- NANOG - lists.nanog.org

A Few Random Thoughts...
by R.A. Hettinga 26 Jun '09

26 Jun '09

As with anonymous remailers, or any other anonymous system, the exit node of an onion-routing system is the sin-eater for the rest of the network. And, without cash settlement, you get what you pay for. :-). Cheers, RAH ------- Begin forwarded message: From: Eugen Leitl <eugen(a)leitl.org> Date: June 26, 2009 9:43:21 AM GMT-04:00 To: tt(a)postbiota.org, info(a)postbiota.org, cypherpunks(a)al-qaeda.net Subject: A Few Random Thoughts... ----- Forwarded message from Michael <cozzi(a)cozziconsulting.com> ----- From: Michael <cozzi(a)cozziconsulting.com> Date: Fri, 26 Jun 2009 08:16:00 -0400 To: or-talk(a)seul.org Subject: A Few Random Thoughts... User-Agent: Thunderbird 2.0.0.22 (Windows/20090605) Reply-To: or-talk(a)freehaven.net Hi all, As one of those lucky souls with access to almost limitless bandwidth and the skills (or stupidity) to use it, I suppose an apology is in order: I'm sorry- after reviewing what *could* be the consequences, I have to whimp out based on professional risk factors... I can't run an exit node. So I have to leave it to other folks who have a different situation to do the heavy lifting. What I *am* doing is deploying a couple of heavy iron closed relays on OC3 or better bandwidth. The first is now deployed after a lot of up and down testing, and I'll get to the second in due time. I've been watching Tor for a long time and just recently decided to get involved. The Iran situation cemented that decision. Anyhow, here are some random thoughts: On the "Who uses Tor?" section of the website, I see no mention of IT people. I've used the Tor network for many practical uses as an IT Director. These range from bypassing my own firewall to test incoming connections, to helping my legal department do research on a pending lawsuit without the opposition *knowing* we even looked at their website. Having a random and easily accessible IP to initiate connections from is a priceless testing tool. Especially when dealing with niggling routing problems. On one occasion my ISP was having routing/DNS problems, and Tor was able to find an entrance node and allow me to work even though I couldn't get to my remote servers directly. This saved my client a lot of downtime, and might have saved me the account. Also, my employer's R&D department sometimes needs to look at things they don't want anyone to know they looked at (All quite legal mind you). Quite frankly Tor is an undervalued IT tool and it's capabilities should be trumpeted loudly on the web page. You might also find IT guys like me throwing up some relays in exchange. After all- who has the bandwidth anyway? And before anyone accuses me of it, I'm not nearly stupid enough to do a port scan over Tor. Phew. One of the issues I ran into when looking into running an exit relay had to do with not only the legalities, but identifying a server vendor that was offshore from my home country and friendly to a Tor exit. In order for me to run an exit node, I have to be completely shielded. As it stands now, I can probably run an exit for instant messaging- and that's it. However, if Tor itself had a relationship with someone who rents hardware, perhaps a partnership, Tor could get the exit nodes it needs, and the server vendor could get lots of cash. From my standpoint, it doesn't matter whether I rent or colocate my hardware. So if Tor as an organization had a partnership with a few server rental whores (in multiple countries), it would simplify getting more exits. I need servers, Tor runs with little impact on my server, I could care less where my remote hardware is provisioned from. Bingo- more exits. I read back about 6 months in the or-talk list and there were a couple of suggestions inferring that *everyone* should be forced to be an exit node. I think this is a very bad idea, and hurts the security of the person trying to remain anonymous by causing an identifiable change in bandwidth usage that could infer Tor usage (Information leakage). Simply speaking, on a default Windows/Vidalia installation, outgoing Tor traffic usually looks like https traffic, but on a forced exit, now Tor is identified by relatively matched traffic on port 443 both in and out of the client's connection (Unless it's entrance node is a *nix variant). This could mean death (literal) for a political dissident who is now identified as having an in/out matching traffic pattern assuming his entrance node is on Windows. It is more likely, that a country monitoring it's citizens would miss simple https traffic. But even myself as a lowly IT director, would have alarm bells going off if https was initiating in two directions from the same machine. Alternative ports can also set off alarm bells. But given the nature of Onion Routing, two way traffic needs to be avoided in the most sensitive sensitive situations. Forcing exit nodes is a bad idea for users. It will also drive away anyone who cannot provide an exit node.... that's chasing away bandwidth as non exit relays run for the hills. Long post. Too much coffee and too much time staring at routing tables. Michael ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

