- NANOG - lists.nanog.org

SaidCom disconnected by Level 3 (former Telcove property)
by Frank Bulk 19 Mar '07

19 Mar '07

http://www.phillyburbs.com/pb-dyn/articlePrint.cfm?id=1310151 Is this a normal thing for Level 3 to do, cut off small, responsive providers? Frank

20 23

Windows based DDNS gslb tracker/updater product
by Joe Maimon 19 Mar '07

19 Mar '07

Hey all, I am looking for a product I have seen in the past but dont recall its name or anyother information other than - it was windows based - it tracked which services were up on which ip address with rules/policies - it performed DDNS updates based on tracking results. With the obvious goal of performing DNS/GSLB without utilizing any specialty hardware. I understand I can write all kinds of scripts -- but this is for a customer, whom for obvious reasons would prefer something "productized". Replies off-list welcome and I will summarize any usefull information. Thanks in advance, Joe

2 1

multiple-choice question of the day
by Randy Bush 19 Mar '07

19 Mar '07

No transition plan Declared victory before the hard part even started No real long term plan No realistic estimation of costs No real support for the folk on the front lines Victory will be next month Describes: a - The war in Iraq b - DNSsec c - IPv6 d - All of the above

6 6

Possibly OT, definately humor. rDNS is to policy set by federal law.
by Matthew Sullivan 17 Mar '07

17 Mar '07

Could be considered off-topic because it is humor. I guess a lot of US network operators are going to have to change their DNS entries because apparently the rDNS policies are now set by federal law..... http://www.au.sorbs.net/~matthew/funny/rDNS-set-by-federal-law.txt Regards, Mat

9 13

Drone Armies C&C Report - 17 Mar 2007
by c2report＠isotf.org 17 Mar '07

17 Mar '07

This is a periodic public report from the ISOTF's affiliated group 'DA' (Drone Armies (botnets) research and mitigation mailing list / TISF DA) with the ISOTF affiliated ASreport project (TISF / RatOut). For this report it should be noted that we base our analysis on the data we have accumulated from various sources, which may be incomplete. Any responsible party that wishes to receive reports of botnet command and control servers on their network(s) regularly and directly, feel free to contact us. For purposes of this report we use the following terms open the host completed the TCP handshake closed No activity detected reset issued a RST This month's survey is of 5188 unique, domains (or IPs) with port suspect C&Cs. This list is extracted from the BBL which has a historical base of 16080 reported C&Cs. Of the suspect C&Cs surveyed, 774 reported as Open, 1577 reported as closed, and 801 issued resets to the survey instrument. Of the C&Cs listed by domain name in the our C&C database, 7799 are mitigated. Top 20 ASNes by Total suspect domains mapping to a host in the ASN. These numbers are determined by counting the number of domains which resolve to a host in the ASN. We do not remove duplicates and some of the ASNs reported have many domains mapping to a single IP. Note the Percent_resolved figure is calculated using only the Total and Open counts and does not represent a mitigation effectiveness metric. Percent_ ASN Responsible Party Total Open Resolved 19318 NJIIX-AS-1 - NEW JERSEY INTERN 134 14 90 13301 UNITEDCOLO-AS Autonomous System of 86 24 72 23522 CIT-FOONET 69 44 36 4766 KIXS-AS-KR 60 15 75 30058 FDCSE FDCservers.net LLC 47 11 77 7132 SBC Internet Services 45 9 80 174 Cogent Communications 45 41 9 8560 SCHLUND-AS 41 8 80 13213 UK2NET-AS UK-2 Ltd Autonomous Syste 40 2 95 25761 STAMIN-2 Staminus Communications 38 23 39 14779 INKT Inktomi Corporation 36 0 100 14780 INKT Inktomi Corporation 35 0 100 9318 HANARO-AS 34 4 88 3561 Savvis 32 6 81 33597 InfoRelay Online Systems, Inc. 31 0 100 24989 IXEUROPE-DE-FRANKFURT-ASN IX Europe 30 11 63 12832 Lycos Europe 29 4 86 4134 CHINANET-BACKBONE 29 8 72 25973 Mzima Networks, Inc. 28 27 4 24611 AS24611 Datacenter Luxembourg S.A. 26 0 100 Top 20 ASNes by number of active suspect C&Cs. These counts are determined by the number of suspect domains or IPs located within the ASN completed a connection request. Percent_ ASN Responsible Party Total Open Resolved 23522 CIT-FOONET 69 44 36 174 Cogent Communications 45 41 9 25973 Mzima Networks, Inc. 28 27 4 13301 UNITEDCOLO-AS Autonomous System of 86 24 72 25761 STAMIN-2 Staminus Communications 38 23 39 30506 Blacksun Technologies 18 18 0 4766 KIXS-AS-KR 60 15 75 19318 NJIIX-AS-1 - NEW JERSEY INTERN 134 14 90 30058 FDCSE FDCservers.net LLC 47 11 77 1257 TELE2 AB 18 11 39 24989 IXEUROPE-DE-FRANKFURT-ASN IX Europe 30 11 63 4837 CHINA169-Backbone 26 11 58 6140 ImpSat 11 10 9 29686 PROBENETWORKS-AS Probe Networks 10 10 0 29339 MBBG-AS Markus Bach Betriebs Gesell 10 10 0 7132 SBC Internet Services 45 9 80 15083 IIS-129 Infolink Information Servic 21 9 57 8560 SCHLUND-AS 41 8 80 3786 ERX-DACOMNET 26 8 69 4134 CHINANET-BACKBONE 29 8 72 A version of this report with addition rankings can be found via the isotf.org home page. Randal Vaughn Gadi Evron Professor ge at linuxbox.org Baylor University Waco, TX (254) 710 4756 randy_vaughn at baylor.edu

