December 2007 - NANOG - lists.nanog.org

BGP Update Report
by cidr-report＠potaroo.net 07 Dec '07

07 Dec '07

BGP Update Report Interval: 05-Nov-07 -to- 06-Dec-07 (32 days) Observation Point: BGP Peering with AS2.0 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8452 432355 5.7% 1426.9 -- TEDATA TEDATA 2 - AS16637 181207 2.4% 2588.7 -- MTNNS-AS 3 - AS8866 167906 2.2% 587.1 -- BTC-AS Bulgarian Telecommunication Company Plc. 4 - AS33783 99303 1.3% 758.0 -- EEPAD 5 - AS9121 57416 0.8% 267.1 -- TTNET TTnet Autonomous System 6 - AS4755 56357 0.7% 37.0 -- VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System 7 - AS14390 52048 0.7% 826.2 -- 8 - AS33588 47311 0.6% 100.4 -- 9 - AS9498 44615 0.6% 41.4 -- BBIL-AP BHARTI BT INTERNET LTD. 10 - AS9829 43382 0.6% 39.0 -- BSNL-NIB National Internet Backbone 11 - AS24731 41998 0.6% 875.0 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 12 - AS8151 41802 0.6% 33.0 -- Uninet S.A. de C.V. 13 - AS26407 41410 0.5% 1533.7 -- 14 - AS702 41323 0.5% 41.0 -- AS702 Verizon Business EMEA - Commercial IP service provider in Europe 15 - AS4621 41081 0.5% 270.3 -- UNSPECIFIED UNINET-TH 16 - AS26829 40458 0.5% 40458.0 -- 17 - AS17540 39718 0.5% 39718.0 -- MTL-AP Modern Terminals Limited 18 - AS17974 36040 0.5% 77.7 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 19 - AS11456 31912 0.4% 20.4 -- 20 - AS4134 31855 0.4% 18.1 -- CHINANET-BACKBONE No.31,Jin-rong Street TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS26829 40458 0.5% 40458.0 -- 2 - AS17540 39718 0.5% 39718.0 -- MTL-AP Modern Terminals Limited 3 - AS22072 29709 0.4% 29709.0 -- 4 - AS33447 10826 0.1% 10826.0 -- 5 - AS19334 10207 0.1% 10207.0 -- 6 - AS6174 15872 0.2% 7936.0 -- 7 - AS32650 6143 0.1% 6143.0 -- 8 - AS40474 6109 0.1% 6109.0 -- 9 - AS42704 4531 0.1% 4531.0 -- ELITENETWORK-AS SC Elite Network Communications SRL 10 - AS30929 4242 0.1% 4242.0 -- HUTCB Hidrotechnical Faculty - Technical University 11 - AS40256 13849 0.2% 3462.2 -- 12 - AS13956 6740 0.1% 3370.0 -- 13 - AS14453 12472 0.2% 3118.0 -- 14 - AS26114 2760 0.0% 2760.0 -- 15 - AS16637 181207 2.4% 2588.7 -- MTNNS-AS 16 - AS33618 7515 0.1% 2505.0 -- 17 - AS39107 4183 0.1% 2091.5 -- INTERLAN-AS Asociatia Interlan 18 - AS43656 1800 0.0% 1800.0 -- INTERTELECOM-TV Teleradiocompany Intertelecom, Sumy, UA 19 - AS38240 1745 0.0% 1745.0 -- CALYONFINANCIAL-AS-JP Calyon Financial, Inc. 20 - AS31942 3080 0.0% 1540.0 -- TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 192.96.13.0/24 83705 1.0% AS16637 -- MTNNS-AS 2 - 192.96.14.0/24 83688 1.0% AS16637 -- MTNNS-AS 3 - 209.163.125.0/24 50772 0.6% AS14390 -- 4 - 83.228.103.0/24 46138 0.6% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 5 - 83.228.59.0/24 44078 0.5% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 6 - 83.228.61.0/24 43751 0.5% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 7 - 12.108.254.0/24 40458 0.5% AS26829 -- 8 - 203.83.127.0/24 39718 0.5% AS17540 -- MTL-AP Modern Terminals Limited 9 - 12.106.30.0/24 29709 0.4% AS22072 -- 10 - 125.23.208.0/20 29372 0.4% AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. 11 - 196.219.236.0/24 28693 0.3% AS8452 -- TEDATA TEDATA 12 - 196.219.249.0/24 28676 0.3% AS8452 -- TEDATA TEDATA 13 - 196.219.244.0/24 28672 0.3% AS8452 -- TEDATA TEDATA 14 - 196.219.235.0/24 28670 0.3% AS8452 -- TEDATA TEDATA 15 - 196.219.245.0/24 28669 0.3% AS8452 -- TEDATA TEDATA 16 - 196.219.248.0/24 28668 0.3% AS8452 -- TEDATA TEDATA 17 - 196.219.234.0/24 28660 0.3% AS8452 -- TEDATA TEDATA 18 - 196.219.247.0/24 28659 0.3% AS8452 -- TEDATA TEDATA 19 - 196.219.246.0/24 28652 0.3% AS8452 -- TEDATA TEDATA 20 - 213.158.189.0/24 28294 0.3% AS8452 -- TEDATA TEDATA Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 07 Dec '07

