- NANOG - lists.nanog.org

STEP Security (RFC4012012)
by J. Oquendo 01 Apr '12

01 Apr '12

Interweb Re-Engineering Task Force J. Oquendo Request for Comments 4012012 E-Fensive Security Strategies Category: Informational Expires: 2020 STEP by STEP Security Status of this Memo This Internet-Draft is submitted in full nonconformance with provisions of BCP 78 and BCP 79. This document may not be modified, and derivative works of it may not be created, except to publish it as an RFC and to translate it into languages other than English. Internet-Drafts are working documents of the Internet Engineering Task Force (IETF), its areas, and its working groups. Note that other groups may also distribute working documents as Internet- Drafts. Internet-Drafts are draft documents valid for a maximum of six months and may be updated, replaced, or obsoleted by other documents at any time. It is inappropriate to use Internet-Drafts as reference material or to cite them other than as "work in progress." The list of current Internet-Drafts can be accessed at http://www.ietf.org/ietf/1id-abstracts.txt The list of Internet-Draft Shadow Directories can be accessed at http://www.ietf.org/shadow.html This Internet-Draft will expire on April 01, 2020. Copyright Notice Copyright (c) 2012 IETF Trust and the persons identified as the document authors. All rights reserved. This document is subject to BCP 78 and the IETF Trust's Legal Provisions Relating to IETF Documents (http://trustee.ietf.org/license-info) in effect on the date of publication of this document. Please review these documents carefully, as they describe your rights and restrictions with respect to this document. Code Components extracted from this document must include Simplified BSD License text as described in Oquendo Expires Apr 01, 2020 [Page 1] Internet-Draft Security Step by STEP RFC 4012012 Section 4.e of the Trust Legal Provisions and are provided without warranty as described in the Simplified BSD License. Abstract This framework describes a practical methodology for ensuring security in otherwise insecure environments. The goal is to provide a rapid response mechanism to defend against the advanced persistent threats in the wild. Table of Contents 1. Introduction..................................................2 2. Conventions used in this document.............................4 3. Threats Explained.............................................4 3.1. Possible Actors..........................................4 4. STEP Explained................................................5 5. STEP in Action................................................6 6. Security Considerations.......................................7 7. IANA Considerations...........................................7 8. Conclusions...................................................8 8.1. Informative References...................................8 9. Acknowledgments...............................................8 Appendix A. Copyright............................................9 1. Introduction In the network and computing industry, malicious actions, applications and actors have become more pervasive. Response times to anomalous events are burdening today's infrastructures and often strain resources. As networks under attack are often saturated with malicious traffic and advanced persistent threat actors engage in downloading terabytes of data, resources to combat these threats have diminished. Additionally, the threats are no longer just anonymized actors engaging in juvenile behavior, there are many instances of State Actors, disgruntled employees, contractors, third party vendors and criminal organizations. Each with separate agendas, each consistently targeting devices on the Internet. Oquendo Informational [Page 2] Internet-Draft Security Step by STEP RFC 4012012 The intent behind this document is to define a methodology for rapid response to these threats. In this document, security will be achieved using a new methodology and protocol henceforth named Scissor To Ethernet Protocol (STEP). Initially designed as a last approach for security, STEP ensures that no attacker can disaffect any of the Confidentiality, Integrity, Availability of data as a whole. Many variables are involved in security, but the STEP methodology focuses on the following: o FUD (Fear Uncertainty and Doubt) o SCAM (Security Compliance and Management) o APT (Another Possible Threat) This methodology proposes STEP that SHOULD be performed at the onset of a cyber attack before more terabytes of data are exfiltrated from a network. 1. Industry Standard IP connection +-----------+ +-----------+ +-----------+ | | IP | | INGRESS | | | Rogue |-------> | Internet | ------> | Target | | A | | | | B | | | | | EGRESS | | +-----------+ +-----------+ <------ +-----------+ Figure 1 Example session between a rogue attacker and target Figure 1 illustrates the connection via the Internet from a rogue attacker, towards a target. Irrespective of the attack used, IP will ALWAYS be used as the attack vector. Oquendo Informational [Page 3] Internet-Draft Security Step by STEP RFC 4012012 2. Conventions used in this document The key words "MUST", "MUST NOT", "REQUIRED", "SHALL", "SHALL NOT", "SHOULD", "SHOULD NOT", "RECOMMENDED", "MAY", and "OPTIONAL" in this document are to be interpreted as described in RFC-2119 [RFC2119]. In this document, these words will appear with that interpretation only when in ALL CAPS. Lower case uses of these words are not to be interpreted as carrying RFC-2119 significance. 