1 0

RE: SaidCom disconnected by Level 3 (former Telcove property)
by Frank Bulk 17 Mar '07

17 Mar '07

I've been working at a smaller ISP (~4000 subs, plus businesses), and not one has asked me if I'm multi-homed. When we or our upstream provider have a problem the telephones light up and people act as if it's a problem, but the reality is that they're not communicating it, up front, as a business requirement. Frank -----Original Message----- Sent: Friday, March 16, 2007 8:54 PM To: nanog(a)merit.edu Subject: Re: SaidCom disconnected by Level 3 (former Telcove property) Almost ALL? Any company, or any person for that matter, that relies on their Internet connectivity for their lively hood should be multihomed. -wil On Mar 16, 2007, at 4:42 PM, Mike Hammett wrote: > Almost ALL providers should be multihomed. > > --Mike > > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of > virendra rode // > Sent: Thursday, March 15, 2007 11:26 AM > To: NANOG > Subject: Re: SaidCom disconnected by Level 3 (former Telcove property) > > > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Frank Bulk wrote: >> http://www.phillyburbs.com/pb-dyn/articlePrint.cfm?id=1310151 >> >> Is this a normal thing for Level 3 to do, cut off small, responsive >> providers? >> >> Frank > - ------------------------ > Just curious, should "small responsive providers" should be multi- > homed? > > > > regards, > /virendra > > > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.2.2 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iD8DBQFF+XOApbZvCIJx1bcRAtkwAJ9vNak3F8FlCf9VDycf6IlAr445nACg59kB > w2OWAGdchd2XQyxxgZWQaug= > =Yb1+ > -----END PGP SIGNATURE----- > >

1 0

Global Crossing Contact?
by Koch, Christian 16 Mar '07

16 Mar '07

Anyone from GBLX Peering? Contact me off list if so, thank you..semi-urgent matter -Christian

