- NANOG - lists.nanog.org

The state of TACACS+
by Robert Drake 05 Jan '15

05 Jan '15

Ever since first using it I've always liked tacacs+. Having said that I've grown to dislike some things about it recently. I guess, there have always been problems but I've been willing to leave them alone. I don't have time to give the code a real deep inspection, so I'm interested in others thoughts about it. I suspect people have just left it alone because it works. Also I apologize if this is too verbose or technical, or not technical enough, or just hard to read. History: TACACS+ was proposed as a standard to the IETF. They never adopted it and let the standards draft expire in 1998. Since then there have been no official changes to the code. Much has happened between now and then. I specifically was interested in parsing tac_plus logs correctly. After finding idiosyncrasies I decided to look at the source and the RFC to see what was really happening. Logging, or why I got into this mess: In the accounting log, fields are sometimes logged in different order. It appears the client is logging whatever it receives without parsing it or modifying it. That means the remote system is sending them in different orders, so technically the fault lies with them. However, it seems too trusting to take in data and log it without looking at it. This can also cause issues when you send a command like (Cisco) "dir /all nvram:" on a box with many files. The device expands the command to include everything on the nvram (important because you might want to deny access to that command based on something it expanded), but it gets truncated somewhere (not sure if it's the device buffer that is full, tac_plus, or the logging part. I might tcpdump for a while to see if I can figure out what it looks like on the wire) I'm not sure if there are security implications there. Encryption: The existing security consists of md5 XOR <content> with the md5 being composed of a running series of 16 byte hashes, taking the previous hash as part of the seed of the next hash. A sequence number is used so simple replay shouldn't be a factor. Depending on how vulnerable iterative md5 is to it, and how much time you had to sniff the traffic, I would think this would be highly vulnerable to chosen plaintext if you already have a user-level login, or at least partial known plaintext (with the assumption they make backups, you can guess that at least some of the packets will have "show running-config" and other common commands). They also don't pad the encrypted string so you can guess the command (or password) based on the length of the encrypted data. For a better description of the encryption you can read the draft: http://tools.ietf.org/html/draft-grant-tacacs-02 I found an article from May, 2000 which shows that the encryption scheme chosen was insufficient even then. http://www.openwall.com/articles/TACACS+-Protocol-Security For new crypto I would advise multiple cipher support with negotiation so you know what each client and server is capable of. If the client and server supported multiple keys (with a keyid) it would be easier to roll keys frequently, or if it isn't too much overhead they could use public key. Clients: As for clients, Wikipedia lists several that seem to be based on the original open-source tac_plus from Cisco. shrubbery.net has the "official" version that debian and freebsd use. I looked at some of the others and they all seemed to derive from Cisco's code directly or shrubbery.net code, but they retained the name and started doing their own versioning. All the webpages look like they're from 1995. In some cases I think it's intentional but in some ways it shows a lack of care for the code, like it's been dropped since 2000. Documentation is old: This only applies to shrubbery.net's version. I didn't look at the other ones that closely. While all of it appears valid, one Q&A in the FAQ was about IOS 10.3/11.0. Performance questions use the sparc 2 as a target machine. There isn't an INSTALL or README, just the FAQ/CHANGES/COPYING (and a tac_plus.conf manpage), so the learning curve for new users is probably pretty steep. Also there isn't a clear maintainer. The best email address I found was listed in the tacacs+.spec file, for packaging on rpm systems. If you hit the website they give some hints with some outdated, though still functional links. And they list the official email as tac_plus(a)shrubbery.net Conclusion: Did everyone already know this but me? If so have you moved to Kerberos? Can Kerberos do everything TACACS+ was doing for router authorization? I've got gear that only supports radius and tacacsplus, so in some cases I have no choice but to use one of those, neither of which I would trust over an unencrypted wire. If TACACS+ isn't a dead end then it needs a push to bring the protocol to a new version. There are big name vendors involved in making supported clients and servers. There should be someone invested in keeping it secure and adding features.

19 30

JANOG 35 meeting agenda
by MAWATARI Masataka 04 Jan '15

04 Jan '15

Hi all, JANOG 35 meeting will hold in Shizuoka City, Japan on January 14-16, 2015, hosted by Fujinokuni Information Network Organization. JANOG 35 meeting agenda is available at the following site. http://www.janog.gr.jp/en/index.php?JANOG35_Meeting%2FJANOG35_Program_Conte… Registration close: (close registration soon!) Conference: January 8, 2015 3:00 [UTC] Banquet: January 5, 2015 3:00 [UTC] https://regist.e-side.co.jp/product_info.php?products_id=500&language=en The survey will remain open until 14:59 Fri 9 Jan [UTC] for the IPv6 session. https://www.janog.gr.jp/meeting/janog35/program/ipv6/ipv6_form_en/ Thank you for your cooperation! -- Japan Internet Exchange MAWATARI Masataka <mawatari(a)jpix.ad.jp>

