- NANOG - lists.nanog.org

LAw Enforcement Contact
by A. Pishdadi 24 Jan '12

24 Jan '12

Hello, We recently tracked down a botnet that attacked our network. We found the C&C server, it has approximately 40-50 servers, consisting of mostly *nix machines with high speed connections, for example AWS servers or dedicated, attack capacity is 4-5Gb/s or more. Is there any contacts with law enforcement here that I can send over the info too? .

11 13

VZ FiOS DNS issues:
by Jamie Bowden 23 Jan '12

23 Jan '12

Any Verizon techs around today? I don't know why you can't pass DNS traffic this morning, but it's the second time in as many weeks as it has been an issue, and it's rather annoying (Google is the example, but the exact same failure happens using any destination, on VZ's own or any other public DNS servers, phone support are of course, useless): C:\Users\jamie>tracert -d 71.252.0.12 Tracing route to 71.252.0.12 over a maximum of 30 hops 1 <1 ms <1 ms <1 ms 192.168.2.254 2 <1 ms <1 ms <1 ms 192.168.1.1 3 8 ms 9 ms 13 ms 96.231.199.1 4 14 ms 9 ms 9 ms 130.81.183.118 5 9 ms 9 ms 9 ms 130.81.151.232 6 9 ms 9 ms * 130.81.20.19 7 11 ms 9 ms 9 ms 71.252.0.12 Trace complete. C:\Users\jamie>nslookup www.google.com 71.252.0.12 Server: nsrest01.verizon.net Address: 71.252.0.12 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to nsrest01.verizon.net timed-out C:\Users\jamie>tracert -d 8.8.8.8 Tracing route to 8.8.8.8 over a maximum of 30 hops 1 <1 ms <1 ms <1 ms 192.168.2.254 2 <1 ms <1 ms <1 ms 192.168.1.1 3 7 ms 8 ms 9 ms 96.231.199.1 4 8 ms 9 ms 8 ms 130.81.183.118 5 9 ms 28 ms 10 ms 130.81.22.56 6 8 ms 9 ms 9 ms 152.63.36.237 7 20 ms 19 ms 19 ms 152.63.0.153 8 21 ms 18 ms 18 ms 152.63.21.73 9 41 ms 47 ms 49 ms 152.179.72.66 10 17 ms 18 ms 19 ms 209.85.255.68 11 * * * Request timed out. 12 * * * Request timed out. 13 22 ms 19 ms 19 ms 72.14.236.200 14 20 ms 31 ms 18 ms 216.239.49.145 15 18 ms 19 ms 19 ms 8.8.8.8 Trace complete. C:\Users\jamie>nslookup www.google.com 8.8.8.8 Server: google-public-dns-a.google.com Address: 8.8.8.8 DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. DNS request timed out. timeout was 2 seconds. *** Request to google-public-dns-a.google.com timed-out C:\Users\jamie>

6 7

AkamaiHD/Facebook problem?
by Jay Ashworth 22 Jan '12

22 Jan '12

I'm seeing, when trying to view images I posted to a facebook album, grey boxes instead of thumbnails. If I click all the way through and View Image, I get either 502 Bad Gateway from nginx, or the odd message "All blocks down", which I can't successfully google. This seems intermittent, or slowly-clearing, but I thought someone from A might want to know. I can supply full URLs off list if desired. Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

1 0

Re: Megaupload.com seized
by Jay Ashworth 22 Jan '12

22 Jan '12

----- Original Message ----- > From: "Donald Eastlake" <d3e3e3(a)gmail.com> > I have always had a certain fondness for paper. Well, I was wondering where the Whacky Weekend thread was this week. "You can't grep dead trees." Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

1 0

Fwd: [Argus] 190.144.248.64/27 is 'hijacked' by anomalous origin 'AS27817'
by Yang Xiang 21 Jan '12