1 1

Weekly Routing Table Report
by Routing Analysis Role Account 16 Mar '07

16 Mar '07

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 17 Mar, 2007 Analysis Summary ---------------- BGP routing table entries examined: 215817 Prefixes after maximum aggregation: 115556 Deaggregation factor: 1.87 Unique aggregates announced to Internet: 104950 Total ASes present in the Internet Routing Table: 24639 Origin-only ASes present in the Internet Routing Table: 21439 Origin ASes announcing only one prefix: 10359 Transit ASes present in the Internet Routing Table: 3200 Transit-only ASes present in the Internet Routing Table: 71 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 29 Max AS path prepend of ASN (31269) 23 Prefixes from unregistered ASNs in the Routing Table: 4 Unregistered ASNs in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1688675212 Equivalent to 100 /8s, 167 /16s and 35 /24s Percentage of available address space announced: 45.6 Percentage of allocated address space announced: 62.6 Percentage of available address space allocated: 72.8 Total number of prefixes smaller than registry allocations: 112245 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 49398 Total APNIC prefixes after maximum aggregation: 19932 APNIC Deaggregation factor: 2.48 Prefixes being announced from the APNIC address blocks: 46476 Unique aggregates announced from the APNIC address blocks: 20919 APNIC Region origin ASes present in the Internet Routing Table: 2896 APNIC Region origin ASes announcing only one prefix: 780 APNIC Region transit ASes present in the Internet Routing Table: 432 Average APNIC Region AS path length visible: 3.7 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 287310976 Equivalent to 17 /8s, 32 /16s and 4 /24s Percentage of available APNIC address space announced: 71.2 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 116/6, 120/6, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 105063 Total ARIN prefixes after maximum aggregation: 61530 ARIN Deaggregation factor: 1.71 Prefixes being announced from the ARIN address blocks: 77083 Unique aggregates announced from the ARIN address blocks: 29859 ARIN Region origin ASes present in the Internet Routing Table: 11405 ARIN Region origin ASes announcing only one prefix: 4374 ARIN Region transit ASes present in the Internet Routing Table: 1044 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 21 Number of ARIN addresses announced to Internet: 320763008 Equivalent to 19 /8s, 30 /16s and 116 /24s Percentage of available ARIN address space announced: 70.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 96/6, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 44473 Total RIPE prefixes after maximum aggregation: 29021 RIPE Deaggregation factor: 1.53 Prefixes being announced from the RIPE address blocks: 41144 Unique aggregates announced from the RIPE address blocks: 27331 RIPE Region origin ASes present in the Internet Routing Table: 9307 RIPE Region origin ASes announcing only one prefix: 4890 RIPE Region transit ASes present in the Internet Routing Table: 1519 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 29 Number of RIPE addresses announced to Internet: 294731652 Equivalent to 17 /8s, 145 /16s and 63 /24s Percentage of available RIPE address space announced: 79.9 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-43007 RIPE Address Blocks 62/8, 77/8, 78/7, 80/5, 88/6, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 14306 Total LACNIC prefixes after maximum aggregation: 4096 LACNIC Deaggregation factor: 3.49 Prefixes being announced from the LACNIC address blocks: 12343 Unique aggregates announced from the LACNIC address blocks: 7123 LACNIC Region origin ASes present in the Internet Routing Table: 775 LACNIC Region origin ASes announcing only one prefix: 254 LACNIC Region transit ASes present in the Internet Routing Table: 136 Average LACNIC Region AS path length visible: 4.2 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 38253056 Equivalent to 2 /8s, 71 /16s and 178 /24s Percentage of available LACNIC address space announced: 57.0 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2573 