1 0

BGP Update Report
by cidr-report＠potaroo.net 02 Jan '15

02 Jan '15

BGP Update Report Interval: 25-Dec-14 -to- 01-Jan-15 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8888 821079 16.6% 68423.2 -- RUSERVICE-LLC-AS LLC RU-service,RU 2 - AS13105 350358 7.1% 15233.0 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 3 - AS23752 282375 5.7% 2031.5 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 4 - AS9829 155694 3.1% 93.1 -- BSNL-NIB National Internet Backbone,IN 5 - AS53249 79833 1.6% 39916.5 -- LAWA-AS - Los Angeles World Airport,US 6 - AS36947 44151 0.9% 218.6 -- ALGTEL-AS,DZ 7 - AS3 42234 0.8% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 8 - AS38197 32173 0.7% 27.8 -- SUNHK-DATA-AS-AP Sun Network (Hong Kong) Limited,HK 9 - AS10620 29823 0.6% 9.7 -- Telmex Colombia S.A.,CO 10 - AS60725 29341 0.6% 1630.1 -- O3B-AS O3b Limited,JE 11 - AS42456 28956 0.6% 2632.4 -- CHMURTZ-AS CHMURTZ SARL,FR 12 - AS51964 28201 0.6% 59.0 -- ORANGE-BUSINESS-SERVICES-IPSN-ASN Equant Inc.,FR 13 - AS7162 27074 0.6% 338.4 -- Universo Online S.A.,BR 14 - AS17974 26257 0.5% 9.3 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID 15 - AS45899 25780 0.5% 48.2 -- VNPT-AS-VN VNPT Corp,VN 16 - AS2 24821 0.5% 250.0 -- UDEL-DCN - University of Delaware,US 17 - AS36691 23100 0.5% 11550.0 -- CSUP-AS - Colorado State University-Pueblo,US 18 - AS18399 22856 0.5% 1269.8 -- YTCL-AS-AP Yatanarpon Teleport Company Limited,MM 19 - AS11054 22677 0.5% 629.9 -- LIVEPERSON - LivePerson, Inc.,US 20 - AS23342 21090 0.4% 540.8 -- UNITEDLAYER - Unitedlayer, Inc.,US TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8888 821079 16.6% 68423.2 -- RUSERVICE-LLC-AS LLC RU-service,RU 2 - AS53249 79833 1.6% 39916.5 -- LAWA-AS - Los Angeles World Airport,US 3 - AS61039 16726 0.3% 16726.0 -- ZMZ OAO ZMZ,RU 4 - AS13105 350358 7.1% 15233.0 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 5 - AS3 42234 0.8% 1306.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 6 - AS36691 23100 0.5% 11550.0 -- CSUP-AS - Colorado State University-Pueblo,US 7 - AS3 7718 0.2% 246.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 8 - AS58252 7222 0.1% 7222.0 -- ASN-RINGLOUD Netuity Limited,GB 9 - AS62174 5811 0.1% 5811.0 -- INTERPAN-AS INTERPAN LTD.,BG 10 - AS33721 4422 0.1% 4422.0 -- CCL-ASN2 - CARNIVAL CRUISE LINES,US 11 - AS31860 3008 0.1% 3008.0 -- MACKAY-SHIELDS - MacKay Shields LLC,US 12 - AS42456 28956 0.6% 2632.4 -- CHMURTZ-AS CHMURTZ SARL,FR 13 - AS52789 2630 0.1% 2630.0 -- SILVA NET PROVEDOR DE INTERNET LTDA,BR 14 - AS23752 282375 5.7% 2031.5 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 15 - AS47680 9769 0.2% 1953.8 -- NHCS EOBO Limited,IE 16 - AS3 1935 0.0% 1445.0 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 17 - AS60737 7511 0.1% 1877.8 -- NEURONESIT NEURONESIT,FR 18 - AS60725 29341 0.6% 1630.1 -- O3B-AS O3b Limited,JE 19 - AS45606 8025 0.2% 1605.0 -- 20 - AS51363 2802 0.1% 1401.0 -- TELEPATIYA-NET Telepatiya Ltd.,KZ TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 212.22.94.0/24 410720 8.1% AS8888 -- RUSERVICE-LLC-AS LLC RU-service,RU 2 - 212.22.80.0/24 410138 8.1% AS8888 -- RUSERVICE-LLC-AS LLC RU-service,RU 3 - 202.70.88.0/21 141463 2.8% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 4 - 202.70.64.0/21 138919 2.7% AS23752 -- NPTELECOM-NP-AS Nepal Telecommunications Corporation, Internet Services,NP 5 - 82.118.158.0/23 71540 1.4% AS13105 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 6 - 82.118.146.0/23 70924 1.4% AS13105 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 7 - 95.171.242.0/23 69812 1.4% AS13105 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 8 - 95.171.236.0/23 69014 1.4% AS13105 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 9 - 95.171.242.0/24 68980 1.4% AS13105 -- LUKOIL-INFORM-AS LUKOIL Technology Services GmbH,RU 10 - 130.0.192.0/21 42230 0.8% AS3 -- MIT-GATEWAYS - Massachusetts Institute of Technology,US 11 - 198.140.115.0/24 39940 0.8% AS53249 -- LAWA-AS - Los Angeles World Airport,US 12 - 198.140.114.0/24 39893 0.8% AS53249 -- LAWA-AS - Los Angeles World Airport,US 13 - 41.221.20.0/24 38530 0.8% AS36947 -- ALGTEL-AS,DZ 14 - 64.29.130.0/24 20768 0.4% AS23342 -- UNITEDLAYER - Unitedlayer, Inc.,US 15 - 192.115.44.0/22 20095 0.4% AS25003 -- INTERNET_BINAT Internet Binat Ltd,IL 16 - 91.235.169.0/24 16726 0.3% AS61039 -- ZMZ OAO ZMZ,RU 17 - 162.249.183.0/24 14926 0.3% AS60725 -- O3B-AS O3b Limited,JE 18 - 185.26.155.0/24 14397 0.3% AS60725 -- O3B-AS O3b Limited,JE 19 - 192.55.229.0/24 11561 0.2% AS36691 -- CSUP-AS - Colorado State University-Pueblo,US 20 - 158.142.0.0/16 11539 0.2% AS36691 -- CSUP-AS - Colorado State University-Pueblo,US Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 02 Jan '15

