- NANOG - lists.nanog.org

BGP and ios upgrade question
by srg 03 Apr '09

03 Apr '09

Hello: A little customer has a Cisco 1841 router running ios 12.3(8r)T8. At the end of this mail is a "show version" from the router. Now, he wants to run BGP. His current ios version 12.3(8r)T8 does not support BGP. According to Cisco feature navigator, ios version 12.4(24)T (c1841-ipbasek9-mz.124-24.T.bin) can run in the 1841 and supports BGP (note that feature set is IPBASE): http://tools.cisco.com/ITDIT/CFN/Dispatch?act=feature&imageid=1321931&platf… 12.4(24)T requires 128MB DRAM and 32MB flash Remote peers will announce ONLY the default route to the 1841 My questions are: 1) It is common that a version with an IPBASE feature set supports BGP (some docs says that bgp support is included in "SP" services feature set)? 2) Will ios version 12.4(24)T run OK in the 1841? I think the response will be YES because Cisco feature navigator says that it is supported and the router has the DRAM and FLASH needed by 14.4(24)T. 3) Must the customer pay in order to download 12.4(24)T or he can download if he has a valid Cisco maintenance contract for that router? ------------------------------- show version Cisco IOS Software, 1841 Software (C1841-IPBASE-M), Version 12.3(8)T8, RELEASE OFTWARE (fc1) Technical Support:http://www.cisco.com/techsupportCopyright (c) 1986-2005 by Cisco Systems, Inc. Compiled Wed 06-Apr-05 02:17 by yiyan ROM: System Bootstrap, Version 12.3(8r)T8, RELEASE SOFTWARE (fc1) r1 uptime is 10 weeks, 5 days, 32 minutes System returned to ROM by power-on System image file is "flash:c1841-ipbase-mz.123-8.T8.bin" cisco 1841 (revision 5.0) with 118784K/12288K bytes of memory. 6 FastEthernet interfaces DRAM configuration is 64 bits wide with parity disabled. 191K bytes of NVRAM. 31360K bytes of ATA CompactFlash (Read/Write) Configuration register is 0x2102 Thanks and best regards

3 2

Register.com DNS hosting issues
by Clinton Popovich 03 Apr '09

03 Apr '09

Looks like a routing issue to their DNS servers from here. traceroute to DNS020.C.REGISTER.COM (216.21.235.20), 64 hops max, 40 byte packets 1 c28.134.nauticom.net (209.195.134.28) 0.778 ms 0.894 ms 0.829 ms 2 10.11.11.9 (10.11.11.9) 1.010 ms 0.799 ms 0.829 ms 3 c246.134.nauticom.net (209.195.134.246) 1.271 ms 1.379 ms 1.350 ms 4 207.88.183.141.ptr.us.xo.net (207.88.183.141) 84.817 ms 7.764 ms 7.699 ms 5 65.106.3.185.ptr.us.xo.net (65.106.3.185) 7.606 ms 7.634 ms 7.504 ms 6 206.111.0.54.ptr.us.xo.net (206.111.0.54) 31.458 ms 28.509 ms 20.199 ms 7 Vlan424.icore1.MLN-Miami.as6453.net (66.110.9.13) 48.740 ms 36.118 ms 36.211 ms 8 ix-6-2.icore1.MLN-Miami.as6453.net (66.110.9.54) 36.328 ms 36.851 ms 36.334 ms 9 * * * 10 blackhole.prolexic.com (209.200.132.42) 36.127 ms 36.136 ms 36.298 ms 11 * Clinton Popovich Systems Engineer Consolidated Communications -----Original Message----- From: Jeffrey Negro [mailto:jnegro@billtrust.com] Sent: Friday, April 03, 2009 3:42 PM To: Dennis Burgess - LTI Cc: nanog(a)nanog.org Subject: RE: Register.com DNS hosting issues No ETA given to me, just the stock line of "We apologize.. blah blah... as soon as possible.. blah blah." Jeffrey Negro, Network Engineer Billtrust - Improving Your Billing, Improving Your Business www.billtrust.com <http://www.billtrust.com/> 609.235.1010 x137 jnegro(a)billtrust.com <mailto:jeichmann@billtrust.com> From: Dennis Burgess - LTI [mailto:dmburgess@linktechs.net] Sent: Friday, April 03, 2009 3:39 PM To: Jeffrey Negro Subject: Re: Register.com DNS hosting issues Thanks for the update :) Guess they did not get a ETA time? ----------------------------------------------------------- Dennis Burgess, CCNA, A+, Mikrotik Certified Trainer WISPA Board Member - wispa.org <http://www.wispa.org/> Link Technologies, Inc -- Mikrotik & WISP Support Services WISPA Vendor Member Office: 314-735-0270 Website: http://www.linktechs.net <http://www.linktechs.net/> LIVE On-Line Mikrotik Training <http://www.linktechs.net/onlinetraining.asp> The information transmitted (including attachments) is covered by the Electronic Communications Privacy Act, 18 U.S.C. 2510-2521, is intended only for the person(s) or entity/entities to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient(s) is prohibited, If you received this in error, please contact the sender and delete the material from any computer. Jeffrey Negro wrote: For anyone trying to troubleshoot any strange resolution or page loading issues, Register.com is apparently having a massive DNS hosting outage that has been going on since 2 days ago, and is still continuing. I only found out because our monitoring was complaining about one single domain on and off. After speaking with register.com support, they admitted to the ongoing issue. If anyone has reported this already on the list, I apologize in advance for the repetition. Jeffrey