BGP Update Report
by cidr-report＠potaroo.net 26 Jun '09

26 Jun '09

BGP Update Report Interval: 18-Jun-09 -to- 25-Jun-09 (8 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9198 53777 5.8% 187.4 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 2 - AS33783 11085 1.2% 75.9 -- EEPAD 3 - AS22783 9493 1.0% 1582.2 -- WEBPOWER - WebPower, Inc. 4 - AS14117 8964 1.0% 25.2 -- Telefonica del Sur S.A. 5 - AS14434 8607 0.9% 151.0 -- 6 - AS29049 8284 0.9% 26.1 -- DELTA-TELECOM-AS Delta Telecom LTD. 7 - AS47408 7741 0.8% 351.9 -- MANDARIN-AS Mandarin WIMAX Sicilia SpA 8 - AS21491 7729 0.8% 386.4 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 9 - AS30890 7642 0.8% 18.3 -- EVOLVA Evolva Telecom 10 - AS1221 7512 0.8% 13.2 -- ASN-TELSTRA Telstra Pty Ltd 11 - AS4134 7490 0.8% 7.7 -- CHINANET-BACKBONE No.31,Jin-rong Street 12 - AS1659 7378 0.8% 22.7 -- ERX-TANET-ASN1 Tiawan Academic Network (TANet) Information Center 13 - AS20115 6899 0.7% 4.1 -- CHARTER-NET-HKY-NC - Charter Communications 14 - AS2764 6231 0.7% 18.3 -- AAPT AAPT Limited 15 - AS34744 6119 0.7% 32.4 -- GVM SC GVM SISTEM 2003 SRL 16 - AS4812 5538 0.6% 6.2 -- CHINANET-SH-AP China Telecom (Group) 17 - AS30969 5029 0.5% 314.3 -- TAN-NET TransAfrica Networks 18 - AS6389 4985 0.5% 1.2 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 19 - AS35805 4881 0.5% 13.8 -- UTG-AS United Telecom AS 20 - AS3816 4766 0.5% 12.9 -- COLOMBIA TELECOMUNICACIONES S.A. ESP TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS14150 3637 0.4% 1818.5 -- PFCL2-ASN - Partnership Financial Consulting, LLC 2 - AS22783 9493 1.0% 1582.2 -- WEBPOWER - WebPower, Inc. 3 - AS46132 494 0.1% 494.0 -- MINCOM-NAM - Mincom, Inc. 4 - AS32343 429 0.1% 429.0 -- INTRINSIC-THERAPEUTICS - Intrinsic Orthopedics/Therapeutics, Inc. 5 - AS47640 807 0.1% 403.5 -- TRICOMPAS Tricomp Sp. z. o. o. 6 - AS21491 7729 0.8% 386.4 -- UTL-ON-LINE UTL On-line is RF broadband ISP in Uganda - Africa 7 - AS25546 3009 0.3% 376.1 -- BROOKLANDCOMP-AS Brookland Computer Services 8 - AS47408 7741 0.8% 351.9 -- MANDARIN-AS Mandarin WIMAX Sicilia SpA 9 - AS30183 320 0.0% 320.0 -- BASESPACE-AS - BaseSpace.net 10 - AS30969 5029 0.5% 314.3 -- TAN-NET TransAfrica Networks 11 - AS4796 269 0.0% 269.0 -- BANDUNG-NET-AS-AP Institute of Technology Bandung 12 - AS35400 1592 0.2% 265.3 -- MFIST Interregoinal Organization Network Technologies 13 - AS5050 3766 0.4% 251.1 -- PSC-EXT - Pittsburgh Supercomputing Center 14 - AS41189 241 0.0% 241.0 -- ICONCEPT-AS iConcept 15 - AS37011 1131 0.1% 226.2 -- MSTARTEL-AS 16 - AS39803 450 0.1% 225.0 -- UTI-AS SC UTI COMMUNICATIONS SYSTEMS SRL 17 - AS39773 206 0.0% 206.0 -- HOSTED-SIEMENS-COMLU Siemens Communications Group Luxembourg 18 - AS23384 412 0.0% 206.0 -- REEDTECH - Reed Technology and Information Services, Inc. 19 - AS42214 201 0.0% 201.0 -- IWC-AS SC International Work Company SRL 20 - AS9198 53777 5.8% 187.4 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 89.218.220.0/23 6325 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 2 - 89.218.218.0/23 6325 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 3 - 88.204.221.0/24 6322 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 4 - 92.46.244.0/23 6320 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 5 - 95.59.1.0/24 6320 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 6 - 95.59.8.0/23 6319 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 7 - 95.59.2.0/23 6319 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 8 - 95.59.4.0/22 6319 0.6% AS9198 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 9 - 72.23.246.0/24 3714 0.4% AS5050 -- PSC-EXT - Pittsburgh Supercomputing Center 10 - 205.246.203.0/24 3650 0.4% AS22783 -- WEBPOWER - WebPower, Inc. 11 - 63.163.66.0/24 3650 0.4% AS22783 -- WEBPOWER - WebPower, Inc. 12 - 204.11.157.0/24 3636 0.4% AS14150 -- PFCL2-ASN - Partnership Financial Consulting, LLC 13 - 193.201.184.0/21 2974 0.3% AS25546 -- BROOKLANDCOMP-AS Brookland Computer Services 14 - 65.113.90.0/24 2203 0.2% AS14434 -- 15 - 65.212.89.0/24 2190 0.2% AS22783 -- WEBPOWER - WebPower, Inc. 16 - 66.248.162.0/23 2143 0.2% AS14434 -- 17 - 65.113.106.0/24 2097 0.2% AS14434 -- 18 - 65.113.111.0/24 2097 0.2% AS14434 -- 19 - 196.27.104.0/21 2054 0.2% AS30969 -- TAN-NET TransAfrica Networks 20 - 196.27.108.0/22 2028 0.2% AS30969 -- TAN-NET TransAfrica Networks Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 26 Jun '09