02 Jan '15

This report has been generated at Fri Jan 2 21:14:20 2015 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/2.0 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 26-12-14 529668 293468 27-12-14 529797 293731 28-12-14 529713 293924 29-12-14 529791 292319 30-12-14 529929 291995 31-12-14 529985 291981 01-01-15 529871 291855 02-01-15 529540 291901 AS Summary 49250 Number of ASes in routing system 19745 Number of ASes announcing only one prefix 3060 Largest number of prefixes announced by an AS AS10620: Telmex Colombia S.A.,CO 120376832 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street,CN Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 02Jan15 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 529654 291913 237741 44.9% All ASes AS6389 2890 69 2821 97.6% BELLSOUTH-NET-BLK - BellSouth.net Inc.,US AS22773 2922 173 2749 94.1% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US AS17974 2816 77 2739 97.3% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia,ID AS28573 2308 307 2001 86.7% NET Serviços de Comunicação S.A.,BR AS3356 2631 770 1861 70.7% LEVEL3 - Level 3 Communications, Inc.,US AS4755 1927 285 1642 85.2% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN AS4766 2942 1303 1639 55.7% KIXS-AS-KR Korea Telecom,KR AS6147 1793 170 1623 90.5% Telefonica del Peru S.A.A.,PE AS7303 1772 289 1483 83.7% Telecom Argentina S.A.,AR AS10620 3060 1588 1472 48.1% Telmex Colombia S.A.,CO AS9808 1515 56 1459 96.3% CMNET-GD Guangdong Mobile Communication Co.Ltd.,CN AS8402 1411 26 1385 98.2% CORBINA-AS OJSC "Vimpelcom",RU AS20115 1855 526 1329 71.6% CHARTER-NET-HKY-NC - Charter Communications,US AS7545 2502 1272 1230 49.2% TPG-INTERNET-AP TPG Telecom Limited,AU AS4323 1637 411 1226 74.9% TWTC - tw telecom holdings, inc.,US AS9498 1298 111 1187 91.4% BBIL-AP BHARTI Airtel Ltd.,IN AS18566 2041 868 1173 57.5% MEGAPATH5-US - MegaPath Corporation,US AS7552 1131 57 1074 95.0% VIETEL-AS-AP Viettel Corporation,VN AS22561 1340 266 1074 80.1% AS22561 - CenturyTel Internet Holdings, Inc.,US AS34984 1925 868 1057 54.9% TELLCOM-AS TELLCOM ILETISIM HIZMETLERI A.S.,TR AS6983 1624 617 1007 62.0% ITCDELTA - Earthlink, Inc.,US AS7738 1000 84 916 91.6% Telemar Norte Leste S.A.,BR AS38285 983 113 870 88.5% M2TELECOMMUNICATIONS-AU M2 Telecommunications Group Ltd,AU AS4538 1775 907 868 48.9% ERX-CERNET-BKB China Education and Research Network Center,CN AS31148 1045 190 855 81.8% FREENET-AS Freenet Ltd.,UA AS24560 1179 374 805 68.3% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services,IN AS8151 1493 697 796 53.3% Uninet S.A. de C.V.,MX AS18881 856 65 791 92.4% Global Village Telecom,BR AS26615 930 142 788 84.7% Tim Celular S.A.,BR AS4780 1066 305 761 71.4% SEEDNET Digital United Inc.,TW Total 53667 12986 40681 75.8% Top 30 total Possible Bogus Routes 5.100.241.0/24 AS19957 -Reserved AS-,ZZ 23.252.224.0/20 AS62502 -Reserved AS-,ZZ 23.252.224.0/21 AS62502 -Reserved AS-,ZZ 23.252.232.0/21 AS62502 -Reserved AS-,ZZ 24.231.96.0/24 AS21548 MTO - MTO Telecom Inc.,CA 27.100.7.0/24 AS56096 31.217.248.0/21 AS44902 COV-ASN COVAGE NETWORKS SASU,FR 37.16.88.0/23 AS57652 -Reserved AS-,ZZ 41.73.1.0/24 AS37004 -Reserved AS-,ZZ 41.73.10.0/24 AS37004 -Reserved AS-,ZZ 41.73.11.0/24 AS37004 -Reserved AS-,ZZ 41.73.12.0/24 AS37004 -Reserved AS-,ZZ 41.73.13.0/24 AS37004 -Reserved AS-,ZZ 41.73.15.0/24 AS37004 -Reserved AS-,ZZ 41.73.16.0/24 AS37004 -Reserved AS-,ZZ 41.73.18.0/24 AS37004 -Reserved AS-,ZZ 41.73.20.0/24 AS37004 -Reserved AS-,ZZ 41.73.21.0/24 AS37004 -Reserved AS-,ZZ 41.76.48.0/21 AS36969 MTL-AS,MW 41.78.180.0/23 AS37265 -Reserved AS-,ZZ 41.189.96.0/20 AS37000 -Reserved AS-,ZZ 41.189.127.0/24 AS37000 -Reserved AS-,ZZ 41.189.128.0/24 AS37000 -Reserved AS-,ZZ 41.191.108.0/22 AS37004 -Reserved AS-,ZZ 41.191.108.0/24 AS37004 -Reserved AS-,ZZ 41.191.109.0/24 AS37004 -Reserved AS-,ZZ 41.191.110.0/24 AS37004 -Reserved AS-,ZZ 41.191.111.0/24 AS37004 -Reserved AS-,ZZ 41.223.208.0/22 AS37000 -Reserved AS-,ZZ 41.242.152.0/22 AS37558 LITC,LY 41.242.156.0/22 AS37558 LITC,LY 43.245.196.0/24 AS36352 AS-COLOCROSSING - ColoCrossing,US 43.245.197.0/24 AS55286 SERVER-MANIA - B2 Net Solutions Inc.,US 45.61.16.0/20 AS53828 NITEL - NETWORK INNOVATIONS, INC.,US 45.61.64.0/18 AS62874 WEB2OBJECTS-LLC - Web2Objects LLC,US 45.224.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.228.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.232.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 45.236.0.0/14 AS28000 LACNIC - Latin American and Caribbean IP address,UY 64.25.16.0/23 AS19535 -Reserved AS-,ZZ 64.25.20.0/24 AS19535 -Reserved AS-,ZZ 64.25.21.0/24 AS19535 -Reserved AS-,ZZ 64.25.22.0/24 AS19535 -Reserved AS-,ZZ 64.25.24.0/23 AS19535 -Reserved AS-,ZZ 64.25.27.0/24 AS7046 RFC2270-UUNET-CUSTOMER - MCI Communications Services, Inc. d/b/a Verizon Business,US 64.25.28.0/23 AS19535 -Reserved AS-,ZZ 64.44.0.0/16 AS46879 -Reserved AS-,ZZ 64.112.0.0/17 AS46879 -Reserved AS-,ZZ 64.112.128.0/18 AS46879 -Reserved AS-,ZZ 64.140.128.0/18 AS7385 INTEGRATELECOM - Integra Telecom, Inc.,US 64.247.224.0/19 AS7029 WINDSTREAM - Windstream Communications Inc,US 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc.,US 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc.,US 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global,US 66.180.64.0/21 AS32558 ZEUTER - Zeuter Development Corporation,CA 66.187.240.0/20 AS14552 ACS-SOUTHEASTDATACENTER - Affiliated Computer Services, Inc.,US 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks,US 67.210.0.0/20 AS62502 -Reserved AS-,ZZ 67.210.0.0/21 AS62502 -Reserved AS-,ZZ 67.210.8.0/21 AS62502 -Reserved AS-,ZZ 69.2.64.0/19 AS7029 WINDSTREAM - Windstream Communications Inc,US 69.172.0.0/18 AS7029 WINDSTREAM - Windstream Communications Inc,US 72.12.0.0/18 AS7029 WINDSTREAM - Windstream Communications Inc,US 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc.,US 74.113.200.0/23 AS46939 -Reserved AS-,ZZ 74.114.52.0/22 AS40818 -Reserved AS-,ZZ 74.114.52.0/23 AS40818 -Reserved AS-,ZZ 74.114.52.0/24 AS40818 -Reserved AS-,ZZ 74.114.53.0/24 AS40818 -Reserved AS-,ZZ 74.114.54.0/23 AS40818 -Reserved AS-,ZZ 74.114.54.0/24 AS40818 -Reserved AS-,ZZ 74.114.55.0/24 AS40818 -Reserved AS-,ZZ 74.114.184.0/22 AS19888 -Reserved AS-,ZZ 74.118.132.0/22 AS5117 -Reserved AS-,ZZ 74.120.212.