21 Jan '12

FYI, Argus detected a hijacking just now. It seems, I should send this email to South America NOG. ---------- Forwarded message ---------- From: argus-alarm <argus-alarm(a)csnet1.cs.tsinghua.edu.cn> Date: 2012/1/21 Subject: [Argus] 190.144.248.64/27 is 'hijacked' by anomalous origin 'AS27817' To: argus <argus(a)csnet1.cs.tsinghua.edu.cn> Prefix hijacking alarm: Start Time(UTC): Jan-21-2012 12:30:15 IP Prefix: 190.144.248.64/27 Origin AS change: AS14080 -> AS27817 Details: http://argus.csnet1.cs.tsinghua.edu.cn/fingerprints/90856/ _______________________________________________ Argus mailing list Argus(a)csnet1.cs.tsinghua.edu.cn http://csnet1.cs.tsinghua.edu.cn/mailman/listinfo/argus -- _________________________________________ Yang Xiang. Ph.D candidate. Tsinghua University Argus: argus.csnet1.cs.tsinghua.edu.cn

1 0

BGP Update Report
by cidr-report＠potaroo.net 20 Jan '12

20 Jan '12

BGP Update Report Interval: 12-Jan-12 -to- 19-Jan-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS34205 50143 3.1% 5571.4 -- MRBD-AS OJSC Rostelecom 2 - AS8402 45021 2.8% 31.8 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS9829 38928 2.4% 43.9 -- BSNL-NIB National Internet Backbone 4 - AS42116 28307 1.7% 505.5 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 5 - AS5800 25683 1.6% 88.9 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 6 - AS28683 25418 1.6% 385.1 -- BENINTELECOM 7 - AS32528 24552 1.5% 12276.0 -- ABBOTT Abbot Labs 8 - AS12479 24301 1.5% 86.8 -- UNI2-AS France Telecom Espana SA 9 - AS24560 22794 1.4% 26.6 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 10 - AS20632 20437 1.2% 704.7 -- PETERSTAR-AS PeterStar 11 - AS7552 19776 1.2% 22.1 -- VIETEL-AS-AP Vietel Corporation 12 - AS17488 18392 1.1% 51.4 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 13 - AS11617 17168 1.1% 1073.0 -- BT Latam Mexico, S.A. de C.V. 14 - AS2118 14076 0.9% 11.3 -- RELCOM-AS OOO "NPO Relcom" 15 - AS31148 14029 0.9% 21.1 -- FREENET-AS FreeNet ISP 16 - AS19223 13187 0.8% 13187.0 -- NTEGRATED-SOLUTIONS - Ntegrated Solutions 17 - AS6066 12172 0.8% 6086.0 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 18 - AS17639 12045 0.7% 2409.0 -- COMCLARK-AS ComClark Network & Technology Corp. 19 - AS28573 10447 0.6% 10.1 -- NET Servicos de Comunicao S.A. 20 - AS9498 10165 0.6% 16.7 -- BBIL-AP BHARTI Airtel Ltd. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS19223 13187 0.8% 13187.0 -- NTEGRATED-SOLUTIONS - Ntegrated Solutions 2 - AS32528 24552 1.5% 12276.0 -- ABBOTT Abbot Labs 3 - AS26341 6395 0.4% 6395.0 -- OSI-ASP - Open Solutions Inc. 4 - AS6066 12172 0.8% 6086.0 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 5 - AS34205 50143 3.1% 5571.4 -- MRBD-AS OJSC Rostelecom 6 - AS17639 12045 0.7% 2409.0 -- COMCLARK-AS ComClark Network & Technology Corp. 7 - AS65273 1916 0.1% 1916.0 -- -Private Use AS- 8 - AS48806 1349 0.1% 1349.0 -- SMARTS-IVANOVO-AS OJSC SMARTS 9 - AS18688 1179 0.1% 1179.0 -- TGIX - Thaumaturgix, Inc 10 - AS11617 17168 1.1% 1073.0 -- BT Latam Mexico, S.A. de C.V. 11 - AS49369 934 0.1% 934.0 -- AORS-AS Staff Governor and Government of the Orenburg region 12 - AS51825 4608 0.3% 921.6 -- TELZAR-ASN TELZAR INTERNATIONAL TELECOMINICATIONS LTD 13 - AS53362 884 0.1% 884.0 -- MIXIT-AS - Mixit, Inc. 14 - AS20632 20437 1.2% 704.7 -- PETERSTAR-AS PeterStar 15 - AS57405 1096 0.1% 548.0 -- MIHAN-NOC2 MIHAN COMMUNICATION SYSTEMS CO.,LTD 16 - AS42116 28307 1.7% 505.5 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 17 - AS6072 6440 0.4% 460.0 -- UNISYS-6072 For routing issues, email hostmaster(a)unisys.com 18 - AS22386 459 0.0% 459.0 -- SARB 19 - AS56931 447 0.0% 447.0 -- KKDD-AS "Trest Spetsstroymontazh" LTD 20 - AS7099 443 0.0% 443.0 -- NORTELRCH - NORTEL TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 84.204.132.0/24 20335 1.2% AS20632 -- PETERSTAR-AS PeterStar 2 - 67.97.156.0/24 13187 0.8% AS19223 -- NTEGRATED-SOLUTIONS - Ntegrated Solutions 3 - 130.36.34.0/24 12277 0.7% AS32528 -- ABBOTT Abbot Labs 4 - 130.36.35.0/24 12275 0.7% AS32528 -- ABBOTT Abbot Labs 5 - 182.64.0.0/16 8538 0.5% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 6 - 62.36.252.0/22 7614 0.4% AS12479 -- UNI2-AS France Telecom Espana SA 7 - 202.92.235.0/24 6626 0.4% AS9498 -- BBIL-AP BHARTI Airtel Ltd. 8 - 111.125.126.0/24 6527 0.4% AS17639 -- COMCLARK-AS ComClark Network & Technology Corp. 9 - 81.89.122.0/24 6513 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 10 - 81.89.118.0/24 6502 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 11 - 81.89.119.0/24 6501 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 12 - 109.236.224.0/20 6410 0.4% AS34205 -- MRBD-AS OJSC Rostelecom 13 - 81.89.123.0/24 6405 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 14 - 81.89.117.0/24 6405 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 15 - 63.94.193.0/24 6395 0.4% AS26341 -- OSI-ASP - Open Solutions Inc. 16 - 212.14.221.0/24 6318 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 17 - 212.14.217.0/24 6315 0.4% AS34205 -- MRBD-AS OJSC Rostelecom AS34584 -- KHBDSV OJSC Rostelecom 18 - 202.56.215.0/24 6296 0.4% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 19 - 204.29.239.0/24 6086 0.3% AS6066 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 20 - 150.225.0.0/16 6086 0.3% AS6066 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 20 Jan '12

