September 2008 - NANOG - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 12 Sep '08

12 Sep '08

This report has been generated at Fri Sep 12 21:18:50 2008 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 05-09-08 279838 172577 06-09-08 280450 167662 07-09-08 280494 171189 08-09-08 280576 171196 09-09-08 280020 170156 10-09-08 280859 170396 11-09-08 281136 169348 12-09-08 279371 168974 AS Summary 29348 Number of ASes in routing system 12435 Number of ASes announcing only one prefix 5028 Largest number of prefixes announced by an AS AS4538 : ERX-CERNET-BKB China Education and Research Network Center 88406528 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 12Sep08 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 281127 168963 112164 39.9% All ASes AS4538 5028 885 4143 82.4% ERX-CERNET-BKB China Education and Research Network Center AS6389 4301 351 3950 91.8% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS209 2932 647 2285 77.9% ASN-QWEST - Qwest AS4755 1726 225 1501 87.0% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS1785 1653 434 1219 73.7% AS-PAETEC-NET - PaeTec Communications, Inc. AS6298 1966 758 1208 61.4% COX-PHX - Cox Communications Inc. AS17488 1378 283 1095 79.5% HATHWAY-NET-AP Hathway IP Over Cable Internet AS4323 1516 460 1056 69.7% TWTC - tw telecom holdings, inc. AS8151 1601 560 1041 65.0% Uninet S.A. de C.V. AS22773 975 65 910 93.3% CCINET-2 - Cox Communications Inc. AS18566 1048 275 773 73.8% COVAD - Covad Communications Co. AS19262 948 191 757 79.9% VZGNI-TRANSIT - Verizon Internet Services Inc. AS11492 1210 472 738 61.0% CABLEONE - CABLE ONE AS2386 1554 908 646 41.6% INS-AS - AT&T Data Communications Services AS18101 764 135 629 82.3% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS9498 677 70 607 89.7% BBIL-AP BHARTI Airtel Ltd. AS6478 1155 579 576 49.9% ATT-INTERNET3 - AT&T WorldNet Services AS3356 975 436 539 55.3% LEVEL3 Level 3 Communications AS4766 903 401 502 55.6% KIXS-AS-KR Korea Telecom AS4808 629 155 474 75.4% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS855 594 127 467 78.6% CANET-ASN-4 - Bell Aliant AS17676 524 63 461 88.0% GIGAINFRA BB TECHNOLOGY Corp. AS4134 841 387 454 54.0% CHINANET-BACKBONE No.31,Jin-rong Street AS7011 918 475 443 48.3% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS22047 564 127 437 77.5% VTR BANDA ANCHA S.A. AS9443 522 86 436 83.5% INTERNETPRIMUS-AS-AP Primus Telecommunications AS7029 527 93 434 82.4% WINDSTREAM - Windstream Communications Inc AS7018 1426 994 432 30.3% ATT-INTERNET4 - AT&T WorldNet Services AS24560 582 154 428 73.5% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS4668 683 274 409 59.9% LGNET-AS-KR LG CNS Total 40120 11070 29050 72.4% Top 30 total Possible Bogus Routes 24.75.116.0/22 AS10796 SCRR-10796 - Road Runner HoldCo LLC 24.75.160.0/19 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.142.40.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.142.160.0/19 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.245.128.0/17 AS11492 CABLEONE - CABLE ONE 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.115.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS6453 GLOBEINTERNET TATA Communications 64.7.120.0/21 AS6453 GLOBEINTERNET TATA Communications 64.64.159.0/24 AS32004 BIG-ASN - Business Information Group, Inc. 64.79.88.0/24 AS26096 LODDEN - Lodden Services 64.79.89.0/24 AS26096 LODDEN - Lodden Services 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 91.200.192.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.200.193.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.200.194.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.200.195.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.207.4.0/22 AS47142 STEEPHOST-AS SteepHost DC-UA-SteepHost.COM Datacentre Allocation 91.207.8.0/23 AS47142 STEEPHOST-AS SteepHost DC-UA-SteepHost.COM Datacentre Allocation 91.208.199.0/24 AS35185 KUVEYTTURK-ASN Kuveyt Turk EFK A.S. 91.208.202.0/24 AS42652 INTRAPARK Intrapark GmbH 94.103.20.0/22 AS16243 VIRTU-AS Virtu Secure Webservices B.V. 94.125.240.0/21 AS41822 TNGS-NORTH-AS JSC Tyumenneftegazsvyaz 95.165.192.0/19 AS12479 UNI2-AS Uni2 Autonomous System 95.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 95.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 121.50.12.0/24 AS38236 121.50.13.0/24 AS38236 121.50.14.0/24 AS38236 121.50.15.0/24 AS38236 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 151.135.0.0/16 AS4768 CLIX-NZ TelstraClear Ltd 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 166.63.0.0/16 AS33775 NITEL-AS 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 188.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 188.0.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 188.0.0.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.47.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.73.0/24 AS4765 WORLDNET-AS World Net & Services Co., Ltd. 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.248.0/23 AS680 DFN-IP service G-WiN 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.25.240.0/21 AS3209 Arcor IP-Network 193.25.246.0/24 AS3211 Arcor Data-Network 193.200.114.0/23 AS31530 SERVERCREW-AS Servercrew LTD Autonomes System 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.222.124.0/22 AS12714 TI-AS NetByNet Holding 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.201.98.0/24 AS29571 CITelecom-AS 196.216.132.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 196.216.134.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.176.228.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.176.232.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.217.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.48.58.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.48.60.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.144.160.0/20 AS7296 ALCHEMYNET - Alchemy Communications, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.162.224.0/19 AS23464 ILCSNET - Interlink Computer Services 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.220.240.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.64/26 AS22335 MREN - Metropolitan Research and Education Network 206.220.240.128/25 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.220/32 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.241.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 207.98.209.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.223.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 CCINET-2 - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.38.192.0/21 AS14237 BEAMSPEED1 - Beamspeed 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.54.93.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.111.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.74.96.0/19 AS10912 INTERNAP-BLK - Internap Network Services Corporation 209.74.96.0/20 AS16776 MOVE-CORP - Move Sales, Inc. 209.74.112.0/20 AS16776 MOVE-CORP - Move Sales, Inc. 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.127.124.0/23 AS2828 XO-AS15 - XO Communications 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.172.199.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.229.51.0/24 AS15211 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: New Intercage upstream
by Paul Ferguson 12 Sep '08