Total AfriNIC prefixes after maximum aggregation: 975 AfriNIC Deaggregation factor: 2.64 Prefixes being announced from the AfriNIC address blocks: 1876 Unique aggregates announced from the AfriNIC address blocks: 1157 AfriNIC Region origin ASes present in the Internet Routing Table: 184 AfriNIC Region origin ASes announcing only one prefix: 60 AfriNIC Region transit ASes present in the Internet Routing Table: 35 Average AfriNIC Region AS path length visible: 3.6 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 5430272 Equivalent to 0 /8s, 82 /16s and 220 /24s Percentage of available AfriNIC address space announced: 16.2 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1285 9138 280 CHINANET-BACKBONE 4755 1142 383 76 Videsh Sanchar Nigam Ltd. Aut 9583 1086 78 366 Sify Limited 9498 968 468 70 BHARTI BT INTERNET LTD. 23577 784 35 713 Korea Telecom (ATM-MPLS) 4766 776 4943 311 Korea Telecom (KIX) 17488 612 40 28 Hathway IP Over Cable Interne 7545 595 142 75 TPG Internet Pty Ltd 1221 578 1957 452 Telstra Pty Ltd 18101 542 116 26 Reliance Infocom Ltd Internet 17676 503 10935 65 Softbank BB Corp. 4668 454 68 10 LG-EDS Systems Inc. 9443 454 111 74 Primus Telecommunications 4812 446 786 71 China Telecom (Shanghai) 7474 381 216 260 SingTel Optus Pty Ltd 4802 360 86 149 Wantree Development 17557 349 34 171 Pakistan Telecom 4837 341 4388 152 chinanet IDC center beijing n 2907 337 1733 310 SINET Japan 17974 337 129 14 PT TELEKOMUNIKASI INDONESIA ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1504 6128 980 AT&T WorldNet Services 4323 1332 1005 352 Time Warner Telecom 6478 1133 433 188 AT&T Worldnet Services 2386 1096 566 738 AT&T Data Communications Serv 6197 1032 675 499 BellSouth Network Solutions, 11492 1005 101 17 Cable One 18566 997 288 9 Covad Communications 174 942 6792 865 Cogent Communications 701 938 6692 739 UUNET Technologies, Inc. 1239 823 2716 575 Sprint 20115 819 710 419 Charter Communications 7011 775 226 463 Citizens Utilities 19262 740 2601 172 Verizon Global Networks 22773 734 1872 41 Cox Communications, Inc. 209 716 3732 568 Qwest 721 618 21756 274 DLA Systems Automation Center 852 592 1088 379 Telus Advanced Communications 5668 579 160 16 CenturyTel Internet Holdings, 19916 568 49 54 OLM LLC 855 567 250 71 Canadian Research Network RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 520 1878 413 UUNET - Commercial IP service 24863 335 46 28 LINKdotNET AS number 3301 313 1200 292 TeliaNet Sweden 3320 299 4994 250 Deutsche Telekom AG 8220 272 469 262 COLT Telecommunications 6746 269 95 248 Dynamic Network Technologies, 680 257 2044 251 DFN-IP service G-WiN 5416 254 16 12 BATELCO-BH 3215 235 2208 96 France Telecom Transpac 8708 235 284 228 Romania Data Systems S.A. 1257 222 1180 169 SWIPnet Swedish IP Network 3269 217 2519 75 TELECOM ITALIA 8551 206 196 30 Bezeq International 3246 205 355 195 Song Networks 30890 205 17 95 SC Kappa Invexim SRL 20858 198 34 3 EgyNet 3352 191 1795 36 Ibernet, Internet Access Netw 3300 185 171 90 AUCS Communications Services 12479 182 578 6 Uni2 Autonomous System 786 173 1795 173 The JANET IP Service LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1074 2024 209 UniNet S.A. de C.V. 11830 482 299 19 Instituto Costarricense de El 11172 350 108 84 Servicios Alestra S.A de C.V 16814 329 20 8 NSS, S.A. 22047 307 206 11 VTR PUNTO NET S.A. 6471 256 74 30 ENTEL CHILE S.A. 7303 256 142 23 Telecom Argentina Stet-France 14117 239 16 13 Telefonica del Sur S.A. 11556 237 128 4 Cable-Wireless Panama 6147 229 180 24 Telefonica Del Peru 6503 208 171 81 AVANTEL, S.A. 10481 181 72 8 Prima S.A. 20299 174 25 23 NEWCOM AMERICAS 21826 162 29 58 INTERCABLE 7910 154 11 33 ANDINET ON LINE 23216 154 19 42 RAMtelecom Telecomunicaciones 10620 150 45 19 TVCABLE BOGOTA 19429 146 91 37 E.T.B. 18822 145 9 10 TELEFONICA MANQUEHUE 14522 144 22 5 SatNet S.A. AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 291 868 232 The Internet Solution 8452 220 60 6 TEDATA 15475 162 84 4 Nile Online 6713 143 135 11 Itissalat Al-MAGHRIB 2018 138 309 113 Tertiary Education Network 5536 123 8 15 Internet Egypt Network 33783 111 6 5 EEPAD