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.120.214.0/23 AS32326 MORPHOTRUST-USA - MorphoTrust USA, Inc.,US 74.121.24.0/22 AS36263 FORONA - Forona Technologies, Inc.,US 74.123.136.0/21 AS53358 -Reserved AS-,ZZ 77.243.91.0/24 AS42597 -Reserved AS-,ZZ 80.78.133.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/23 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.134.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.78.135.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 80.250.32.0/22 AS37106 ODUA-AS,NG 89.31.24.0/23 AS41455 -Reserved AS-,ZZ 89.31.26.0/23 AS41455 -Reserved AS-,ZZ 89.31.28.0/22 AS41455 -Reserved AS-,ZZ 91.103.8.0/24 AS42551 -Reserved AS-,ZZ 91.103.9.0/24 AS42551 -Reserved AS-,ZZ 91.103.10.0/24 AS42551 -Reserved AS-,ZZ 91.103.11.0/24 AS42551 -Reserved AS-,ZZ 91.193.60.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.195.66.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 91.197.36.0/22 AS43359 -Reserved AS-,ZZ 91.220.84.0/24 AS5577 ROOT root SA,LU 98.143.160.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.161.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.162.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.163.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.164.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.165.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.166.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.167.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.168.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.172.0/22 AS26566 -Reserved AS-,ZZ 98.143.172.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.173.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.174.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 98.143.175.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. ,AU 102.32.0.0/16 AS20150 SKY-CAPITAL Sky Capital Investments Ltd.,DE 102.39.0.0/16 AS59790 H3S Helge Sczepanek trading as H3S medien services,DE 102.108.0.0/16 AS59790 H3S Helge Sczepanek trading as H3S medien services,DE 102.201.0.0/16 AS59790 H3S Helge Sczepanek trading as H3S medien services,DE 102.242.0.0/16 AS20150 SKY-CAPITAL Sky Capital Investments Ltd.,DE 103.1.155.0/24 AS55799 103.10.222.0/24 AS13189 103.14.231.0/24 AS58680 103.15.92.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.18.248.0/22 AS18097 DCN D.C.N. Corporation,JP 103.19.0.0/22 AS18097 DCN D.C.N. Corporation,JP 103.20.100.0/24 AS45334 AIRCEL-AS-AP Dishnet Wireless Limited,IN 103.20.101.0/24 AS45334 AIRCEL-AS-AP Dishnet Wireless Limited,IN 103.20.124.0/24 AS45355 DIGICELPACIFIC-1-AP Clarendon House,FJ 103.20.219.0/24 AS55795 VERBDC1-AS-AP Verb Data Centre Pty Ltd,AU 103.21.4.0/22 AS12182 INTERNAP-2BLK - Internap Network Services Corporation,US 103.23.148.0/23 AS13209 103.23.148.0/24 AS13209 103.26.116.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.231.251.0/24 AS13316 103.232.28.0/23 AS13316 103.232.28.0/24 AS13316 103.243.72.0/24 AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US 103.243.73.0/24 AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US 103.243.74.0/23 AS36351 SOFTLAYER - SoftLayer Technologies Inc.,US 103.248.88.0/22 AS23818 JETINTERNET JETINTERNET Corporation,JP 103.248.220.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.250.0.0/22 AS17676 GIGAINFRA Softbank BB Corp.,JP 103.253.105.0/24 AS13316 111.92.184.0/22 AS9797 NEXONASIAPACIFIC-AS-AP Nexon Asia Pacific P/L,AU 116.206.72.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.85.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 116.206.103.0/24 AS6461 ABOVENET - Abovenet Communications, Inc,US 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP,IN 124.158.28.0/22 AS45857 142.147.62.0/24 AS3958 AIRCANADA - Air Canada,CA 151.216.128.0/18 AS28840 TATTELECOM-AS OJSC "OAO TATTELECOM",RU 151.216.192.0/18 AS28840 TATTELECOM-AS OJSC "OAO TATTELECOM",RU 154.134.0.0/16 AS59790 H3S Helge Sczepanek trading as H3S medien services,DE 162.217.156.0/22 AS62502 -Reserved AS-,ZZ 162.217.156.0/23 AS62502 -Reserved AS-,ZZ 162.217.158.0/23 AS62502 -Reserved AS-,ZZ 162.221.48.0/21 AS62502 -Reserved AS-,ZZ 162.221.48.0/22 AS62502 -Reserved AS-,ZZ 162.221.52.0/22 AS62502 -Reserved AS-,ZZ 162.223.64.0/21 AS62502 -Reserved AS-,ZZ 162.223.64.0/22 AS62502 -Reserved AS-,ZZ 162.223.68.0/22 AS62502 -Reserved AS-,ZZ 166.93.0.0/16 AS23537 CRITIGEN - Micro Source, Inc.,US 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group),CN 173.211.192.0/18 AS7029 WINDSTREAM - Windstream Communications Inc,US 176.111.168.0/22 AS50586 MACROSOLUTIONS MacroSolution SRL,RO 182.237.25.0/24 AS10201 DWL-AS-IN Dishnet Wireless Limited. Broadband Wireless,IN 185.28.180.0/22 AS18097 DCN D.C.N. Corporation,JP 186.65.108.0/22 AS22927 Telefonica de Argentina,AR 190.124.252.0/22 AS7303 Telecom Argentina S.A.,AR 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc,US 192.25.10.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.11.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.13.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.25.14.0/24 AS5714 HPES - Hewlett-Packard Company,US 192.34.152.0/21 AS10835 VISIONARY - Visionary Communications, Inc.,US 192.75.23.0/24 AS2579 AS2579 - Alcatel-Lucent,FR 192.75.239.0/24 AS23498 CDSI - COGECODATA,CA 192.84.24.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.101.72.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.124.252.0/22 AS680 DFN Verein zur Foerderung eines Deutschen Forschungsnetzes e.V.,DE 192.131.233.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc.,US 192.149.81.0/24 AS14454 PERIMETER-ESECURITY - Perimeter eSecurity,US 192.154.32.0/19 AS81 NCREN - MCNC,US 192.154.64.0/19 AS81 NCREN - MCNC,US 192.155.48.0/22 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 192.155.57.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.58.0/23 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.61.