet: 4080640 Equivalent to 0 /8s, 62 /16s and 68 /24s Percentage of available AfriNIC address space announced: 12.2 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1146 7080 217 CHINANET-BACKBONE 9583 903 109 16 Sify Limited 4755 897 259 72 Videsh Sanchar Nigam Ltd. Aut 4766 685 4435 304 Korea Telecom (KIX) 1221 615 1556 471 Telstra Pty Ltd 9498 557 211 66 BHARTI BT INTERNET LTD. 7545 529 124 70 TPG Internet Pty Ltd 17488 518 32 9 Hathway IP Over Cable Interne 17676 485 7029 109 Softbank BB Corp. 9443 450 110 81 Primus Telecommunications 4802 380 80 173 Wantree Development 18101 359 85 23 Reliance Infocom Ltd Internet 17557 358 28 165 Pakistan Telecom 17849 351 22 113 Telecommunications Technology 17974 338 135 19 PT TELEKOMUNIKASI INDONESIA 2907 336 1749 312 SINET Japan 9929 326 221 57 China Netcom Corp. 7474 299 211 229 SingTel Optus Pty Ltd 9800 273 410 67 CHINA UNICOM 9837 266 78 159 Powertel Ltd ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1505 6225 965 AT&T WorldNet Services 4323 1293 734 254 Time Warner Telecom 6197 1006 622 472 BellSouth Network Solutions, 721 994 21945 303 DLA Systems Automation Center 174 953 5786 897 Cogent Communications 19029 949 151 109 New Edge Networks 18566 939 272 8 Covad Communications 701 932 6780 769 UUNET Technologies, Inc. 2386 877 522 675 AT&T Data Communications Serv 1239 845 2805 599 Sprint 209 708 3689 553 Qwest 19262 702 2101 184 Verizon Global Networks 20115 694 609 375 Charter Communications 22773 663 1745 45 Cox Communications, Inc. 7011 635 218 413 Citizens Utilities 11492 621 87 21 Cable One 852 582 1084 383 Telus Advanced Communications 6478 571 1523 337 AT&T Worldnet Services 19916 563 49 54 OLM LLC 855 545 244 64 Canadian Research Network RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 578 1952 456 UUNET - Commercial IP service 3301 307 1071 293 TeliaNet Sweden 3352 297 1644 30 Ibernet, Internet Access Netw 8220 294 472 267 COLT Telecommunications 3320 287 3989 240 Deutsche Telekom AG 680 245 2025 242 DFN-IP service G-WiN 3246 235 504 225 Song Networks 6746 232 89 208 Dynamic Network Technologies, 8708 219 276 202 Romania Data Systems S.A. 24863 212 42 10 LINKdotNET AS number 8551 202 198 24 Bezeq International 3215 199 1664 94 France Telecom Transpac 3269 198 2134 72 TELECOM ITALIA 1257 190 740 165 SWIPnet Swedish IP Network 30890 183 16 68 SC Kappa Invexim SRL 8866 179 37 15 Bulgarian Telecommunication C 786 171 1778 171 The JANET IP Service 5400 171 348 140 BT Ignite European Backbone 6830 169 765 35 UPC Distribution Services 3300 167 171 96 AUCS Communications Services LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 706 1083 226 UniNet S.A. de C.V. 22047 417 158 11 VTR PUNTO NET S.A. 16814 330 20 8 NSS, S.A. 11172 324 110 87 Servicios Alestra S.A de C.V 6147 262 126 22 Telefonica Del Peru 14117 205 12 6 Telefonica del Sur S.A. 10481 181 72 8 Prima S.A. 7303 169 79 24 Telecom Argentina Stet-France 11556 132 80 4 Cable-Wireless Panama 21826 132 16 23 INTERCABLE 6503 129 149 77 AVANTEL, S.A. 19169 129 8 21 Telconet 14259 116 10 12 GTD Internet S.A. 23216 113 21 9 RAMtelecom Telecomunicaciones 6505 109 88 79 Global One Communicaoes Ltda 7910 105 7 10 ANDINET ON LINE 5639 103 12 9 Telecommunications Services o 19429 103 58 44 E.T.B. 18822 98 7 9 TELEFONICA MANQUEHUE 14571 97 25 3 Internet Group do Brasil AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 282 803 233 The Internet Solution 8452 168 60 7 TEDATA 6713 137 135 11 Itissalat Al-MAGHRIB 2018 130 314 105 Tertiary Education Network 5536 121 8 18 Internet Egypt Network 24835 117 50 7 RAYA Telecom - Egypt 33783 105 6 2 EEPAD TISP TELECOM & INTERNET 2905 73 155 66 The Internetworking Company o 20928 58 16 2 Noor Advanced Technologies AS 15475 53 84 4 Nile