12 Sep '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- <marcus.sachs(a)verizon.com> wrote: >Looks like they found a new willing partner. > >AS32335 PACIFICINTERNETEXCHANGE-NET - Pacific Internet Exchange LLC. > >http://cidr-report.org/cgi-bin/as-report?as=AS27595 > >http://www.pacificinternetexchange.net/ > Visualize: http://www.robtex.com/as/as27595.html - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFIykIwq1pz9mNUZTMRAlUfAKD0nQa1X76hPPi8JjKFfMfr0BNh/ACgseiF bC/0IwSYBSlUYXepSgyhMnc= =Fa3Q -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Charter weirdness...
by Jeff Kell 12 Sep '08

12 Sep '08

Anyone here with Charter? Please contact me off-list unless you're already aware of DNS weirdness... Jeff

1 0

2nd CfP: ICNS 2009 | April 21-25, 2009 - Valencia, Spain
by Jaime Lloret Mauri 11 Sep '08

11 Sep '08

Please consider to contribute to and/or forward to the appropriate groups the following opportunity to submit and publish original scientific results. Apologies for cross-postings. ============== ICNS 2009 | Call for Papers =============== CALL FOR PAPERS, TUTORIALS, PANELS ICNS 2009, The Fifth International Conference on Networking and Services April 21-25, 2009 - Valencia, Spain General page: http://www.iaria.org/conferences2009/ICNS09.html Call for Papers: http://www.iaria.org/conferences2009/CfPICNS09.html Important deadlines: Submission (full paper) November 1, 2008 Authors notification December 5, 2008 Registration December 20, 2008 Camera ready December 25, 2008 Submissions will be peer-reviewed, published by IEEE CS Press, posted in IEEE Digital Library, and indexed with the major indexes. Extended versions of selected papers will be invited for specialized journals. ICNS 2009 Area Tracks are the following (details in the CfP on site): ENCOT: Emerging Network Communications and Technologies COMAN: Network Control and Management SERVI: Multi-technology service deployment and assurance NGNUS: Next Generation Networks and Ubiquitous Services MPQSI: Multi Provider QoS/SLA Internetworking GRIDNS: Grid Networks and Services EDNA: Emergency Services and Disaster Recovery of Networks and Applications IPv6DFI: Deploying the Future Infrastructure IPDy: Internet Packet Dynamics GOBS: GRID over Optical Burst Switching Networks ================================= ICNS 2009 Chairs: General Chair: Jaime Lloret Mauri, Polytechnic University of Valencia, Spain TPC Chairs: Salvador Sales, Polytechnic University of Valencia, Spain Feng Xia, Queensland University of Technology, Australia / Zhejiang University, China Advisory Board Chair: Petre Dini, Cisco, USA ICNS 2009 Industry Chairs: Kevin Y Ung, Boeing, USA Leo Lehmann, OFCOM, Switzerland ================================ --

1 0

Teleglobe appears to be spam-source zombie network?
by Jo Rhett 11 Sep '08

11 Sep '08

We started getting a flood of autobot spam to our listed abuse mailbox about an hour ago out of Teleglobe. Trying to find someone to shut this down has found that 1. Teleglobe has no listed abuse contacts for any of their netblocks 2. The few of their records which have listed e-mail addresses all bounce 3. All listed phone numbers on any netblocks we can find are invalid Any chance that RIPE is more strigent than ARIN and would pull their netblocks until they fix this stuff? -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness

10 12

Yahoo! mail admins?
by Paul Kelly :: Blacknight 11 Sep '08

11 Sep '08

Hi There, Are there any Yahoo! e-mail admins on the list? We're having some issues at times delivering e-mail to yahoo.co.uk and sometimes some of the other yahoo networks. Thanks, Paul Paul Kelly Technical Director Blacknight Internet Solutions ltd Hosting, Colocation, Dedicated servers IP Transit Services Tel: +353 (0) 59 9183072 Lo-call: 1850 929 929 DDI: +353 (0) 59 9183091 e-mail: paul(a)blacknight.ie web: http://www.blacknight.ie Blacknight Internet Solutions Ltd, Unit 12A,Barrowside Business Park, Sleaty Road, Graiguecullen, Carlow, Ireland Company No.: 370845

