- NANOG - lists.nanog.org

BGP Update Report
by cidr-report＠potaroo.net 09 Dec '11

09 Dec '11

BGP Update Report Interval: 01-Dec-11 -to- 08-Dec-11 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS42116 216141 10.4% 3929.8 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 2 - AS8402 45654 2.2% 28.6 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS24560 44354 2.1% 46.3 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 4 - AS9829 30074 1.4% 47.8 -- BSNL-NIB National Internet Backbone 5 - AS44568 25231 1.2% 2803.4 -- OPSOURCE-UK OpSource, Inc 6 - AS32528 25070 1.2% 6267.5 -- ABBOTT Abbot Labs 7 - AS5800 24783 1.2% 90.4 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 8 - AS7552 24639 1.2% 17.8 -- VIETEL-AS-AP Vietel Corporation 9 - AS19743 20793 1.0% 2970.4 -- 10 - AS20632 19982 1.0% 587.7 -- PETERSTAR-AS PeterStar 11 - AS11830 18116 0.9% 55.2 -- Instituto Costarricense de Electricidad y Telecom. 12 - AS31148 17299 0.8% 41.7 -- FREENET-AS FreeNet ISP 13 - AS27738 15592 0.8% 45.9 -- Ecuadortelecom S.A. 14 - AS6316 15209 0.7% 227.0 -- AS-PAETEC-NET - PaeTec Communications, Inc. 15 - AS1785 13444 0.7% 7.9 -- AS-PAETEC-NET - PaeTec Communications, Inc. 16 - AS19223 12864 0.6% 12864.0 -- NTEGRATED-SOLUTIONS - Ntegrated Solutions 17 - AS17974 12226 0.6% 8.2 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 18 - AS39353 11648 0.6% 3882.7 -- PRINCAST-AS Gobierno del Principado de Asturias 19 - AS27964 10851 0.5% 97.8 -- RSONet 20 - AS14420 10482 0.5% 21.6 -- CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS19223 12864 0.6% 12864.0 -- NTEGRATED-SOLUTIONS - Ntegrated Solutions 2 - AS18823 8516 0.4% 8516.0 -- MEDICALERT - Medicalert Foundation 3 - AS32528 25070 1.2% 6267.5 -- ABBOTT Abbot Labs 4 - AS42116 216141 10.4% 3929.8 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 5 - AS39353 11648 0.6% 3882.7 -- PRINCAST-AS Gobierno del Principado de Asturias 6 - AS19743 20793 1.0% 2970.4 -- 7 - AS44568 25231 1.2% 2803.4 -- OPSOURCE-UK OpSource, Inc 8 - AS37378 2590 0.1% 2590.0 -- NIGERIA-AIRFORCE 9 - AS6066 3542 0.2% 1771.0 -- VERIZON-BUSINESS-MAE-AS6066 - Verizon Business Network Services Inc. 10 - AS10209 1634 0.1% 1634.0 -- SYNOPSYS-AS-JP-AP Japan HUB and Data Center 11 - AS28170 4351 0.2% 1087.8 -- 12 - AS53362 928 0.0% 928.0 -- MIXIT-AS - Mixit, Inc. 13 - AS55696 755 0.0% 755.0 -- SCOM-AS-ID Starcom Solusindo PT. 14 - AS8163 749 0.0% 749.0 -- METROTEL REDES S.A. 15 - AS6072 9646 0.5% 689.0 -- UNISYS-6072 For routing issues, email hostmaster(a)unisys.com 16 - AS22878 6905 0.3% 627.7 -- ASACENET1 - ACENET, INC. 17 - AS20632 19982 1.0% 587.7 -- PETERSTAR-AS PeterStar 18 - AS11943 558 0.0% 558.0 -- GLOBE - Globe Wireless 19 - AS19674 1596 0.1% 532.0 -- NAVPOINT - Navpoint Internet 20 - AS33076 524 0.0% 524.0 -- ISC-TGD1 Internet Systems Consortium, Inc. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 84.204.132.0/24 19878 0.9% AS20632 -- PETERSTAR-AS PeterStar 2 - 67.97.156.0/24 12864 0.6% AS19223 -- NTEGRATED-SOLUTIONS - Ntegrated Solutions 3 - 130.36.34.0/24 12533 0.6% AS32528 -- ABBOTT Abbot Labs 4 - 130.36.35.0/24 12533 0.6% AS32528 -- ABBOTT Abbot Labs 5 - 88.151.16.0/22 11646 0.5% AS39353 -- PRINCAST-AS Gobierno del Principado de Asturias 6 - 66.248.96.0/21 9872 0.5% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc. 7 - 75.141.48.0/24 8516 0.4% AS18823 -- MEDICALERT - Medicalert Foundation 8 - 95.78.100.0/22 8417 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 9 - 46.147.84.0/22 8411 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 10 - 46.147.92.0/22 8404 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 11 - 95.78.104.0/22 8391 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 12 - 95.78.88.0/22 8390 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 13 - 95.78.80.0/22 8389 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 14 - 95.78.16.0/22 8388 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 15 - 176.213.100.0/22 8388 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 16 - 95.78.108.0/22 8377 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 17 - 46.147.88.0/22 8376 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 18 - 95.78.12.0/22 8376 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 19 - 95.78.20.0/22 8376 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" 20 - 46.147.80.0/22 8365 0.4% AS42116 -- ERTH-NCHLN-AS CJSC "ER-Telecom Holding" Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 09 Dec '11