20 Jan '12

This report has been generated at Fri Jan 20 21:12:30 2012 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 13-01-12 392583 228838 14-01-12 392821 228780 15-01-12 392844 229047 16-01-12 393080 229050 17-01-12 393027 229536 18-01-12 393112 229862 19-01-12 393937 229748 20-01-12 394336 229909 AS Summary 39989 Number of ASes in routing system 16755 Number of ASes announcing only one prefix 3448 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 109817344 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 20Jan12 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 395364 229885 165479 41.9% All ASes AS6389 3448 204 3244 94.1% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS7029 3264 1536 1728 52.9% WINDSTREAM - Windstream Communications Inc AS18566 2093 413 1680 80.3% COVAD - Covad Communications Co. AS4766 2477 998 1479 59.7% KIXS-AS-KR Korea Telecom AS22773 1486 117 1369 92.1% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS4755 1523 213 1310 86.0% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS4323 1608 384 1224 76.1% TWTC - tw telecom holdings, inc. AS28573 1616 404 1212 75.0% NET Servicos de Comunicao S.A. AS2118 1241 89 1152 92.8% RELCOM-AS OOO "NPO Relcom" AS1785 1868 784 1084 58.0% AS-PAETEC-NET - PaeTec Communications, Inc. AS7552 1424 391 1033 72.5% VIETEL-AS-AP Vietel Corporation AS10620 1723 728 995 57.7% Telmex Colombia S.A. AS19262 1386 401 985 71.1% VZGNI-TRANSIT - Verizon Online LLC AS7303 1256 368 888 70.7% Telecom Argentina S.A. AS8402 1675 823 852 50.9% CORBINA-AS OJSC "Vimpelcom" AS8151 1461 664 797 54.6% Uninet S.A. de C.V. AS18101 947 156 791 83.5% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS30036 1487 715 772 51.9% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS4808 1100 342 758 68.9% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS15557 1095 368 727 66.4% LDCOMNET Societe Francaise du Radiotelephone S.A AS24560 1011 289 722 71.4% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS9394 878 197 681 77.6% CRNET CHINA RAILWAY Internet(CRNET) AS9498 871 205 666 76.5% BBIL-AP BHARTI Airtel Ltd. AS3356 1105 460 645 58.4% LEVEL3 Level 3 Communications AS7545 1638 997 641 39.1% TPG-INTERNET-AP TPG Internet Pty Ltd AS17676 677 74 603 89.1% GIGAINFRA Softbank BB Corp. AS17974 1715 1131 584 34.1% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS4804 660 95 565 85.6% MPX-AS Microplex PTY LTD AS4780 787 229 558 70.9% SEEDNET Digital United Inc. AS20115 1620 1063 557 34.4% CHARTER-NET-HKY-NC - Charter Communications Total 45140 14838 30302 67.1% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 14.192.0.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.4.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.8.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.12.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.16.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.20.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.24.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.28.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 37.61.144.0/20 AS34977 PROCONO-AS PROCONO S.A. 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.21.192.0/20 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.212.0/22 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.216.0/21 AS11610 INETNEBR-1 - Internet Nebraska Corporation 66.129.0.0/19 AS3901 ARRAKIS - Higher Technology Services 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.44.16.0/20 AS15054 HAMELTRONICS - Hameltronics, LLC 80.88.10.0/24 AS33774 DJAWEB 98.159.96.0/20 AS46975 110.34.44.0/22 AS12653 COMTONET Com-ToNet 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 172.45.1.0/24 AS3356 LEVEL3 Level 3 Communications 172.45.2.0/24 AS29571 CITelecom-AS 172.45.3.0/24 AS29571 CITelecom-AS 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 190.104.32.0/21 AS27882 Telefónica Celular de Bolivia S.A. 193.0.22.0/23 AS3333 RIPE-NCC-AS RIPE Network Coordination Centre 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.61.108.0/24 AS55812 202.61.118.0/24 AS55833 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.160.152.0/22 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.180.240.0/20 AS12083 KNOLOGY-NET - KNOLOGY, Inc. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.91.56.0/21 AS22241 IC2NET - IC2NET 208.91.56.0/24 AS22241 IC2NET - IC2NET 208.91.57.0/24 AS22241 IC2NET - IC2NET 208.91.58.0/24 AS22241 IC2NET - IC2NET 208.91.59.0/24 AS22241 IC2NET - IC2NET 208.91.60.0/24 AS22241 IC2NET - IC2NET 208.91.61.0/24 AS22241 IC2NET - IC2NET 208.91.62.0/24 AS22241 IC2NET - IC2NET 208.91.63.0/24 AS22241 IC2NET - IC2NET 209.133.224.0/19 AS4323 TWTC - tw telecom holdings, inc. 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.222.240.0/22 AS19747 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.12.160.0/20 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.21.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 216.194.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

RE: accessing multiple devices via a script (Abdullah Al-Malki)
by Bacon, Ricky 20 Jan '12