07 Dec '07

This report has been generated at Fri Dec 7 21:13:50 2007 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 30-11-07 245357 161051 01-12-07 245652 161180 02-12-07 245249 161306 03-12-07 245521 161232 04-12-07 245305 161536 05-12-07 245493 155252 06-12-07 243093 155449 07-12-07 245371 156129 AS Summary 26932 Number of ASes in routing system 11368 Number of ASes announcing only one prefix 1966 Largest number of prefixes announced by an AS AS4538 : ERX-CERNET-BKB China Education and Research Network Center 89092608 Largest address span announced by an AS (/32s) AS721 : Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 07Dec07 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 245580 156175 89405 36.4% All ASes AS4538 1966 721 1245 63.3% ERX-CERNET-BKB China Education and Research Network Center AS4755 1490 312 1178 79.1% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS18566 1034 33 1001 96.8% AS4323 1379 379 1000 72.5% AS9498 1060 69 991 93.5% BBIL-AP BHARTI BT INTERNET LTD. AS22773 819 76 743 90.7% AS8151 1156 433 723 62.5% AS11492 1172 453 719 61.3% AS6478 1118 413 705 63.1% AS4134 1041 381 660 63.4% CHINANET-BACKBONE No.31,Jin-rong Street AS17488 917 274 643 70.1% HATHWAY-NET-AP Hathway IP Over Cable Internet AS19262 800 188 612 76.5% AS15270 608 41 567 93.3% AS18101 610 77 533 87.4% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS2386 1323 801 522 39.5% AS19916 569 76 493 86.6% AS7018 1512 1020 492 32.5% AS6197 1032 542 490 47.5% AS7545 670 198 472 70.4% TPG-INTERNET-AP TPG Internet Pty Ltd AS6517 595 142 453 76.1% AS4812 515 91 424 82.3% CHINANET-SH-AP China Telecom (Group) AS7011 992 578 414 41.7% AS17676 504 90 414 82.1% GIGAINFRA BB TECHNOLOGY Corp. AS3356 840 429 411 48.9% LEVEL3 Level 3 Communications AS5668 657 272 385 58.6% AS4808 518 144 374 72.2% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS9443 450 76 374 83.1% INTERNETPRIMUS-AS-AP Primus Telecommunications AS4668 519 169 350 67.4% LGNET-AS-KR LG CNS AS855 550 216 334 60.7% AS16814 427 94 333 78.0% Total 26843 8788 18055 67.3% Top 30 total Possible Bogus Routes 24.48.0.0/13 AS19548 24.48.10.0/23 AS19548 24.48.12.0/22 AS19548 24.48.80.0/21 AS19548 24.54.224.0/19 AS20001 24.105.32.0/20 AS11427 24.212.80.0/20 AS35911 24.246.0.0/17 AS7018 24.246.128.0/18 AS7018 31.31.31.0/24 AS9730 BHARTITELESONIC-AS-IN-AP Bharti Telesonic Ltd 60.253.0.0/18 AS27572 60.253.64.0/19 AS27572 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 63.140.238.0/24 AS20471 63.141.42.0/24 AS701 63.143.71.0/24 AS701 63.143.115.0/24 AS701 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 63.248.0.0/17 AS3356 LEVEL3 Level 3 Communications 64.6.216.0/21 AS19783 64.7.112.0/21 AS6453 GLOBEINTERNET Teleglobe America Inc. 64.7.120.0/21 AS6453 GLOBEINTERNET Teleglobe America Inc. 64.17.32.0/24 AS13488 64.17.33.0/24 AS13488 64.17.37.0/24 AS13488 64.46.96.0/20 AS13680 AS13680 Hostway Corporation Tampa, FL 64.46.112.0/20 AS30217 DESYNC