09 Dec '11

This report has been generated at Fri Dec 9 21:12:30 2011 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 02-12-11 385297 226100 03-12-11 385231 226034 04-12-11 385299 226287 05-12-11 385441 226550 06-12-11 385599 226848 07-12-11 385865 226928 08-12-11 385744 227259 09-12-11 386491 227289 AS Summary 39626 Number of ASes in routing system 16690 Number of ASes announcing only one prefix 3481 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 109030400 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 09Dec11 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 386646 227364 159282 41.2% All ASes AS6389 3481 221 3260 93.7% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS18566 2093 412 1681 80.3% COVAD - Covad Communications Co. AS4766 2513 993 1520 60.5% KIXS-AS-KR Korea Telecom AS7029 2957 1524 1433 48.5% WINDSTREAM - Windstream Communications Inc AS22773 1505 113 1392 92.5% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS4755 1508 213 1295 85.9% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS4323 1618 387 1231 76.1% TWTC - tw telecom holdings, inc. AS28573 1549 402 1147 74.0% NET Servicos de Comunicao S.A. AS1785 1858 783 1075 57.9% AS-PAETEC-NET - PaeTec Communications, Inc. AS10620 1721 702 1019 59.2% Telmex Colombia S.A. AS19262 1388 401 987 71.1% VZGNI-TRANSIT - Verizon Online LLC AS7552 1305 421 884 67.7% VIETEL-AS-AP Vietel Corporation AS7303 1239 359 880 71.0% Telecom Argentina S.A. AS8402 1507 667 840 55.7% CORBINA-AS OJSC "Vimpelcom" AS18101 963 156 807 83.8% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS8151 1459 657 802 55.0% Uninet S.A. de C.V. AS30036 1443 681 762 52.8% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS4808 1076 334 742 69.0% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS7545 1630 946 684 42.0% TPG-INTERNET-AP TPG Internet Pty Ltd AS3356 1105 457 648 58.6% LEVEL3 Level 3 Communications AS17676 675 74 601 89.0% GIGAINFRA Softbank BB Corp. AS4804 663 95 568 85.7% MPX-AS Microplex PTY LTD AS17974 1694 1133 561 33.1% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS20115 1602 1043 559 34.9% CHARTER-NET-HKY-NC - Charter Communications AS22561 931 376 555 59.6% DIGITAL-TELEPORT - Digital Teleport Inc. AS22047 582 33 549 94.3% VTR BANDA ANCHA S.A. AS3549 959 415 544 56.7% GBLX Global Crossing Ltd. AS24560 982 448 534 54.4% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS7011 1167 647 520 44.6% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. AS17488 931 412 519 55.7% HATHWAY-NET-AP Hathway IP Over Cable Internet Total 44104 15505 28599 64.8% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 37.1.88.0/21 AS50763 MCKAYCOM MCKAYCOM LTD 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.21.192.0/20 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.212.0/22 AS11610 INETNEBR-1 - Internet Nebraska Corporation 64.21.216.0/21 AS11610 INETNEBR-1 - Internet Nebraska Corporation 66.171.32.0/20 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.175.222.0/23 AS30058 FDCSERVERS - FDCservers.net 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 80.88.10.0/24 AS33774 DJAWEB 98.159.96.0/20 AS46975 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 172.45.1.0/24 AS29571 CITelecom-AS 172.45.2.0/24 AS29571 CITelecom-AS 172.45.3.0/24 AS29571 CITelecom-AS 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 190.104.32.0/21 AS27882 Telefónica Celular de Bolivia S.A. 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.160.152.0/22 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 205.207.148.0/23 AS812 ROGERS-CABLE - Rogers Cable Communications Inc. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.64.240.0/21 AS13871 TELEBYTE-NW - Telebyte NW 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.222.240.0/22 AS19747 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.21.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 216.194.160.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 09 Dec '11