3 3

Register.com DNS hosting issues
by Jeffrey Negro 03 Apr '09

03 Apr '09

For anyone trying to troubleshoot any strange resolution or page loading issues, Register.com is apparently having a massive DNS hosting outage that has been going on since 2 days ago, and is still continuing. I only found out because our monitoring was complaining about one single domain on and off. After speaking with register.com support, they admitted to the ongoing issue. If anyone has reported this already on the list, I apologize in advance for the repetition. Jeffrey

2 1

Weekly Routing Table Report
by Routing Analysis Role Account 03 Apr '09

03 Apr '09

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 04 Apr, 2009 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 284279 Prefixes after maximum aggregation: 134697 Deaggregation factor: 2.11 Unique aggregates announced to Internet: 139818 Total ASes present in the Internet Routing Table: 30933 Prefixes per ASN: 9.19 Origin-only ASes present in the Internet Routing Table: 26928 Origin ASes announcing only one prefix: 13076 Transit ASes present in the Internet Routing Table: 4005 Transit-only ASes present in the Internet Routing Table: 98 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 28 Max AS path prepend of ASN (12445) 18 Prefixes from unregistered ASNs in the Routing Table: 470 Unregistered ASNs in the Routing Table: 159 Number of 32-bit ASNs allocated by the RIRs: 138 Prefixes from 32-bit ASNs in the Routing Table: 19 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 226 Number of addresses announced to Internet: 2024619360 Equivalent to 120 /8s, 173 /16s and 61 /24s Percentage of available address space announced: 54.6 Percentage of allocated address space announced: 63.9 Percentage of available address space allocated: 85.5 Percentage of address space in use by end-sites: 76.2 Total number of prefixes smaller than registry allocations: 139764 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 65840 Total APNIC prefixes after maximum aggregation: 23485 APNIC Deaggregation factor: 2.80 Prefixes being announced from the APNIC address blocks: 62608 Unique aggregates announced from the APNIC address blocks: 28689 APNIC Region origin ASes present in the Internet Routing Table: 3591 APNIC Prefixes per ASN: 17.43 APNIC Region origin ASes announcing only one prefix: 964 APNIC Region transit ASes present in the Internet Routing Table: 554 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 409929248 Equivalent to 24 /8s, 111 /16s and 6 /24s Percentage of available APNIC address space announced: 81.4 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 124467 Total ARIN prefixes after maximum aggregation: 65792 ARIN Deaggregation factor: 1.89 Prefixes being announced from the ARIN address blocks: 93786 Unique aggregates announced from the ARIN address blocks: 36438 ARIN Region origin ASes present in the Internet Routing Table: 12879 ARIN Prefixes per ASN: 7.28 ARIN Region origin ASes announcing only one prefix: 4954 ARIN Region transit ASes present in the Internet Routing Table: 1241 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 20 Number of ARIN addresses announced to Internet: 420976128 Equivalent to 25 /8s, 23 /16s and 150 /24s Percentage of available ARIN address space announced: 80.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 65066 Total RIPE prefixes after maximum aggregation: 37870 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 59653 Unique aggregates announced from the RIPE address blocks: 39647 RIPE Region origin ASes present in the Internet Routing Table: 12843 RIPE Prefixes per ASN: 4.64 RIPE Region origin ASes announcing only one prefix: 6726 RIPE Region transit ASes present in the Internet Routing Table: 1932 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 26 Number of RIPE addresses announced to Internet: 392241952 Equivalent to 23 /8s, 97 /16s and 35 /24s Percentage of available RIPE address space announced: 83.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 23658 Total LACNIC prefixes after maximum aggregation: 5819 LACNIC Deaggregation factor: 4.07 Prefixes being announced from the LACNIC address blocks: 21871 Unique aggregates announced from the LACNIC address blocks: 11884 LACNIC Region origin ASes present in the Internet Routing Table: 1087 LACNIC Prefixes per ASN: 20.12 LACNIC Region origin ASes announcing only one prefix: 345 LACNIC Region transit ASes present in the Internet Routing Table: 176 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 28 Number of LACNIC addresses announced to Internet: 62027008 Equivalent to 3 /8s, 178 /16s and 117 /24s Percentage of available LACNIC address space announced: 61.