3 2

Re: NANOG Digest, Vol 8, Issue 38
by Bruno VAZ 10 Sep '08

10 Sep '08

--- [Message envoyé a partir d'un mobile] Bruno VAZ Ipercast Operations 40, Rue de PARIS / 92100 Boulogne-Billancourt Tel +33 1 72 77 70 87 Mailbvaz(a)ipercast.net -----Original Message----- From: nanog-request(a)nanog.org Date: Wed, 10 Sep 2008 19:59:40 To: <nanog(a)nanog.org> Subject: NANOG Digest, Vol 8, Issue 38 Send NANOG mailing list submissions to nanog(a)nanog.org To subscribe or unsubscribe via the World Wide Web, visit http://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request(a)nanog.org You can reach the person managing the list at nanog-owner(a)nanog.org When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. RE: duplicate packet (Darden, Patrick S.) 2. RE: duplicate packet (Eric Van Tol) 3. Re: duplicate packet (Jon Lewis) 4. Re: duplicate packet (Sebastian Abt) 5. RE: duplicate packet (Tim Sanderson) 6. Re: duplicate packet (Laurence F. Sheldon, Jr.) 7. Re: Yahoo! mail admins? (Matthew Petach) 8. Re: ingress SMTP (*Hobbit*) 9. New (2-byte) ASN Allocation for RIPE NCC (Leo Vegoda) 10. Teleglobe appears to be spam-source zombie network? (Jo Rhett) 11. Re: Teleglobe appears to be spam-source zombie network? (Nuno Vieira - nfsi telecom) 12. Re: Teleglobe appears to be spam-source zombie network? (Marshall Eubanks) ---------------------------------------------------------------------- Message: 1 Date: Wed, 10 Sep 2008 08:01:32 -0400 From: "Darden, Patrick S." <darden(a)armc.org> Subject: RE: duplicate packet To: "chloe K" <chloekcy2000(a)yahoo.ca>, <nanog(a)nanog.org> Message-ID: <CBE22E5FF427B149A272DD1DDE107524023688B6(a)EX2K3.armc.org> Content-Type: text/plain; charset="iso-8859-1" Check your ARP tables, local and on intervening switches/routers. Make sure there are no duplicate entries for that IP. If you note the response time, the second packet is always higher which might be indicative. I would also check for a botched MITM a la C&A. Even if there is no obvious ARP table manglement, you might try flushing the local and intervening caches. Try the ping from another host, another subnet, another segment, get more info. --p -----Original Message----- From: chloe K [mailto:chloekcy2000@yahoo.ca] Sent: Wednesday, September 10, 2008 6:46 AM To: nanog(a)nanog.org Subject: duplicate packet Hi all When I ping the ip, I get the duplicate I check the ip is just one. Why it happens? Thank you 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.296 ms 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.328 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.291 ms 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.316 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.279 ms 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.309 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.271 ms 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.299 ms (DUP!) --------------------------------- Yahoo! Canada Toolbar : Search from anywhere on the web and bookmark your favourite sites. Download it now! ------------------------------ Message: 2 Date: Wed, 10 Sep 2008 08:06:02 -0400 From: Eric Van Tol <eric(a)atlantech.net> Subject: RE: duplicate packet To: 'chloe K' <chloekcy2000(a)yahoo.ca>, "nanog(a)nanog.org" <nanog(a)nanog.org> Message-ID: <2C05E949E19A9146AF7BDF9D44085B86350AECC45F(a)exchange.aoihq.local> Content-Type: text/plain; charset="us-ascii" > -----Original Message----- > From: chloe K [mailto:chloekcy2000@yahoo.ca] > Sent: Wednesday, September 10, 2008 6:46 AM > To: nanog(a)nanog.org > Subject: duplicate packet > > Hi all > > When I ping the ip, I get the duplicate > > I check the ip is just one. Why it happens? > > Thank you > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.296 ms > 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.328 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.291 ms > 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.316 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.279 ms > 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.309 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.271 ms > 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.299 ms (DUP!) Check to see whether or not the port connected to that host is mirrored or in a SPAN VLAN. Misconfiguration on an analyzer server can cause duplicate traffic to be generated. -evt ------------------------------ Message: 3 Date: Wed, 10 Sep 2008 08:11:18 -0400 (EDT) From: Jon Lewis <jlewis(a)lewis.org> Subject: Re: duplicate packet To: chloe K <chloekcy2000(a)yahoo.ca> Cc: nanog(a)nanog.org Message-ID: <Pine.LNX.4.61.0809100808070.5503(a)soloth.lewis.org> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed On Wed, 10 Sep 2008, chloe K wrote: > When I ping the ip, I get the duplicate > > I check the ip is just one. Why it happens? > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) Not enough information has been given. Just hope it's not being caused by a Level3/Sprint circuit...ours is still doing this (when I change back to HDLC) and they just don't freaking care. Sometimes I wish I worked for a big telco so I could leave things broken and say "hey, I'm the telco, I don't have to care." Maybe we should refuse to pay for the affected DS3 and see if that gets more attention. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ ------------------------------ Message: 4 Date: Wed, 10 Sep 2008 14:11:48 +0200 From: Sebastian Abt <sabt(a)sabt.net> Subject: Re: duplicate packet To: chloe K <chloekcy2000(a)yahoo.ca> Cc: nanog(a)nanog.org Message-ID: <20080910121148.GA4491(a)sephina.sabt.net> Content-Type: text/plain; charset=us-ascii * chloe K wrote: > When I ping the ip, I get the duplicate > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) ^^^^^^^^^^^^ What's your netmask? Is 192.168.0.95 your net's broadcast address? sebastian -- SABT-RIPE PGPKEY-D008DA9C ------------------------------ Message: 5 Date: Wed, 10 Sep 2008 08:26:52 -0400 From: Tim Sanderson <tims(a)donet.com> Subject: RE: duplicate packet To: "nanog(a)nanog.org" <nanog(a)nanog.org> Message-ID: <C8780EC81EAFB24B94943243BA5BCC54292289670F(a)intexch07.internal.donet.com> Content-Type: text/plain; charset="us-ascii" Instead, dispute the bill and then when they won't credit you for not giving you what you ordered, open a complaint with the state public utilities commission. It may get you some movement on the issue. -- Tim Sanderson, network administrator tims(a)donet.com -----Original Message----- From: Jon Lewis [mailto:jlewis@lewis.org] Sent: Wednesday, September 10, 2008 8:11 AM To: chloe K Cc: nanog(a)nanog.org Subject: Re: duplicate packet On Wed, 10 Sep 2008, chloe K wrote: > When I ping the ip, I get the duplicate > > I check the ip is just one. Why it happens? > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) Not enough information has been given. Just hope it's not being caused by a Level3/Sprint circuit...ours is still doing this (when I change back to HDLC) and they just don't freaking care. Sometimes I wish I worked for a big telco so I could leave things broken and say "hey, I'm the telco, I don't have to care." Maybe we should refuse to pay for the affected DS3 and see if that gets more attention. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ ------------------------------ Message: 6 Date: Wed, 10 Sep 2008 08:10:20 -0500 From: "Laurence F. Sheldon, Jr." <LarrySheldon(a)cox.net> Subject: Re: duplicate packet Cc: nanog(a)nanog.org Message-ID: <48C7C73C.7000900(a)cox.