09 Dec '11

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 10 Dec, 2011 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 384553 Prefixes after maximum aggregation: 167591 Deaggregation factor: 2.29 Unique aggregates announced to Internet: 188778 Total ASes present in the Internet Routing Table: 39528 Prefixes per ASN: 9.73 Origin-only ASes present in the Internet Routing Table: 32469 Origin ASes announcing only one prefix: 15507 Transit ASes present in the Internet Routing Table: 5346 Transit-only ASes present in the Internet Routing Table: 144 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 33 Max AS path prepend of ASN (48687) 24 Prefixes from unregistered ASNs in the Routing Table: 1864 Unregistered ASNs in the Routing Table: 973 Number of 32-bit ASNs allocated by the RIRs: 2059 Number of 32-bit ASNs visible in the Routing Table: 1713 Prefixes from 32-bit ASNs in the Routing Table: 4069 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 82 Number of addresses announced to Internet: 2499466496 Equivalent to 148 /8s, 250 /16s and 213 /24s Percentage of available address space announced: 67.4 Percentage of allocated address space announced: 67.4 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 91.7 Total number of prefixes smaller than registry allocations: 162332 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 95338 Total APNIC prefixes after maximum aggregation: 31228 APNIC Deaggregation factor: 3.05 Prefixes being announced from the APNIC address blocks: 91808 Unique aggregates announced from the APNIC address blocks: 38427 APNIC Region origin ASes present in the Internet Routing Table: 4601 APNIC Prefixes per ASN: 19.95 APNIC Region origin ASes announcing only one prefix: 1248 APNIC Region transit ASes present in the Internet Routing Table: 727 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 18 Number of APNIC region 32-bit ASNs visible in the Routing Table: 119 Number of APNIC addresses announced to Internet: 631071072 Equivalent to 37 /8s, 157 /16s and 97 /24s Percentage of available APNIC address space announced: 80.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-132095, 132096-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 146344 Total ARIN prefixes after maximum aggregation: 74781 ARIN Deaggregation factor: 1.96 Prefixes being announced from the ARIN address blocks: 118441 Unique aggregates announced from the ARIN address blocks: 48663 ARIN Region origin ASes present in the Internet Routing Table: 14799 ARIN Prefixes per ASN: 8.00 ARIN Region origin ASes announcing only one prefix: 5662 ARIN Region transit ASes present in the Internet Routing Table: 1579 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 12 Number of ARIN addresses announced to Internet: 803365568 Equivalent to 47 /8s, 226 /16s and 98 /24s Percentage of available ARIN address space announced: 63.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 93411 Total RIPE prefixes after maximum aggregation: 51508 RIPE Deaggregation factor: 1.81 Prefixes being announced from the RIPE address blocks: 85799 Unique aggregates announced from the RIPE address blocks: 55001 RIPE Region origin ASes present in the Internet Routing Table: 16170 RIPE Prefixes per ASN: 5.31 RIPE Region origin ASes announcing only one prefix: 7996 RIPE Region transit ASes present in the Internet Routing Table: 2557 Average RIPE Region AS path length visible: 4.7 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 1199 Number of RIPE addresses announced to Internet: 493969856 Equivalent to 29 /8s, 113 /16s and 97 /24s Percentage of available RIPE address space announced: 79.6 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 36815 Total LACNIC prefixes after maximum aggregation: 7940 LACNIC Deaggregation factor: 4.64 Prefixes being announced from the LACNIC address blocks: 36277 Unique aggregates announced from the LACNIC address blocks: 18889 LACNIC Region origin ASes present in the Internet Routing Table: 1556 LACNIC Prefixes per ASN: 23.31 LACNIC Region origin ASes announcing only one prefix: 441 LACNIC Region transit ASes present in the Internet Routing Table: 289 Average LACNIC Region AS path length visible: 4.5 Max LACNIC Region AS path length visible: 18 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 379 Number of LACNIC addresses announced to Internet: 94673024 Equivalent to 5 /8s, 164 /16s and 152 /24s Percentage of available LACNIC address space announced: 62.7 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 8406 Total AfriNIC prefixes after maximum aggregation: 2062 AfriNIC Deaggregation factor: 4.08 Prefixes being announced from the AfriNIC address blocks: 6460 Unique aggregates announced from the AfriNIC address blocks: 2059 AfriNIC Region origin ASes present in the Internet Routing Table: 503 AfriNIC Prefixes per ASN: 12.84 AfriNIC Region origin ASes announcing only one prefix: 160 AfriNIC Region transit ASes present in the Internet Routing Table: 110 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 4 Number of AfriNIC addresses announced to Internet: 30395392 Equivalent to 1 /8s, 207 /16s and 204 /24s Percentage of available AfriNIC address space announced: 45.