26 Jun '09

This report has been generated at Fri Jun 26 21:13:59 2009 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 19-06-09 295035 183949 20-06-09 295091 184006 21-06-09 295116 184024 22-06-09 295144 183493 23-06-09 295159 183803 24-06-09 295207 183718 25-06-09 294949 183021 26-06-09 295286 183036 AS Summary 31655 Number of ASes in routing system 13441 Number of ASes announcing only one prefix 4286 Largest number of prefixes announced by an AS AS4323 : TWTC - tw telecom holdings, inc. 89737472 Largest address span announced by an AS (/32s) AS27064: DNIC-ASBLK-27032-27159 - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 26Jun09 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 295342 183033 112309 38.0% All ASes AS6389 4267 334 3933 92.2% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4286 1794 2492 58.1% TWTC - tw telecom holdings, inc. AS4766 1811 520 1291 71.3% KIXS-AS-KR Korea Telecom AS17488 1541 283 1258 81.6% HATHWAY-NET-AP Hathway IP Over Cable Internet AS1785 1695 656 1039 61.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS4755 1216 194 1022 84.0% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS22773 1065 67 998 93.7% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS8151 1459 604 855 58.6% Uninet S.A. de C.V. AS19262 1016 233 783 77.1% VZGNI-TRANSIT - Verizon Internet Services Inc. AS8452 940 263 677 72.0% TEDATA TEDATA AS18566 1062 409 653 61.5% COVAD - Covad Communications Co. AS6478 1394 750 644 46.2% ATT-INTERNET3 - AT&T WorldNet Services AS18101 751 110 641 85.4% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS17908 681 58 623 91.5% TCISL Tata Communications AS9498 638 70 568 89.0% BBIL-AP BHARTI Airtel Ltd. AS24560 720 194 526 73.1% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS7029 601 90 511 85.0% WINDSTREAM - Windstream Communications Inc AS11492 1116 621 495 44.4% CABLEONE - CABLE ONE, INC. AS2706 534 42 492 92.1% PI-HK Pacnet Internet (Hong Kong) Limited AS17676 564 80 484 85.8% GIGAINFRA Softbank BB Corp. AS4808 643 167 476 74.0% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS22047 598 123 475 79.4% VTR BANDA ANCHA S.A. AS4134 949 475 474 49.9% CHINANET-BACKBONE No.31,Jin-rong Street AS10620 918 452 466 50.8% TV Cable S.A. AS7018 1503 1043 460 30.6% ATT-INTERNET4 - AT&T WorldNet Services AS12479 449 8 441 98.2% UNI2-AS Uni2 Autonomous System AS7545 827 388 439 53.1% TPG-INTERNET-AP TPG Internet Pty Ltd AS4804 679 247 432 63.6% MPX-AS Microplex PTY LTD AS9443 521 91 430 82.5% INTERNETPRIMUS-AS-AP Primus Telecommunications AS6517 672 252 420 62.5% RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc Total 35116 10618 24498 69.8% Top 30 total Possible Bogus Routes 24.245.128.0/17 AS11492 CABLEONE - CABLE ONE, INC. 41.223.112.0/22 AS5713 SAIX-NET 41.223.176.0/22 AS36981 41.223.188.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 41.223.189.0/24 AS26452 BRING-AS - BringCom, Inc. 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 64.31.32.0/19 AS11955 SCRR-11955 - Road Runner HoldCo LLC 64.31.59.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.31.60.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.79.88.0/24 AS26096 LODDEN - Lodden Services 64.79.89.0/24 AS26096 LODDEN - Lodden Services 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.128.38.0/24 AS15246 Telecomunicaciones Satelitales TelesatS.A. 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.6.80.0/24 AS13442 69.6.81.0/24 AS13442 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 100.100.100.0/30 AS38676 AS33005-AS-KR wizsolution co.,Ltd 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.10.0/24 AS38236 121.50.13.0/24 AS38236 121.50.15.0/24 AS17625 BLAZENET-IN-AP BlazeNet's Network 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 122.128.120.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 137.0.0.0/13 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 158.222.5.0/24 AS21580 DIRCON - Direct Connect 158.222.70.0/23 AS6137 SISNA - SISNA, Inc. 158.222.72.0/23 AS6137 SISNA - SISNA, Inc. 158.222.224.0/20 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.224.0/22 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.229.0/24 AS19864 O1COMM - O1 COMMUNICATIONS 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 168.253.0.0/16 AS13649 ASN-VINS - ViaWest 168.253.0.0/21 AS13649 ASN-VINS - ViaWest 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 178.