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sebastian Abt wrote: > * chloe K wrote: >> When I ping the ip, I get the duplicate >> >> 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms >> 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) > ^^^^^^^^^^^^ > What's your netmask? Is 192.168.0.95 your net's broadcast address? Ohhh! Nice catch! ------------------------------ Message: 7 Date: Wed, 10 Sep 2008 06:13:18 -0700 From: "Matthew Petach" <mpetach(a)netflight.com> Subject: Re: Yahoo! mail admins? To: "Paul Kelly :: Blacknight" <paul(a)blacknight.com> Cc: "nanog(a)nanog.org" <nanog(a)nanog.org> Message-ID: <63ac96a50809100613k3f9f2499p9270dbc5b7a82533(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 On 9/10/08, Paul Kelly :: Blacknight <paul(a)blacknight.com> wrote: > Hi There, > > Are there any Yahoo! e-mail admins on the list? We're having some issues at times delivering e-mail to yahoo.co.uk and sometimes some of the other yahoo networks. > Probably not--but folks can probably get the message to the right ears. Let me know off list the nature of the issue (layer 3 reachability vs layer 7 application error messages) and I'll see what I can do to get the message to the right recipients. Thanks! Matt > Thanks, > > Paul > > Paul Kelly > Technical Director > Blacknight Internet Solutions ltd > Hosting, Colocation, Dedicated servers > IP Transit Services > Tel: +353 (0) 59 9183072 > Lo-call: 1850 929 929 > DDI: +353 (0) 59 9183091 > > e-mail: paul(a)blacknight.ie > web: http://www.blacknight.ie > > Blacknight Internet Solutions Ltd, > Unit 12A,Barrowside Business Park, > Sleaty Road, > Graiguecullen, > Carlow, > Ireland > > Company No.: 370845 > > ------------------------------ Message: 8 Date: Wed, 10 Sep 2008 12:35:24 +0000 (GMT) From: hobbit(a)avian.org (*Hobbit*) Subject: Re: ingress SMTP To: nanog(a)nanog.org Message-ID: <20080910123524.3D97E7808(a)relayer.avian.org> I am completely convinced that abuse@ in most big providers is a black hole with an autoresponder hung off it, and nothing ever gets done with complaints. NO HUMAN ever sees them, and even if they did, most of the humans at these outfits wouldn't recognize a Received: header if it bit them in the ass. I invite and welcome anyone from the "big boyz" I named in the original question -- verizon, comcast, roadrunner, charter, bellsouth/SBC, and now Google -- *especially* Gmail, given that counterproductive "privacy" policy we noted -- to inform me otherwise. _H* ------------------------------ Message: 9 Date: Wed, 10 Sep 2008 07:38:44 -0700 From: Leo Vegoda <leo.vegoda(a)icann.org> Subject: New (2-byte) ASN Allocation for RIPE NCC To: Leo Vegoda <leo.vegoda(a)icann.org> Message-ID: <C4EDA894.1EC4C%leo.vegoda(a)icann.org> Content-Type: text/plain; charset="iso-8859-1" -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, This is to confirm that the IANA has allocated one 2-byte ASN block to the RIPE NCC: 48128-49151 Assigned by RIPE NCC whois.ripe.net 2008-09-09 A note of the allocation has been made at: http://www.iana.org/assignments/as-numbers/as-numbers.xml http://www.iana.org/assignments/as-numbers/as-numbers.xhtml http://www.iana.org/assignments/as-numbers/as-numbers.txt Thank you and best regards, Leo Vegoda leo.vegoda(a)icann.org ******************************************* Internet Assigned Numbers Authority (IANA) 4676 Admiralty Way, Suite 330 Marina del Rey, CA 90292 Phone: +1-310-823-9358 Fax: +1-310-823-8649 ******************************************* -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) iD8DBQFIx9suvBLymJnAzRwRAgnkAKDDxJCilYy0aErDQtQQFEcsCKG/QwCgi+Ao 029EI3Ful4LKPXMJEUGKs3g= =7EeD -----END PGP SIGNATURE----- ------------------------------ Message: 10 Date: Wed, 10 Sep 2008 12:47:26 -0700 From: Jo Rhett <jrhett(a)netconsonance.com> Subject: Teleglobe appears to be spam-source zombie network? To: nanog <nanog(a)nanog.org> Message-ID: <03F411FC-74D6-48CA-84FC-16706B05BADE(a)netconsonance.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes We started getting a flood of autobot spam to our listed abuse mailbox about an hour ago out of Teleglobe. Trying to find someone to shut this down has found that 1. Teleglobe has no listed abuse contacts for any of their netblocks 2. The few of their records which have listed e-mail addresses all bounce 3. All listed phone numbers on any netblocks we can find are invalid Any chance that RIPE is more strigent than ARIN and would pull their netblocks until they fix this stuff? -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness ------------------------------ Message: 11 Date: Wed, 10 Sep 2008 20:51:09 +0100 (WEST) From: Nuno Vieira - nfsi telecom <nuno.vieira(a)nfsi.pt> Subject: Re: Teleglobe appears to be spam-source zombie network? To: Jo Rhett <jrhett(a)netconsonance.com> Cc: nanog <nanog(a)nanog.org> Message-ID: <823080104.21701221076269458.JavaMail.root(a)zimbra.nfsi.pt> Content-Type: text/plain; charset=utf-8 Try reach them at CAbuse(a)tatacommunications.com cheers, --- Nuno Vieira nfsi telecom, lda. nuno.vieira(a)nfsi.pt Tel. (+351) 21 949 2300 - Fax (+351) 21 949 2301 http://www.nfsi.pt/ ----- "Jo Rhett" <jrhett(a)netconsonance.com> wrote: > We started getting a flood of autobot spam to our listed abuse mailbox > > about an hour ago out of Teleglobe. Trying to find someone to shut > this down has found that > > 1. Teleglobe has no listed abuse contacts for any of their netblocks > 2. The few of their records which have listed e-mail addresses all > bounce > 3. All listed phone numbers on any netblocks we can find are invalid > > Any chance that RIPE is more strigent than ARIN and would pull their > > netblocks until they fix this stuff? > > -- > Jo Rhett > Net Consonance : consonant endings by net philanthropy, open source > and other randomness ------------------------------ Message: 12 Date: Wed, 10 Sep 2008 15:59:35 -0400 From: Marshall Eubanks <tme(a)multicasttech.com> Subject: Re: Teleglobe appears to be spam-source zombie network? To: Nuno Vieira - nfsi telecom <nuno.vieira(a)nfsi.pt> Cc: nanog <nanog(a)nanog.org> Message-ID: <0B1059FF-6187-4212-A666-3124BFB38E88(a)multicasttech.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes On Sep 10, 2008, at 3:51 PM, Nuno Vieira - nfsi telecom wrote: > Try reach them at CAbuse(a)tatacommunications.com > Yes - all my teleglobe contacts went over to Tata email addresses during the summer. Regards Marshall > cheers, > --- > Nuno Vieira > nfsi telecom, lda. > > nuno.vieira(a)nfsi.pt > Tel. (+351) 21 949 2300 - Fax (+351) 21 949 2301 > http://www.nfsi.pt/ > > > > ----- "Jo Rhett" <jrhett(a)netconsonance.com> wrote: > >> We started getting a flood of autobot spam to our listed abuse >> mailbox >> >> about an hour ago out of Teleglobe. Trying to find someone to shut >> this down has found that >> >> 1. Teleglobe has no listed abuse contacts for any of their netblocks >> 2. The few of their records which have listed e-mail addresses all >> bounce >> 3. All listed phone numbers on any netblocks we can find are invalid >> >> Any chance that RIPE is more strigent than ARIN and would pull their >> >> netblocks until they fix this stuff? >> >> -- >> Jo Rhett >> Net Consonance : consonant endings by net philanthropy, open source >> and other randomness > ------------------------------ _______________________________________________ NANOG mailing list NANOG(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog End of NANOG Digest, Vol 8, Issue 38 ************************************