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2509 11104 970 Korea Telecom (KIX) 17974 1694 503 38 PT TELEKOMUNIKASI INDONESIA 7545 1631 303 86 TPG Internet Pty Ltd 4755 1511 385 158 TATA Communications formerly 7552 1392 1064 7 Vietel Corporation 9829 1170 989 28 BSNL National Internet Backbo 9583 1099 81 496 Sify Limited 4808 1076 2034 303 CNCGROUP IP network: China169 24560 982 381 162 Bharti Airtel Ltd., Telemedia 18101 960 122 155 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3481 3814 218 bellsouth.net, inc. 7029 2916 1017 200 Windstream Communications Inc 18566 2093 383 177 Covad Communications 1785 1855 680 121 PaeTec Communications, Inc. 4323 1617 1073 385 Time Warner Telecom 20115 1602 1548 628 Charter Communications 22773 1505 2909 104 Cox Communications, Inc. 30036 1443 258 675 Mediacom Communications Corp 19262 1388 4683 401 Verizon Global Networks 7018 1309 7029 858 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1581 480 15 Corbina telecom 6830 644 1927 412 UPC Distribution Services 34984 624 132 201 BILISIM TELEKOM 2118 550 99 14 EUnet/RELCOM Autonomous Syste 20940 544 174 434 Akamai Technologies European 3320 528 8161 394 Deutsche Telekom AG 12479 493 601 12 Uni2 Autonomous System 3292 480 2106 407 TDC Tele Danmark 8866 462 133 26 Bulgarian Telecommunication C 8551 423 366 45 Bezeq International Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1720 318 155 TVCABLE BOGOTA 28573 1549 1059 72 NET Servicos de Comunicao S.A 8151 1459 2985 349 UniNet S.A. de C.V. 7303 1239 751 174 Telecom Argentina Stet-France 27947 617 72 91 Telconet S.A 22047 582 322 17 VTR PUNTO NET S.A. 6503 554 434 68 AVANTEL, S.A. 7738 553 1050 31 Telecomunicacoes da Bahia S.A 3816 547 237 89 Empresa Nacional de Telecomun 11172 528 86 95 Servicios Alestra S.A de C.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 963 958 13 TEDATA 24863 785 146 35 LINKdotNET AS number 3741 281 939 230 The Internet Solution 15706 242 32 6 Sudatel Internet Exchange Aut 33776 240 13 8 Starcomms Nigeria Limited 6713 235 519 14 Itissalat Al-MAGHRIB 29571 217 17 13 Ci Telecom Autonomous system 12258 195 28 60 Vodacom Internet Company 24835 193 80 8 RAYA Telecom - Egypt 16637 164 664 83 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3481 3814 218 bellsouth.net, inc. 7029 2916 1017 200 Windstream Communications Inc 4766 2509 11104 970 Korea Telecom (KIX) 18566 2093 383 177 Covad Communications 1785 1855 680 121 PaeTec Communications, Inc. 10620 1720 318 155 TVCABLE BOGOTA 17974 1694 503 38 PT TELEKOMUNIKASI INDONESIA 7545 1631 303 86 TPG Internet Pty Ltd 4323 1617 1073 385 Time Warner Telecom 20115 1602 1548 628 Charter Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7029 2916 2716 Windstream Communications Inc 18566 2093 1916 Covad Communications 1785 1855 1734 PaeTec Communications, Inc. 17974 1694 1656 PT TELEKOMUNIKASI INDONESIA 8402 1581 1566 Corbina telecom 10620 1720 1565 TVCABLE BOGOTA 7545 1631 1545 TPG Internet Pty Ltd 4766 2509 1539 Korea Telecom (KIX) 28573 1549 1477 NET Servicos de Comunicao S.A 22773 1505 1401 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 32873 UNALLOCATED 12.46.100.0/23 10912 InterNAP Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/21 12654 RIPE NCC RIS Project 128.0.24.0/24 12654 RIPE NCC RIS Project Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 37.0.24.0/21 50794 AS Levira 37.1.88.0/21 50763 MCKAYCOM LTD 41.222.79.0/24 36938 >>UNKNOWN<< 41.223.92.0/22 36936 >>UNKNOWN<< 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.21.192.0/20 11610 Internet Nebraska Corporation 64.21.212.0/22 11610 Internet Nebraska Corporation 64.21.216.0/21 11610 Internet Nebraska Corporation 66.171.32.0/20 705 UUNET Technologies, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:12 /10:27 /11:81 /12:236 /13:465 /14:812 /15:1442 /16:12042 /17:6104 /18:10146 /19:20068 /20:27797 /21:28040 /22:38213 /23:35782 /24:199713 /25:1176 /26:1417 /27:783 /28:170 /29:3 /30:0 /31:0 /32:5 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 2545 2916 Windstream Communications Inc 6389 2124 3481 bellsouth.net, inc. 18566 2042 2093 Covad Communications 10620 1615 1720 TVCABLE BOGOTA 8402 1556 1581 Corbina telecom 30036 1403 1443 Mediacom Communications Corp 11492 1116 1153 Cable One 1785 1060 1855 PaeTec Communications, Inc. 7011 1050 1166 Citizens Utilities 22773 966 1505 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:445 2:483 4:15 5:1 6:3 8:360 12:1944 13:1 14:557 15:11 16:3 17:7 20:9 23:72 24:1699 27:1113 31:721 32:67 33:2 34:2 36:4 38:771 39:1 40:114 41:2895 42:69 43:1 44:3 46:1127 47:3 49:228 50:459 52:13 55:5 56:2 57:45 58:945 59:487 60:342 61:1176 62:912 63:1970 64:4079 65:2307 66:4364 67:2004 68:1178 69:3141 70:916 71:362 72:1776 74:2639 75:431 76:319 77:937 78:886 79:439 80:1142 81:847 82:521 83:529 84:470 85:1169 86:409 87:910 88:353 89:1589 90:247 91:4340 92:539 93:1408 94:1324 95:1131 96:395 97:285 98:784 99:38 101:122 103:538 106:8 107:106 108:95 109:1096 110:670 111:823 112:375 113:485 114:617 115:703 116:876 117:712 118:878 119:1240 120:343 121:681 122:1557 123:1022 124:1365 125:1341 128:275 129:189 130:181 131:579 132:158 133:21 134:221 135:55 136:212 137:147 138:286 139:123 140:491 141:254 142:382 143:404 144:505 145:66 146:474 147:222 148:638 149:272 150:165 151:192 152:445 153:171 154:7 155:380 156:209 157:358 158:156 159:503 160:334 161:221 162:363 163:183 164:523 165:387 166:542 167:459 168:818 169:146 170:823 171:90 172:4 173:1786 174:591 175:415 176:339 177:429 178:1138 180:1173 181:38 182:675 183:253 184:399 185:1 186:1480 187:785 188:939 189:1173 190:5288 192:5969 193:5121 194:3797 195:3366 196:1273 197:172 198:3618 199:4216 200:5543 201:1702 202:8486 203:8523 204:4328 205:2404 206:2670 207:2842 208:4015 209:3558 210:2755 211:1469 212:1982 213:1795 214:822 215:92 216:4934 217:1488 218:578 219:344 220:1250 221:529 222:326 223:262 End of report

