- NANOG - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 08 Sep '06

08 Sep '06

This report has been generated at Fri Sep 8 21:45:01 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 01-09-06 193923 126440 02-09-06 194021 126509 03-09-06 193976 126474 04-09-06 194001 126621 05-09-06 194218 126743 06-09-06 194352 126801 07-09-06 194163 127028 08-09-06 194527 126877 AS Summary 22992 Number of ASes in routing system 9655 Number of ASes announcing only one prefix 1471 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91398144 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 08Sep06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 194400 126854 67546 34.7% All ASes AS4134 1272 269 1003 78.9% CHINANET-BACKBONE No.31,Jin-rong Street AS4755 978 69 909 92.9% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS18566 959 126 833 86.9% COVAD - Covad Communications Co. AS4323 994 292 702 70.6% TWTC - Time Warner Telecom, Inc. AS9498 849 155 694 81.7% BBIL-AP BHARTI BT INTERNET LTD. AS721 974 308 666 68.4% DISA-ASNBLK - DoD Network Information Center AS22773 697 52 645 92.5% CCINET-2 - Cox Communications Inc. AS6197 1028 487 541 52.6% BATI-ATL - BellSouth Network Solutions, Inc AS7018 1471 953 518 35.2% ATT-INTERNET4 - AT&T WorldNet Services AS19262 694 189 505 72.8% VZGNI-TRANSIT - Verizon Internet Services Inc. AS17488 529 41 488 92.2% HATHWAY-NET-AP Hathway IP Over Cable Internet AS19916 565 94 471 83.4% ASTRUM-0001 - OLM LLC AS855 553 86 467 84.4% CANET-ASN-4 - Aliant Telecom AS11492 731 287 444 60.7% CABLEONE - CABLE ONE AS17676 498 62 436 87.6% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS18101 447 23 424 94.9% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS3602 511 104 407 79.6% AS3602-RTI - Rogers Telecom Inc. AS4766 703 310 393 55.9% KIXS-AS-KR Korea Telecom AS812 416 30 386 92.8% ROGERS-CABLE - Rogers Cable Inc. AS15270 460 77 383 83.3% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS22047 454 94 360 79.3% VTR BANDA ANCHA S.A. AS4812 395 60 335 84.8% CHINANET-SH-AP China Telecom (Group) AS6467 396 61 335 84.6% ESPIRECOMM - Xspedius Communications Co. AS16852 366 53 313 85.5% FOCAL-CHICAGO - Focal Data Communications of Illinois AS16814 329 47 282 85.7% NSS S.A. AS19115 375 97 278 74.1% CHARTER-LEBANON - Charter Communications AS9583 952 678 274 28.8% SIFY-AS-IN Sify Limited AS14654 284 15 269 94.7% WAYPORT - Wayport AS17849 423 157 266 62.9% GINAMHANVIT-AS-KR hanvit ginam broadcasting comm. AS6167 369 106 263 71.3% CELLCO-PART - Cellco Partnership Total 19672 5382 14290 72.6% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.163.96.0/20 AS25767 WAVEFORM - Waveform Technology, LLC 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 72.46.192.0/20 AS12177 ETS-TELEPHONE-COMPANY - ETS TELEPHONE COMPANY, INC. 77.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 77.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 78.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 78.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 79.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 79.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 87.76.0.0/16 AS39525 SPRITELINK SpriteLink Autonomous System 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 121.1.0.0/18 AS10139 MERIDIAN-PH-AP Meridian Telekoms 121.1.32.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 121.1.34.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 121.1.48.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.128.0/17 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.128.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.129.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.131.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.132.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.133.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.134.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.135.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.136.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.138.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.139.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.140.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.141.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.142.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.143.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.144.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.145.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.147.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.148.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.149.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.150.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.151.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.152.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.153.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.154.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.155.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.156.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.158.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.159.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.160.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.161.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.162.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.163.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.164.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.165.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.166.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.167.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.168.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.169.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.170.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.176.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.177.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.178.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.179.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.180.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.181.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.183.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.184.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.185.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.186.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.187.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.188.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.189.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.190.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.191.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.192.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.198.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.199.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.201.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.202.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.203.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.204.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.205.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.206.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.209.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.210.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.211.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.212.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.213.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.214.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.215.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.216.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.217.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.218.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.219.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.220.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.221.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.222.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.223.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.224.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.229.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.230.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.231.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.232.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.233.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.234.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.235.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.237.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.238.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.239.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.240.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.241.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.243.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.244.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.245.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.246.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.248.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.249.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.250.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.60.252.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DISA-ASNBLK - DoD Network Information Center 132.0.0.0/10 AS721 DISA-ASNBLK - DoD Network Information Center 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 138.136.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 139.56.0.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.64.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.72.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.140.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.96.250.0/24 AS2018 TENET-1 192.107.104.0/24 AS6458 Telgua 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.172.0.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.35.104.0/24 AS12445 SPIDERNET-AS Selene s.p.a. 196.6.108.0/24 AS5713 SAIX-NET 196.6.175.0/24 AS3741 IS 196.6.176.0/23 AS3741 IS 196.6.183.0/24 AS3741 IS 196.6.196.0/24 AS3741 IS 196.6.199.0/24 AS3741 IS 196.6.208.0/24 AS3741 IS 196.6.211.0/24 AS3741 IS 196.6.212.0/23 AS3741 IS 196.6.212.0/24 AS3741 IS 196.6.222.0/23 AS3741 IS 196.6.237.0/24 AS3741 IS 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.136.0/22 AS3741 IS 196.10.140.0/22 AS3741 IS 196.10.231.0/24 AS3741 IS 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.11.0.0/20 AS3741 IS 196.11.40.0/21 AS3741 IS 196.11.135.0/24 AS3741 IS 196.11.188.0/23 AS3741 IS 196.11.190.0/24 AS3741 IS 196.11.251.0/24 AS3741 IS 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.108.0/24 AS3741 IS 196.13.116.0/22 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.127.0/24 AS3741 IS 196.13.128.0/22 AS3741 IS 196.13.144.0/22 AS2905 TICSA-ASN 196.13.152.0/21 AS2905 TICSA-ASN 196.13.160.0/24 AS2905 TICSA-ASN 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.13.252.0/22 AS2018 TENET-1 196.98.17.0/24 AS1257 TELE2 AB 198.18.0.0/15 AS8895 ISU-RUH KACST/ISU Riyadh Autonomous System 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.54.249.0/24 AS2018 TENET-1 198.54.250.0/24 AS2018 TENET-1 198.54.251.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.100.100.0/24 AS18734 BESTEL S.A. de C.V. 198.101.4.0/22 AS721 DISA-ASNBLK - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.199.198.0/24 AS13671 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 199.249.233.0/24 AS1239 SPRINTLINK - Sprint 199.249.234.0/24 AS1239 SPRINTLINK - Sprint 199.249.235.0/24 AS174 COGENT Cogent/PSI 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.9.224.0/19 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.224.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.225.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.226.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.227.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.228.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.230.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.232.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.233.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.236.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.237.