3. Threats Explained A security threat is a theoretical happening that may not occur but should be considered as part of a proper security architecture and design. For example, the threat always exists that your systems will become the target of a denial of service attack. A threat may or may not have a method to mitigate the possibility of attack. Vendors across the security spectrum offer FUD based solutions often promoting SCAM based systems to mitigate against APT. While some of the available solutions may minimize the potential for catastrophic transfers of terabytes of data, these solutions SHOULD NOT be used as an all-inclusive solution for security. Engineers MUST NOT rely on FUD, or SCAMs against the APT. 3.1. Possible Actors Both malicious attacks and unintended (non-malicious) attacks can occur from anywhere in the world including local attacks inside of the infrastructure. In the barest threat explanation above, the threat that someone can commit a typographical error, causing a disruption in service, is as severe as a Distributed Denial of Service attack from the public Internet. Actors can never be easily identified unless one is watching the Academy Awards on television. Oquendo Informational [Page 4] Internet-Draft Security Step by STEP RFC 4012012 4. STEP Explained o S - Scissors Scissors as defined by wikipedia are" hand-operated cutting instruments. They consist of a pair of metal blades pivoted so that the sharpened edges slide against each other when the handles (bows) opposite to the pivot are closed. Scissors are used for cutting various thin materials, such as paper, cardboard, metal foil, thin plastic, cloth, rope, and wire. Scissors can also be used to cut hair and food. Scissors and shears are functionally equivalent, but larger implements tend to be called shears. Scissors is a critical component for STEP security and MUST be readily available 99.99999% with redundant scissors within arm�..s reach. | | X X / \ O O (Opened) (Closed) o T - To To: [preposition] (Used for expressing direction or motion or direction toward something) in the direction of; toward: from north to south. o E - Ethernet Ethernet via Wikiepedia is described as a family of computer networking technologies for local area networks (LANs) commercially introduced in 1980. Standardized in IEEE 802.3, Ethernet has largely replaced competing wired LAN technologies. For clarity in our protocol, Ethernet is defined as the cabling between a device and a network component such as a router or a switch. o P - Protocol A communications protocol is a system of digital message formats and rules for exchanging those messages in or between computing systems and in telecommunications. A protocol may have a formal description. Oquendo Informational [Page 5] Internet-Draft Security Step by STEP RFC 4012012 Protocols may include signaling, authentication and error detection and correction capabilities. A protocol definition defines the syntax, semantics, and synchronization of communication; the specified behavior is typically independent of how it is to be implemented. A protocol can therefore be implemented as hardware or software or both. In STEP, Protocol is a rule an engineer MUST follow in order to complete STEP. S MUST be in a closed state. Actor -----> | Target (secured from the threat) X O O (Closed) 5. STEP in Action The following illustrates a remote APT attack against a webserver located in the demilitarized zone of an infrastucture. In the example, an APT attacker is launching a SQLI, XSS and CSRF against a target over the Internet. The attacks are common and according to statistics, are the same attacks used to leverage access against major Fortune 500 companies in the past decade. +-------+ +-----+ +-----+ +--------+ | | SQLi | | + + INGRESS | | | APT | -------> | ISP | ---> + ISP + ------> | Target | | | XSS/CSRF | A | + B + | www | | | | | + + | | +-------+ +-----+ +-----+ +--------+ o Figure 5.1 Attacker launching attacks +-------+ +-----+ +-----+ +--------+ | | TCP | | + + Reverse | | | APT | <------ | ISP | <--- + ISP + <------ | Target | | | | A | + B + Shell | www | | | | | + + | | +-------+ +-----+ +-----+ +--------+ o Figure 5.2 Attacker executing a reverse shell Oquendo Informational [Page 6] Internet-Draft Security Step by STEP RFC 4012012 In the illustration, an attacker is almost certainly attempting to obtain a reverse shell. This enables an attacker to access a device as if one were physically present at the device itself. Using STEP we can mitigate and deny this attack from various points: +-------+ +-----+ +-----+ +--------+ | | SQLi | | + + | | | | APT | -------> | ISP | ---> + ISP + -->| | Target | | | XSS/CSRF | A | + B + x | www | | | | | + + o o | | +-------+ +-----+ +-----+ +--------+ o Figure 5.2 Ingress STEP +-------+ +-----+ +-----+ +--------+ | | Attack | | | + + | | | APT | ------> | ISP | ->| + ISP + | Target | | | | A | x + B + | www | | | | | o o + + | | +-------+ +-----+ +-----+ +--------+ o Figure 5.4 Provider based STEP Both instances of STEP successfully demonstrate the power of the STEP protocol. In no case, can an attacker successfully launch any attack against a target as the security posture has now been hardened. 6. Security Considerations Cutting any Ethernet cable could potentially lead to shock and degradation of IP services on your network. Please ensure there are additional Ethernet cables for redundancy. Otherwise there is nothing to consider. 7. IANA Considerations There are no alternative considerations. STEP is the ultimate in security. Oquendo Informational [Page 7] Internet-Draft Security Step by STEP RFC 4012012 8. Conclusions Step defends against APT while minimizing your exposure to SCAMs and FUD. 8.1. Informative References [1] http://www.amazon.com/b?ie=UTF8&node=689392011 [2] http://ha.ckers.org/xss.html [3] http://en.wikipedia.org/wiki/Advanced_persistent_threat [4] http://en.wikipedia.org/wiki/Fear,_uncertainty_and_doubt 9. Acknowledgments Sofia Vergara Kenji, Saki and Coco Oquendo Informational [Page 8] Internet-Draft Security Step by STEP RFC 4012012 Appendix A. Copyright Copyright (c) 2012 IETF Trust and the persons identified as authors of the code. All rights reserved. Redistribution and use in source and binary forms, with or without modification, are permitted provided that the following conditions are met: o Redistributions of source code must retain the above copyright notice, this list of conditions and the following disclaimer. o Redistributions in binary form must reproduce the above copyright notice, this list of conditions and the following disclaimer in the documentation and/or other materials provided with the distribution. o Neither the name of Internet Society, IETF or IETF Trust, nor the names of specific contributors, may be used to endorse or promote products derived from this software without specific prior written permission. THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE. Author's Addresses Jesus Oquendo E-Fensive Security Strategies Oquendo Informational [Page 9]