Online 5713 39 294 35 Telkom SA Ltd 15706 31 8 3 Sudatel Internet Exchange Aut 33774 30 7 20 AS Number for Telecom Algeria 12455 27 6 3 Jambonet Autonomous system 23889 26 8 11 MAURITIUS TELECOM 8524 24 1 4 AUCEGYPT Autonomous System 16637 24 14 22 Johnnic e-Ventures 10798 22 1 13 Standard Bank of South Africa 2561 19 6 2 Egyptian Universities Network 21491 19 17 2 UTL On-line is RF broadband I Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1293 1039 Time Warner Telecom 18566 939 931 Covad Communications 4134 1146 929 CHINANET-BACKBONE 9583 903 887 Sify Limited 19029 949 840 New Edge Networks 4755 897 825 Videsh Sanchar Nigam Ltd. Aut 721 994 691 DLA Systems Automation Center 22773 663 618 Cox Communications, Inc. 11492 621 600 Cable One 6197 1006 534 BellSouth Network Solutions, 19262 702 518 Verizon Global Networks 19916 563 509 OLM LLC 17488 518 509 Hathway IP Over Cable Interne 5668 525 502 CenturyTel Internet Holdings, 9498 557 491 BHARTI BT INTERNET LTD. 855 545 481 Canadian Research Network 8151 706 480 UniNet S.A. de C.V. 7545 529 459 TPG Internet Pty Ltd 3602 539 429 Sprint Canada, Inc. 22047 417 406 VTR PUNTO NET S.A. List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65289 PRIVATE 148.164.1.0/24 4755 Videsh Sanchar Nigam 65128 PRIVATE 193.110.50.0/24 24652 Juniper Networks, Eu 24409 UNALLOCATED 203.119.29.0/24 9808 Guangdong Mobile Com 64515 PRIVATE 203.126.13.0/25 7610 SINGAPORE ADVANCE RE 64515 PRIVATE 203.126.13.128/26 7610 SINGAPORE ADVANCE RE 65280 PRIVATE 203.197.161.0/24 4755 Videsh Sanchar Nigam 65280 PRIVATE 203.200.14.0/24 4755 Videsh Sanchar Nigam 65280 PRIVATE 203.200.21.0/24 4755 Videsh Sanchar Nigam Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 183.206.196.0/24 2188 FR-RENATER-ASTER 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:9 /10:9 /11:27 /12:91 /13:200 /14:361 /15:703 /16:8809 /17:3213 /18:5312 /19:11653 /20:13118 /21:11365 /22:14645 /23:15812 /24:102224 /25:379 /26:250 /27:192 /28:64 /29:70 /30:50 /31:0 /32:36 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 922 939 Covad Communications 19029 880 949 New Edge Networks 6197 795 1006 BellSouth Network Solutions, 7018 793 1505 AT&T WorldNet Services 9583 732 903 Sify Limited 4323 637 1293 Time Warner Telecom 11492 612 621 Cable One 2386 605 877 AT&T Data Communications Serv 19916 557 563 OLM LLC 7011 544 635 Citizens Utilities 4766 495 685 Korea Telecom (KIX) 855 426 545 Canadian Research Network 5668 408 525 CenturyTel Internet Holdings, 15270 396 427 PaeTec.net -a division of Pae 1239 387 845 Sprint 702 359 578 UUNET - Commercial IP service 6517 357 388 Yipes Communications, Inc. 6198 356 508 BellSouth Network Solutions, 17849 351 351 Telecommunications Technology 8151 349 706 UniNet S.A. de C.V. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:8 8:42 12:1630 13:1 15:14 16:3 17:3 18:4 20:43 24:737 25:1 30:2 32:58 38:216 40:54 41:3 44:3 47:6 52:4 55:1 56:3 57:25 58:153 59:189 60:181 61:861 62:759 63:1931 64:3185 65:2259 66:3011 67:609 68:675 69:1512 70:361 71:85 72:713 73:23 74:36 80:775 81:646 82:600 83:398 84:389 85:533 86:395 87:353 88:90 89:196 124:279 125:407 128:154 129:190 130:109 131:317 132:33 133:8 134:159 135:46 136:178 137:75 138:207 139:68 140:468 141:136 142:380 143:165 144:224 145:39 146:330 147:136 148:331 149:186 150:114 151:90 152:68 153:107 154:6 155:202 156:100 157:149 158:166 159:168 160:87 161:76 162:247 163:147 164:180 165:203 166:166 167:242 168:489 169:128 170:335 171:14 183:1 190:72 192:5761 193:3365 194:2619 195:1836 196:846 198:3911 199:3217 200:4430 201:945 202:6636 203:6871 204:3894 205:2072 206:2410 207:2879 208:2088 209:3782 210:1957 211:691 212:1231 213:1474 214:363 215:41 216:4144 217:1145 218:273 219:199 220:659 221:362 222:162 End of report