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247 plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 4817 Total AfriNIC prefixes after maximum aggregation: 1382 AfriNIC Deaggregation factor: 3.49 Prefixes being announced from the AfriNIC address blocks: 4505 Unique aggregates announced from the AfriNIC address blocks: 1345 AfriNIC Region origin ASes present in the Internet Routing Table: 289 AfriNIC Prefixes per ASN: 15.59 AfriNIC Region origin ASes announcing only one prefix: 87 AfriNIC Region transit ASes present in the Internet Routing Table: 55 Average AfriNIC Region AS path length visible: 3.9 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 10176000 Equivalent to 0 /8s, 155 /16s and 70 /24s Percentage of available AfriNIC address space announced: 30.3 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1687 6929 394 Korea Telecom (KIX) 17488 1538 121 98 Hathway IP Over Cable Interne 4755 1179 405 179 TATA Communications formerly 9583 1086 86 534 Sify Limited 4134 918 16382 367 CHINANET-BACKBONE 7545 784 164 106 TPG Internet Pty Ltd 18101 754 206 30 Reliance Infocom Ltd Internet 9498 686 297 49 BHARTI BT INTERNET LTD. 24560 680 228 176 Bharti Airtel Ltd. 9829 637 491 20 BSNL National Internet Backbo Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4315 3669 346 bellsouth.net, inc. 209 2656 4151 623 Qwest 4323 1816 1049 376 Time Warner Telecom 1785 1742 717 139 PaeTec Communications, Inc. 20115 1592 1426 725 Charter Communications 7018 1442 5895 1015 AT&T WorldNet Services 6478 1308 296 501 AT&T Worldnet Services 2386 1263 683 905 AT&T Data Communications Serv 11492 1202 192 11 Cable One 3356 1189 10978 450 Level 3 Communications, LLC Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8452 1232 188 7 TEDATA 3292 450 1764 389 TDC Tele Danmark 30890 435 86 194 SC Kappa Invexim SRL 12479 409 578 6 Uni2 Autonomous System 3320 343 7081 294 Deutsche Telekom AG 3215 340 3025 108 France Telecom Transpac 3301 340 1685 305 TeliaNet Sweden 8866 337 109 22 Bulgarian Telecommunication C 29049 322 26 3 AzerSat LLC. 8551 313 288 40 Bezeq International Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1445 2832 235 UniNet S.A. de C.V. 10620 848 193 102 TVCABLE BOGOTA 22047 607 302 14 VTR PUNTO NET S.A. 16814 594 31 10 NSS, S.A. 7303 519 264 74 Telecom Argentina Stet-France 11830 519 294 42 Instituto Costarricense de El 6471 443 96 31 ENTEL CHILE S.A. 11172 411 102 72 Servicios Alestra S.A de C.V 7738 397 794 28 Telecomunicacoes da Bahia S.A 28573 385 526 25 NET Servicos de Comunicao S.A Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 845 76 34 LINKdotNET AS number 20858 293 34 3 This AS will be used to conne 3741 272 858 232 The Internet Solution 2018 242 215 142 Tertiary Education Network 6713 159 150 15 Itissalat Al-MAGHRIB 33783 148 10 8 EEPAD TISP TELECOM & INTERNET 29571 137 15 8 Ci Telecom Autonomous system 5536 123 8 9 Internet Egypt Network 5713 113 507 65 Telkom SA Ltd 33776 109 6 3 Starcomms Nigeria Limited Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4315 3669 346 bellsouth.net, inc. 209 2656 4151 623 Qwest 4323 1816 1049 376 Time Warner Telecom 1785 1742 717 139 PaeTec Communications, Inc. 4766 1687 6929 394 Korea Telecom (KIX) 20115 1592 1426 725 Charter Communications 17488 1538 121 98 Hathway IP Over Cable Interne 8151 1445 2832 235 UniNet S.A. de C.V. 7018 1442 5895 1015 AT&T WorldNet Services 6478 1308 296 501 AT&T Worldnet Services Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 209 2656 2033 Qwest 1785 1742 1603 PaeTec Communications, Inc. 4323 1816 1440 Time Warner Telecom 17488 1538 1440 Hathway IP Over Cable Interne 4766 1687 1293 Korea Telecom (KIX) 8452 1232 1225 TEDATA 8151 1445 1210 UniNet S.A. de C.V. 11492 1202 1191 Cable One 18566 1061 1051 Covad Communications 4755 1179 1000 TATA Communications formerly Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 32326 UNALLOCATED 12.40.49.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.75.116.0/22 10796 ServiceCo LLC - Road Runner 24.246.0.0/17 7018 AT&T WorldNet Services 24.246.128.0/18 7018 AT&T WorldNet Services 41.220.16.0/20 8668 TelOne Zimbabwe P/L 41.223.112.0/22 5713 Telkom SA Ltd 41.223.188.0/24 22351 Intelsat 41.223.189.0/24 26452 Local Communications Networks 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 63.140.213.0/24 22555 Universal Talkware Corporatio Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:10 /10:20 /11:56 /12:163 /13:333 /14:590 /15:1147 /16:10411 /17:4658 /18:8021 /19:17048 /20:20269 /21:19962 /22:25500 /23:25315 /24:148796 /25:645 /26:792 /27:352 /28:119 /29:37 /30:9 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2805 4315 bellsouth.net, inc. 4766 1390 1687 Korea Telecom (KIX) 209 1358 2656 Qwest 17488 1305 1538 Hathway IP Over Cable Interne 8452 1211 1232 TEDATA 11492 1155 1202 Cable One 1785 1150 1742 PaeTec Communications, Inc. 18566 1042 1061 Covad Communications 2386 965 1263 AT&T Data Communications Serv 4323 942 1816 Time Warner Telecom Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:13 8:177 12:2207 13:3 15:19 16:3 17:4 20:35 24:1100 32:51 38:547 40:96 41:1974 43:1 44:2 47:22 52:3 55:2 56:3 57:25 58:533 59:621 60:460 61:1109 62:1075 63:2032 64:3641 65:2412 66:3605 67:1494 68:696 69:2554 70:525 71:140 72:1653 73:2 74:1474 75:171 76:310 77:836 78:547 79:311 80:969 81:824 82:527 83:412 84:613 85:1020 86:397 87:633 88:355 89:1442 90:44 91:2113 92:339 93:1129 94:1222 95:822 96:106 97:184 98:245 99:17 109:1 110:36 112:92 113:92 114:223 115:223 116:1140 117:490 118:286 119:665 120:144 121:707 122:1010 123:537 124:954 125:1304 128:222 129:227 130:129 131:415 132:74 133:9 134:188 135:39 136:241 137:153 138:147 139:77 140:421 141:101 142:391 143:327 144:332 145:44 146:373 147:150 148:519 149:235 150:143 151:200 152:150 153:137 154:11 155:269 156:170 157:299 158:129 159:273 160:280 161:134 162:275 163:149 164:478 165:533 166:277 167:361 168:680 169:162 170:476 171:38 172:10 173:260 174:163 178:1 186:8 187:59 188:9 189:325 190:2734 192:5805 193:4227 194:3324 195:2661 196:1057 198:3735 199:3319 200:5488 201:1361 202:7851 203:8093 204:3792 205:2160 206:2384 207:2804 208:3900 209:3437 210:2641 211:1095 212:1528 213:1717 214:69 215:26 216:4539 217:1259 218:361 219:414 220:1206 221:451 222:280 End of report