2 1

Re: Outdoor Wireless Access Point
by Babak Pasdar 01 Apr '12

01 Apr '12

Shahab, We did a large scale outdoor rollout for the X-Games (both summer and winter) where we used our outdoor APs to light up the side of Buttermilk mountain in Aspen for the winter X Games as well as the LA Coliseum, Staples Center, Nokia Theater and Part of downtown LA for the summer X Games. Here is a link to a story we did on this project: Bat Blue Delivers Wifi Services for ESPN X-Games You can see one of our outdoor APs in the background as Avril Levigne hands Shaun White his medal. We would be happy to work with you on your project if you think we can help. Best Regards, Babak -- Babak Pasdar President & CEO | Certified Ethical Hacker Bat Blue Networks (p) 212.461.3322 x3005 | (f) 212.584.9999 | www.BatBlue.com Bat Blue: AS 25885 | BGP Policy | Peering Policy Watch: Cloud Security Video | Cloud Network Video Read: Official Provider for ESPN X Games

1 0

Attack on the DNS ?
by Marshall Eubanks 01 Apr '12

01 Apr '12

Anyone seen signs of this attack actually occurring ? http://www.nytimes.com/2012/03/31/technology/with-advance-warning-bracing-f… <snip> The message called it Operation Global Blackout, and rallied Anonymous supporters worldwide to attack the Domain Name System, which converts human-friendly domain names like google.com into numeric addresses that are more useful for computers. It declared when the attack would be carried out: March 31. And it detailed exactly how: by bombarding the Domain Name System with junk traffic in an effort to overwhelm it altogether. <snip> Regards Marshall

8 10

ipv6 classful addressing with mesh?
by Charles N Wyble 01 Apr '12

01 Apr '12

So I came across this post the other day and wanted to see what folks think about it. https://plus.google.com/u/0/109418153881180057361/posts/AvjZbbK6T7X Here is the relevant portion: *Got anything more specific than that to go on?* Actually, yes. Although I still want community feedback on how the idea can be improved. Most mesh systems have pretty arbitrary ways of handing out IP addresses, so I say, put a little logic into 'em, in a consistent way that works well for routing between networks and across the existing internet. An IPv6 address is composed of 8 chunks, each of which is 4 hex digits long. The first chunk should be something arbitrary but unclaimed - anybody know if 00fd is taken? - which is used consistently to indicate that this is a mesh-global address. The next two chunks are the longitude and latitude, respectively, in whatever precision a chunk affords across its respective scope. These first three chunks make up the network prefix that defines one network as distinct from another. How much geographical accuracy does this imply? Just enough to indicate where the "heart" of a network is, or was traditionally. A chunk can represent any number from 0-65534, because it can represent up to 65535 unique numbers and we start at 0. So, longitude can be expressed as a number of degrees "moved east" of the prime meridian from 0-360. This means the difference between each integer in a longitude chunk is 360°/65535, or .005493°. At the equator, where a degree represents the longest distance, that works out to about .4 miles [1]. For any other latitude, however, precision is better than that. Latitude, which goes from -90 to +90, can be represented as a 0-180 number where the equator is at 90, which works out to .002747° precision. So, competing networks in the same area can have slightly different network prefixes, while still each being more or less accurate (because networks are big and amorphous) while the precision isn't enough to pinpoint any individual node of the network, which I'd say is a happy medium. Longitude comes first for easier routing, since inter-network "send it east or send it west" questions seem more likely to me to come up for most switches based on the geography of the continents and the nature of the existing backbone ring of the internet. The remaining chunks can be chosen according to whatever algorithm the network administrators feel like. "Idiot devices" that aren't consciously part of the mesh will generally just put up and shut up with whatever DHCP gives them anyways, so that's not too concerning. If you decide to use client MAC address as part of it, that only leaves chunk 4 left to be set, and you can use the first four digits of the md5 hash of the MAC for that if you need something arbitrary yet deterministic. Every network can have its gateways to the corporate internet, and be accessible from the outside through them. That way, you can have inter-mesh communication over existing internet in a lightweight way: your packet routes to a gateway in your network, then across the tubes, through a gateway at the destination network, and to the ultimate destination. No packet encapsulation, no complex routing bullshit, just point A to point B. That's a simplistic overview, of course. It doesn't include shortcuts like nodes that act as part of multiple, neighboring networks, thus acting as gateways between the two. It doesn't consider IPv4 requests and service, which will probably require an AYIYA-based tunnel negotiation between the client and a gateway. But as a basic pattern, it provides consistency and efficiency between independent networks, which as far as I can see, is a vast deal more important than making one mesh to rule them all. I'm not sure what to make of it. Seems like someone trying to re establish classful addressing and not understanding routing, subnets, managed networks etc.