1 0

Re: FCC Issues Second Order Mandating Internet Wiretapping Standards
by Fergie 19 May '06

19 May '06

Sorry, mea culpa. Below: s/EPIC/CDT/ Thanks, - ferg -- "Fergie" <fergdawg(a)netzero.net> wrote: Pardon the interruption, but I thought this might be slightly interesting to the list. EPIC.org: [snip] The Federal Communications Commission (FCC) has released a second order reaffirming its decision to require that broadband and certain VoIP services be designed to make government wiretapping easier. This new order was issued despite the fact that a federal appeals court is considering a legal challenge to the FCC's initial decision to extend the "Communications Assistance for Law Enforcement Act" (CALEA) to the Internet. In its second order, the FCC imposed new compliance deadlines, but refused to clarify exactly what service providers must do. CDT has led the appeals court challenge, which if successful will overrule the FCC order. [snip] EPIC statement: http://www.cdt.org/headlines/891 Second FCC CALEA order: http://www.cdt.org/digi_tele/20060512calea.pdf Now, back to your regularly scheduled programming. Cheers, - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

NANOG 37 San Jose - Hotel Reservations
by Carol Wadsworth 19 May '06

19 May '06

If you are planning to attend NANOG 37 in San Jose, please note the NANOG room rate at the San Jose Hilton expires this Monday, May 22. For additional meeting details, please see www.nanog.org. See you there!