1 0

Re: BGP and Firewalls...
by David 09 Dec '11

09 Dec '11

SSL interception was the most painful -- PaloAlto finally confirmed it as a bug in 3.1.9, havnt upgraded yet. it basicall eats ssl traffic sporadically. had another issue during go-live where a "commit" caused the box to crash (3.1.9) and anothere during that same week where a malformed ssl packet crashed the dataplane. all cases involved significant interruptions because most did not trigger ha-related failovers. palo also support was extremely slow in all cases weve had and from that perspective alone i would not put all of my eggs into it. great box for web filtering from a feature perspective, but my bluecoats were much more stabile in their 4 yr life than the first 2weeks on our 2050s david. Sent from an email server. On Dec 8, 2011, at 10:11 AM, "Gregory Croft" <gcroft(a)shoremortgage.com> wrote: > What kind of Bugs are you running into? > I have two PA500's at the moment and haven't really had any issues with > web filtering. > > > > Thank you, > Gregory S. Croft > > -----Original Message----- > From: David [mailto:david@davidswafford.com] > Sent: Thursday, December 08, 2011 9:50 AM > To: Gregory Croft > Cc: <nanog(a)nanog.org> > Subject: Re: BGP and Firewalls... > > I wouldn't do it. We have 8 x PA-2050s and run into a lot of wierd > bugs.... (just doing web filtering) > > David > > Sent from an email server. > > On Dec 7, 2011, at 12:31 PM, "Gregory Croft" <gcroft(a)shoremortgage.com> > wrote: > >> Hi All, >> >> >> >> Does anyone have any experience with using firewalls as edge devices >> when BGP is concerned? >> >> Specifically the Palo Alto series of devices. >> >> >> >> If so please contact me off list. >> >> >> >> Thank you. >> >> >> >> >> >> Thank you, >> >> Gregory S. Croft >> >> >> >> >>