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.65.0/24 AS6128 CABLE-NET-1 - Cablevision Systems Corp.,US 192.155.66.0/24 AS174 COGENT-174 - Cogent Communications,US 192.155.67.0/24 AS174 COGENT-174 - Cogent Communications,US 192.155.68.0/24 AS174 COGENT-174 - Cogent Communications,US 192.166.32.0/20 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 192.188.208.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 192.245.195.0/24 AS7381 SUNGARDRS - SunGard Availability Services LP,US 193.9.59.0/24 AS1257 TELE2,SE 193.16.106.0/24 AS31539 -Reserved AS-,ZZ 193.16.145.0/24 AS31392 -Reserved AS-,ZZ 193.22.86.0/24 AS24751 MULTIFI-AS Jakobstadsnejdens Telefon Ab,FI 193.22.224.0/20 AS3322 -Reserved AS-,ZZ 193.22.238.0/23 AS62383 LDS-AS Lambrechts Data Services VOF,BE 193.26.213.0/24 AS31641 BYTEL-AS Bytel Ltd,GB 193.28.14.0/24 AS34309 LINK11 Link11 GmbH,DE 193.33.6.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.33.252.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.46.200.0/24 AS34243 WEBAGE Web Age Ltd,GB 193.111.229.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.149.2.0/23 AS15919 INTERHOST Servicios de Hosting en Internet S.A.,ES 193.164.152.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.178.196.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 193.188.252.0/24 AS8697 JTC-AS8697 Jordan Telecommunications Company,JO 193.200.244.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.201.244.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.245.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.201.246.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 193.202.8.0/21 AS3322 -Reserved AS-,ZZ 193.202.9.0/24 AS6824 HERMES-NETWORK Hermes Telecom International Ltd,GB 193.223.103.0/24 AS8437 UTA-AS Tele2 Telecommunication GmbH,AT 193.227.109.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 193.227.236.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.6.252.0/24 AS21202 DCSNET-AS Bredband2 AB,SE 194.9.8.0/23 AS2863 SPRITELINK Centor AB,SE 194.9.8.0/24 AS2863 SPRITELINK Centor AB,SE 194.33.11.0/24 AS8943 JUMP Jump Networks Ltd.,GB 194.39.78.0/23 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.49.17.0/24 AS13135 CREW-AS Wieske's Crew GmbH,DE 194.50.8.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.60.88.0/21 AS5089 NTL Virgin Media Limited,GB 194.61.147.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.61.150.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.61.151.0/24 AS702 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 194.63.152.0/22 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.76.224.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.76.225.0/24 AS34701 WITZENMANN-AS Witzenmann GmbH, Pforzheim,DE 194.79.36.0/22 AS3257 TINET-BACKBONE Tinet SpA,DE 194.88.6.0/24 AS35093 RO-HTPASSPORT High Tech Passport Ltd SUA California San Jose SUCURSALA BUCURESTI ROMANIA,RO 194.88.226.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.99.67.0/24 AS9083 CARPENET carpeNet Information Technologies GmbH,DE 194.126.152.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 194.126.219.0/24 AS34545 -Reserved AS-,ZZ 194.126.233.0/24 AS31235 SKIWEBCENTER-AS SKIWEBCENTER SARL,FR 194.150.214.0/23 AS30880 SPACEDUMP-AS SpaceDump IT AB,SE 194.156.179.0/24 AS3209 VODANET Vodafone GmbH,DE 194.180.25.0/24 AS21358 ATOS-ORIGIN-DE-AS Atos Information Technology GmbH,DE 194.187.24.0/22 AS8856 UKRNET UkrNet Ltd,UA 195.8.48.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.48.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.8.119.0/24 AS34304 TEENTELECOM Teen Telecom SRL,RO 195.42.232.0/22 AS15657 SPEEDBONE-AS Speedbone Internet & Connectivity GmbH,DE 195.85.194.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.85.201.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.110.0.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.128.240.0/23 AS21202 DCSNET-AS Bredband2 AB,SE 195.149.119.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.189.174.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA,BE 195.234.156.0/24 AS25028 -Reserved AS-,ZZ 195.242.182.0/24 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 195.244.18.0/23 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 196.3.182.0/24 AS37004 -Reserved AS-,ZZ 196.3.183.0/24 AS37004 -Reserved AS-,ZZ 196.22.8.0/24 AS27822 Emerging Markets Communications de Argentina S.R.L,AR 196.22.11.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc.,US 196.64.0.0/16 AS59790 H3S Helge Sczepanek trading as H3S medien services,DE 196.192.124.0/23 AS37301 AFRINIC-ZA-CPT-AS,MU 196.216.18.0/24 AS33790 -Reserved AS-,ZZ 197.149.188.0/22 AS37282 MAINONE,NG 198.22.195.0/24 AS54583 -Reserved AS-,ZZ 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc.,US 198.71.17.0/24 AS11268 -Reserved AS-,ZZ 198.71.18.0/23 AS11268 -Reserved AS-,ZZ 198.71.20.0/23 AS11268 -Reserved AS-,ZZ 198.71.22.0/24 AS11268 -Reserved AS-,ZZ 198.71.26.0/24 AS11268 -Reserved AS-,ZZ 198.71.27.0/24 AS11268 -Reserved AS-,ZZ 198.74.11.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.13.0/24 AS14573 KEYSPANENERGY-NE1 - Keyspan Energy,US 198.74.38.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.39.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.74.40.0/24 AS16966 SBCIDC-LSAN03 - AT&T Internet Services,US 198.97.72.0/21 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.96.0/19 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.192.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.97.240.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited,CA 198.163.215.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.163.216.0/24 AS6327 SHAW - Shaw Communications Inc.,CA 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 198.252.165.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.166.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.167.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.168.