1 0

Nipper and Cisco configuration results
by Subba Rao 03 Apr '09

03 Apr '09

I am using Nipper for verifying my Cisco configuration. Nipper is finding the "rlogin" service that is not in the configuration. I have searched the access lists and do not see it anywhere. The explanation by Nipper about this finding, "....Telnet protocol implemented by this service...." is confusing. Here is the Nipper's output: ______________________________ Rlogin Service Settings The Rlogin service enables remote administrative access to a CLI on Cisco Router Devices. The Telnet protocol implemented by th service is simple and provides no encryption of the network communications between client and the server. This section details the Rlogin settings. Description Setting Rlogin Service Enabled Service TCP Port 513 ______________________________ I have checked a few other routers where SSH was not enabled with the same results. Can someone explain why Nipper is saying "Rlogin is enabled" when I do not see it in the configuration file? Is there something else that I need to be looking at? Thank you in advance for any help. Subba Rao

6 5

BGP Update Report
by cidr-report＠potaroo.net 03 Apr '09

03 Apr '09

BGP Update Report Interval: 02-Mar-09 -to- 02-Apr-09 (32 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9583 104066 2.4% 96.4 -- SIFY-AS-IN Sify Limited 2 - AS6629 43772 1.0% 7295.3 -- NOAA-AS - NOAA 3 - AS3130 39483 0.9% 303.7 -- RGNET-3130 RGnet/PSGnet 4 - AS9498 37206 0.9% 54.0 -- BBIL-AP BHARTI Airtel Ltd. 5 - AS4771 31946 0.7% 121.5 -- NZTELECOM Netgate 6 - AS4434 31818 0.7% 815.8 -- ERX-RADNET1-AS PT Rahajasa Media Internet 7 - AS6458 30254 0.7% 75.3 -- Telgua 8 - AS12978 28541 0.7% 158.6 -- DOGAN-ONLINE Dogan Iletisim Elektronik Servis Hizmetleri AS 9 - AS5056 28078 0.7% 242.1 -- INS-NET-2 - Iowa Network Services 10 - AS29372 27064 0.6% 304.1 -- SFR-NETWORK SFR 11 - AS5050 24782 0.6% 2478.2 -- PSC-EXT - Pittsburgh Supercomputing Center 12 - AS23966 23980 0.6% 59.8 -- LDN-AS-AP LINKdotNET Telecom Limited 13 - AS35805 23477 0.5% 73.4 -- UTG-AS United Telecom AS 14 - AS7643 22746 0.5% 20.1 -- VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 15 - AS4648 22663 0.5% 111.1 -- NZIX-2 Netgate 16 - AS17557 22333 0.5% 66.1 -- PKTELECOM-AS-AP Pakistan Telecom 17 - AS17488 21298 0.5% 14.4 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 18 - AS29049 19471 0.5% 59.0 -- DELTA-TELECOM-AS Delta Telecom LTD. 19 - AS17974 19153 0.4% 30.9 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 20 - AS7545 19000 0.4% 23.2 -- TPG-INTERNET-AP TPG Internet Pty Ltd TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6629 43772 1.0% 7295.3 -- NOAA-AS - NOAA 2 - AS19017 5078 0.1% 5078.0 -- QUALCOMM-QWBS-LV - Qualcomm, Inc. 3 - AS8225 4678 0.1% 4678.0 -- ASTELIT-MSK-AS Astelit Autonomous System 4 - AS46653 13420 0.3% 4473.3 -- FREDRIKSON---BYRON - Fredrikson & Byron, P.A. 5 - AS28194 4227 0.1% 4227.0 -- 6 - AS7717 17693 0.4% 3538.6 -- OPENIXP-AS-ID-AP OpenIXP ASN 7 - AS6312 3283 0.1% 3283.0 -- WESTWORLD-AS - WestWorld Media, LLC 8 - AS41343 5906 0.1% 2953.0 -- TRIUNFOTEL-ASN TRIUNFOTEL 9 - AS5691 10368 0.2% 2592.0 -- MITRE-AS-5 - The MITRE Corporation 10 - AS30306 10145 0.2% 2536.2 -- AfOL-Sz-AS 11 - AS5050 24782 0.6% 2478.2 -- PSC-EXT - Pittsburgh Supercomputing Center 12 - AS8755 2065 0.1% 2065.0 -- CITYLINESPB-AS CityLine-SPb Autonomous System 13 - AS30552 1981 0.1% 1981.0 -- SAINT-JOSEPHS-HOSPITAL-OF-ATLANTA - Saint Joseph's Hospital of Atlanta 14 - AS32398 14773 0.3% 1846.6 -- REALNET-ASN-1 15 - AS42291 6832 0.2% 1708.0 -- ISTRANET-AS Istranet LLC 16 - AS46328 15184 0.3% 1687.1 -- PTCNEBRASKA - PIERCE TELEPHONE COMPANY, INCORPORATED 17 - AS14223 3081 0.1% 1540.5 -- NYSDOH - New York State Department of Health 18 - AS20925 4468 0.1% 1489.3 -- RESEAU-DANZAS DANZAS Autonomous System 19 - AS30520 5756 0.1% 1439.0 -- NUANCE-SOMERVILLE - NUANCE COMMUNICATIONS, INC 20 - AS40344 1379 0.0% 1379.0 -- PROSK-1 - Pro Sky Wireless TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 72.23.246.0/24 24682 0.5% AS5050 -- PSC-EXT - Pittsburgh Supercomputing Center 2 - 121.101.184.0/24 17606 0.4% AS38785 -- BAGUSNET-AS-ID PT. BORNEO BROADBAND TECHNOLOGY AS7717 -- OPENIXP-AS-ID-AP OpenIXP ASN 3 - 192.35.129.0/24 14652 0.3% AS6629 -- NOAA-AS - NOAA 4 - 41.204.2.0/24 14602 0.3% AS32398 -- REALNET-ASN-1 5 - 192.102.88.0/24 14558 0.3% AS6629 -- NOAA-AS - NOAA 6 - 198.77.177.0/24 14550 0.3% AS6629 -- NOAA-AS - NOAA 7 - 199.45.13.0/24 13396 0.3% AS46653 -- FREDRIKSON---BYRON - Fredrikson & Byron, P.A. 8 - 222.255.51.64/26 10746 0.2% AS7643 -- VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 9 - 192.12.120.0/24 10352 0.2% AS5691 -- MITRE-AS-5 - The MITRE Corporation 10 - 210.214.222.0/24 8555 0.2% AS9583 -- SIFY-AS-IN Sify Limited 11 - 221.135.105.0/24 8528 0.2% AS9583 -- SIFY-AS-IN Sify Limited 12 - 210.214.232.0/24 8505 0.2% AS9583 -- SIFY-AS-IN Sify Limited 13 - 210.214.156.0/24 8473 0.2% AS9583 -- SIFY-AS-IN Sify Limited 14 - 210.214.177.0/24 8427 0.2% AS9583 -- SIFY-AS-IN Sify Limited 15 - 210.214.184.0/24 8377 0.2% AS9583 -- SIFY-AS-IN Sify Limited 16 - 210.214.132.0/24 8357 0.2% AS9583 -- SIFY-AS-IN Sify Limited 17 - 210.214.146.0/24 8332 0.2% AS9583 -- SIFY-AS-IN Sify Limited 18 - 210.210.127.0/24 8252 0.2% AS9583 -- SIFY-AS-IN Sify Limited 19 - 210.214.117.0/24 8238 0.2% AS9583 -- SIFY-AS-IN Sify Limited 20 - 202.92.235.0/24 7992 0.2% AS9498 -- BBIL-AP BHARTI Airtel Ltd. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 03 Apr '09