2 1

RFC 2410: NULL is not a joke (nor an April Fools joke)
by Tom Limoncelli 31 Mar '12

31 Mar '12

In 2007 when Peter H. Salus and I published all the April Fools RFCs in one book we also included the poetry RFCs and the funny RFCs published outside of April Fools timeframe. Speaking of which... we included "RFC 2410: The NULL Encryption Algorithm and Its Use With IPsec" because, well, I thought it was funny. Specifying an encryption scheme for IPsec that does not encrypt the bytes is, well, funny. It turns out it wasn't published as a joke. Oops. No offense meant to the authors R. Glenn and S. Kent. Nobody pointed this out to me until years after the book was printed. Sadly because this book is printed on dead trees we can't "take it back". We don't have a new edition that includes the 2008-2013 RFCs but those are pretty easy to find online. The book does include some commentary that isn't available on-line including forewords by Mike O'Dell, Scott Bradner, and Brad Templeton. I re-read them today and was impressed at how they have stood the test of time. More about the book here: http://rfchumor.com/ Order it on Amazon here: http://www.amazon.com/o/ASIN/1573980420/tomontime-20 Tom Limoncelli -- http://EverythingSysadmin.com -- my blog http://www.TomOnTime.com -- my videos

1 0

airFiber
by Eugen Leitl 31 Mar '12

31 Mar '12

Claim: 1.4 GBit/s over up to 13 km, 24 GHZ, @3 kUSD/link price point. http://www.ubnt.com/airfiber

15 16

Re: Attack on the DNS ?
by Stephane Bortzmeyer 31 Mar '12

31 Mar '12

On Sat, Mar 31, 2012 at 05:05:46AM -0400, Marshall Eubanks <marshall.eubanks(a)gmail.com> wrote a message of 17 lines which said: > Anyone seen signs of this attack actually occurring ? For serious information about this issue, see: https://www.dns-oarc.net/wiki/mitigating-dns-denial-of-service-attacks http://www.cricketondns.com/post.cfm/could-a-ddos-attack-against-the-roots-… I do not repost here the various real-rime monitoring systems (which show no attack on the root name servers) because these systems will probably be the first victims of the attack, with all the people using them to watch the end of the world :-)

1 0

BGP Update Report
by cidr-report＠potaroo.net 30 Mar '12

30 Mar '12

BGP Update Report Interval: 22-Mar-12 -to- 29-Mar-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS786 98735 3.9% 484.0 -- JANET The JNT Association 2 - AS8402 78832 3.1% 39.1 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS9829 42019 1.6% 34.8 -- BSNL-NIB National Internet Backbone 4 - AS12479 27956 1.1% 42.6 -- UNI2-AS France Telecom Espana SA 5 - AS24560 25962 1.0% 25.3 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 6 - AS7552 24172 0.9% 20.3 -- VIETEL-AS-AP Vietel Corporation 7 - AS32528 22938 0.9% 2293.8 -- ABBOTT Abbot Labs 8 - AS7029 21407 0.8% 6.0 -- WINDSTREAM - Windstream Communications Inc 9 - AS27947 20116 0.8% 28.5 -- Telconet S.A 10 - AS26615 18678 0.7% 20.7 -- Tim Celular S.A. 11 - AS28683 17766 0.7% 323.0 -- BENINTELECOM 12 - AS5800 16470 0.7% 52.0 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 13 - AS23216 16342 0.6% 92.3 -- MEGADATOS S.A. 14 - AS7843 15780 0.6% 52.1 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 15 - AS17974 14834 0.6% 8.3 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 16 - AS45899 11964 0.5% 37.2 -- VNPT-AS-VN VNPT Corp 17 - AS28573 11799 0.5% 5.8 -- NET Servicos de Comunicao S.A. 18 - AS8452 11344 0.5% 8.7 -- TE-AS TE-AS 19 - AS12008 10792 0.4% 131.6 -- ULTRADNS - Centergate Research, LLC. 20 - AS8151 10663 0.4% 7.1 -- Uninet S.A. de C.V. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS13277 8990 0.3% 4495.0 -- HP-MS HP-MS Autonomous System 2 - AS57767 2353 0.1% 2353.0 -- RTTC-AS Federal State-owned Enterprise Russian Television and Radio Broadcasting Network 3 - AS32528 22938 0.9% 2293.8 -- ABBOTT Abbot Labs 4 - AS36926 7691 0.3% 1538.2 -- CKL1-ASN 5 - AS26678 1091 0.0% 1091.0 -- ASN-QMFI - QUINCY MUTUAL FIRE INSURANCE, CO. 6 - AS23266 1050 0.0% 1050.0 -- COMCAST-23266 - Comcast Cable Communications 7 - AS55665 926 0.0% 926.0 -- STMI-AS-ID PT Sampoerna Telemedia Indonesia 8 - AS6066 1371 0.1% 685.5 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 9 - AS16045 677 0.0% 677.0 -- SPEKTAR-AD Spektar AD 10 - AS16935 2000 0.1% 666.7 -- KSC-NETWORKS - Kingland Systems Corp. 11 - AS56915 617 0.0% 617.0 -- ASELITTELECOM Elit Telecom Ltd. 12 - AS15770 593 0.0% 593.0 -- DERWENTSIDE Derwentside District Council 13 - AS26779 1760 0.1% 586.7 -- PANDO-NETWORKS - Pando Networks 14 - AS48018 582 0.0% 582.0 -- MTB-COMPUTER-SERVICES-LTD MTB Computer Services Ltd 15 - AS48632 580 0.0% 580.0 -- BTS-HOLDINGS-PLC BTS Holdings PLC 16 - AS39779 576 0.0% 576.0 -- MESHDIGITAL Mesh Digital Ltd 17 - AS12295 570 0.0% 570.0 -- LONDONLINK Professional Telecommunications Ltd. 18 - AS28861 569 0.0% 569.0 -- CARR-FUTURES-LONDON-AS Carr Futures Inc London 19 - AS31392 558 0.0% 558.0 -- PHOENIX-VENTURE-HOLDINGS-AS Phoenix Venture Holdings Ltd 20 - AS53045 1090 0.0% 545.0 -- TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 130.36.34.0/24 11460 0.4% AS32528 -- ABBOTT Abbot Labs 2 - 130.36.35.0/24 11460 0.4% AS32528 -- ABBOTT Abbot Labs 3 - 204.234.0.0/17 10768 0.4% AS7029 -- WINDSTREAM - Windstream Communications Inc 4 - 62.36.252.0/22 8621 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 5 - 62.36.249.0/24 6491 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 6 - 122.161.0.0/16 6329 0.2% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 7 - 182.64.0.0/16 6240 0.2% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 8 - 62.36.241.0/24 5903 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 9 - 62.36.210.0/24 5675 0.2% AS12479 -- UNI2-AS France Telecom Espana SA 10 - 194.63.9.0/24 4915 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 11 - 194.209.13.0/24 4495 0.2% AS13277 -- HP-MS HP-MS Autonomous System 12 - 194.209.211.0/24 4495 0.2% AS13277 -- HP-MS HP-MS Autonomous System 13 - 217.15.120.0/22 4336 0.2% AS56696 -- ASLIQUID-MPLS Liquid Telecommunications Ltd 14 - 205.107.121.0/24 4335 0.2% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 15 - 41.223.57.0/24 3839 0.1% AS36926 -- CKL1-ASN 16 - 41.223.56.0/24 3839 0.1% AS36926 -- CKL1-ASN 17 - 202.153.174.0/24 3470 0.1% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan 18 - 67.214.235.0/24 3438 0.1% AS29933 -- OFF-CAMPUS-TELECOMMUNICATIONS - Off Campus Telecommunications 19 - 205.106.248.0/24 3277 0.1% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 20 - 96.45.89.0/24 2905 0.1% AS16552 -- TIGGEE - Tiggee LLC Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 30 Mar '12