TISP TELECOM & INTERNET 24835 86 48 6 RAYA Telecom - Egypt 2905 85 176 74 The Internetworking Company o 2561 64 6 2 Egyptian Universities Network 15706 55 12 4 Sudatel Internet Exchange Aut 23889 49 16 13 MAURITIUS TELECOM 5713 44 294 34 Telkom SA Ltd 33774 41 12 22 AS Number for Telecom Algeria 16637 33 21 25 Johnnic e-Ventures 33766 33 2 1 Nyala Communications Pty Ltd 8524 30 2 6 AUCEGYPT Autonomous System 12455 27 6 3 Jambonet Autonomous system 21280 27 4 4 Swift Global Kenya Ltd.Is an 33776 27 2 5 Starcomms Nigeria Limited Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4755 1142 1066 Videsh Sanchar Nigam Ltd. Aut 4134 1285 1005 CHINANET-BACKBONE 11492 1005 988 Cable One 18566 997 988 Covad Communications 4323 1332 980 Time Warner Telecom 6478 1133 945 AT&T Worldnet Services 9498 968 898 BHARTI BT INTERNET LTD. 8151 1074 865 UniNet S.A. de C.V. 9583 1086 720 Sify Limited 22773 734 693 Cox Communications, Inc. 17488 612 584 Hathway IP Over Cable Interne 19262 740 568 Verizon Global Networks 5668 579 563 CenturyTel Internet Holdings, 6197 1032 533 BellSouth Network Solutions, 7545 595 520 TPG Internet Pty Ltd 18101 542 516 Reliance Infocom Ltd Internet 19916 568 514 OLM LLC 855 567 496 Canadian Research Network 7029 559 480 Alltel Information Services, 15270 514 480 PaeTec.net -a division of Pae List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65332 PRIVATE 63.166.106.192/27 1803 SPRINT 64515 PRIVATE 195.47.27.0/24 6721 The Terminal Bar: In 24410 UNALLOCATED 203.119.28.0/24 4134 CHINANET-BACKBONE 22895 UNALLOCATED 216.174.38.0/24 19094 Adelphia Business So Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 7.1.1.0/24 1239 Sprint 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 172.33.1.0/24 7018 AT&T WorldNet Services 180.190.0.0/16 24003 JUBILANT ORGANOSYS LTD., INDI 192.0.10.0/24 9498 BHARTI BT INTERNET LTD. 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.153.136.0/21 721 DLA Systems Automation Center 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:9 /10:12 /11:33 /12:119 /13:229 /14:438 /15:839 /16:9307 /17:3792 /18:6216 /19:13331 /20:14973 /21:13545 /22:17496 /23:18863 /24:114292 /25:769 /26:801 /27:483 /28:69 /29:43 /30:98 /31:0 /32:41 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6478 1089 1133 AT&T Worldnet Services 11492 991 1005 Cable One 18566 979 997 Covad Communications 9583 927 1086 Sify Limited 7018 821 1504 AT&T WorldNet Services 2386 818 1096 AT&T Data Communications Serv 6197 800 1032 BellSouth Network Solutions, 23577 770 784 Korea Telecom (ATM-MPLS) 7011 676 775 Citizens Utilities 9498 637 968 BHARTI BT INTERNET LTD. 4766 584 776 Korea Telecom (KIX) 19916 563 568 OLM LLC 4755 546 1142 Videsh Sanchar Nigam Ltd. Aut 4323 531 1332 Time Warner Telecom 15270 482 514 PaeTec.net -a division of Pae 855 465 567 Canadian Research Network 18101 465 542 Reliance Infocom Ltd Internet 5668 450 579 CenturyTel Internet Holdings, 4668 445 454 LG-EDS Systems Inc. 17488 434 612 Hathway IP Over Cable Interne Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 7:1 8:65 9:1 12:1802 15:19 16:3 17:3 18:8 20:35 24:919 25:1 32:53 38:288 40:56 41:105 44:2 47:4 52:4 55:1 56:3 57:25 58:361 59:352 60:223 61:903 62:1034 63:1950 64:3070 65:2317 66:3161 67:760 68:664 69:1780 70:491 71:103 72:1231 73:1 74:292 75:87 76:12 77:98 80:847 81:780 82:651 83:363 84:508 85:729 86:422 87:481 88:245 89:837 90:18 91:222 97:1 116:1 117:1 118:1 119:1 120:1 121:149 122:521 123:57 124:762 125:918 128:271 129:223 130:119 131:347 132:51 133:10 134:188 135:37 136:181 137:86 138:194 139:56 140:480 141:142 142:373 143:210 144:274 145:43 146:321 147:145 148:386 149:187 150:114 151:120 152:94 153:118 154:5 155:247 156:155 157:176 158:162 159:153 160:104 161:90 162:236 163:174 164:449 165:384 166:245 167:281 168:520 169:119 170:390 171:15 172:1 189:240 190:463 192:5733 193:3734 194:2996 195:2188 196:918 198:3746 199:3280 200:4595 201:978 202:7215 203:7378 204:3982 205:2072 206:2444 207:2903 208:2557 209:3583 210:2389 211:922 212:1317 213:1425 214:407 215:39 216:3984 217:1167 218:351 219:274 220:878 221:374 222:271 End of report Report Website: http://thyme.apnic.net