03 Apr '09

This report has been generated at Fri Apr 3 21:13:56 2009 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 28-03-09 290916 181486 29-03-09 291158 181718 29-03-09 291185 181603 30-03-09 291111 181799 31-03-09 291239 181735 01-04-09 291373 181653 02-04-09 291095 181869 03-04-09 291003 181954 AS Summary 31017 Number of ASes in routing system 13146 Number of ASes announcing only one prefix 4312 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 89615616 Largest address span announced by an AS (/32s) AS27064: DDN-ASNBLK1 - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 03Apr09 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 291170 181941 109229 37.5% All ASes AS6389 4312 361 3951 91.6% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4254 1681 2573 60.5% TWTC - tw telecom holdings, inc. AS209 2658 1159 1499 56.4% ASN-QWEST - Qwest Communications Corporation AS4766 1793 511 1282 71.5% KIXS-AS-KR Korea Telecom AS17488 1538 353 1185 77.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS22773 1020 65 955 93.6% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS8452 1232 292 940 76.3% TEDATA TEDATA AS4755 1179 278 901 76.4% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS8151 1445 563 882 61.0% Uninet S.A. de C.V. AS1785 1742 927 815 46.8% AS-PAETEC-NET - PaeTec Communications, Inc. AS19262 971 242 729 75.1% VZGNI-TRANSIT - Verizon Internet Services Inc. AS7545 806 205 601 74.6% TPG-INTERNET-AP TPG Internet Pty Ltd AS6478 1310 729 581 44.4% ATT-INTERNET3 - AT&T WorldNet Services AS855 643 78 565 87.9% CANET-ASN-4 - Bell Aliant AS11492 1202 642 560 46.6% CABLEONE - CABLE ONE, INC. AS18101 754 216 538 71.4% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS3356 1193 660 533 44.7% LEVEL3 Level 3 Communications AS2706 544 26 518 95.2% HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited AS6517 747 256 491 65.7% RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc AS22047 607 119 488 80.4% VTR BANDA ANCHA S.A. AS4808 618 164 454 73.5% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS17908 603 150 453 75.1% TCISL Tata Communications AS16814 594 143 451 75.9% NSS S.A. AS4804 494 64 430 87.0% MPX-AS Microplex PTY LTD AS24560 680 251 429 63.1% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS9443 523 95 428 81.8% INTERNETPRIMUS-AS-AP Primus Telecommunications AS7018 1442 1016 426 29.5% ATT-INTERNET4 - AT&T WorldNet Services AS17676 561 137 424 75.6% GIGAINFRA BB TECHNOLOGY Corp. AS4668 694 283 411 59.2% LGNET-AS-KR LG CNS AS7011 959 553 406 42.3% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. Total 37118 12219 24899 67.1% Top 30 total Possible Bogus Routes 24.75.116.0/22 AS10796 SCRR-10796 - Road Runner HoldCo LLC 24.245.128.0/17 AS11492 CABLEONE - CABLE ONE, INC. 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 41.220.16.0/20 AS8668 TELONE-AS TelOne Zimbabwe P/L 41.223.112.0/22 AS5713 SAIX-NET 41.223.188.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 41.223.189.0/24 AS26452 BRING-AS - BringCom, Inc. 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 64.31.32.0/19 AS11955 SCRR-11955 - Road Runner HoldCo LLC 64.31.32.0/22 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.36.0/23 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.38.0/23 AS12262 RR-CINCINNATI-ASN-01 - Road Runner HoldCo LLC 64.31.40.0/23 AS12262 RR-CINCINNATI-ASN-01 - Road Runner HoldCo LLC 64.31.42.0/23 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.44.0/23 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.46.0/24 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.48.0/22 AS11060 NEO-RR-COM - Road Runner HoldCo LLC 64.31.53.0/24 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.55.0/24 AS10796 SCRR-10796 - Road Runner HoldCo LLC 64.31.59.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.31.60.0/24 AS7017 SCRR-7015 - Road Runner HoldCo LLC 64.79.88.0/24 AS26096 LODDEN - Lodden Services 64.79.89.0/24 AS26096 LODDEN - Lodden Services 64.147.64.0/19 AS40156 THEOPT-HOU - The Optimal Link Corporation 64.186.0.0/19 AS6371 AMERICATEL - Americatel Corporation 64.186.6.0/24 AS6371 AMERICATEL - Americatel Corporation 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 68.69.160.0/20 AS6315 XMISSION - XMission, L.C. 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 70.36.64.0/20 AS6594 MCTI-1 - MICROSERV COMPUTER TECHNOLOGIES, INC. 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 95.158.0.0/18 AS35362 BEST Best ISP 95.215.220.0/22 AS48044 CHITA-ON-LINE-AS snake(a)chitaonline.ru 98.96.0.0/13 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 109.