1 0

Re: NANOG Digest, Vol 8, Issue 38
by Bruno VAZ 10 Sep '08

10 Sep '08

--- [Message envoyé a partir d'un mobile] Bruno VAZ Ipercast Operations 40, Rue de PARIS / 92100 Boulogne-Billancourt Tel +33 1 72 77 70 87 Mailbvaz(a)ipercast.net -----Original Message----- From: nanog-request(a)nanog.org Date: Wed, 10 Sep 2008 19:59:40 To: <nanog(a)nanog.org> Subject: NANOG Digest, Vol 8, Issue 38 Send NANOG mailing list submissions to nanog(a)nanog.org To subscribe or unsubscribe via the World Wide Web, visit http://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request(a)nanog.org You can reach the person managing the list at nanog-owner(a)nanog.org When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. RE: duplicate packet (Darden, Patrick S.) 2. RE: duplicate packet (Eric Van Tol) 3. Re: duplicate packet (Jon Lewis) 4. Re: duplicate packet (Sebastian Abt) 5. RE: duplicate packet (Tim Sanderson) 6. Re: duplicate packet (Laurence F. Sheldon, Jr.) 7. Re: Yahoo! mail admins? (Matthew Petach) 8. Re: ingress SMTP (*Hobbit*) 9. New (2-byte) ASN Allocation for RIPE NCC (Leo Vegoda) 10. Teleglobe appears to be spam-source zombie network? (Jo Rhett) 11. Re: Teleglobe appears to be spam-source zombie network? (Nuno Vieira - nfsi telecom) 12. Re: Teleglobe appears to be spam-source zombie network? (Marshall Eubanks) ---------------------------------------------------------------------- Message: 1 Date: Wed, 10 Sep 2008 08:01:32 -0400 From: "Darden, Patrick S." <darden(a)armc.org> Subject: RE: duplicate packet To: "chloe K" <chloekcy2000(a)yahoo.ca>, <nanog(a)nanog.org> Message-ID: <CBE22E5FF427B149A272DD1DDE107524023688B6(a)EX2K3.armc.org> Content-Type: text/plain; charset="iso-8859-1" Check your ARP tables, local and on intervening switches/routers. Make sure there are no duplicate entries for that IP. If you note the response time, the second packet is always higher which might be indicative. I would also check for a botched MITM a la C&A. Even if there is no obvious ARP table manglement, you might try flushing the local and intervening caches. Try the ping from another host, another subnet, another segment, get more info. --p -----Original Message----- From: chloe K [mailto:chloekcy2000@yahoo.ca] Sent: Wednesday, September 10, 2008 6:46 AM To: nanog(a)nanog.org Subject: duplicate packet Hi all When I ping the ip, I get the duplicate I check the ip is just one. Why it happens? Thank you 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.296 ms 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.328 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.291 ms 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.316 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.279 ms 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.309 ms (DUP!) 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.271 ms 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.299 ms (DUP!) --------------------------------- Yahoo! Canada Toolbar : Search from anywhere on the web and bookmark your favourite sites. Download it now! ------------------------------ Message: 2 Date: Wed, 10 Sep 2008 08:06:02 -0400 From: Eric Van Tol <eric(a)atlantech.net> Subject: RE: duplicate packet To: 'chloe K' <chloekcy2000(a)yahoo.ca>, "nanog(a)nanog.org" <nanog(a)nanog.org> Message-ID: <2C05E949E19A9146AF7BDF9D44085B86350AECC45F(a)exchange.aoihq.local> Content-Type: text/plain; charset="us-ascii" > -----Original Message----- > From: chloe K [mailto:chloekcy2000@yahoo.ca] > Sent: Wednesday, September 10, 2008 6:46 AM > To: nanog(a)nanog.org > Subject: duplicate packet > > Hi all > > When I ping the ip, I get the duplicate > > I check the ip is just one. Why it happens? > > Thank you > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.296 ms > 64 bytes from 192.168.0.95: icmp_seq=2 ttl=63 time=0.328 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.291 ms > 64 bytes from 192.168.0.95: icmp_seq=3 ttl=63 time=0.316 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.279 ms > 64 bytes from 192.168.0.95: icmp_seq=4 ttl=63 time=0.309 ms (DUP!) > 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.271 ms > 64 bytes from 192.168.0.95: icmp_seq=5 ttl=63 time=0.299 ms (DUP!) Check to see whether or not the port connected to that host is mirrored or in a SPAN VLAN. Misconfiguration on an analyzer server can cause duplicate traffic to be generated. -evt ------------------------------ Message: 3 Date: Wed, 10 Sep 2008 08:11:18 -0400 (EDT) From: Jon Lewis <jlewis(a)lewis.org> Subject: Re: duplicate packet To: chloe K <chloekcy2000(a)yahoo.ca> Cc: nanog(a)nanog.org Message-ID: <Pine.LNX.4.61.0809100808070.5503(a)soloth.lewis.org> Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed On Wed, 10 Sep 2008, chloe K wrote: > When I ping the ip, I get the duplicate > > I check the ip is just one. Why it happens? > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) Not enough information has been given. Just hope it's not being caused by a Level3/Sprint circuit...ours is still doing this (when I change back to HDLC) and they just don't freaking care. Sometimes I wish I worked for a big telco so I could leave things broken and say "hey, I'm the telco, I don't have to care." Maybe we should refuse to pay for the affected DS3 and see if that gets more attention. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ ------------------------------ Message: 4 Date: Wed, 10 Sep 2008 14:11:48 +0200 From: Sebastian Abt <sabt(a)sabt.net> Subject: Re: duplicate packet To: chloe K <chloekcy2000(a)yahoo.ca> Cc: nanog(a)nanog.org Message-ID: <20080910121148.GA4491(a)sephina.sabt.net> Content-Type: text/plain; charset=us-ascii * chloe K wrote: > When I ping the ip, I get the duplicate > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) ^^^^^^^^^^^^ What's your netmask? Is 192.168.0.95 your net's broadcast address? sebastian -- SABT-RIPE PGPKEY-D008DA9C ------------------------------ Message: 5 Date: Wed, 10 Sep 2008 08:26:52 -0400 From: Tim Sanderson <tims(a)donet.com> Subject: RE: duplicate packet To: "nanog(a)nanog.org" <nanog(a)nanog.org> Message-ID: <C8780EC81EAFB24B94943243BA5BCC54292289670F(a)intexch07.internal.donet.com> Content-Type: text/plain; charset="us-ascii" Instead, dispute the bill and then when they won't credit you for not giving you what you ordered, open a complaint with the state public utilities commission. It may get you some movement on the issue. -- Tim Sanderson, network administrator tims(a)donet.com -----Original Message----- From: Jon Lewis [mailto:jlewis@lewis.org] Sent: Wednesday, September 10, 2008 8:11 AM To: chloe K Cc: nanog(a)nanog.org Subject: Re: duplicate packet On Wed, 10 Sep 2008, chloe K wrote: > When I ping the ip, I get the duplicate > > I check the ip is just one. Why it happens? > > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms > 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) Not enough information has been given. Just hope it's not being caused by a Level3/Sprint circuit...ours is still doing this (when I change back to HDLC) and they just don't freaking care. Sometimes I wish I worked for a big telco so I could leave things broken and say "hey, I'm the telco, I don't have to care." Maybe we should refuse to pay for the affected DS3 and see if that gets more attention. ---------------------------------------------------------------------- Jon Lewis | I route Senior Network Engineer | therefore you are Atlantic Net | _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________ ------------------------------ Message: 6 Date: Wed, 10 Sep 2008 08:10:20 -0500 From: "Laurence F. Sheldon, Jr." <LarrySheldon(a)cox.net> Subject: Re: duplicate packet Cc: nanog(a)nanog.org Message-ID: <48C7C73C.7000900(a)cox.net> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Sebastian Abt wrote: > * chloe K wrote: >> When I ping the ip, I get the duplicate >> >> 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.344 ms >> 64 bytes from 192.168.0.95: icmp_seq=1 ttl=63 time=0.401 ms (DUP!) > ^^^^^^^^^^^^ > What's your netmask? Is 192.168.0.95 your net's broadcast address? Ohhh! Nice catch! ------------------------------ Message: 7 Date: Wed, 10 Sep 2008 06:13:18 -0700 From: "Matthew Petach" <mpetach(a)netflight.com> Subject: Re: Yahoo! mail admins? To: "Paul Kelly :: Blacknight" <paul(a)blacknight.com> Cc: "nanog(a)nanog.org" <nanog(a)nanog.org> Message-ID: <63ac96a50809100613k3f9f2499p9270dbc5b7a82533(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 On 9/10/08, Paul Kelly :: Blacknight <paul(a)blacknight.com> wrote: > Hi There, > > Are there any Yahoo! e-mail admins on the list? We're having some issues at times delivering e-mail to yahoo.co.uk and sometimes some of the other yahoo networks. > Probably not--but folks can probably get the message to the right ears. Let me know off list the nature of the issue (layer 3 reachability vs layer 7 application error messages) and I'll see what I can do to get the message to the right recipients. Thanks! Matt > Thanks, > > Paul > > Paul Kelly > Technical Director > Blacknight Internet Solutions ltd > Hosting, Colocation, Dedicated servers > IP Transit Services > Tel: +353 (0) 59 9183072 > Lo-call: 1850 929 929 > DDI: +353 (0) 59 9183091 > > e-mail: paul(a)blacknight.ie > web: http://www.blacknight.ie > > Blacknight Internet Solutions Ltd, > Unit 12A,Barrowside Business Park, > Sleaty Road, > Graiguecullen, > Carlow, > Ireland > > Company No.: 370845 > > ------------------------------ Message: 8 Date: Wed, 10 Sep 2008 12:35:24 +0000 (GMT) From: hobbit(a)avian.org (*Hobbit*) Subject: Re: ingress SMTP To: nanog(a)nanog.org Message-ID: <20080910123524.3D97E7808(a)relayer.avian.org> I am completely convinced that abuse@ in most big providers is a black hole with an autoresponder hung off it, and nothing ever gets done with complaints. NO HUMAN ever sees them, and even if they did, most of the humans at these outfits wouldn't recognize a Received: header if it bit them in the ass. I invite and welcome anyone from the "big boyz" I named in the original question -- verizon, comcast, roadrunner, charter, bellsouth/SBC, and now Google -- *especially* Gmail, given that counterproductive "privacy" policy we noted -- to inform me otherwise. _H* ------------------------------ Message: 9 Date: Wed, 10 Sep 2008 07:38:44 -0700 From: Leo Vegoda <leo.vegoda(a)icann.org> Subject: New (2-byte) ASN Allocation for RIPE NCC To: Leo Vegoda <leo.vegoda(a)icann.org> Message-ID: <C4EDA894.1EC4C%leo.vegoda(a)icann.org> Content-Type: text/plain; charset="iso-8859-1" -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, This is to confirm that the IANA has allocated one 2-byte ASN block to the RIPE NCC: 48128-49151 Assigned by RIPE NCC whois.ripe.net 2008-09-09 A note of the allocation has been made at: http://www.iana.org/assignments/as-numbers/as-numbers.xml http://www.iana.org/assignments/as-numbers/as-numbers.xhtml http://www.iana.org/assignments/as-numbers/as-numbers.txt Thank you and best regards, Leo Vegoda leo.vegoda(a)icann.org ******************************************* Internet Assigned Numbers Authority (IANA) 4676 Admiralty Way, Suite 330 Marina del Rey, CA 90292 Phone: +1-310-823-9358 Fax: +1-310-823-8649 ******************************************* -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) iD8DBQFIx9suvBLymJnAzRwRAgnkAKDDxJCilYy0aErDQtQQFEcsCKG/QwCgi+Ao 029EI3Ful4LKPXMJEUGKs3g= =7EeD -----END PGP SIGNATURE----- ------------------------------ Message: 10 Date: Wed, 10 Sep 2008 12:47:26 -0700 From: Jo Rhett <jrhett(a)netconsonance.com> Subject: Teleglobe appears to be spam-source zombie network? To: nanog <nanog(a)nanog.org> Message-ID: <03F411FC-74D6-48CA-84FC-16706B05BADE(a)netconsonance.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes We started getting a flood of autobot spam to our listed abuse mailbox about an hour ago out of Teleglobe. Trying to find someone to shut this down has found that 1. Teleglobe has no listed abuse contacts for any of their netblocks 2. The few of their records which have listed e-mail addresses all bounce 3. All listed phone numbers on any netblocks we can find are invalid Any chance that RIPE is more strigent than ARIN and would pull their netblocks until they fix this stuff? -- Jo Rhett Net Consonance : consonant endings by net philanthropy, open source and other randomness ------------------------------ Message: 11 Date: Wed, 10 Sep 2008 20:51:09 +0100 (WEST) From: Nuno Vieira - nfsi telecom <nuno.vieira(a)nfsi.pt> Subject: Re: Teleglobe appears to be spam-source zombie network? To: Jo Rhett <jrhett(a)netconsonance.com> Cc: nanog <nanog(a)nanog.org> Message-ID: <823080104.21701221076269458.JavaMail.root(a)zimbra.nfsi.pt> Content-Type: text/plain; charset=utf-8 Try reach them at CAbuse(a)tatacommunications.com cheers, --- Nuno Vieira nfsi telecom, lda. nuno.vieira(a)nfsi.pt Tel. (+351) 21 949 2300 - Fax (+351) 21 949 2301 http://www.nfsi.pt/ ----- "Jo Rhett" <jrhett(a)netconsonance.com> wrote: > We started getting a flood of autobot spam to our listed abuse mailbox > > about an hour ago out of Teleglobe. Trying to find someone to shut > this down has found that > > 1. Teleglobe has no listed abuse contacts for any of their netblocks > 2. The few of their records which have listed e-mail addresses all > bounce > 3. All listed phone numbers on any netblocks we can find are invalid > > Any chance that RIPE is more strigent than ARIN and would pull their > > netblocks until they fix this stuff? > > -- > Jo Rhett > Net Consonance : consonant endings by net philanthropy, open source > and other randomness ------------------------------ Message: 12 Date: Wed, 10 Sep 2008 15:59:35 -0400 From: Marshall Eubanks <tme(a)multicasttech.com> Subject: Re: Teleglobe appears to be spam-source zombie network? To: Nuno Vieira - nfsi telecom <nuno.vieira(a)nfsi.pt> Cc: nanog <nanog(a)nanog.org> Message-ID: <0B1059FF-6187-4212-A666-3124BFB38E88(a)multicasttech.com> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes On Sep 10, 2008, at 3:51 PM, Nuno Vieira - nfsi telecom wrote: > Try reach them at CAbuse(a)tatacommunications.com > Yes - all my teleglobe contacts went over to Tata email addresses during the summer. Regards Marshall > cheers, > --- > Nuno Vieira > nfsi telecom, lda. > > nuno.vieira(a)nfsi.pt > Tel. (+351) 21 949 2300 - Fax (+351) 21 949 2301 > http://www.nfsi.pt/ > > > > ----- "Jo Rhett" <jrhett(a)netconsonance.com> wrote: > >> We started getting a flood of autobot spam to our listed abuse >> mailbox >> >> about an hour ago out of Teleglobe. Trying to find someone to shut >> this down has found that >> >> 1. Teleglobe has no listed abuse contacts for any of their netblocks >> 2. The few of their records which have listed e-mail addresses all >> bounce >> 3. All listed phone numbers on any netblocks we can find are invalid >> >> Any chance that RIPE is more strigent than ARIN and would pull their >> >> netblocks until they fix this stuff? >> >> -- >> Jo Rhett >> Net Consonance : consonant endings by net philanthropy, open source >> and other randomness > ------------------------------ _______________________________________________ NANOG mailing list NANOG(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog End of NANOG Digest, Vol 8, Issue 38 ************************************