Desync Corporation 64.50.128.0/18 AS4565 64.144.0.0/15 AS4565 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.247.0.0/18 AS8001 64.247.6.0/23 AS29791 65.36.8.0/24 AS5696 65.36.9.0/24 AS5696 65.36.33.0/24 AS5696 65.36.52.0/24 AS701 65.44.0.0/14 AS2828 65.44.86.0/24 AS23111 65.44.103.0/24 AS31902 65.44.117.0/24 AS40510 65.44.121.0/24 AS22591 65.44.169.0/24 AS2828 65.44.171.0/24 AS2828 65.44.172.0/24 AS2828 65.44.175.0/24 AS2828 65.44.181.0/24 AS11638 66.6.34.0/24 AS14935 66.11.32.0/20 AS6261 66.11.40.0/21 AS6261 66.54.91.0/24 AS30506 66.55.160.0/19 AS29994 66.64.96.0/20 AS3790 66.103.104.0/21 AS7132 66.180.239.0/24 AS35888 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 66.241.96.0/21 AS10271 67.20.0.0/14 AS19548 67.61.254.0/24 AS11492 68.64.0.0/13 AS19548 68.67.124.0/22 AS19548 68.168.0.0/14 AS19548 68.169.21.0/24 AS11351 68.171.12.0/22 AS19548 68.232.0.0/14 AS19548 69.55.108.0/24 AS4977 69.71.192.0/20 AS13818 69.160.0.0/12 AS19548 69.168.0.0/14 AS19548 69.169.0.0/17 AS20001 69.172.0.0/14 AS19548 70.32.0.0/13 AS19548 70.32.64.0/18 AS20001 70.38.0.0/16 AS19548 70.40.0.0/16 AS19548 72.42.232.0/21 AS14743 91.199.66.0/24 AS9044 SOLNET SolNet Internet Solution Provider 95.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 95.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 128.209.0.0/16 AS4017 132.0.0.0/10 AS721 137.0.0.0/13 AS721 138.136.0.0/13 AS721 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 172.14.254.0/24 AS20312 172.15.254.0/24 AS20312 173.173.173.0/24 AS9730 BHARTITELESONIC-AS-IN-AP Bharti Telesonic Ltd 192.0.2.0/24 AS3300 BT-INFONET-EUROPE BT-Infonet-Europe 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 TS-FINLAND-DATANET-OLD TS Finland DataNet 192.69.108.0/24 AS5515 TS-FINLAND-DATANET-OLD TS Finland DataNet 192.69.177.0/24 AS5515 TS-FINLAND-DATANET-OLD TS Finland DataNet 192.70.164.0/24 AS25689 192.88.99.0/24 AS16186 ASN-SSC-NO SSC Networks 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 192.101.47.0/24 AS6503 192.101.64.0/21 AS21775 192.101.67.0/24 AS21775 192.101.70.0/24 AS701 192.101.71.0/24 AS701 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.73.0/24 AS4765 WORLDNET-AS World Net & Services Co., Ltd. 192.101.74.0/24 AS1239 192.122.212.0/24 AS209 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS7891 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 192.172.0.0/19 AS721 192.188.208.0/20 AS721 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 198.23.26.0/24 AS4390 198.49.80.0/23 AS15116 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 198.97.80.0/20 AS721 198.97.96.0/19 AS721 198.97.240.0/20 AS721 198.161.87.0/24 AS6539 198.167.0.0/16 AS7456 198.168.0.0/16 AS701 198.169.0.0/16 AS803 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.9.128.0/17 AS668 199.10.0.0/16 AS721 199.114.0.0/21 AS721 199.114.128.0/18 AS721 199.114.130.0/24 AS721 199.114.132.0/24 AS27064 199.114.134.0/24 AS3541 199.114.136.0/24 AS27044 199.114.138.0/24 