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 178.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 178.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service X-WiN 192.124.252.0/22 AS680 DFN-IP service X-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.132.58.0/24 AS20141 QUALITYTECH-SUW-300 - Quality Technology Services, LLC. 192.133.6.0/24 AS10282 ORANGE-BUSINESS-SERVICES-CEEUR Orange Business Services (formerly Equant) AS for CEEUR 192.139.3.0/24 AS23184 PERSONA - PERSONA COMMUNICATIONS INC. 192.153.144.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 193.33.148.0/23 AS30890 EVOLVA Evolva Telecom 193.104.229.0/26 AS34444 EUTELSAT-BACKBONE-AS EUTELSAT S.A. 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.73.210.0/24 AS21570 ACI-1 - Accelerated Connections Inc. 198.97.72.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.96.0/19 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.240.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.135.236.0/24 AS4358 XNET - XNet Information Systems, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.161.92.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.5.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 199.10.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.16.32.0/19 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 199.19.0.0/24 AS3848 WORLDLINX-2 - WorldLinx Telecommunications, Inc. 199.114.0.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.128.0/18 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.130.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.131.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.132.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.138.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.144.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.148.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.150.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.152.0/24 AS27033 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.153.0/24 AS27034 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.0.0/18 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.16.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.80.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.233.92.0/24 AS26896 ITCOMM - IT Communications 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.6.176.0/20 AS24316 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.84.10.0/23 AS9308 CHINA-ABITCOOL Abitcool(China) Inc. 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.92.48.0/20 AS23704 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS2764 AAPT AAPT Limited 202.124.195.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.125.112.0/24 AS23674 MBL-AS-AP Micronet Broadband (Pvt) Ltd. 202.125.113.0/24 AS9541 CYBERNET-AP Cyber Internet Services (Pvt) Ltd. 202.125.114.0/24 AS9541 CYBERNET-AP Cyber Internet Services (Pvt) Ltd. 202.125.115.0/24 AS9541 CYBERNET-AP Cyber Internet Services (Pvt) Ltd. 202.133.37.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.133.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.140.160.0/24 AS4841 202.140.161.0/24 AS4841 202.140.162.0/24 AS4841 202.140.163.0/24 AS4841 202.140.164.0/24 AS4841 202.140.165.0/24 AS4841 202.140.166.0/24 AS4841 202.140.167.0/24 AS4841 202.140.168.0/24 AS4841 202.140.169.0/24 AS4841 202.140.170.0/24 AS4841 202.140.171.0/24 AS4841 202.140.172.0/24 AS4841 202.140.173.0/24 AS4841 202.140.174.0/24 AS4841 202.140.175.0/24 AS4841 202.140.180.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.181.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.182.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.80.136.0/21 AS4759 EVOSERVE-AS-AP EvoServe is a content and online access Internet provider company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.154.0/23 AS9583 SIFY-AS-IN Sify Limited 203.189.96.0/20 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.13.140.