1 0

BGP Update Report
by cidr-report＠potaroo.net 19 May '06

19 May '06

BGP Update Report Interval: 05-May-06 -to- 18-May-06 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS855 35385 3.2% 62.9 -- CANET-ASN-4 - Aliant Telecom 2 - AS9121 27016 2.4% 35.3 -- TTNET TTnet Autonomous System 3 - AS17974 16736 1.5% 49.1 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 4 - AS17430 14425 1.3% 424.3 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd 5 - AS6478 13693 1.2% 9.9 -- ATT-INTERNET3 - AT&T WorldNet Services 6 - AS3475 11937 1.1% 459.1 -- LANT-AFLOAT - NCTAMS LANT DET HAMPTON ROADS 7 - AS2386 11474 1.0% 12.9 -- INS-AS - AT&T Data Communications Services 8 - AS15611 9544 0.9% 117.8 -- Iranian Research Organisation 9 - AS4795 9410 0.8% 48.8 -- INDOSAT2-ID INDOSATNET-ASN 10 - AS14410 8827 0.8% 1765.4 -- DALTON - MCM, Inc., DBA: Internet@Dalton 11 - AS5803 8401 0.8% 94.4 -- DDN-ASNBLK - DoD Network Information Center 12 - AS10139 8391 0.8% 67.7 -- MERIDIAN-PH-AP Meridian Telekoms 13 - AS18049 7810 0.7% 58.3 -- TINP-TW Taiwan Infrastructure Network Technologie 14 - AS33766 7372 0.7% 388.0 -- NYALA-COMMUNICATIONS-PTY-LTD NYALA-COMMUNICATIONS-PTY-LTD 15 - AS702 7326 0.7% 21.2 -- AS702 MCI EMEA - Commercial IP service provider in Europe 16 - AS5839 6976 0.6% 258.4 -- DDN-ASNBLK - DoD Network Information Center 17 - AS9425 6935 0.6% 115.6 -- CONCENTRIX-PH-AS-AP Concentrix Technologies, Inc 18 - AS23918 6804 0.6% 51.9 -- CBB-BGP-IBARAKI Connexion By Boeing Ibaraki AS 19 - AS577 6731 0.6% 51.0 -- BACOM - Bell Canada 20 - AS7018 6608 0.6% 6.5 -- ATT-INTERNET4 - AT&T WorldNet Services TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS21027 3398 0.3% 3398.0 -- ASN-PARADORES PARADORES Autonomous System 2 - AS3043 2703 0.2% 2703.0 -- AMPHIB-AS - Amphibian Media Corporation 3 - AS34382 2032 0.2% 2032.0 -- ASSYRUS-SRL-AS Assyrus Srl Maintainer 4 - AS14410 8827 0.8% 1765.4 -- DALTON - MCM, Inc., DBA: Internet@Dalton 5 - AS19982 5524 0.5% 1381.0 -- TOWERSTREAM-PROV - Towerstream 6 - AS23607 2233 0.2% 1116.5 -- ITXPRESS-AS-AP itXpress Pty Ltd. Network AS ISP and DSL 7 - AS16705 2077 0.2% 1038.5 -- STORAGEAPPS - Storage Apps Inc. 8 - AS34378 910 0.1% 910.0 -- RUG-AS Razguliay-UKRROS Group 9 - AS33871 6424 0.6% 642.4 -- NORILSK-TELECOM-AS Norilsk-Telecom Ltd. 10 - AS23917 1251 0.1% 625.5 -- BRIBIE-NET-AS-AP Bribie Island Net Multihomed, Brisbane 11 - AS21260 620 0.1% 620.0 -- POSITIVE-INTERNET-UK-AS Positive Internet UK AS 12 - AS7013 1229 0.1% 614.5 -- NETSELECT - Health Sciences Libraries Consortium 13 - AS7442 577 0.1% 577.0 -- FEDERATED-CA-ASN - Federated Insurance Company of Canada 14 - AS36715 556 0.1% 556.0 -- GSA-ASN - GLOBAL SECURITIES ADVISORS LLC 15 - AS36565 510 0.1% 510.0 -- COUNTY-OF-MONTGOMERY-PA - County of Montgomery 16 - AS30457 997 0.1% 498.5 -- MEEMIC - Meemic Insurance Company 17 - AS3475 11937 1.1% 459.1 -- LANT-AFLOAT - NCTAMS LANT DET HAMPTON ROADS 18 - AS22988 459 0.0% 459.0 -- CAMBARASN1 - Cameron and Barkley Company 19 - AS3319 3140 0.3% 448.6 -- KSNET KSNet 20 - AS17430 14425 1.3% 424.3 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 81.212.141.0/24 4184 0.3% AS9121 -- TTNET TTnet Autonomous System 2 - 81.212.149.0/24 3916 0.3% AS9121 -- TTNET TTnet Autonomous System 3 - 62.81.240.0/24 3398 0.3% AS21027 -- ASN-PARADORES PARADORES Autonomous System 4 - 211.162.88.0/21 3240 0.2% AS17430 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd 5 - 220.114.32.0/21 3231 0.2% AS17430 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd 6 - 209.140.24.0/24 2703 0.2% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 7 - 61.0.0.0/8 2556 0.2% AS4678 -- FINE CANON NETWORK COMMUNICATIONS INC. 8 - 81.212.197.0/24 2527 0.2% AS9121 -- TTNET TTnet Autonomous System 9 - 195.175.82.0/23 2362 0.2% AS9121 -- TTNET TTnet Autonomous System 10 - 85.158.80.0/21 2032 0.2% AS34382 -- ASSYRUS-SRL-AS Assyrus Srl Maintainer 11 - 220.114.40.0/22 1992 0.1% AS17430 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd 12 - 211.162.82.0/23 1990 0.1% AS17430 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd 13 - 211.162.84.0/22 1990 0.1% AS17430 -- GWBN-CHENGDU Great Wall Broadband Network Service Co.,Ltd 14 - 209.160.56.0/22 1980 0.1% AS14361 -- HOPONE-DCA - HopOne Internet Corporation 15 - 152.74.0.0/16 1964 0.1% AS11340 -- Red Universitaria Nacional 16 - 207.43.166.0/23 1772 0.1% AS14410 -- DALTON - MCM, Inc., DBA: Internet@Dalton 17 - 65.174.4.0/23 1772 0.1% AS14410 -- DALTON - MCM, Inc., DBA: Internet@Dalton 18 - 65.119.232.0/24 1764 0.1% AS14410 -- DALTON - MCM, Inc., DBA: Internet@Dalton 19 - 205.160.25.0/24 1762 0.1% AS14410 -- DALTON - MCM, Inc., DBA: Internet@Dalton 20 - 208.46.29.0/24 1757 0.1% AS14410 -- DALTON - MCM, Inc., DBA: Internet@Dalton Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 19 May '06