AS27064 199.114.140.0/24 AS3544 199.114.142.0/24 AS27064 199.114.144.0/24 AS6045 199.114.148.0/24 AS6045 199.114.150.0/24 AS27064 199.114.152.0/24 AS27033 199.114.153.0/24 AS27034 199.114.154.0/24 AS1733 199.114.156.0/24 AS1733 199.114.160.0/24 AS1733 199.121.0.0/16 AS721 199.123.0.0/18 AS721 199.123.16.0/20 AS721 199.123.80.0/21 AS721 199.189.32.0/19 AS7332 199.202.0.0/16 AS701 199.246.116.0/24 AS813 200.61.255.0/24 AS18747 202.45.132.0/22 AS24314 202.58.113.0/24 AS19161 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 202.128.109.0/24 AS4802 ASN-IINET iiNet Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.174.70.0/24 AS21175 M-LINK M-Link Teleport s.a. 202.174.71.0/24 AS23924 202.174.72.0/22 AS23924 202.182.32.0/22 AS10223 UECOMM-AU Uecomm Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.112.97.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.13.140.0/22 AS7270 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.29.196.0/24 AS7018 204.29.197.0/24 AS7018 204.48.58.0/24 AS4323 204.48.60.0/24 AS4323 204.153.68.0/24 AS4017 204.153.71.0/24 AS4017 204.154.125.0/24 AS3952 204.154.126.0/24 AS3952 204.154.127.0/24 AS3952 205.150.0.0/15 AS701 205.167.238.0/24 AS209 205.167.239.0/24 AS209 206.28.176.0/21 AS1273 CW Cable & Wireless 206.55.208.0/20 AS22180 206.72.64.0/20 AS19130 206.162.224.0/19 AS23464 206.180.240.0/20 AS12083 206.220.240.0/24 AS10764 206.220.240.64/26 AS22335 206.220.240.160/30 AS10764 206.220.240.220/32 AS10764 206.220.241.0/24 AS10764 207.98.192.0/24 AS701 207.98.209.0/24 AS701 207.98.223.0/24 AS701 207.189.62.0/23 AS7132 207.204.168.0/24 AS15150 207.204.222.0/24 AS15218 207.204.248.0/24 AS6653 207.231.96.0/19 AS11194 208.64.12.0/22 AS22773 208.118.160.0/19 AS22925 209.54.42.0/24 AS6653 209.54.93.0/24 AS15218 209.54.111.0/24 AS15218 209.54.123.0/24 AS6062 209.54.142.0/24 AS12284 209.54.240.0/21 AS10887 209.105.224.0/19 AS20074 209.140.64.0/20 AS22307 209.140.90.0/24 AS14461 209.140.224.0/21 AS10573 209.140.234.0/24 AS10573 209.140.235.0/24 AS10573 209.140.236.0/24 AS10573 209.140.237.0/24 AS10573 209.140.238.0/24 AS10573 209.140.239.0/24 AS10573 209.141.4.0/24 AS6653 209.141.16.0/21 AS10573 209.141.48.0/22 AS14461 209.141.104.0/24 AS6653 209.207.24.0/24 AS21829 209.207.36.0/24 AS21829 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 212.121.96.0/19 AS8509 ALTECTELECOMS ALTEC TELECOMS Autonomous System 216.7.139.0/24 AS701 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.71.224.0/20 AS14543 216.99.16.0/24 AS6395 216.99.17.0/24 AS6395 216.99.20.0/24 AS6395 216.172.198.0/24 AS15218 216.172.199.0/24 AS15218 216.198.0.0/19 AS6137 216.198.32.0/19 AS7459 216.210.86.0/24 AS577 216.227.128.0/18 AS19548 216.240.240.0/24 AS7018 216.240.241.0/24 AS7018 216.240.242.0/24 AS7018 216.251.203.0/24 AS7132 216.251.205.0/24 AS209 216.251.207.0/24 AS1239 Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Creating a crystal clear and pure Internet
by Sean Donelan 05 Dec '07