1 0

Qwest outage?
by J. Oquendo 16 Mar '07

16 Mar '07

Anyone know what is going on with Qwest? I have issues reaching a particular block that began at about 3:30am(ish). traceroute 65.115.xxx.xxx traceroute to 65.115.xxx.xxx (65.115.xxx.xxx), 30 hops max, 38 byte packets 1 pwwr1.edge.xxx.xxx.xxx (208.51.xxx.xxx) 0.409 ms 0.423 ms 0.4 82 ms 2 so-1-3-1.585.ar1.JFK1.gblx.net (208.48.236.105) 3.479 ms 3.471 ms 3.485 m s 3 so0-0-0-2488M.ar3.jfk1.gblx.net (67.17.72.30) 3.480 ms 3.474 ms 3.485 ms 4 qwest-1.ar3.JFK1.gblx.net (208.50.13.170) 3.481 ms 2.974 ms 2.986 ms 5 * * * 20 * * * 21 * * ewr-edge-09.inet.qwest.net (205.171.17.118) 4.691 ms 22 ewr-core-01.inet.qwest.net (205.171.17.117) 4.948 ms 4.470 ms 4.485 ms 23 ewr-edge-09.inet.qwest.net (205.171.17.118) 4.473 ms 4.970 ms 4.485 ms 24 ewr-core-01.inet.qwest.net (205.171.17.117) 4.975 ms 4.973 ms 4.976 ms 25 ewr-edge-09.inet.qwest.net (205.171.17.118) 4.972 ms 4.971 ms 4.989 ms 26 ewr-core-01.inet.qwest.net (205.171.17.117) 4.973 ms 4.966 ms 4.985 ms 27 ewr-edge-09.inet.qwest.net (205.171.17.118) 4.974 ms 4.970 ms 4.985 ms 28 ewr-core-01.inet.qwest.net (205.171.17.117) 4.972 ms 4.969 ms 4.985 ms 29 ewr-edge-09.inet.qwest.net (205.171.17.118) 4.975 ms 4.968 ms 4.985 ms 30 ewr-core-01.inet.qwest.net (205.171.17.117) 5.017 ms 5.467 ms 5.486 ms $ traceroute 65.115.xxx.xxx traceroute to 65.115.xxx.xxx (65.115.xxx.xxx), 64 hops max, 40 byte packets 1 198.66.92.81 (198.66.xxx.xxx) 1.293 ms 0.565 ms 0.235 ms 2 65.106.223.89.ptr.us.xo.net (65.106.223.89) 4.854 ms 4.033 ms 4.608 ms 3 ge5-0-0.mar1.houston-tx.us.xo.net (207.88.82.49) 4.979 ms 3.810 ms 2.358 ms 4 p5-1-0-2.rar1.dallas-tx.us.xo.net (65.106.4.157) 9.355 ms 8.596 ms 8.359 ms 5 p0-0.ir1.dallas2-tx.us.xo.net (65.106.4.182) 8.979 ms 7.627 ms 7.980 ms 6 206.111.5.50.ptr.us.xo.net (206.111.5.50) 7.854 ms 7.629 ms 6.857 ms 7 dal-core-02.inet.qwest.net (205.171.225.54) 7.978 ms 7.775 ms 8.480 ms 8 * * * 9 * * * 10 * * ewr-core-01.inet.qwest.net (205.171.17.117) 48.716 ms 11 ewr-edge-09.inet.qwest.net (205.171.17.118) 49.358 ms 49.895 ms 49.958 ms 12 ewr-core-01.inet.qwest.net (205.171.17.117) 50.959 ms 49.940 ms 49.209 ms 13 ewr-edge-09.inet.qwest.net (205.171.17.118) 48.959 ms 50.217 ms 49.832 ms 14 ewr-core-01.inet.qwest.net (205.171.17.117) 49.956 ms 49.699 ms 50.081 ms 15 ewr-edge-09.inet.qwest.net (205.171.17.118) 49.709 ms 49.212 ms 49.331 ms 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 ewr-edge-09.inet.qwest.net (205.171.17.118) 51.848 ms 51.060 ms 49.833 ms 22 ewr-core-01.inet.qwest.net (205.171.17.117) 50.331 ms 49.962 ms 50.836 ms 23 ewr-edge-09.inet.qwest.net (205.171.17.118) 50.328 ms 50.575 ms 