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.141.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.142.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.143.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.184.0/23 AS35967 204.13.186.0/23 AS35967 204.13.186.0/24 AS35967 204.13.187.0/24 AS35967 204.19.14.0/23 AS577 BACOM - Bell Canada 204.89.214.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.138.167.0/24 AS18990 AIRBAND-DALLAS - Airband Communications, Inc 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.210.145.0/24 AS11814 CYBERSURF - Cybersurf Inc. 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 207.174.0.0/16 AS13790 INTERNAP-BLK3 - Internap Network Services Corporation 207.174.131.0/24 AS30715 NETRACK - Netrack, Inc. 207.174.132.0/23 AS30715 NETRACK - Netrack, Inc. 207.174.151.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.152.0/22 AS30715 NETRACK - Netrack, Inc. 207.174.158.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.177.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.178.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.182.0/24 AS29831 FONENET - FONE NET, LLC 207.174.188.0/22 AS30715 NETRACK - Netrack, Inc. 207.174.192.0/24 AS29831 FONENET - FONE NET, LLC 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.73.88.0/21 AS36835 208.77.224.0/24 AS36835 208.77.225.0/24 AS36835 208.77.226.0/24 AS36835 208.77.227.0/24 AS36835 208.77.228.0/24 AS36835 208.77.229.0/24 AS36835 208.77.230.0/24 AS36835 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.74.96.0/19 AS10912 INTERNAP-BLK - Internap Network Services Corporation 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.177.93.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.217.224.0/19 AS6130 AIS-WEST - American Internet Services, LLC. 209.222.5.0/24 AS26699 PSI-CT - Printing For Systems Inc 209.222.6.0/24 AS26699 PSI-CT - Printing For Systems Inc 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 213.181.70.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.80.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.81.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.82.0/23 AS17175 NSS-UK New Skies Satellites UK AS 213.181.82.0/24 AS17175 NSS-UK New Skies Satellites UK AS 213.181.83.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.84.0/22 AS17175 NSS-UK New Skies Satellites UK AS 213.181.84.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.85.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.86.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.87.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.88.0/21 AS17175 NSS-UK New Skies Satellites UK AS 213.181.88.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.89.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.90.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.91.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.92.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.93.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.94.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 213.181.95.0/24 AS16422 NEWSKIES-NETWORKS - New Skies Satellites, Inc. 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.83.208.0/20 AS32311 216.83.208.0/24 AS32311 216.83.209.0/24 AS32311 216.83.210.0/24 AS32311 216.83.212.0/24 AS32311 216.83.213.0/24 AS32311 216.83.218.0/24 AS32311 216.83.219.0/24 AS32311 216.83.220.0/24 AS32311 216.83.221.0/24 AS32311 216.83.222.0/24 AS32311 216.83.223.0/24 AS32311 216.99.20.0/24 AS3356 LEVEL3 Level 3 Communications 216.163.144.0/20 AS35985 ONERINGNET-ATL-1 - One Ring Networks, Inc. 216.163.152.0/22 AS7132 SBIS-AS - AT&T Internet Services 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS Gilat Satcom 217.78.72.0/24 AS12491 IPPLANET-AS Gilat Satcom 217.78.73.0/24 AS12491 IPPLANET-AS Gilat Satcom Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Fwd: Autoreply: Re: Looking for Security / Operational Contact at New York Times
by Brielle Bruns 26 Jun '09