05 Dec '07

Some people have compared unwanted Internet traffic to water pollution, and proposed that ISPs should be required to be like water utilities and be responsible for keeping the Internet water crystal clear and pure. Several new projects have started around the world to achieve those goals. ITU anti-botnet initiative http://www.itu.int/ITU-D/cyb/cybersecurity/projects/botnet.html France anti-piracy initiative http://www.culture.gouv.fr/culture/actualites/index-olivennes231107.htm

22 32

Is anyone aware of recent by-protocol traffic data in the public domain?
by Alexander Harrowell 05 Dec '07

05 Dec '07

Excellent public studies of Internet traffic by protocol exist from NSFNet times up to 2002 or 2003; we thank Odlyzko, Claffy et al for their work. However, has anyone else noticed a serious lack of data after the end of the studies summarised in "Longitudinal study of Internet traffic 1998-2003", Fomenkov, Keys, Moore & Claffy, 2003? (This has been discussed in the past, I think.) All that seems to be available is vendor handwaving of the sort Andy Odlyzko takes so much trouble to debunk; and that without any source data. Curiously, no-one seems to be funding this stuff in Europe, either. Alexander Harrowell

4 3

Oregon storms affect trans-pacific traffic
by Sean Donelan 04 Dec '07

04 Dec '07

http://www.theaustralian.news.com.au/story/0,25197,22869272-15306,00.html Southern Cross Cable operations vice president, Dean Veverka, has confirmed that hurricane-strength storms and flooding have wiped out the carrier's Oregon cable route and halved its bandwidth between Australian and the US. Southern Cross's customers in Australia include iiNet, Internode and AAPT.

6 5

Re: [dns-operations] Web Proxy Auto-Discovery (WPAD) Information Disclosure (fwd)
by Gadi Evron 04 Dec '07

04 Dec '07

I was told I should care about smaller entities that ccTLDs on this, so here is a forward to NANOG of a discussion on DNS-operations. ---------- Forwarded message ---------- Date: Tue, 4 Dec 2007 00:56:51 -0600 (CST) From: Gadi Evron <ge(a)linuxbox.org> To: Rickard Dahlstrand <rickard.dahlstrand(a)iis.se> Cc: dns-operations(a)mail.oarc.isc.org Subject: Re: [dns-operations] Web Proxy Auto-Discovery (WPAD) Information Disclosure On Tue, 4 Dec 2007, Rickard Dahlstrand wrote: > Gadi Evron wrote: >> http://www.microsoft.com/technet/security/advisory/945713.mspx >> >> A malicious user could host a WPAD server, potentially establishing it as >> a proxy server to conduct man-in-the-middle attacks against customers >> whose domains are registered as a subdomain to a second-level domain >> (SLD). For customers with a primary DNS suffix configured, the DNS >> resolver in Windows will attempt to resolve an unqualified .wpad. hostname >> using each sub-domain in the DNS suffix until a second-level domain is >> reached. For example, if the DNS suffix is corp.contoso.co.us and an >> attempt is made to resolve an unqualified hostname of wpad, the DNS >> resolver will try wpad.corp.contoso.co.us. If that is not found, it will >> try, via DNS devolution, to resolve wpad.contoso.co.us. If that is not >> found, it will try to resolve wpad.co.us, which is outside of the >> contoso.co.us domain. >> > Most of the wpad.tld domains are already reserved like this one > http://wpad.com/ It's amazing that when they fixed it for .com etc. a > while back they missed that there where two-level tld-domains. > > Rickard. > http://www.microsoft.com/technet/security/bulletin/fq99-054.mspx ----- What's the problem with the search algorithm? When IE 5 starts, it will begin searching for a WPAD server, if it is configured to use WPAD. It starts the search by adding the hostname "WPAD" to current fully-qualified domain name. For instance, a client in a.b.Microsoft.com would search for a WPAD server at wpad.a.b.microsoft.com. If it could not locate one, it would remove the bottom-most domain and try again; for instance, it would try wpad.b.microsoft.com next. IE 5 would stop searching when it found a WPAD server or reached the third-level domain, wpad.microsoft.com. The algorithm stops at the third level in order to not search outside of the current network. However, for international sites, this is not sufficient, because third-level domains can be outside the current network. For example, if the network at xyz.com.au did not have a WPAD server, the search algorithm eventually would reach wpad.com.au, which is an external network name. If the owner of wpad.com.au set up a WPAD server, he or she could provide chosen proxy server configuration settings to the clients at xyz.com.au. For that matter, any network in com.au that didn't have its own WPAD server but did have WPAD enabled in its web clients also would also resolve to wpad.com.au. ----- >From the FAQ for the 1999 fix... It is quite possible, and we can assume (until someone tells us they know), that they fixed it for ccTLDs as well, and then re-introduced the flaw somehow. Also: http://www.wlug.org.nz/WPAD ----- (BeauButler?: I have registered wpad.co.nz, and do not intend to be 'really nasty'. I am collecting the 404 logs with the intention to produce some nice charts, hoever. Also, the wpad organisational-boundaries bug appears to have resurfaced in Internet Explorer 7!!) ----- Beau Bulter is the guy who got all the press by talking about this at kiwicon last week: https://kiwicon.org/presentations#oddy This is the story that got Microsoft's attention: http://www.theage.com.au/news/technology/flaw-leaves-microsoft-looking-like… Which is where Beau says there are ~160,000 exploitable machines in NZ alone. He would *supposedly* know since he has the wpad.co.nz domain. Whether it is a major issue or not, misconfigurations happens, heck, shit happens. I'd think we should watch for this and get that domain registered/monitored at different ccTLDs. Gadi.