19 May '06

This report has been generated at Fri May 19 21:48:57 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 12-05-06 184436 121583 13-05-06 184477 121546 14-05-06 184416 121611 15-05-06 184572 121619 16-05-06 184547 121741 17-05-06 184490 121623 18-05-06 184811 121829 19-05-06 184902 121899 AS Summary 22138 Number of ASes in routing system 9253 Number of ASes announcing only one prefix 1507 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91362816 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 19May06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 185055 121916 63139 34.1% All ASes AS4323 1290 258 1032 80.0% TWTC - Time Warner Telecom, Inc. AS4134 1135 281 854 75.2% CHINANET-BACKBONE No.31,Jin-rong Street AS4755 899 80 819 91.1% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS18566 939 218 721 76.8% COVAD - Covad Communications Co. AS721 993 308 685 69.0% DLA-ASNBLOCK-AS - DoD Network Information Center AS22773 660 54 606 91.8% CCINET-2 - Cox Communications Inc. AS7018 1507 963 544 36.1% ATT-INTERNET4 - AT&T WorldNet Services AS6197 1006 480 526 52.3% BATI-ATL - BellSouth Network Solutions, Inc AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS855 545 64 481 88.3% CANET-ASN-4 - Aliant Telecom AS17488 518 60 458 88.4% HATHWAY-NET-AP Hathway IP Over Cable Internet AS3602 540 110 430 79.6% AS3602-RTI - Rogers Telecom Inc. AS9498 558 145 413 74.0% BBIL-AP BHARTI BT INTERNET LTD. AS17676 485 109 376 77.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS15270 422 50 372 88.2% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS11492 621 269 352 56.7% CABLEONE - CABLE ONE AS4766 653 307 346 53.0% KIXS-AS-KR Korea Telecom AS812 376 33 343 91.2% ROGERS-CABLE - Rogers Cable Inc. AS22047 417 76 341 81.8% VTR BANDA ANCHA S.A. AS6467 383 51 332 86.7% ESPIRECOMM - Xspedius Communications Co. AS19262 660 355 305 46.2% VZGNI-TRANSIT - Verizon Internet Services Inc. AS16852 354 51 303 85.6% FOCAL-CHICAGO - Focal Data Communications of Illinois AS18101 361 59 302 83.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS8151 707 420 287 40.6% Uninet S.A. de C.V. AS6167 342 64 278 81.3% CELLCO-PART - Cellco Partnership AS14654 291 14 277 95.2% WAYPORT - Wayport AS16814 330 56 274 83.0% NSS S.A. AS5668 524 252 272 51.9% AS-5668 - CenturyTel Internet Holdings, Inc. AS3352 297 30 267 89.9% TELEFONICA-DATA-ESPANA Internet Access Network of TDE AS6198 508 243 265 52.2% BATI-MIA - BellSouth Network Solutions, Inc Total 18884 5525 13359 70.7% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.90.128.0/20 AS6971 ESCH - Eschelon Telecommunications, Inc. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.51.134.0/24 AS29876 LNTC - Latency LLC 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.163.96.0/20 AS25767 WAVEFORM - Waveform Technology, LLC 66.187.96.0/24 AS10026 ANC Asia Netcom Corporation 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.31.151.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 183.206.196.0/24 AS2188 FR-RENATER-ASTER Reseau Regional ASTER 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 AFRINIC African Network Information Center 192.96.37.0/24 AS10474 AFRINIC African Network Information Center 192.96.135.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.136.0/23 AS2018 TENET - 1 - The Uninet Project 192.96.140.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.143.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.145.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.177.0/24 AS6083 POSIX-AFRICA Posix Systems 192.96.250.0/24 AS2018 TENET - 1 - The Uninet Project 192.107.104.0/24 AS6458 GUATEL 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.168.255.255/32 AS4637 REACH Reach Network Border AS 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.156.206.0/24 AS4589 EASYNET Easynet Group Plc 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.246.216.0/22 AS15622 MEOCOM old meocom Autonomous System 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.92.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.222.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.249.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.250.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.251.0/24 AS2018 TENET - 1 - The Uninet Project 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.96.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.199.198.0/24 AS13671 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS3542 ITSDN-U5 - DISA/UNRRA 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.45.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/22 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.204.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.205.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.206.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.207.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.134.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.89.143.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 204.29.185.0/24 AS7268 ATHENET - Athenet Internet Services 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 208.111.0.0/16 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 208.111.0.0/17 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 208.111.0.0/18 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 208.111.64.0/18 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 208.111.128.0/17 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 208.111.128.0/18 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 208.111.192.0/18 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 209.40.192.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.200.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.208.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.216.0/21 AS6487 CyberNet de Guatemala S.A. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.201.72.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.73.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.74.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.75.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.76.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.77.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.78.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.79.0/24 AS14709 Telefonica Moviles Panama S.A. 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