1 0

Re: [fyodor@insecure.org: C|Net Download.Com is now bundling Nmap with malware!]
by Kyle Duren 09 Dec '11

09 Dec '11

http://download.cnet.com/8301-2007_4-57338809-12/a-note-from-sean-regarding… In case no one saw this yet. -Kyle

3 2

Traceroute explanation
by Meftah Tayeb 08 Dec '11

08 Dec '11

Hey folks, i see a strange traceroute there Détermination de l'itinéraire vers www.rri.ro [193.231.72.52] avec un maximum de 30 sauts : 1 2 ms 1 ms 1 ms 172.28.0.1 2 1 ms 1 ms 1 ms localhost [10.16.0.2] 3 10 ms 10 ms 13 ms 41.200.16.1 4 11 ms 10 ms 11 ms 172.17.2.25 5 21 ms 21 ms 21 ms 213.140.58.10 6 34 ms 31 ms 55 ms pos14-0.palermo9.pal.seabone.net [195.22.197.125 ] 7 34 ms 33 ms 35 ms ae-5-6.bar2.marseille1.level3.net [4.69.151.13] 8 106 ms 68 ms 67 ms xe-1-1-0.mil10.ip4.tinet.net [213.200.68.61] 9 74 ms 73 ms 74 ms ae-1-12.bar1.budapest1.level3.net [4.69.141.249] 10 63 ms 63 ms 79 ms euroweb-gw.ip4.tinet.net [77.67.66.154] 11 85 ms 84 ms 84 ms v15-core1.stsisp.ro [193.151.28.1] 12 100 ms 100 ms 102 ms inet-crli1.qrli1.buh.ew.ro [81.24.28.226] 13 81 ms 81 ms 81 ms 193.231.72.10 14 92 ms 92 ms 93 ms ip4-89-238-225-90.euroweb.ro [89.238.225.90] 15 89 ms 89 ms 89 ms webrri.rri.ro.72.231.193.in-addr.arpa [193.231.7 2.52] Itinéraire déterminé. C:\Documents and Settings\TAYEB> Seabone, then level3, then Tinet, then level3, then tinet ? if is that a routing stufs that i don't know, please let me know :) i never saw that befaure Meftah Tayeb IT Consulting http://www.tmvoip.com/ phone: +21321656139 Mobile: +213660347746 __________ Information from ESET NOD32 Antivirus, version of virus signature database 6695 (20111208) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com

6 11

[NANOG-announce] NANOG 54 Hotel Update
by Betty Burke <betty＠nanog.org> 08 Dec '11

08 Dec '11

Dear NANOG Community, On behalf of the Board of Directors, I am happy to share some wonderful news regarding hotel accommodations for our NANOG 54 meeting in San Diego. The hotel has been undergoing renovations and recently completed remodeling of all its guest rooms and meeting space. The last phase of the hotel remodel will include the main lobby, which they plan to complete before our meeting. The Board has been working closely with the hotel to ensure the remodel will have no effect on NANOG 54, scheduled for February 5 - 8, 2012. As a result of our conversations, the hotel has agreed to reduce the individual guest room rate from $199 +tax/ night to $169 + tax/night. For reservations already made, the hotel will make an adjustment to your daily rate, reflecting the new NANOG 54 rate. In addition, if you make your reservation by January 4th, 2012, you will be entered into a drawing to win 10,000 Starwood Preferred Guest points! For your reference, below please find a copy of the original letter from the hotel. We look forward to seeing you all in San Diego! Sincerely, Betty Burke, Executive Director Greetings from San Diego! We are looking forward to welcoming you to America’s Finest City for the NANOG Annual Meeting in February 2012. Over the last year, The Westin Gaslamp Quarter has completed a refresh of our guest rooms, meeting space and WestinWORKOUT®, and we are in the final phase of our lobby renovation. To celebrate and to help manage your travel expense, we are happy to offer a discounted conference rate of $169 plus tax (originally $199!) For any reservations that have already been made, we will reduce your confirmed rate for you. Early Bird Special: If you make your reservation by January 4, 2012, you will be entered into a drawing to win 10,000 Starwood Preferred Guest points! Be well, Keri Robinson General Manager _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

RE: Flapping POS Interface on Frame-relay between a Juniper and Cisco
by Scott Weeks 08 Dec '11