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 109.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 109.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 114.129.128.0/18 AS7477 TEREDONN-AS-AP SkyMesh Pty Ltd 114.129.160.0/19 AS7477 TEREDONN-AS-AP SkyMesh Pty Ltd 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 122.128.120.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 137.0.0.0/13 AS27064 DDN-ASNBLK1 - DoD Network Information Center 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 178.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 178.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 178.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service G-WiN 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 ORANGE-BUSINESS-SERVICES-CEEUR Orange Business Services (formerly Equant) AS for CEEUR 192.153.144.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.32.96.0/20 AS6453 GLOBEINTERNET TATA Communications 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.96.0/19 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.240.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.10.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.0.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.128.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.0.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.16.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.80.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 201.229.64.0/22 AS11816 SetarNet 202.6.176.0/20 AS24316 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.72.40.0/24 AS38205 202.72.41.0/24 AS38205 202.72.47.0/24 AS38205 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.122.120.0/21 AS17494 BTTB-AS-AP Telecom Operator & Internet Service Provider as well 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.140.160.0/24 AS4841 202.140.161.0/24 AS4841 202.140.162.0/24 AS4841 202.140.163.0/24 AS4841 202.140.164.0/24 AS4841 202.140.165.0/24 AS4841 202.140.166.0/24 AS4841 202.140.167.0/24 AS4841 202.140.168.0/24 AS4841 202.140.169.0/24 AS4841 202.140.170.0/24 AS4841 202.140.171.0/24 AS4841 202.140.172.0/24 AS4841 202.140.173.0/24 AS4841 202.140.174.0/24 AS4841 202.140.175.0/24 AS4841 202.140.180.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.181.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.140.182.0/24 AS7540 HKCIX-AS-AP HongKong Commercial Internet Exchange 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecommunications Ltd 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.154.0/23 AS9583 SIFY-AS-IN Sify Limited 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.217.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.13.141.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.143.0/24 AS7270 NET2PHONE - Net2Phone Corp. 204.13.184.0/23 AS35967 204.13.186.0/23 AS35967 204.13.186.0/24 AS35967 204.13.187.0/24 AS35967 204.19.14.0/23 AS577 BACOM - Bell Canada 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.210.145.0/24 AS11814 CYBERSURF - Cybersurf Inc. 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 207.174.0.0/16 AS13790 INTERNAP-BLK3 - Internap Network Services Corporation 207.174.131.0/24 AS30715 NETRACK - Netrack, Inc. 207.174.132.0/23 AS30715 NETRACK - Netrack, Inc. 207.174.151.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.152.0/22 AS30715 NETRACK - Netrack, Inc. 207.174.158.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.177.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.178.0/24 AS11500 PEAKPEAK - Peak to Peak Internet 207.174.182.0/24 AS29831 FONENET - FONE NET, LLC 207.174.188.0/22 AS30715 NETRACK - Netrack, Inc. 207.174.192.0/24 AS29831 FONENET - FONE NET, LLC 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 209.54.93.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 209.54.111.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.74.96.0/19 AS10912 INTERNAP-BLK - Internap Network Services Corporation 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 209.177.93.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 209.177.94.0/24 AS8088 SRTNET - SRT ENTERPRISES 209.222.5.0/24 AS26699 PSI-CT - Printing For Systems Inc 209.222.6.0/24 AS26699 PSI-CT - Printing For Systems Inc 209.236.64.0/19 AS7911 LVLT-7911 - Level 3 Communications, Inc. 209.236.96.0/19 AS7911 LVLT-7911 - Level 3 Communications, Inc. 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.67.144.0/20 AS42630 NUMEO NUMEO Internet Services 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: Nipper and Cisco configuration results
by Subba Rao 03 Apr '09