20 Jan '12

This is Expect's creator Don Libes' tool. I have been using it for years. http://expect.sourceforge.net/example/multixterm.man.html --RJ

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 20 Jan '12

20 Jan '12

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 21 Jan, 2012 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 393115 Prefixes after maximum aggregation: 169030 Deaggregation factor: 2.33 Unique aggregates announced to Internet: 191068 Total ASes present in the Internet Routing Table: 39874 Prefixes per ASN: 9.86 Origin-only ASes present in the Internet Routing Table: 32616 Origin ASes announcing only one prefix: 15498 Transit ASes present in the Internet Routing Table: 5384 Transit-only ASes present in the Internet Routing Table: 140 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 33 Max AS path prepend of ASN (48687) 24 Prefixes from unregistered ASNs in the Routing Table: 2141 Unregistered ASNs in the Routing Table: 1089 Number of 32-bit ASNs allocated by the RIRs: 2200 Number of 32-bit ASNs visible in the Routing Table: 1874 Prefixes from 32-bit ASNs in the Routing Table: 4540 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 118 Number of addresses announced to Internet: 2511238896 Equivalent to 149 /8s, 174 /16s and 118 /24s Percentage of available address space announced: 67.8 Percentage of allocated address space announced: 67.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 91.9 Total number of prefixes smaller than registry allocations: 166200 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 97520 Total APNIC prefixes after maximum aggregation: 31610 APNIC Deaggregation factor: 3.09 Prefixes being announced from the APNIC address blocks: 93822 Unique aggregates announced from the APNIC address blocks: 38983 APNIC Region origin ASes present in the Internet Routing Table: 4637 APNIC Prefixes per ASN: 20.23 APNIC Region origin ASes announcing only one prefix: 1240 APNIC Region transit ASes present in the Internet Routing Table: 726 Average APNIC Region AS path length visible: 4.3 Max APNIC Region AS path length visible: 19 Number of APNIC region 32-bit ASNs visible in the Routing Table: 134 Number of APNIC addresses announced to Internet: 635145824 Equivalent to 37 /8s, 219 /16s and 142 /24s Percentage of available APNIC address space announced: 80.5 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-132095, 132096-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 147631 Total ARIN prefixes after maximum aggregation: 75140 ARIN Deaggregation factor: 1.96 Prefixes being announced from the ARIN address blocks: 119589 Unique aggregates announced from the ARIN address blocks: 49078 ARIN Region origin ASes present in the Internet Routing Table: 14859 ARIN Prefixes per ASN: 8.05 ARIN Region origin ASes announcing only one prefix: 5677 ARIN Region transit ASes present in the Internet Routing Table: 1587 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 14 Number of ARIN addresses announced to Internet: 805016256 Equivalent to 47 /8s, 251 /16s and 146 /24s Percentage of available ARIN address space announced: 64.0 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 97168 Total RIPE prefixes after maximum aggregation: 52047 RIPE Deaggregation factor: 1.87 Prefixes being announced from the RIPE address blocks: 89044 Unique aggregates announced from the RIPE address blocks: 55638 RIPE Region origin ASes present in the Internet Routing Table: 16253 RIPE Prefixes per ASN: 5.48 RIPE Region origin ASes announcing only one prefix: 7981 RIPE Region transit ASes present in the Internet Routing Table: 2588 Average RIPE Region AS path length visible: 4.7 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 1301 Number of RIPE addresses announced to Internet: 497788360 Equivalent