30 Mar '12

This report has been generated at Fri Mar 30 21:12:26 2012 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 23-03-12 405211 237312 24-03-12 406791 237506 25-03-12 406910 237612 26-03-12 407108 237709 27-03-12 407254 237193 28-03-12 406770 236263 29-03-12 406051 236496 30-03-12 406585 236469 AS Summary 40664 Number of ASes in routing system 17035 Number of ASes announcing only one prefix 3419 Largest number of prefixes announced by an AS AS7029 : WINDSTREAM - Windstream Communications Inc 111385888 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 30Mar12 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 406832 236438 170394 41.9% All ASes AS6389 3379 199 3180 94.1% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS7029 3419 1820 1599 46.8% WINDSTREAM - Windstream Communications Inc AS4766 2483 1015 1468 59.1% KIXS-AS-KR Korea Telecom AS22773 1552 120 1432 92.3% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS2118 1427 14 1413 99.0% RELCOM-AS OOO "NPO Relcom" AS18566 2092 705 1387 66.3% COVAD - Covad Communications Co. AS28573 1745 492 1253 71.8% NET Servicos de Comunicao S.A. AS4323 1603 384 1219 76.0% TWTC - tw telecom holdings, inc. AS4755 1572 394 1178 74.9% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS1785 1892 805 1087 57.5% AS-PAETEC-NET - PaeTec Communications, Inc. AS10620 1817 809 1008 55.5% Telmex Colombia S.A. AS7552 1173 221 952 81.2% VIETEL-AS-AP Vietel Corporation AS8402 1738 805 933 53.7% CORBINA-AS OJSC "Vimpelcom" AS7303 1353 439 914 67.6% Telecom Argentina S.A. AS26615 903 28 875 96.9% Tim Celular S.A. AS8151 1493 671 822 55.1% Uninet S.A. de C.V. AS18101 932 157 775 83.2% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS4808 1101 347 754 68.5% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS9394 888 207 681 76.7% CRNET CHINA RAILWAY Internet(CRNET) AS7545 1659 983 676 40.7% TPG-INTERNET-AP TPG Internet Pty Ltd AS17974 1787 1115 672 37.6% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS30036 1415 774 641 45.3% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS3356 1099 461 638 58.1% LEVEL3 Level 3 Communications AS17676 686 74 612 89.2% GIGAINFRA Softbank BB Corp. AS19262 996 401 595 59.7% VZGNI-TRANSIT - Verizon Online LLC AS24560 1021 434 587 57.5% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS3549 1004 435 569 56.7% GBLX Global Crossing Ltd. AS22561 991 422 569 57.4% DIGITAL-TELEPORT - Digital Teleport Inc. AS4804 654 95 559 85.5% MPX-AS Microplex PTY LTD AS22047 584 31 553 94.7% VTR BANDA ANCHA S.A. Total 44458 14857 29601 66.6% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 14.192.0.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.4.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.8.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.12.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.16.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.20.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.24.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.28.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 27.112.114.0/24 AS23884 PROENNET-AS Proimage Engineering and Communication Co.,Ltd. 37.208.120.0/21 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.120.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.121.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.122.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.123.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.124.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.125.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.126.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.208.127.0/24 AS50077 MGN-STK-AS "Set-Telekom" Ltd. 37.212.0.0/14 AS6697 BELPAK-AS Republican Association BELTELECOM 37.216.0.0/15 AS34744 GVM S.C. GVM SISTEM 2003 S.R.L. 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 66.171.32.0/20 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.44.16.0/20 AS15054 HAMELTRONICS - Hameltronics, LLC 74.91.48.0/24 AS14208 74.91.49.0/24 AS14208 74.91.50.0/24 AS14208 74.91.51.0/24 AS14208 74.91.52.0/24 AS14208 74.91.53.0/24 AS14208 74.91.54.0/24 AS14208 74.91.55.0/24 AS14208 74.91.56.0/24 AS14208 74.91.57.0/24 AS14208 74.91.58.0/24 AS14208 74.91.59.0/24 AS14208 74.91.60.0/24 AS14208 74.91.61.0/24 AS14208 74.91.62.0/24 AS14208 74.91.63.0/24 AS14208 98.159.96.0/20 AS46975 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 172.45.1.0/24 AS3356 LEVEL3 Level 3 Communications 172.45.2.0/24 AS29571 CITelecom-AS 172.45.3.0/24 AS29571 CITelecom-AS 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.223.60.0/22 AS6910 DIALTELECOMRO Dial Telecom S.R.L. 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.86.32.0/20 AS18255 BRISBANE-AP Brisbane City Council 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.122.134.0/24 AS38615 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.140.128.0/19 AS9583 SIFY-AS-IN Sify Limited 202.160.152.0/22 AS10113 EFTEL-AS-AP Eftel Limited. 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.91.56.0/21 AS22241 IC2NET - IC2NET 208.91.56.0/24 AS22241 IC2NET - IC2NET 208.91.57.0/24 AS22241 IC2NET - IC2NET 208.91.58.0/24 AS22241 IC2NET - IC2NET 208.91.59.0/24 AS22241 IC2NET - IC2NET 208.91.60.0/24 AS22241 IC2NET - IC2NET 208.91.61.0/24 AS22241 IC2NET - IC2NET 208.91.62.0/24 AS22241 IC2NET - IC2NET 208.91.63.0/24 AS22241 IC2NET - IC2NET 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.12.160.0/20 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.21.160.0/20 AS27876 American Data Networks 216.194.160.0/20 AS27876 American Data Networks Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 30 Mar '12