26 Jun '09

*grumbles something about people and their !@#$% autoresponders* Is there anything that is done when this stupidity crops up? -------- Original Message -------- Subject: Out of Office AutoReply: Looking for Security / Operational Conta ct at New York Times Date: Fri, 26 Jun 2009 01:35:05 -0400 From: Gearry Judkins <GJudkins(a)fchn.org> To: Brielle Bruns <bruns(a)2mbit.com> I am out of the office until Monday, July 6th. All requests for phone, computer, or pager problems should go to helpdesk(a)fchn.org. I may check mail periodically, but all urgent matters should be routed to helpdesk(a)fchn.org or bill.colwell(a)fchn.org . -------- Original Message -------- Subject: Autoreply: Re: Looking for Security / Operational Contact at New York Times Date: Thu, 25 Jun 2009 22:31:56 -0700 From: <ddunkin(a)netos.net> To: <bruns(a)2mbit.com> I will be out of the office until July 1st. If you require immediate assistance, please call 425-376-1126 or e-mail support(a)netos.com. -- Brielle Bruns The Summit Open Source Development Group http://www.sosdg.org / http://www.ahbl.org .

2 1

softlayer: ipv6 netfow tools
by Ric Moseley 26 Jun '09

26 Jun '09

Just wondering what people were using to analyze IPv6 Netflow. I am exporting IPv6 (along with IPv4 sampled) to a server that is running flow-tools as well as to an Arbor SP system. The Cisco's I am exporting from only allow flow export of both IPv4 and IPv6 simultaneously to an IPv4 address. Arbor claims support early next year so I am looking for another solution in the meantime. Thanks. Ric Moseley VP of Engineering rmoseley(a)softlayer.com 214-442-0555 direct 972-989-7813 cell 214-442-0600 office 866-398-7638 toll-free 214-442-0601 fax 6400 International Parkway, Suite 2000 Plano, TX 75093 http://www.softlayer.com The contents of this email message and any attachments are confidential and are intended solely for the addressee. The information may also be legally privileged. This transmission is sent in trust for the sole purpose of delivery to the intended recipient. If you have received this transmission in error; any use, reproduction or dissemination of this transmission is strictly prohibited. If you are not the intended recipient, please immediately notify the sender by reply email and delete this message and all associated attachments.

2 1

tor
by Randy Bush 26 Jun '09

26 Jun '09

sadly, naively turning up tor to help folk who wish to be anonymous in hard times gets one a lot of assertive email from self-important people who wear formal clothes. folk who learn this the hard way may find a pointer passed to me by smb helpful, <http://www.chrisbrunner.com/?p=119>. randy

19 34

Tor abuse FAQs
by Steven M. Bellovin 25 Jun '09

25 Jun '09

A friend sent me these links: https://www.torproject.org/faq.html.en#ExitPolicies https://www.torproject.org/faq-abuse.html.en https://www.torproject.org/eff/tor-legal-faq.html.en https://www.torproject.org/torusers.html.en Btw -- several folks have raised the issue of Iran. Here's a blog posting that may be of interest: https://blog.torproject.org/blog/measuring-tor-and-iran (My apologies if these have already been posted -- for assorted reasons involving my email setup, I cannot easily see any NANOG posts until some time tonight EDT.)