to 29 /8s, 171 /16s and 165 /24s Percentage of available RIPE address space announced: 80.2 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 37373 Total LACNIC prefixes after maximum aggregation: 8078 LACNIC Deaggregation factor: 4.63 Prefixes being announced from the LACNIC address blocks: 36993 Unique aggregates announced from the LACNIC address blocks: 19328 LACNIC Region origin ASes present in the Internet Routing Table: 1563 LACNIC Prefixes per ASN: 23.67 LACNIC Region origin ASes announcing only one prefix: 440 LACNIC Region transit ASes present in the Internet Routing Table: 283 Average LACNIC Region AS path length visible: 4.5 Max LACNIC Region AS path length visible: 24 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 421 Number of LACNIC addresses announced to Internet: 95480968 Equivalent to 5 /8s, 176 /16s and 236 /24s Percentage of available LACNIC address space announced: 63.2 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 8721 Total AfriNIC prefixes after maximum aggregation: 2083 AfriNIC Deaggregation factor: 4.19 Prefixes being announced from the AfriNIC address blocks: 6744 Unique aggregates announced from the AfriNIC address blocks: 2086 AfriNIC Region origin ASes present in the Internet Routing Table: 506 AfriNIC Prefixes per ASN: 13.33 AfriNIC Region origin ASes announcing only one prefix: 160 AfriNIC Region transit ASes present in the Internet Routing Table: 118 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 4 Number of AfriNIC addresses announced to Internet: 30813184 Equivalent to 1 /8s, 214 /16s and 44 /24s Percentage of available AfriNIC address space announced: 45.9 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2473 11101 975 Korea Telecom (KIX) 17974 1715 503 36 PT TELEKOMUNIKASI INDONESIA 7545 1638 303 86 TPG Internet Pty Ltd 4755 1524 385 154 TATA Communications formerly 7552 1424 1064 7 Vietel Corporation 9829 1163 989 28 BSNL National Internet Backbo 9583 1119 81 490 Sify Limited 4808 1100 2050 311 CNCGROUP IP network: China169 24560 1007 383 166 Bharti Airtel Ltd., Telemedia 18101 946 130 155 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3449 3807 202 bellsouth.net, inc. 7029 3223 1016 199 Windstream Communications Inc 18566 2093 382 177 Covad Communications 1785 1865 679 122 PaeTec Communications, Inc. 20115 1620 1553 615 Charter Communications 4323 1607 1062 382 Time Warner Telecom 30036 1487 266 707 Mediacom Communications Corp 22773 1486 2909 108 Cox Communications, Inc. 19262 1386 4683 400 Verizon Global Networks 7018 1298 7008 849 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1714 480 15 Corbina telecom 2118 1241 99 14 EUnet/RELCOM Autonomous Syste 15557 1095 2161 64 LDCOM NETWORKS 6830 644 1928 413 UPC Distribution Services 34984 638 188 172 BILISIM TELEKOM 31148 613 35 9 FreeNet ISP 20940 571 185 453 Akamai Technologies European 12479 557 639 55 Uni2 Autonomous System 8551 528 360 81 Bezeq International 3320 517 8157 393 Deutsche Telekom AG Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1723 321 167 TVCABLE BOGOTA 28573 1616 1068 77 NET Servicos de Comunicao S.A 8151 1460 2999 342 UniNet S.A. de C.V. 7303 1256 756 179 Telecom Argentina Stet-France 27947 642 73 96 Telconet S.A 22047 581 322 17 VTR PUNTO NET S.A. 7738 551 1050 31 Telecomunicacoes da Bahia S.A 3816 550 238 92 Empresa Nacional de Telecomun 6503 539 434 68 AVANTEL, S.A. 11172 532 85 106 Servicios Alestra S.A de C.