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 198.252.169.0/24 AS20115 CHARTER-NET-HKY-NC - Charter Communications,US 199.85.9.0/24 AS852 ASN852 - TELUS Communications Inc.,CA 199.88.52.0/22 AS17018 QTS-SACRAMENTO-1 - Quality Investment Properties Sacramento, LLC,US 199.116.200.0/21 AS22830 -Reserved AS-,ZZ 199.121.0.0/16 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 199.123.16.0/20 AS721 DNIC-ASBLK-00721-00726 - DoD Network Information Center,US 199.204.144.0/21 AS36007 -Reserved AS-,ZZ 200.1.112.0/24 AS29754 GO2TEL - GO2TEL.COM INC.,US 200.6.87.0/24 AS27947 Telconet S.A,EC 200.58.248.0/21 AS27849 200.81.48.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 200.81.49.0/24 AS11664 Techtel LMDS Comunicaciones Interactivas S.A.,AR 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd.,KR 202.53.138.0/24 AS4058 CITICTEL-CPC-AS4058 CITIC Telecom International CPC Limited,HK 202.58.113.0/24 AS19161 -Reserved AS-,ZZ 202.61.108.0/24 AS55812 202.61.118.0/24 AS55833 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network,CN 202.158.251.0/24 AS9255 CONNECTPLUS-AS Singapore Telecom,SG 202.165.120.0/24 AS19161 -Reserved AS-,ZZ 202.165.124.0/24 AS23749 GLOBAL-TRANSIT-AS-HKCOLO-AP HKCOLO ltd. Internet Service Provider,HK 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd.,IN 203.28.240.0/20 AS10148 UNIMELB-AS-AP The University of Melbourne, Melbourne, Victoria,AU 203.142.219.0/24 AS45149 203.160.48.0/21 AS38008 203.189.116.0/22 AS45606 203.189.116.0/24 AS45606 203.189.117.0/24 AS45606 203.189.118.0/24 AS45606 203.189.119.0/24 AS45606 204.10.88.0/21 AS3356 LEVEL3 - Level 3 Communications, Inc.,US 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC,US 204.16.96.0/24 AS19972 -Reserved AS-,ZZ 204.16.97.0/24 AS19972 -Reserved AS-,ZZ 204.16.98.0/24 AS19972 -Reserved AS-,ZZ 204.16.99.0/24 AS19972 -Reserved AS-,ZZ 204.69.144.0/24 AS27283 RJF-INTERNET - Raymond James Financial, Inc.,US 204.87.251.0/24 AS22217 -Reserved AS-,ZZ 204.106.16.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 204.187.11.0/24 AS51113 ELEKTA-AS Elekta,GB 205.137.240.0/20 AS11686 ENA - Education Networks of America,US 205.159.44.0/24 AS40157 ADESA-CORP-AS - ADESA Corp,US 205.166.231.0/24 AS7029 WINDSTREAM - Windstream Communications Inc,US 205.211.160.0/24 AS30045 UHN-ASN - University Health Network,CA 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company,US 206.223.224.0/24 AS21548 MTO - MTO Telecom Inc.,CA 207.2.120.0/21 AS6221 USCYBERSITES - US Cybersites, Inc,US 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc,US 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc,US 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc.,US 207.189.0.0/19 AS46879 -Reserved AS-,ZZ 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc.,US 207.254.128.0/21 AS30689 FLOW-NET - FLOW,JM 207.254.128.0/24 AS30689 FLOW-NET - FLOW,JM 207.254.136.0/21 AS30689 FLOW-NET - FLOW,JM 208.66.64.0/24 AS16936 -Reserved AS-,ZZ 208.66.65.0/24 AS16936 -Reserved AS-,ZZ 208.66.66.0/24 AS16936 -Reserved AS-,ZZ 208.66.67.0/24 AS16936 -Reserved AS-,ZZ 208.67.132.0/22 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 208.75.152.0/21 AS32146 -Reserved AS-,ZZ 208.76.20.0/24 AS31812 -Reserved AS-,ZZ 208.76.21.0/24 AS31812 -Reserved AS-,ZZ 208.77.164.0/24 AS22659 -Reserved AS-,ZZ 208.77.166.0/24 AS4323 TWTC - tw telecom holdings, inc.,US 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC,US 208.84.232.0/24 AS33131 -Reserved AS-,ZZ 208.84.233.0/24 AS33131 -Reserved AS-,ZZ 208.84.234.0/24 AS33131 -Reserved AS-,ZZ 208.84.237.0/24 AS33131 -Reserved AS-,ZZ 208.94.216.0/23 AS13629 -Reserved AS-,ZZ 208.94.219.0/24 AS13629 -Reserved AS-,ZZ 208.94.221.0/24 AS13629 -Reserved AS-,ZZ 208.94.223.0/24 AS13629 -Reserved AS-,ZZ 208.115.0.0/19 AS7029 WINDSTREAM - Windstream Communications Inc,US 209.135.171.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.135.175.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business,US 209.159.32.0/19 AS7029 WINDSTREAM - Windstream Communications Inc,US 209.177.64.0/20 AS6461 ABOVENET - Abovenet Communications, Inc,US 209.193.112.0/20 AS209 ASN-QWEST - Qwest Communications Company, LLC,US 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP.,US 209.234.112.0/23 AS32252 -Reserved AS-,ZZ 209.234.114.0/23 AS32252 -Reserved AS-,ZZ 209.234.116.0/24 AS32252 -Reserved AS-,ZZ 209.234.117.0/24 AS32252 -Reserved AS-,ZZ 209.234.118.0/24 AS32252 -Reserved AS-,ZZ 209.234.119.0/24 AS32252 -Reserved AS-,ZZ 209.234.120.0/24 AS32252 -Reserved AS-,ZZ 209.234.121.0/24 AS32252 -Reserved AS-,ZZ 209.234.122.0/24 AS32252 -Reserved AS-,ZZ 213.255.128.0/20 AS24863 LINKdotNET-AS,EG 213.255.144.0/20 AS24863 LINKdotNET-AS,EG 216.73.81.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.73.82.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.73.85.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.73.88.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.73.89.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.73.94.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.73.95.0/24 AS6432 DOUBLECLICK - Double Click, Inc.,US 216.83.224.0/19 AS7029 WINDSTREAM - Windstream Communications Inc,US 216.107.64.0/18 AS7029 WINDSTREAM - Windstream Communications Inc,US 216.146.0.0/19 AS11915 US-TELEPACIFIC - TelePacific Communications,US 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc.,US 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc.,US 216.212.192.0/19 AS46879 -Reserved AS-,ZZ 216.219.0.0/18 AS7029 WINDSTREAM - Windstream Communications Inc,US 216.231.96.0/19 AS7029 WINDSTREAM - Windstream Communications Inc,US 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC.,US 216.238.192.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.193.0/24 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.238.194.0/24 AS26566 -Reserved AS-,ZZ 216.238.196.0/22 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS, LLC,US 216.251.50.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.53.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN 216.251.62.0/24 AS38191 INFOSYS-AS Infosys Technologies Ltd,IN Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Level3 Contact - Non-customer
by Bryan Socha 02 Jan '15