08 Dec '11

Did Jeff's suggestion work? : interface POS0/0/0 : frame-relay intf-type dce If so, please let the list know, so when someone comes across this thread while searching for the fix they can figure it out without having to email the list. If it didn't help contact me off-line and I will be happy to troubleshoot it with you. scott ________________________________________ From: Righa Shake [righa.shake(a)gmail.com] Sent: Saturday, November 19, 2011 11:11 AM To: afnog(a)afnog.org Subject: Flapping POS Interface on Frame-relay between a Juniper and Cisco Hi, Am having a problem that is buffling. I recently changed a POS link encapsulation from PPP to Frame-relay. Since that time the POS interface keeps resetting from time to time. On my BGP session am receiving cease notifications from my upstream provider. The setup is such that we have a cisco on one end and a Juniper on the other. interface POS0/0/0 mtu 4474 no ip address no ip unreachables encapsulation frame-relay logging event link-status crc 32 pos scramble-atm frame-relay lmi-type ansi end ROUTERshow run int pos0/0/0.101 Building configuration... ! interface POS0/0/0.101 point-to-point ip address X.X.X.X 255.255.255.252 frame-relay interface-dlci 101 end ROUTER#show int pos0/0/0 POS0/0/0 is up, line protocol is up Hardware is SPA-2XOC12-POS MTU 4474 bytes, BW 622000 Kbit/sec, DLY 100 usec, reliability 255/255, txload 6/255, rxload 38/255 Encapsulation FRAME-RELAY, crc 32, loopback not set Keepalive set (10 sec) Scramble enabled LMI enq sent 81981, LMI stat recvd 77480, LMI upd recvd 0, DTE LMI up LMI enq recvd 0, LMI stat sent 0, LMI upd sent 0 LMI DLCI 0 LMI type is ANSI Annex D frame relay DTE segmentation inactive FR SVC disabled, LAPF state down Broadcast queue 0/256, broadcasts sent/dropped 26/0, interface broadcasts 0 Last input 00:00:00, output 00:00:00, output hang never Last clearing of "show interface" counters 1w2d Input queue: 0/375/0/0 (size/max/drops/flushes); Total output drops: 0 Queueing strategy: fifo Output queue: 0/40 (size/max) 5 minute input rate 94336000 bits/sec, 13151 packets/sec 5 minute output rate 16470000 bits/sec, 7049 packets/sec 12211574207 packets input, 10967607038364 bytes, 0 no buffer Received 0 broadcasts (0 IP multicasts) 6970870 runts, 2179 giants, 0 throttles 0 parity 892493293 input errors, 882184781 CRC, 0 frame, 0 overrun, 0 ignored, 3335463 abort 6379191154 packets output, 1614018181446 bytes, 0 underruns 0 output errors, 0 applique, 4 interface resets 0 unknown protocol drops 0 output buffer failures, 0 output buffers swapped out 0 carrier transitions Any assistance on this will be greatly appreciated. --- jsaxe(a)briworks.com wrote: From: Jeff Saxe <jsaxe(a)briworks.com> I believe this is the explanation for your flapping: a PPP link is intended to go between two routers over, for instance, a private leased line, so both of the devices are peers, neither one particularly special. Frame-relay, by contrast, was originally designed so that your router was an "end user" device and its directly-connected partner device was not your other router, which you control, but the frame carrier's frame-relay switch. Your router was a DTE device, and their switch, which was in a more "important" position in control of the frame-relay NBMA cloud, was the DCE device. Your router then slaved to the frame switch via LMI signaling, so that the upstream switch instructed you which DLCIs existed and were up at the moment. So if you connect up two routers with frame-relay encap and each thinks it is the DTE, and neither one is taking the role of the frame switch, then when you bring them up, they will initially optimistically think their DLCIs are up and working, and the routing protocol and traffic will come up... but both of them will be waiting for the frame switch to send them LMI indicating that their idea of the DLCI up/down status is correct. When a couple minutes go by and they don't hear the responses to their LMI enquiries, they will bring all the DLCI's down. I thought they would then stay down forever, i.e., not flap, but maybe you are shutting / no shutting the POS circuit to try again. Anyway, I believe the very simple fix is interface POS0/0/0 frame-relay intf-type dce So this will turn your Cisco side of the circuit into "DCE" mode, and if the Juniper side stays in "DTE" mode (the default, so probably not listed in the config), then the LMI should start behaving between the two. And yes, as Jay Hennigan suggested, you might need to use "encap frame-relay ietf" to be compatible with non-Cisco gear, or you might need to adjust the frame-relay lmi-type -- one type sends the LMI on DLCI number 0, one of them on DLCI 1023, whatever. I think you'll need to adjust the two ends until you see LMI enquiries both sent and received; right now the "show interface" from the Cisco side shows it has not received any LMI enq yet. Good luck, and I hope it's that simple. :-)