30 Mar '12

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 31 Mar, 2012 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 403929 Prefixes after maximum aggregation: 171635 Deaggregation factor: 2.35 Unique aggregates announced to Internet: 195814 Total ASes present in the Internet Routing Table: 40542 Prefixes per ASN: 9.96 Origin-only ASes present in the Internet Routing Table: 32969 Origin ASes announcing only one prefix: 15468 Transit ASes present in the Internet Routing Table: 5416 Transit-only ASes present in the Internet Routing Table: 140 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 32 Max AS path prepend of ASN (48687) 24 Prefixes from unregistered ASNs in the Routing Table: 555 Unregistered ASNs in the Routing Table: 265 Number of 32-bit ASNs allocated by the RIRs: 2342 Number of 32-bit ASNs visible in the Routing Table: 2157 Prefixes from 32-bit ASNs in the Routing Table: 5295 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 1252 Number of addresses announced to Internet: 2531398224 Equivalent to 150 /8s, 226 /16s and 18 /24s Percentage of available address space announced: 68.3 Percentage of allocated address space announced: 68.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 92.1 Total number of prefixes smaller than registry allocations: 171545 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 98994 Total APNIC prefixes after maximum aggregation: 32099 APNIC Deaggregation factor: 3.08 Prefixes being announced from the APNIC address blocks: 95394 Unique aggregates announced from the APNIC address blocks: 39244 APNIC Region origin ASes present in the Internet Routing Table: 4680 APNIC Prefixes per ASN: 20.38 APNIC Region origin ASes announcing only one prefix: 1238 APNIC Region transit ASes present in the Internet Routing Table: 730 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 19 Number of APNIC region 32-bit ASNs visible in the Routing Table: 171 Number of APNIC addresses announced to Internet: 642314080 Equivalent to 38 /8s, 72 /16s and 239 /24s Percentage of available APNIC address space announced: 81.5 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-132095, 132096-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 149258 Total ARIN prefixes after maximum aggregation: 75828 ARIN Deaggregation factor: 1.97 Prefixes being announced from the ARIN address blocks: 120636 Unique aggregates announced from the ARIN address blocks: 49969 ARIN Region origin ASes present in the Internet Routing Table: 14935 ARIN Prefixes per ASN: 8.08 ARIN Region origin ASes announcing only one prefix: 5686 ARIN Region transit ASes present in the Internet Routing Table: 1569 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 22 Number of ARIN region 32-bit ASNs visible in the Routing Table: 16 Number of ARIN addresses announced to Internet: 805141184 Equivalent to 47 /8s, 253 /16s and 122 /24s Percentage of available ARIN address space announced: 64.0 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 100814 Total RIPE prefixes after maximum aggregation: 53186 RIPE Deaggregation factor: 1.90 Prefixes being announced from the RIPE address blocks: 92127 Unique aggregates announced from the RIPE address blocks: 57226 RIPE Region origin ASes present in the Internet Routing Table: 16345 RIPE Prefixes per ASN: 5.64 RIPE Region origin ASes announcing only one prefix: 7946 RIPE Region transit ASes present in the Internet Routing Table: 2622 Average RIPE Region AS path length visible: 4.7 Max RIPE Region AS path length visible: 32 Number of RIPE region 32-bit ASNs visible in the Routing Table: 1462 Number of RIPE addresses announced to Internet: 502238984 Equivalent to 29 /8s, 239 /16s and 143 /24s Percentage of available RIPE address space announced: 80.9 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 40250 Total LACNIC prefixes after maximum aggregation: 8151 LACNIC Deaggregation factor: 4.94 Prefixes being announced from the LACNIC address blocks: 39809 Unique aggregates announced from the LACNIC address blocks: 19696 LACNIC Region origin ASes present in the Internet Routing Table: 1574 LACNIC Prefixes per ASN: 25.29 LACNIC Region origin ASes announcing only one prefix: 434 LACNIC Region transit ASes present in the Internet Routing Table: 295 Average LACNIC Region AS path length visible: 4.4 Max LACNIC Region AS path length visible: 21 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 503 Number of LACNIC addresses announced to Internet: 98765960 Equivalent to 5 /8s, 227 /16s and 12 /24s Percentage of available LACNIC address space announced: 65.4 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 8916 Total AfriNIC prefixes after maximum aggregation: 2121 AfriNIC Deaggregation factor: 4.20 Prefixes being announced from the AfriNIC address blocks: 6971 Unique aggregates announced from the AfriNIC address blocks: 2163 AfriNIC Region origin ASes present in the Internet Routing Table: 526 AfriNIC Prefixes per ASN: 13.25 AfriNIC Region origin ASes announcing only one prefix: 164 AfriNIC Region transit ASes present in the Internet Routing Table: 115 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 5 Number of AfriNIC addresses announced to Internet: 31533568 Equivalent to 1 /8s, 225 /16s and 42 /24s Percentage of available AfriNIC address space announced: 47.0 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2479 11109 992 Korea Telecom (KIX) 17974 1787 503 63 PT TELEKOMUNIKASI INDONESIA 7545 1659 301 89 TPG Internet Pty Ltd 4755 1573 386 158 TATA Communications formerly 9583 1238 95 540 Sify Limited 9829 1209 1025 29 BSNL National Internet Backbo 7552 1173 1062 11 Vietel