03 Apr '09

I will check this as soon as I go to work this morning. One thing I noticed was about the Nipper results is that any router where SSH was disabled/Rlogin was enabled and vice versa. I will go thru the configuration file once again. Thank you very much for checking this out! Subba Rao --- On Thu, 4/2/09, Lee <ler762(a)gmail.com> wrote: From: Lee <ler762(a)gmail.com> Subject: Re: Nipper and Cisco configuration results To: castellan2004-nsm(a)yahoo.com Cc: nanog(a)nanog.org Date: Thursday, April 2, 2009, 11:31 PM On 4/2/09, Subba Rao <castellan2004-nsm(a)yahoo.com> wrote: > I am using Nipper for verifying my Cisco configuration. Nipper is finding > the "rlogin" service that is not in the configuration. I have searched the > access lists and do not see it anywhere. The explanation by Nipper about > this finding, "....Telnet protocol implemented by this service...." is > confusing. Here is the Nipper's output: <..snip ..> > Can someone explain why Nipper is saying "Rlogin is enabled" when I do not > see it in the configuration file? Is there something else that I need to be > looking at? I played with it a bit - removing the "transport input telnet" on a vty line got me the rlogin service is enabled. Add it back & nipper says it's disabled... Do you have a "transport input telnet" on each vty? If not, does adding it fix the nipper report? Regards, Lee