51.956 ms 24 ewr-core-01.inet.qwest.net (205.171.17.117) 52.332 ms 50.807 ms 50.583 ms 25 ewr-edge-09.inet.qwest.net (205.171.17.118) 49.834 ms 50.581 ms 50.085 ms 26 ewr-core-01.inet.qwest.net (205.171.17.117) 50.956 ms 51.091 ms 64.203 ms 27 ewr-edge-09.inet.qwest.net (205.171.17.118) 50.834 ms 50.244 ms 50.457 ms 28 ewr-core-01.inet.qwest.net (205.171.17.117) 50.956 ms 50.827 ms 50.583 ms 29 ewr-edge-09.inet.qwest.net (205.171.17.118) 50.457 ms 50.821 ms 50.459 ms 30 ewr-core-01.inet.qwest.net (205.171.17.117) 51.082 ms 50.846 ms 50.833 ms 31 ewr-edge-09.inet.qwest.net (205.171.17.118) 50.953 ms 50.957 ms 51.335 ms 32 ewr-core-01.inet.qwest.net (205.171.17.117) 51.082 ms 51.221 ms 51.580 ms 33 ewr-edge-09.inet.qwest.net (205.171.17.118) 50.831 ms 50.832 ms 51.211 ms 34 ewr-core-01.inet.qwest.net (205.171.17.117) 51.326 ms 50.298 ms 51.454 ms 35 ewr-edge-09.inet.qwest.net (205.171.17.118) 51.207 ms 50.457 ms 50.710 ms 36 ewr-core-01.inet.qwest.net (205.171.17.117) 79.188 ms * * 37 * * * 38 * * * 39 *^C From Level3 1 ae-2-52.mp2.Boston1.Level3.net (4.68.100.33) 24 msec ae-2-54.mp2.Boston1.Level3.net (4.68.100.97) 0 msec ae-2-56.mp2.Boston1.Level3.net (4.68.100.161) 24 msec 2 so-0-0-0.bbr1.NewYork1.Level3.net (64.159.4.182) 4 msec ae-0-0.bbr2.NewYork1.Level3.net (64.159.1.42) 4 msec 4 msec 3 ge-6-0-0-53.gar4.NewYork1.Level3.net (4.68.97.69) 4 msec ge-7-0-0-52.gar4.NewYork1.Level3.net (4.68.97.37) 40 msec ge-6-0-0-51.gar4.NewYork1.Level3.net (4.68.97.5) 4 msec 4 qwest-level3-oc48.NewYork.Level3.net (4.68.110.174) 4 msec ewr-brdr-02.inet.qwest.net (205.171.1.97) [AS209 {ASN-QWEST}] 4 msec 4 msec 5 ewr-core-01.inet.qwest.net (205.171.17.125) [AS209 {ASN-QWEST}] 4 msec 36 msec 4 msec 6 ewr-edge-09.inet.qwest.net (205.171.17.118) [AS209 {ASN-QWEST}] 4 msec 4 msec 4 msec 7 ewr-core-01.inet.qwest.net (205.171.17.117) [AS209 {ASN-QWEST}] 8 msec 8 msec 4 msec 8 ewr-edge-09.inet.qwest.net (205.171.17.118) [AS209 {ASN-QWEST}] 8 msec 4 msec 4 msec 9 ewr-core-01.inet.qwest.net (205.171.17.117) [AS209 {ASN-QWEST}] 8 msec 4 msec 8 msec 10 ewr-edge-09.inet.qwest.net (205.171.17.118) [AS209 {ASN-QWEST}] 4 msec 8 msec 4 msec 11 ewr-core-01.inet.qwest.net (205.171.17.117) [AS209 {ASN-QWEST}] 8 msec 4 msec 8 msec 12 ewr-edge-09.inet.qwest.net (205.171.17.118) [AS209 {ASN-QWEST}] 4 msec * * 13 * * * 14 * * * 15 * * * 16 ewr-edge-09.inet.qwest.net (205.171.17.118) [AS209 {ASN-QWEST}] !N * * -- ==================================================== J. Oquendo http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743 sil . infiltrated @ net http://www.infiltrated.net The happiness of society is the end of government. John Adams