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.238.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.240.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.241.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.242.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.243.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.251.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.252.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.65.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.94.74.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.75.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.77.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.83.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.85.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.87.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.95.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/22 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.204.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.205.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.206.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.207.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 202.137.224.0/24 AS9942 COMINDICO-AP COMindico Australia 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.182.128.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.129.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.130.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.131.0/24 AS9519 BRAENET Braenet Pty Ltd 202.182.132.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.133.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.134.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.135.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.136.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.140.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.144.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.145.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.146.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.147.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.157.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.158.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.159.0/24 AS9519 BRAENET Braenet Pty Ltd 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.84.160.0/19 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.160.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.161.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.162.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.163.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.164.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.165.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.166.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.167.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.168.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.169.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.170.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.172.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.173.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.174.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.175.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.176.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.177.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.180.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.181.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.183.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.184.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.185.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.186.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.187.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.188.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.189.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.84.191.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.128.0/17 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.128.0/18 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.128.0/19 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.128.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.128.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.129.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.130.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.131.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.132.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.133.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.134.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.135.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.136.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.137.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.138.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.139.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.140.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.141.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.142.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.143.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.144.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.145.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.146.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.147.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.148.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.149.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.151.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.152.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.153.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.154.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.155.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.158.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.159.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.160.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.160.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.161.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.162.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.163.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.164.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.165.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.166.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.168.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.170.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.171.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.174.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.176.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.177.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.178.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.179.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.180.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.181.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.182.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.183.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.184.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.185.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.187.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.188.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.189.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.190.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.191.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.192.0/18 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.192.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.193.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.194.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.195.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.196.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.199.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.200.0/21 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.200.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.201.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.203.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.204.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.205.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.206.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.208.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.208.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.209.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.210.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.211.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.212.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.213.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.215.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.216.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.217.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.218.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.219.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.220.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.221.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.222.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.223.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.229.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.230.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.231.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.232.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.234.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.236.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.238.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.239.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.240.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.240.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.241.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.242.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.243.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.245.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.246.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.87.249.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.111.224.0/20 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.224.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.225.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.226.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.228.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.229.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.230.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.232.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 203.111.237.0/24 AS10139 MERIDIAN-PH-AP Meridian Telekoms 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.153.104.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.153.106.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.153.107.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.159.128.0/19 AS209 ASN-QWEST - Qwest 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 210.211.0.0/20 AS18220 DALIANDIGITAL-AS-AP Dalian Digital Technology Company Inc. 216.65.160.0/19 AS7770 TRITON - Triton Technologies, Inc. 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.201.72.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.73.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.74.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.75.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.76.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.77.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.78.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.79.0/24 AS14709 Telefonica Moviles Panama S.A. 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 221.121.128.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.129.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.130.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.131.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.132.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.133.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.157.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.158.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.159.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