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1031 958 13 TEDATA 24863 797 146 36 LINKdotNET AS number 6713 485 649 18 Itissalat Al-MAGHRIB 3741 280 939 229 The Internet Solution 15706 239 32 6 Sudatel Internet Exchange Aut 33776 234 13 14 Starcomms Nigeria Limited 29571 214 17 12 Ci Telecom Autonomous system 12258 196 28 61 Vodacom Internet Company 24835 189 80 8 RAYA Telecom - Egypt 16637 160 664 82 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3449 3807 202 bellsouth.net, inc. 7029 3223 1016 199 Windstream Communications Inc 4766 2473 11101 975 Korea Telecom (KIX) 18566 2093 382 177 Covad Communications 1785 1865 679 122 PaeTec Communications, Inc. 10620 1723 321 167 TVCABLE BOGOTA 17974 1715 503 36 PT TELEKOMUNIKASI INDONESIA 8402 1714 480 15 Corbina telecom 7545 1638 303 86 TPG Internet Pty Ltd 20115 1620 1553 615 Charter Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7029 3223 3024 Windstream Communications Inc 18566 2093 1916 Covad Communications 1785 1865 1743 PaeTec Communications, Inc. 8402 1714 1699 Corbina telecom 17974 1715 1679 PT TELEKOMUNIKASI INDONESIA 10620 1723 1556 TVCABLE BOGOTA 7545 1638 1552 TPG Internet Pty Ltd 28573 1616 1539 NET Servicos de Comunicao S.A 4766 2473 1498 Korea Telecom (KIX) 7552 1424 1417 Vietel Corporation Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 32873 UNALLOCATED 12.46.100.0/23 10912 InterNAP Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/21 12654 RIPE NCC RIS Project 128.0.24.0/24 12654 RIPE NCC RIS Project Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 14.192.0.0/22 45464 Room 201, TGU Bldg 14.192.4.0/22 45464 Room 201, TGU Bldg 14.192.8.0/22 45464 Room 201, TGU Bldg 14.192.12.0/22 45464 Room 201, TGU Bldg 14.192.16.0/22 45464 Room 201, TGU Bldg 14.192.20.0/22 45464 Room 201, TGU Bldg 14.192.24.0/22 45464 Room 201, TGU Bldg 14.192.28.0/22 45464 Room 201, TGU Bldg 37.60.208.0/20 31214 TIS-DIALOG Autonomous system 37.61.144.0/20 34977 PROCONO S.A. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:12 /10:27 /11:80 /12:232 /13:458 /14:817 /15:1462 /16:12139 /17:6159 /18:10248 /19:20303 /20:28150 /21:29098 /22:39196 /23:36683 /24:204402 /25:1171 /26:1422 /27:782 /28:168 /29:55 /30:14 /31:0 /32:18 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 2843 3223 Windstream Communications Inc 6389 2120 3449 bellsouth.net, inc. 18566 2042 2093 Covad Communications 8402 1693 1714 Corbina telecom 10620 1618 1723 TVCABLE BOGOTA 30036 1444 1487 Mediacom Communications Corp 11492 1116 1153 Cable One 1785 1067 1865 PaeTec Communications, Inc. 15557 1046 1095 LDCOM NETWORKS 7011 1031 1148 Citizens Utilities Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:501 2:464 4:15 5:1 6:3 8:377 12:1950 13:1 14:583 15:11 16:3 17:6 20:9 23:112 24:1675 27:1178 31:821 32:65 33:2 34:2 36:8 37:102 38:794 40:114 41:2937 42:87 43:1 44:3 46:1204 47:3 49:319 50:517 52:13 54:1 55:7 56:2 57:41 58:948 59:491 60:345 61:1180 62:920 63:1978 64:4108 65:2286 66:4404 67:2022 68:1155 69:3142 70:920 71:428 72:1799 74:2653 75:445 76:320 77:966 78:904 79:500 80:1189 81:870 82:559 83:533 84:586 85:1153 86:743 87:905 88:341 89:1583 90:257 91:4432 92:531 93:1557 94:1363 95:1104 96:425 97:299 98:789 99:38 100:18 101:132 103:652 106:10 107:134 108:125 109:1467 110:688 111:839 112:429 113:525 114:601 115:757 116:851 117:727 118:901 119:1247 120:355 121:681 122:1630 123:1061 124:1338 125:1341 128:537 129:193 130:213 131:588 132:160 133:21 134:231 135:59 136:213 137:152 138:288 139:145 140:491 141:260 142:377 143:400 144:510 145:68 146:486 147:227 148:640 149:281 150:165 151:193 152:446 153:170 154:7 155:400 156:210 157:367 158:154 159:510 160:320 161:221 162:339 163:188 164:530 165:391 166:561 167:457 168:852 169:147 170:835 171:105 172:4 173:1779 174:584 175:416 176:371 177:464 178:1202 180:1227 181:43 182:693 183:274 184:404 185:1 186:1503 187:840 188:980 189:1164 190:5373 192:5988 193:5459 194:4198 195:3384 196:1290 197:168 198:3621 199:4324 200:5640 201:1697 202:8410 203:8602 204:4339 205:2429 206:2746 207:2803 208:4010 209:3544 210:2745 211:1474 212:1974 213:1825 214:847 215:95 216:4975 217:1473 218:557 219:341 220:1250 221:558 222:324 223:270 End of report