2 1

IPv4 BGP Table Reduction Analysis - Prefixes Filter by RIRs Minimum Allocations Boundaries
by Eduardo Ascenco Reis 04 Dec '07

04 Dec '07

Nanog Fellows, I would like to share a work that may be of interest to some of you. Although the BGP data is around one month old and the original focus was on Brazilian AS and IP prefixes, the general analysis covers all Regional Internet Registries (RIRs). This work is part of an IPv4 BGP table reduction analysis and it is about IP prefixes filter by RIRs minimum allocations boundaries methodology (a well discussed Thread - Jon Lewis, et al). The analysis uses BGP data from University of Oregon Route Views Archive Project (2007-10-23-2000) and estimate possible impacts considering suboptimal routing and unreachable destinations. The methodology shows a good efficiency (around 40%) reducing BGP table size, but the estimated number of affect prefixes are also high (around 30%). The report covers impact analysis per RIR and IP prefixes distribution. It also do some IP prefixes accounting and analyse each RIR contribution to BGP table size. Here is the brief report URL: http://www.intron.com.br/doc/bgp/gter24-en-summary.eascenco.bgp-table-red.r… Any comments or suggestions (list or private) are welcome. Eduardo Ascenço Reis <eduardo(a)intron.com.br>

6 8

ATIS releases standard outage classification
by Sean Donelan 04 Dec '07

04 Dec '07

http://www.atis.org/PRESS/pressreleases2007/120307.htm In accordance with the Standard Outage Classification, telecommunication companies can now use common terminology and reporting structures to collect and report data used for identifying causes of outages. If you are not an ATIS member, a copy of the standard is $68. Nevertheless, I suspect media relation professionals for the companies will probably continue to use other euphemisms when discussing SNAFUs with the press.

1 0

RE: Is anyone aware of recent by-protocol traffic data in the public domain?
by Joe St Sauver 04 Dec '07

04 Dec '07

Alexander asked: #Excellent public studies of Internet traffic by protocol exist from NSFNet #times up to 2002 or 2003; we thank Odlyzko, Claffy et al for their work. # #However, has anyone else noticed a serious lack of data after the end of the #studies summarised in "Longitudinal study of Internet traffic 1998-2003", #Fomenkov, Keys, Moore & Claffy, 2003? (This has been discussed in the past, #I think.) All that seems to be available is vendor handwaving of the sort #Andy Odlyzko takes so much trouble to debunk; and that without any source #data. Recognizing that Internet2's traffic is likely significantly different than typical so-called tier-1 providers, you may still be interested in the weekly Internet2 Netflow reports available at: http://netflow.internet2.edu/weekly/ Regards, Joe

1 0

Request for input: ISP tools
by Pete Templin 04 Dec '07

04 Dec '07

List, I'm compiling a tutorial (or series thereof) for small-medium ISPs, covering the gotchas we've all experienced one way or another. As I build the framework, I'm looking for community input in two categories: 1) Tools - What home-grown tool gave your network operations a great leap forward? I'd appreciate hearing about the concept and the result. Bonus points if it's something you can package and make available, or provide a framework for others to build. 2) Requests - What tool do you wish you had? What lesson have you learned, but you haven't managed to automate your way around it? Please unicast your responses to petelists(a)templin.org - summaries to be found at a NANOG near you* * in varying definitions of 'near'... Pete

1 0