3 3

128.0.0.0/16 configured as martians in some routers
by Alex Le Heux 08 Dec '11

08 Dec '11

Dear Colleagues, The RIPE NCC is aware that 128.0.0.0/16 is configured as a martian by default in (some) Juniper OS, even though RFC 5735 and RFC3330 outline that this /16 should no longer be reserved as specialised address space. All allocations that were already issued have been exchanged and for now we will hold this space in quarantine. We urge everyone to change the default behaviour of their Juniper routers: set routing-options martians 128.0.0.0/16 orlonger allow set routing-options martians 191.255.0.0/16 orlonger allow set routing-options martians 223.255.255.0/24 exact allow 128.0.0.0/16 has been added to the RIPE NCC's Debogonising Project: http://www.ris.ripe.net/debogon/ To facilitate testing, the following prefixes are being announced: prefix pinagble address 128.0.0.0/16 128.0.0.1 128.0.8.0/21 128.0.8.1 128.0.24.0/24 128.0.24.1 Best regards, Alex Le Heux Policy Implementation Co-ordinator RIPE NCC

11 14

[fyodor@insecure.org: C|Net Download.Com is now bundling Nmap with malware!]
by bmanning＠vacation.karoshi.com 08 Dec '11

08 Dec '11

With permission.... ----- Forwarded message from Fyodor <fyodor(a)insecure.org> ----- Date: Mon, 5 Dec 2011 14:35:30 -0800 Hi Folks. I've just discovered that C|Net's Download.Com site has started wrapping their Nmap downloads (as well as other free software like VLC) in a trojan installer which does things like installing a sketchy "StartNow" toolbar, changing the user's default search engine to Microsoft Bing, and changing their home page to Microsoft's MSN. The way it works is that C|Net's download page (screenshot attached) offers what they claim to be Nmap's Windows installer. They even provide the correct file size for our official installer. But users actually get a Cnet-created trojan installer. That program does the dirty work before downloading and executing Nmap's real installer. Of course the problem is that users often just click through installer screens, trusting that download.com gave them the real installer and knowing that the Nmap project wouldn't put malicious code in our installer. Then the next time the user opens their browser, they find that their computer is hosed with crappy toolbars, Bing searches, Microsoft as their home page, and whatever other shenanigans the software performs! The worst thing is that users will think we (Nmap Project) did this to them! I took and attached a screen shot of the C|Net trojan Nmap installer in action. Note how they use our registered "Nmap" trademark in big letters right above the malware "special offer" as if we somehow endorsed or allowed this. Of course they also violated our trademark by claiming this download is an Nmap installer when we have nothing to do with the proprietary trojan installer. In addition to the deception and trademark violation, and potential violation of the Computer Fraud and Abuse Act, this clearly violates Nmap's copyright. This is exactly why Nmap isn't under the plain GPL. Our license (http://nmap.org/book/man-legal.html) specifically adds a clause forbidding software which "integrates/includes/aggregates Nmap into a proprietary executable installer" unless that software itself conforms to various GPL requirements (this proprietary C|Net download.com software and the toolbar don't). We've long known that malicious parties might try to distribute a trojan Nmap installer, but we never thought it would be C|Net's Download.com, which is owned by CBS! And we never thought Microsoft would be sponsoring this activity! It is worth noting that C|Net's exact schemes vary. Here is a story about their shenanigans: http://www.extremetech.com/computing/93504-download-com-wraps-downloads-in-… It is interesting to compare the trojaned VLC screenshot in that article with the Nmap one I've attached. In that case, the user just clicks "Next step" to have their machine infected. And they wrote "SAFE, TRUSTED, AND SPYWARE FREE" in the trojan-VLC title bar. It is telling that they decided to remove that statement in their newer trojan installer. In fact, if we UPX-unpack the Trojan CNet executable and send it to VirusTotal.com, it is detected as malware by Panda, McAfee, F-Secure, etc: http://bit.ly/cnet-nmap-vt According to Download.com's own stats, hundreds of people download the trojan Nmap installer every week! So the first order of business is to notify the community so that nobody else falls for this scheme. Please help spread the word. Of course the next step is to go after C|Net until they stop doing this for ALL of the software they distribute. So far, the most they have offered is: "If you would like to opt out of the Download.com Installer you can submit a request to cnet-installer(a)cbsinteractive.com. All opt-out requests are carefully reviewed on a case-by-case basis." In other words, "we'll violate your trademarks and copyright and squandering your goodwill until you tell us to stop, and then we'll consider your request 'on a case-by-case basis' depending on how much money we make from infecting your users and how scary your legal threat is. F*ck them! If anyone knows a great copyright attorney in the U.S., please send me the details or ask them to get in touch with me. Also, shame on Microsoft for paying C|Net to trojan open source software! Cheers, Fyodor ----- End forwarded message -----

23 40