Re: How to tell if something is anycasted?
by Peter Boothe 19 May '06

19 May '06

On Thu, 18 May 2006, Dean Anderson wrote: > First, I would strongly recommend _against_ using DNS Anycast, since > anycast does not work for stateful DNS, which is required for DNSSEC. > Second, there are many problems involved in DNS Anycast management and > problem tracking. I agree with the second - it certainly does make debugging harder. I also agree that the method I mentioned is not foolproof. But your first statement is probably false. We did a broad survey about 1.5 yrs ago and found that the average time between switches was 14.4 minutes, but the median AS saw root switches every 3 hours on average (http://www.nanog.org/mtg-0505/boothe.html) Some ASs had severe extant routing problems, and dragged the mean a long ways away from the median. Because stateful DNS queries are really short lived, let's assume a flow of ~10 seconds duration. 14 minutes is 60 * 14 seconds, and the chance that our flow to that given root is going to overlap is 10/(60*14), or about 1.2%. Which isn't great, but isn't too bad. If we look at the median AS, however, then things look a lot better. Switching every 3 hours reduces that unreliability by a factor of 3*60/14 =~ 12.9, which means that anycast reduces DNS reliability by just less than 0.1% for a given root. Given that the difference in reliability (according to DNSmon) between anycasted and non-anycasted roots is 1% in anycast's favor (http://www.nanog.org/mtg-0505/karrenberg.html) then for the majority of ASs, anycast is a net win in reliability even for stateful DNS, as long as the flows are short-lived. Counter-intuitive, I agree. But it seems to be true for the existing DNS anycast deployment on the internet (or at least was true in late 2004). -Peter -- Peter Boothe PhD Student "Young man, you think you're very Computer Science smart, but it's turtles all the way University of Oregon down!" http://www.cs.uoregon.edu/~peter

1 0

Renesys dissects the Bluesecurity DDoS
by Suresh Ramasubramanian 18 May '06

18 May '06

http://www.renesys.com/blog/2006/05/the_bluesecurity_fiasco_dont_m.shtml -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

2 1

Troubles with HE's Tunnelbroker
by Dan Mahoney, System Admin 18 May '06

18 May '06

I know at least some people here (srs?) use HE.net's tunnelbroker service. Has anyone else been experiencing issues? I have three different tunnels that I've noticed are down (to various data centers), and calling their support department (and emailing) thusfar have proved to be less than helpful. If anyone else using the service could contact me out-of-band in the interest of comparing notes, I'd greatly appreciate it. Thanks, Dan Mahoney -- "Man, this is such a trip" -Dan Mahoney, October 25, 1997 --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org ---------------------------

5 4