Corporation 4808 1102 2050 316 CNCGROUP IP network: China169 24560 1021 385 167 Bharti Airtel Ltd., Telemedia 18101 949 131 160 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3379 3807 196 bellsouth.net, inc. 7029 3379 990 155 Windstream Communications Inc 18566 2092 383 179 Covad Communications 1785 1889 680 129 PaeTec Communications, Inc. 20115 1633 1559 624 Charter Communications 4323 1602 1060 382 Time Warner Telecom 22773 1552 2910 111 Cox Communications, Inc. 30036 1415 256 745 Mediacom Communications Corp 7018 1282 9791 831 AT&T WorldNet Services 11492 1184 216 364 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1792 544 16 Corbina telecom 2118 1427 97 13 EUnet/RELCOM Autonomous Syste 31148 677 37 9 FreeNet ISP 34984 673 188 174 BILISIM TELEKOM 12479 656 658 57 Uni2 Autonomous System 20940 646 206 498 Akamai Technologies European 6830 641 1943 412 UPC Distribution Services 8551 571 360 81 Bezeq International 3320 532 8442 398 Deutsche Telekom AG 2578 500 33 7 Demos, Moscow, Russia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1817 330 131 TVCABLE BOGOTA 28573 1745 1105 60 NET Servicos de Comunicao S.A 8151 1491 3018 350 UniNet S.A. de C.V. 7303 1352 827 188 Telecom Argentina Stet-France 6503 1348 418 65 AVANTEL, S.A. 26615 903 700 28 Tim Brasil S.A. 27947 688 74 100 Telconet S.A 11172 636 91 73 Servicios Alestra S.A de C.V 22047 584 326 15 VTR PUNTO NET S.A. 3816 566 242 105 Empresa Nacional de Telecomun Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1294 958 13 TEDATA 24863 848 274 35 LINKdotNET AS number 6713 491 649 18 Itissalat Al-MAGHRIB 3741 272 924 229 The Internet Solution 33776 208 12 21 Starcomms Nigeria Limited 12258 197 28 62 Vodacom Internet Company 24835 178 80 8 RAYA Telecom - Egypt 15706 168 32 6 Sudatel Internet Exchange Aut 16637 164 664 82 MTN Network Solutions 29571 159 15 16 Ci Telecom Autonomous system Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3379 3807 196 bellsouth.net, inc. 7029 3379 990 155 Windstream Communications Inc 4766 2479 11109 992 Korea Telecom (KIX) 18566 2092 383 179 Covad Communications 1785 1889 680 129 PaeTec Communications, Inc. 10620 1817 330 131 TVCABLE BOGOTA 8402 1792 544 16 Corbina telecom 17974 1787 503 63 PT TELEKOMUNIKASI INDONESIA 28573 1745 1105 60 NET Servicos de Comunicao S.A 7545 1659 301 89 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7029 3379 3224 Windstream Communications Inc 18566 2092 1913 Covad Communications 8402 1792 1776 Corbina telecom 1785 1889 1760 PaeTec Communications, Inc. 17974 1787 1724 PT TELEKOMUNIKASI INDONESIA 10620 1817 1686 TVCABLE BOGOTA 28573 1745 1685 NET Servicos de Comunicao S.A 7545 1659 1570 TPG Internet Pty Ltd 4766 2479 1487 Korea Telecom (KIX) 22773 1552 1441 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 54439 UNALLOCATED 8.25.174.0/24 17378 DBS International 54470 UNALLOCATED 8.30.171.0/24 3356 Level 3 Communicatio 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/21 12654 RIPE NCC RIS Project 128.0.24.0/24 12654 RIPE NCC RIS Project Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.0.0/22 45464 Room 201, TGU Bldg 14.192.4.0/22 45464 Room 201, TGU Bldg 14.192.8.0/22 45464 Room 201, TGU Bldg 14.192.12.0/22 45464 Room 201, TGU Bldg 14.192.16.0/22 45464 Room 201, TGU Bldg 14.192.20.0/22 45464 Room 201, TGU Bldg 14.192.24.0/22 45464 Room 201, TGU Bldg 14.192.28.0/22 45464 Room 201, TGU Bldg 23.27.0.0/20 54500 EGIHosting 23.27.16.0/20 54500 EGIHosting Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:12 /10:28 /11:81 /12:235 /13:457 /14:833 /15:1482 /16:12185 /17:6278 /18:10478 /19:20577 /20:28760 /21:29730 /22:40327 /23:37561 /24:211199 /25:1192 /26:1432 /27:797 /28:170 /29:60 /30:17 /31:0 /32:19 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 3039 3379 Windstream Communications Inc 6389 2095 3379 bellsouth.net, inc. 18566 2041 2092 Covad Communications 8402 1769 1792 Corbina telecom 10620 1707 1817 TVCABLE BOGOTA 30036 1359 1415 Mediacom Communications Corp 11492 1147 1184 Cable One 6503 1118 1348 AVANTEL, S.A. 8452 1102 1294 TEDATA 1785 1067 1889 PaeTec Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:531 2:755 4:14 6:3 8:394 12:1987 13:1 14:605 15:12 16:3 17:7 20:8 23:160 24:1754 27:1257 31:936 32:58 33:2 34:2 36:8 37:313 38:790 40:120 41:3086 42:129 44:3 46:1454 47:3 49:343 50:535 52:13 54:6 55:11 56:3 57:32 58:966 59:495 60:278 61:1202 62:972 63:1996 64:4198 65:2274 66:4497 67:2022 68:1146 69:3184 70:910 71:465 72:1817 74:2591 75:493 76:317 77:959 78:1007 79:498 80:1210 81:897 82:666 83:548 84:513 85:1205 86:408 87:900 88:342 89:1623 90:297 91:4657 92:516 93:1376 94:1461 95:1160 96:377 97:316 98:844 99:37 100:6 101:168 103:929 106:66 107:180 108:218 109:1275 110:759 111:901 112:445 113:593 114:652 115:780 116:908 117:724 118:907 119:1207 120:350 121:696 122:1665 123:1099 124:1363 125:1263 128:561 129:189 130:256 131:595 132:173 133:21 134:242 135:62 136:212 137:176 138:351 139:145 140:494 141:244 142:385 143:399 144:513 145:66 146:485 147:243 148:748 149:298 150:157 151:176 152:460 153:171 154:7 155:430 156:215 157:379 158:176 159:525 160:343 161:248 162:343 163:190 164:555 165:391 166:562 167:464 168:819 169:127 170:844 171:124 172:4 173:1721 174:582 175:436 176:437 177:619 178:1310 180:1199 181:73 182:777 183:279 184:445 185:1 186:2136 187:1006 188:1158 189:1688 190:5498 192:5996 193:5608 194:4622 195:3589 196:1292 197:123 198:3617 199:4487 200:5805 201:1901 202:8463 203:8589 204:4342 205:2476 206:2752 207:2781 208:4053 209:3599 210:2764 211:1471 212:2008 213:1908 214:876 215:109 216:5079 217:1524 218:537 219:324 220:1228 221:557 222:325 223:329 End of report

1 0