02 Jan '15

Does anyone have a contact for Level3 if you are a not a customer or can someone from level3 please contact me off list. We're seeing and issue with blocked subnets. All of their public addresses are being replied to with "log into the portal, open a customer ticket". Thanks, Bryan Socha Network Engineer DigitalOcean

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 02 Jan '15

02 Jan '15

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 03 Jan, 2015 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 524053 Prefixes after maximum aggregation (per Origin AS): 201599 Deaggregation factor: 2.60 Unique aggregates announced (without unneeded subnets): 256561 Total ASes present in the Internet Routing Table: 48968 Prefixes per ASN: 10.70 Origin-only ASes present in the Internet Routing Table: 36361 Origin ASes announcing only one prefix: 16299 Transit ASes present in the Internet Routing Table: 6217 Transit-only ASes present in the Internet Routing Table: 170 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 100 Max AS path prepend of ASN ( 55644) 93 Prefixes from unregistered ASNs in the Routing Table: 1641 Unregistered ASNs in the Routing Table: 432 Number of 32-bit ASNs allocated by the RIRs: 8291 Number of 32-bit ASNs visible in the Routing Table: 6390 Prefixes from 32-bit ASNs in the Routing Table: 22960 Number of bogon 32-bit ASNs visible in the Routing Table: 11 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 396 Number of addresses announced to Internet: 2718618692 Equivalent to 162 /8s, 10 /16s and 212 /24s Percentage of available address space announced: 73.4 Percentage of allocated address space announced: 73.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 97.0 Total number of prefixes smaller than registry allocations: 176798 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 129283 Total APNIC prefixes after maximum aggregation: 37681 APNIC Deaggregation factor: 3.43 Prefixes being announced from the APNIC address blocks: 134136 Unique aggregates announced from the APNIC address blocks: 54942 APNIC Region origin ASes present in the Internet Routing Table: 5007 APNIC Prefixes per ASN: 26.79 APNIC Region origin ASes announcing only one prefix: 1215 APNIC Region transit ASes present in the Internet Routing Table: 864 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 100 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1238 Number of APNIC addresses announced to Internet: 740595776 Equivalent to 44 /8s, 36 /16s and 152 /24s Percentage of available APNIC address space announced: 86.6 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 174308 Total ARIN prefixes after maximum aggregation: 86308 ARIN Deaggregation factor: 2.02 Prefixes being announced from the ARIN address blocks: 176223 Unique aggregates announced from the ARIN address blocks: 82419 ARIN Region origin ASes present in the Internet Routing Table: 16418 ARIN Prefixes per ASN: 10.73 ARIN Region origin ASes announcing only one prefix: 6066 ARIN Region transit ASes present in the Internet Routing Table: 1711 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 20 Number of ARIN region 32-bit ASNs visible in the Routing Table: 305 Number of ARIN addresses announced to Internet: 1055482112 Equivalent to 62 /8s, 233 /16s and 97 /24s Percentage of available ARIN address space announced: 55.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 125806 Total RIPE prefixes after maximum aggregation: 63668 RIPE Deaggregation factor: 1.98 Prefixes being announced from the RIPE address blocks: 131835 Unique aggregates announced from the RIPE address blocks: 82713 RIPE Region origin ASes present in the Internet Routing Table: 17829 RIPE Prefixes per ASN: 7.39 RIPE Region origin ASes announcing only one prefix: 8176 RIPE Region transit ASes present in the Internet Routing Table: 2927 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 3315 Number of RIPE addresses announced to Internet: 692034180 Equivalent to 41 /8s, 63 /16s and 154 /24s Percentage of available RIPE address space announced: 100.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-202239 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 59103 Total LACNIC prefixes after maximum aggregation: 10919 LACNIC Deaggregation factor: 5.41 Prefixes being announced from the LACNIC address blocks: 68106 Unique aggregates announced from the LACNIC address blocks: 31173 LACNIC Region origin ASes present in the Internet Routing Table: 2397 LACNIC Prefixes per ASN: 28.41 LACNIC Region origin ASes announcing only one prefix: 641 LACNIC Region transit ASes present in the Internet Routing Table: 481 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 25 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 1450 Number of LACNIC addresses announced to Internet: 167434112 Equivalent to 9 /8s, 250 /16s and 215 /24s Percentage of available LACNIC address space announced: 99.8 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 12442 Total AfriNIC prefixes after maximum aggregation: 2979 AfriNIC Deaggregation factor: 4.18 Prefixes being announced from the AfriNIC address blocks: 13357 Unique aggregates announced from the AfriNIC address blocks: 4958 AfriNIC Region origin ASes present in the Internet Routing Table: 727 AfriNIC Prefixes per ASN: 18.37 AfriNIC Region origin ASes announcing only one prefix: 201 AfriNIC Region transit ASes present in the Internet Routing Table: 152 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 82 Number of AfriNIC addresses announced to Internet: 60958976 Equivalent to 3 /8s, 162 /16s and 41 /24s Percentage of available AfriNIC address space announced: 60.6 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2942 11559 925 Korea Telecom 17974 2816 904 77 PT Telekomunikasi Indonesia 7545 2489 336 127 TPG Telecom Limited 4755 1928 418 190 TATA Communications formerly 4538 1758 4190 71 China Education and Research 9829 1638 1323 28 National Internet Backbone 9808 1516 6719 19 Guangdong Mobile Communicatio 4808 1456 2211 431 CNCGROUP IP network China169 9583 1314 106 538 Sify Limited 9498 1298 336 97 BHARTI Airtel Ltd. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 2920 2956 142 Cox Communications Inc. 6389 2891 3688 51 BellSouth.net Inc. 3356 2563 10700 474 Level 3 Communications, Inc. 18566 2042 379 183 MegaPath Corporation 20115 1854 1825 445 Charter Communications 4323 1629 1054 409 tw telecom holdings, inc. 6983 1624 867 245 EarthLink, Inc. 30036 1509 312 582 Mediacom Communications Corp 701 1411 11262 695 MCI Communications Services, 22561 1340 411 242 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 34984 1924 299 354 TELLCOM ILETISIM HIZMETLERI A 20940 1529 597 1127 Akamai International B.V. 8402 1415 544 15 OJSC "Vimpelcom" 31148 1045 45 21 Freenet Ltd. 13188 1036 97 54 TOV "Bank-Inform" 8551 906 373 48 Bezeq International-Ltd 9198 851 349 26 JSC Kazakhtelecom 6830 824 2340 444 Liberty Global Operations B.V 12479 819 794 85 France Telecom Espana SA 9121 598 1693 21 Turk Telekomunikasyon Anonim Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3059 496 238 Telmex Colombia S.A. 28573 2308 2126 115 NET Serviços de Comunicação S 6147 1793 374 30 Telefonica del Peru S.A.A. 7303 1771 1172 237 Telecom Argentina S.A. 8151 1488 3052 433 Uninet S.A. de C.V. 6503 1227 417 57 Axtel, S.A.B. de C.V. 7738 1000 1882 42 Telemar Norte Leste S.A. 26615 930 2325 35 Tim Celular S.A. 3816 911 396 148 COLOMBIA TELECOMUNICACIONES S 27947 889 129 50 Telconet S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1479 958 13 TE-AS 24863 950 284 26 Link Egypt (Link.NET) 36903 482 243 89 Office National des Postes et 36992 369 845 29 ETISALAT MISR 37492 347 145 64 Orange Tunisie 24835 308 144 9 Vodafone Data 3741 250 921 213 Internet Solutions 29571 234 21 12 Cote d'Ivoire Telecom 36947 192 807 13 Telecom Algeria 15706 176 32 6 Sudatel (Sudan Telecom Co. Lt Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3059 496 238 Telmex Colombia S.A. 4766 2942 11559 925 Korea Telecom 22773 2920 2956 142 Cox Communications Inc. 6389 2891 3688 51 BellSouth.net Inc. 17974 2816 904 77 PT Telekomunikasi Indonesia 3356 2563 10700 474 Level 3 Communications, Inc. 7545 2489 336 127 TPG Telecom Limited 28573 2308 2126 115 NET Serviços de Comunicação S 18566 2042 379 183 MegaPath Corporation 4755 1928 418 190 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2891 2840 BellSouth.net Inc. 22773 2920 2778 Cox Communications Inc. 17974 2816 2739 PT Telekomunikasi Indonesia 7545 2489 2362 TPG Telecom Limited 28573 2308 2193 NET Serviços de Comunicação S 3356 2563 2089 Level 3 Communications, Inc. 4766 2942 2017 Korea Telecom 18566 2042 1859 MegaPath Corporation 6147 1793 1763 Telefonica del Peru S.A.A. 4755 1928 1738 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 50309 UNALLOCATED 5.250.170.0/24 12714 Net By Net Holding L 50309 UNALLOCATED 5.250.174.0/24 12714 Net By Net Holding L 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 18985 UNALLOCATED 8.21.68.0/22 3356 Level 3 Communicatio 36270 UNALLOCATED 8.24.66.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.160.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.161.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 5.100.241.0/24 23456 32bit Transition AS 23.252.224.0/20 62502 >>UNKNOWN<< 23.252.224.0/21 62502 >>UNKNOWN<< 23.252.232.0/21 62502 >>UNKNOWN<< 24.231.96.0/24 21548 MTO Telecom Inc. 27.100.7.0/24 56096 >>UNKNOWN<< 31.217.248.0/21 44902 COVAGE NETWORKS SASU 37.16.88.0/23 57652 >>UNKNOWN<< 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.10.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:12 /10:31 /11:92 /12:265 /13:502 /14:998 /15:1727 /16:13049 /17:7172 /18:11949 /19:24845 /20:35605 /21:38150 /22:56453 /23:48993 /24:281241 /25:1123 /26:1089 /27:687 /28:17 /29:18 /30:10 /31:0 /32:9 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 22773 2135 2920 Cox Communications Inc. 18566 1997 2042 MegaPath Corporation 6389 1671 2891 BellSouth.net Inc. 30036 1355 1509 Mediacom Communications Corp 6147 1337 1793 Telefonica del Peru S.A.A. 6983 1311 1624 EarthLink, Inc. 34984 1231 1924 TELLCOM ILETISIM HIZMETLERI A 11492 1116 1175 CABLE ONE, INC. 10620 1087 3059 Telmex Colombia S.A. 8402 1084 1415 OJSC "Vimpelcom" Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1406 2:672 3:3 4:95 5:1209 6:21 8:1412 11:1 12:1839 13:4 14:1212 15:17 16:2 17:45 18:21 20:51 23:1069 24:1666 27:1828 31:1464 32:39 33:2 34:5 36:136 37:1859 38:970 39:14 40:226 41:3000 42:286 43:827 44:21 45:86 46:2134 47:32 49:779 50:784 52:12 54:60 55:7 56:8 57:31 58:1092 59:657 60:451 61:1736 62:1289 63:1888 64:4404 65:2266 66:4071 67:2004 68:1030 69:3246 70:905 71:428 72:1959 74:2612 75:326 76:410 77:1363 78:1034 79:783 80:1327 81:1303 82:813 83:675 84:676 85:1324 86:387 87:1215 88:520 89:1799 90:139 91:5861 92:794 93:1666 94:1941 95:1406 96:422 97:337 98:1045 99:48 100:69 101:792 103:6409 104:949 105:90 106:198 107:893 108:608 109:2048 110:1049 111:1453 112:741 113:897 114:799 115:1233 116:1288 117:1016 118:1670 119:1367 120:436 121:991 122:2192 123:1711 124:1466 125:1510 128:637 129:360 130:381 131:1066 132:430 133:167 134:388 135:87 136:330 137:298 138:382 139:176 140:224 141:420 142:621 143:438 144:507 145:111 146:687 147:565 148:1061 149:407 150:535 151:590 152:467 153:247 154:292 155:662 156:408 157:333 158:264 159:957 160:369 161:632 162:1854 163:369 164:651 165:663 166:322 167:722 168:1158 169:132 170:1426 171:223 172:50 173:1564 174:702 175:596 176:1472 177:3687 178:2098 179:816 180:1846 181:1686 182:1688 183:537 184:727 185:2584 186:2943 187:1683 188:2006 189:1561 190:7886 191:838 192:7970 193:5554 194:4047 195:3629 196:1665 197:853 198:5424 199:5497 200:6539 201:2946 202:9472 203:9056 204:4692 205:2718 206:2990 207:2968 208:3907 209:3848 210:3491 211:1832 212:2531 213:2245 214:829 215:73 216:5516 217:1778 218:649 219:453 220:1319 221:776 222:458 223:645 End of report