1 0

BGP Update Report
by cidr-report＠potaroo.net 16 Mar '07

16 Mar '07

BGP Update Report Interval: 02-Mar-07 -to- 15-Mar-07 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS7015 25174 1.5% 6.2 -- CCCH-AS2 - Comcast Cable Communications Holdings, Inc 2 - AS701 14862 0.9% 15.4 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 3 - AS9583 13600 0.8% 26.6 -- SIFY-AS-IN Sify Limited 4 - AS17557 13135 0.8% 37.0 -- PKTELECOM-AS-AP Pakistan Telecom 5 - AS721 12228 0.7% 27.9 -- DISA-ASNBLK - DoD Network Information Center 6 - AS702 12121 0.7% 17.1 -- AS702 MCI EMEA - Commercial IP service provider in Europe 7 - AS24731 11754 0.7% 279.9 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 8 - AS12654 10761 0.6% 290.8 -- RIPE-NCC-RIS-AS RIPE NCC RIS project 9 - AS20426 9897 0.6% 9897.0 -- PWC-AS - PriceWaterhouseCoopers, LLP 10 - AS8151 9559 0.6% 10.7 -- Uninet S.A. de C.V. 11 - AS24086 9392 0.6% 447.2 -- ETC-AS-VN Electric Telecommunication Company 12 - AS17974 9094 0.5% 39.9 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 13 - AS7545 8892 0.5% 15.1 -- TPG-INTERNET-AP TPG Internet Pty Ltd 14 - AS8452 8315 0.5% 30.2 -- TEDATA TEDATA 15 - AS4323 7309 0.4% 10.6 -- TWTC - Time Warner Telecom, Inc. 16 - AS17645 7290 0.4% 729.0 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 17 - AS33783 7195 0.4% 64.8 -- EEPAD 18 - AS3269 7039 0.4% 32.3 -- ASN-IBSNAZ TELECOM ITALIA 19 - AS3561 6952 0.4% 14.4 -- SAVVIS - Savvis 20 - AS7011 6946 0.4% 8.6 -- FRONTIER-AND-CITIZENS - Frontier Communications, Inc. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS20426 9897 0.6% 9897.0 -- PWC-AS - PriceWaterhouseCoopers, LLP 2 - AS3043 3397 0.2% 3397.0 -- AMPHIB-AS - Amphibian Media Corporation 3 - AS31594 1335 0.1% 1335.0 -- FORTESS-AS Fortess LLC Network 4 - AS31307 1297 0.1% 1297.0 -- YKYATIRIM YAPI KREDI YATIRIM 5 - AS39066 2257 0.1% 1128.5 -- KREDYTBANKUA-AS Kredyt Bank (Ukraine) AS 6 - AS19580 994 0.1% 994.0 -- ZONETEL - ZONE TELECOM, INC. 7 - AS33797 972 0.1% 972.0 -- APIS-NET-AS Grupa Internetowa 8 - AS34378 865 0.1% 865.0 -- RUG-AS Razguliay-UKRROS Group 9 - AS30707 1703 0.1% 851.5 -- SICOR-US-CA-IRVINE - SICOR Pharmaceuticals, Inc. 10 - AS38151 774 0.1% 774.0 -- ENUM-AS-ID APJII-RD 11 - AS17645 7290 0.4% 729.0 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 12 - AS3217 662 0.0% 662.0 -- SIMBIRSK 13 - AS11828 3096 0.2% 619.2 -- SOINET - State of Illinois/CMS 14 - AS26113 1196 0.1% 598.0 -- TNS-ASN - Triware Networld Systems 15 - AS33188 1108 0.1% 554.0 -- SCS-NETWORK-1 - Sono Corporate Suites 16 - AS15964 466 0.0% 466.0 -- CAMNET-AS 17 - AS21391 1360 0.1% 453.3 -- TDA-AS 18 - AS24086 9392 0.6% 447.2 -- ETC-AS-VN Electric Telecommunication Company 19 - AS22072 440 0.0% 440.0 -- DEFINITYHEALTH - Definity Health 20 - AS14699 4747 0.3% 431.5 -- BTCBCI - Bloomingdale Communications Inc TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 155.201.48.0/21 9897 0.5% AS20426 -- PWC-AS - PriceWaterhouseCoopers, LLP 2 - 209.140.24.0/24 3397 0.2% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 3 - 89.4.128.0/24 3363 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 4 - 89.4.131.0/24 3361 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 5 - 89.4.129.0/24 3299 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 6 - 125.162.94.0/23 2538 0.1% AS17974 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 7 - 192.6.180.0/24 2509 0.1% AS2129 -- HP-EUROPE-AS-TRADE Hewlett-Packard 8 - 58.65.1.0/24 2380 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 9 - 202.136.182.0/24 2313 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 10 - 202.136.176.0/24 2313 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 11 - 163.191.160.0/19 2194 0.1% AS11828 -- SOINET - State of Illinois/CMS 12 - 62.89.226.0/24 1832 0.1% AS20663 -- INAR-VOLOGDA-AS Autonomous System of Vologda 13 - 64.95.193.0/24 1699 0.1% AS30707 -- SICOR-US-CA-IRVINE - SICOR Pharmaceuticals, Inc. 14 - 216.85.83.0/24 1606 0.1% AS4323 -- TWTC - Time Warner Telecom, Inc. 15 - 143.81.0.0/21 1497 0.1% AS6034 -- DDN-ASNBLK - DoD Network Information Center 16 - 213.144.115.0/24 1444 0.1% AS25145 -- TEKNOTEL-AS tr.teknotel AS-Number 17 - 213.144.101.0/24 1423 0.1% AS25145 -- TEKNOTEL-AS tr.teknotel AS-Number 18 - 213.144.100.0/24 1423 0.1% AS25145 -- TEKNOTEL-AS tr.teknotel AS-Number 19 - 213.144.113.0/24 1423 0.1% AS25145 -- TEKNOTEL-AS tr.teknotel AS-Number 20 - 200.226.190.0/23 1415 0.1% AS14571 -- Internet Group do Brasil Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0