1 0

Validating network issues in a Comcast AS
by Fabian E. Bustamante 10 Sep '08

10 Sep '08

Hello, I was wondering if anybody could put me in touch (perhaps they are already listening) with a contact point for Comcast Cable Comm. As part of some research work we are doing, we identified some issues in their network (in particular AS33657) and would love to confirm them. I did email the notification contact, but got some silly automatic response. Thanks a lot! an optimistic academic -- ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Fabian E. Bustamante, Associate Professor EECS, Northwestern U. Technological Institute L465 2145 Sheridan Road, Evanston, IL 60208 www.aqualab.cs.northwestern.edu

1 0

New (2-byte) ASN Allocation for RIPE NCC
by Leo Vegoda 10 Sep '08

10 Sep '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, This is to confirm that the IANA has allocated one 2-byte ASN block to the RIPE NCC: 48128-49151 Assigned by RIPE NCC whois.ripe.net 2008-09-09 A note of the allocation has been made at: http://www.iana.org/assignments/as-numbers/as-numbers.xml http://www.iana.org/assignments/as-numbers/as-numbers.xhtml http://www.iana.org/assignments/as-numbers/as-numbers.txt Thank you and best regards, Leo Vegoda leo.vegoda(a)icann.org ******************************************* Internet Assigned Numbers Authority (IANA) 4676 Admiralty Way, Suite 330 Marina del Rey, CA 90292 Phone: +1-310-823-9358 Fax: +1-310-823-8649 ******************************************* -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) iD8DBQFIx9suvBLymJnAzRwRAgnkAKDDxJCilYy0aErDQtQQFEcsCKG/QwCgi+Ao 029EI3Ful4LKPXMJEUGKs3g= =7EeD -----END PGP SIGNATURE-----

1 0