1 0

Contact request OOKLA Speedtester
by Marco Paesani 02 Jan '15

02 Jan '15

Hi, I need direct contact off list please. Thanks ! Best regards, Marco Paesani M. +39 348 6019349

1 0

Re: MPLS VPN design - RR in forwarding path?
by Stephen Lee 01 Jan '15

01 Jan '15

. Yn ----- Reply message ----- From: "Randy Bush" <randy(a)psg.com> To: "Marcin Kurek" <notify(a)marcinkurek.com> Cc: "North American Network Operators' Group" <nanog(a)nanog.org> Subject: MPLS VPN design - RR in forwarding path? Date: Wed, Dec 31, 2014 9:36 PM > - Move RRs out of the forwarding path this remains contentious. there are those who think having the control plane not congruent to the data plane is a recipe for really fun debugging and has other issues. randy

1 0

Contact domain messagelabs.com
by Welisson 31 Dec '14

31 Dec '14

Hello Guys, So, is there anyone responsible by domain messagelabs.com here at list? I'm trying contact them , but no successful. Tks and Happy Holidays Welisson Tomé

1 0

Re: The state of TACACS+
by Clay Curtis 31 Dec '14

31 Dec '14

Far too much discussion on this IMO. If you're that paranoid about it, just use the nuclear launch keys approach. Create the local account password, split it, give half of it to one party, half to the other. Then two separate parties must be engaged to use the account. Done. Sincerely, Clay Curtis ------------------------------------------------------------------------------------ Glad to know you can make local access only work if TACAS+ isn't available. However, that still doesn't prevent the employee who know the local username and password to unplug the device from the network, and the use the local password to get in. Still better than our current setup of having one default username and password that everyone knows. On Mon, Dec 29, 2014 at 9:38 AM, Michael Douglas <Michael.Douglas(a)ieee.org> wrote: > In the Cisco world the AAA config is typically set up to try tacacs > first, > and local accounts second. The local account is only usable if > tacacs is > unavailable. Knowledge of the local username/password does not > equate to > full time access with that credential. Also, you would usually > filter the > incoming SSH sessions to only permit a particular management IP > range; the > local credential, or tacacs credential, shouldn't be usable from any > arbitrary network. > > On Mon, Dec 29, 2014 at 10:32 AM, Colton Conor > <colton.conor(a)gmail.com> > wrote: > > > Scott, > > > > Thanks for the response. How do you make sure the failsafe and/or > root > > password that is stored in the device incase remote auth fails > can't be > > accessed without having several employees engaged? Are there any > mechanisms > > for doing so? > > > > My fear would be we would hire an outsourced tech. After a certain > amount > > of time we would have to let this part timer go, and would disabled > his > or > > her username and password in TACAS. However, if that tech still > knows the > > root password they could still remotely login to our network and > cause > > havoc. The thought of having to change the root password on > hundreds of > > devices doesn't sound appealing either every time an employee is > let go. > To > > make matters worse we are using an outsourced firm for some network > > management, so the case of hiring and firing is fairly consistent. > > > > On Mon, Dec 29, 2014 at 9:22 AM, Scott Helms <khelms(a)zcorum.com> > wrote: > > > > > Colton, > > > > > > Yes, that's the 'normal' way of setting it up. Basically you > still > have > > > to configure a root user, but that user name and password is kept > locked > > up > > > and only accessed in case of catastrophic failure of the remote > > > authentication system. An important note is to make sure that > the fail > > > safe password can't be accessed without having several people > engaged > so > > it > > > can't be used without many people knowing. > > > > > > > > > Scott Helms > > > Vice President of Technology > > > ZCorum > > > (678) 507-5000 > > > -------------------------------- > > > http://twitter.com/kscotthelms > > > -------------------------------- > > > > > > On Mon, Dec 29, 2014 at 10:15 AM, Colton Conor > <colton.conor(a)gmail.com > > > > > wrote: > > > > > >> We are able to implement TACAS+. It is my understanding this a > fairly > > old > > >> protocol, so are you saying there are numerous bugs that still > need to > > be > > >> fixed? > > >> > > >> A question I have is TACAS+ is usually hosted on a server, and > > networking > > >> devices are configured to reach out to the server for > authentication. > My > > >> question is what happens if the device can't reach the server if > the > > >> devices network connection is offline? Our goal with TACAS+ is > to not > > have > > >> any default/saved passwords. Every employee will have their own > username > > >> and password. That way if an employee gets hired/fired, we can > enable > or > > >> disable their account. We are trying to avoid having any > organization > > wide > > >> or network wide default username or password. Is this possible? > Do the > > >> devices keep of log of the last successful username/password > > combinations > > >> that worked incase the device goes offline? > > >> > > >> On Sun, Dec 28, 2014 at 5:02 PM, Robert Drake > <rdrake(a)direcpath.com> > > >> wrote: > > >> > > >> > Picking back up where this left off last year, because I > apparently > > only > > >> > work on TACACS during the holidays :) > > >> > > > >> > > > >> > On 12/30/2013 7:28 PM, Jimmy Hess wrote: > > >> > > > >> >> Even 5 seconds extra for each command may hinder operators, > to the > > >> extent > > >> >> it would be intolerable; shell commands should run almost > > >> >> instantaneously.... this is not a GUI, with an hourglass. > > Real-time > > >> >> responsiveness in a shell is crucial --- which remote auth > should > not > > >> >> change. Sometimes operators paste a buffer with a fair > number of > > >> >> commands, not expecti...

1 0