1 0

RE: Nipper and Cisco configuration results
by Subba Rao 03 Apr '09

03 Apr '09

Joe, Thank you for replying. I am asking about the Nipper complaint. Why is Nipper report saying "Rlogin" is enabled when I don't see any ACL in the config? Using IOS 12.4 Cheers, Subba Rao --- On Thu, 4/2/09, Jo¢ <jbfixurpc(a)gmail.com> wrote: From: Jo¢ <jbfixurpc(a)gmail.com> Subject: RE: Nipper and Cisco configuration results To: castellan2004-nsm(a)yahoo.com, nanog(a)nanog.org Date: Thursday, April 2, 2009, 9:09 PM Subba, Sorry, perhaps I am confussed about the nature of your question? Did you have acls up for logging these attempts and they weren't logged? or are you asking for help from the Nipper portion of this as to why its reporting this item. With my logging turned up to debug I do see entries about RSHPORTATTEMPTs, but I suspect theres a lesser logging for that based on facility. At 12.3 I don't see any sort of problem with an open Rlogin/Rsh, and I have tested this on a router running a very minimal configuration. Hands out DHCP and does OSPF, but that's about it. Can you clarify your problem a bit? -Joe ________________________________ From: Subba Rao [mailto:castellan2004-nsm@yahoo.com] Sent: Thursday, April 02, 2009 8:25 PM To: nanog(a)nanog.org; Jo¢ Subject: RE: Nipper and Cisco configuration results I did not scan the routers yet with nmap. These results are from Nipper analysis. None of the access lists are showing "port 513" as Nipper is complaining about. The IOS version is 12.4 Subba Rao --- On Thu, 4/2/09, Jo¢ <jbfixurpc(a)gmail.com> wrote: From: Jo¢ <jbfixurpc(a)gmail.com> Subject: RE: Nipper and Cisco configuration results To: castellan2004-nsm(a)yahoo.com, nanog(a)nanog.org Date: Thursday, April 2, 2009, 8:18 PM What IOS version are you using? I don't see that behavior (rlogin/rsh) by default, but I'm a few revisions behind on the latest. @ 12.2 I do see from the router: RCMD-4-RSHPORTATTEMPT Attempted to connect to RSHELL from 192.168.1.52 from nmaps, but theres no response to the SYN packet of the attempting IP. I think this has been the case since w-a-y earlier versions of IOS for logging levels but not sure at which level. Looks to only be logging an attempt, no session is made, sort of like a firewall just letting you know there was an attempt. The router gets the request but it falls on deaf ears, no one home. Unless perhaps theres some other sort of flag/bit that can be presented to open that connection(extremely doubtful) I don't believe theres any way to connect. Perhaps turning down your logging will prevent your testing program from reporting a false positive? I'd snoop/sniff the traffic and see if your router is SYN/ACK-ing the request of rlogin/rsh to be sure. <sarcasm>And make sure their not to close to one another, incase their using undocumented internal wireless units as a means to complete the connection, those Cisco guys you know..</sarcasm> Regards Joe Blanchard > -----Original Message----- > From: Subba Rao [mailto:castellan2004-nsm@yahoo.com] > Sent: Thursday, April 02, 2009 6:33 PM > To: nanog(a)nanog.org > Subject: Nipper and Cisco configuration results > > I am using Nipper for verifying my Cisco configuration. > Nipper is finding the "rlogin" service that is not in the > configuration. I have searched the access lists and do not > see it anywhere. The explanation by Nipper about this > finding, "....Telnet protocol implemented by this > service...." is confusing. Here is the Nipper's output: > > ______________________________ > Rlogin Service Settings > > The Rlogin service enables remote administrative access to a > CLI on Cisco Router Devices. The Telnet protocol implemented > by th service is simple and provides no encryption of the > network communications between client and the server. This > section details the Rlogin settings. > > Description Setting > Rlogin Service Enabled > Service TCP Port 513 > ______________________________ > > I have checked a few other routers where SSH was not enabled > with the same results. > > Can someone explain why Nipper is saying "Rlogin is enabled" > when I do not see it in the configuration file? Is there > something else that I need to be looking at? > > Thank you in advance for any help. > > Subba Rao

2 1

RE: Nipper and Cisco configuration results
by Subba Rao 03 Apr '09

03 Apr '09

I did not scan the routers yet with nmap. These results are from Nipper analysis. None of the access lists are showing "port 513" as Nipper is complaining about. The IOS version is 12.4 Subba Rao --- On Thu, 4/2/09, Jo¢ <jbfixurpc(a)gmail.com> wrote: From: Jo¢ <jbfixurpc(a)gmail.com> Subject: RE: Nipper and Cisco configuration results To: castellan2004-nsm(a)yahoo.com, nanog(a)nanog.org Date: Thursday, April 2, 2009, 8:18 PM What IOS version are you using? I don't see that behavior (rlogin/rsh) by default, but I'm a few revisions behind on the latest. @ 12.2 I do see from the router: RCMD-4-RSHPORTATTEMPT Attempted to connect to RSHELL from 192.168.1.52 from nmaps, but theres no response to the SYN packet of the attempting IP. I think this has been the case since w-a-y earlier versions of IOS for logging levels but not sure at which level. Looks to only be logging an attempt, no session is made, sort of like a firewall just letting you know there was an attempt. The router gets the request but it falls on deaf ears, no one home. Unless perhaps theres some other sort of flag/bit that can be presented to open that connection(extremely doubtful) I don't believe theres any way to connect. Perhaps turning down your logging will prevent your testing program from reporting a false positive? I'd snoop/sniff the traffic and see if your router is SYN/ACK-ing the request of rlogin/rsh to be sure. <sarcasm>And make sure their not to close to one another, incase their using undocumented internal wireless units as a means to complete the connection, those Cisco guys you know..</sarcasm> Regards Joe Blanchard > -----Original Message----- > From: Subba Rao [mailto:castellan2004-nsm@yahoo.com] > Sent: Thursday, April 02, 2009 6:33 PM > To: nanog(a)nanog.org > Subject: Nipper and Cisco configuration results > > I am using Nipper for verifying my Cisco configuration. > Nipper is finding the "rlogin" service that is not in the > configuration. I have searched the access lists and do not > see it anywhere. The explanation by Nipper about this > finding, "....Telnet protocol implemented by this > service...." is confusing. Here is the Nipper's output: > > ______________________________ > Rlogin Service Settings > > The Rlogin service enables remote administrative access to a > CLI on Cisco Router Devices. The Telnet protocol implemented > by th service is simple and provides no encryption of the > network communications between client and the server. This > section details the Rlogin settings. > > Description Setting > Rlogin Service Enabled > Service TCP Port 513 > ______________________________ > > I have checked a few other routers where SSH was not enabled > with the same results. > > Can someone explain why Nipper is saying "Rlogin is enabled" > when I do not see it in the configuration file? Is there > something else that I need to be looking at? > > Thank you in advance for any help. > > Subba Rao

2 1