1 0

Re: Automate Peering Maintenance
by Rafael Rodriguez 20 Jan '12

20 Jan '12

Hi Mauricio, thanks for the reply. I believe there are quite a few folks who automate their peering up keep with the help of the data contained within the IRRs. With the IRRs providing a mechanism for validating routing information and RPSL providing a common language for describing routing policy - automating the creation of prefix and AS-Path filters for peering sessions becomes attractive. Check out http://www.irr.net/docs/faq.html for additional reasons for using IRR data to generate routing policy. IRRToolSet is a tool that can create router configurations based on IRR data. The portion I'm trying to figure out is the 'pushing' of these configurations. From what I gather, it seems that this is usually something thats homegrown. Anyone willing to share their homegrown tools? :) Cheers, RR On Sat, Jan 7, 2012 at 6:20 PM, Rodriguez, Mauricio <mrodriguez(a)fletnet.com>wrote: > Rafael, > > Hello! Nice to see you post on the list... > > This sounds like a nice idea. Do you know of anyone that's currently > running such an automated system? If you end up finding something, or > rolling it yourself, I would suggest being careful with his approach. > You're assuming that your peers are actually keeping the IRR records up to > date or that the information contained therein is appropriate for > non-transit peering sessions. If you have the right leverage, perhaps you > can make that a condition for peering. If you're manually keeping > prefix-list filters for each of your peers now, consider the return on that > level of detailed configuration. Is the risk mitigated really worth the > overhead? > > I would recommend that you keep your peer filters as simple as possible. > Inbound, certainly filter bogons, martians, your own prefixes, and any > prefixes received from other peers. Try using communities vs. individual > prefix entries as much as possible. Perhaps enforce the peer ASN with an > AS Path filter on the leading ASN on each prefix received. If you're > concerned about FIB size explosion, decide on a bit boundary for prefixes > to be accepted and filter on that. Certainly agree on a prefix-limit with > your peer and configure that on the peering session. You may have to be > diligent on monitoring sessions that drop due to prefix-limit violations > (SNMP Traps, syslog) and follow up to correct those as needed, since most > peers won't keep you informed on changes in their quantity of advertised > prefixes. Juniper routers can be configured to send warnings on certain > thresholds so you can catch normal growth vs. a fat-fingered configuration > by a peer. You can then take care of those proactively before sessions > start dropping. > > Outbound, don't let anything out other than your own prefixes or those > advertised to you by your customers. Otherwise, you may be providing free > transit to your upstreams and other peers. > > Just my $0.02, others will likely disagree and recommend that you keep > your prefix filters in place. I digress if there's some BCP out there that > I don't know about that indicates that prefix filters be used in this case. > > Regards, > Mauricio Rodriguez > Owner / Principal Engineer > Fletnet Network Engineering > > Mauricio.Rodriguez(a)fletnet.com > http://www.fletnet.com > > ***** Email confidentiality notice ***** > > This message is private and confidential. If you have received this message in error, please notify us and remove it from your system. > > >

1 0