3 3

Re: common carier
by nancyp＠yorku.ca 25 Jun '09

25 Jun '09

Rod, Sorry for the mislead on this. I agree with you. There are a lot of layer 9 reasons why this is the case. regards NP Quoting rodbeck1(a)gmail.com: > Nancy, > > You're missing the point and you're quoting out of context. > > The point is that common carrier protections should apply to ISPs since they > are essentially doing the same thing as carriers - they are shipping bits. > > The whole enhanced service distinction is flimsy. There is nothing about IP > that makes an enhanced service in any meaninful sense different It is just a > transport protocol. > > So don't confuse 'is' and 'ought'. > > I am advocating that common carrier protections should be extended to ISPs. > ---- Envoyé avec BlackBerry® d'Orange ---- > > -----Original Message----- > From: <nancyp(a)yorku.ca> > > Date: Thu, 25 Jun 2009 12:22:08 > To: Richard A Steenbergen<ras(a)e-gerbil.net> > Cc: NANOG list<nanog(a)nanog.org> > Subject: [SPAM-HEADER] - Re: tor - Email has different SMTP TO: and MIME TO: > fields in the email addresses > > > As I understand & pls correct if I am wrong: > > > There is a long established legal tradition that telecommunication > > transport is not liable for the content it transmits. It's called > > common carrier. > > Telephony = common carrier yes- considered 'basic service'under Telecom Act > 96.. > > but data is considered 'enhanced services' different section of the Act. Thus > common carrier does not apply. > > The dualism/argument began in the 2nd computer inquiry and scales right up to > [US dominated] Intl telephony settlements- ICAIS where VoIP is not settled > the > same way [$] but governed by peering/transit arrangements > > Nancy Paterson > (Reachability as a Net Neutrality Issue) > PhD student, YorkU, Toronto > > > > Quoting Richard A Steenbergen <ras(a)e-gerbil.net>: > > > On Wed, Jun 24, 2009 at 10:57:27PM +0100, Rod Beck wrote: > > > Hi Richard, > > > > > > It is a more complicated issue than that. > > > > > > There is a long established legal tradition that telecommunication > > > transport is not liable for the content it transmits. It's called > > > common carrier. If someone makes an obscene phone call, the phone > > > company cannot be held liable. Yes, if the client subsequently > > > complains and asks for that number to be blocked and the phone company > > > does nothing, that's different. > > > > > > But the general principle is that anyone who transmits bits is not > > > liable for content. > > > > > > Unfortunately in my personal view that principle never got established > > > in the Layer 3 world. > > > > This has nothing to do with telecommunications or any kind of carrier or > > business relationship. This is intentionally leaving your computer open > > so that anyone on the Internet can come along and appear to be coming > > from your IP, where they will promptly set off doing bad stuff that will > > get traced back to you rather than them. Think of it like intentionally > > leaving your car unlocked with the keys in the ignition and a note > > authorizing people to borrow it and take it for a spin, and then > > expecting not to get into any kind of trouble when they rack up speeding > > tickets and/or use it to run someone over. > > > > Besides, the kind of consequencies I'm talking about are "having your > > internet account shut off for abuse"... But if you do happen to be one > > of those unlucky people who gets sued for downloading illegal content I > > don't think "but your honor I was running tor" is the defense you're > > looking for. :) > > > > -- > > Richard A Steenbergen <ras(a)e-gerbil.net> http://www.e-gerbil.net/ras > > GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC) > > > > > > > > > > >

1 0

The Iranian proxy fight
by Marshall Eubanks 25 Jun '09

25 Jun '09

This seems to have routing relevance to me. <http://www.renesys.com/blog/2009/06/the-proxy-fight-for-iranian-de.shtml > <http://blogs.abcnews.com/theworldnewser/2009/06/irans-sophisticated-ability… > I love this quote : "don't wait until the tanks are in the streets to figure this out" Regards Marshall

1 0

Use of Default in the DFZ: banned in philly, see it now on the net!
by Randy Bush 25 Jun '09

25 Jun '09

due to nanog pc silliness, my lightning talk on $subject was not given in philly. i had promised to report to nanog the results of our winter experiment which used as path poisoning. here is the lightning talk i would have given. http://archive.psg.com/090615.nanog-default.pdf this is really meant to be a talk, so the slides can be a bit hard. on slide 6 /20 is the as path length of a /20, i.e. a 'normal' distribution, as seen from bgp monitors at RV, RIS, and a jillion others /25 is the as path length distribution we saw pinging from the /25 BGP is the as path length distribution we saw from RV/RIS i.e. BGP views are significantly skewed. but most of us knew that. on slides 10 and 11, the categories stub, small isp, large isp are from a ucla study. imiho, you should take them with a grain of salt. on 12, the reason for the funniness around 30 test points is because, we really wanted >= 30 test points in an AS. so if we got close, we scanned harder to find them. please do check your as at <http://psg.com/default/> and then actually look at your router config. i found one of my routers still had a default from when i was bringing it up. randy

9 17