RE: [Fwd: Kremen VS Arin Antitrust Lawsuit - Anyone have feedback?]
by Jim McBurnett 08 Sep '06

08 Sep '06

If it gets to trial, I can see all kinds of stunts.. A jury trial on a highly technical issue? We hope that ma and pa non-computer literate owners are not on the jury.... But I think Michael is right, too many technical errors and less than accurate statements. Someone does not understand what is going on and wrote an interesting read of a case... Later, J -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Michael.Dillon(a)btradianz.com Sent: Friday, September 08, 2006 7:36 AM To: nanog(a)nanog.org Subject: Re: [Fwd: Kremen VS Arin Antitrust Lawsuit - Anyone have feedback?] > I am looking for anyone who has input on possibly the largest case > regarding internet numbering ever. This lawsuit may change the way > IP's are governed and adminstered. Comments on or off list please. My personal opinion is that this is yet another example of ignorance leading to anger leading to a stupid waste of court time. The case is filled with incorrect statements of fact which ARIN can easily demolish. But at the bottom line, these people are complaining because ARIN didn't let them use some IP addresses that were assigned to a different company. Since IP addresses are basically available free from any ISP who sells Internet access services, this seems like a severe error in judgement on the part of the plaintiff. A smart businessperson would have used the free IP addresses to keep their business online even if they did decide to dispute ARIN's decision. But in the end, IP addresses are not property, therefore they cannot be assets and cannot be transferred. They can only be kept if they are in use on network assets which are transferred and which continue to be operational. And even then, most people have no choice as to which specific address block they use. They simply take what the ISP gives them. I personally suspect that ARIN will have this thrown out of court in fairly short order. Even if it did go much further, the parallels with NANPA would see it fade away quite quickly. This discussion really belongs on http://www.groklaw.net/ where I note it has not yet appeared. Perhaps another indication that this is a tempest in a teapot. --Michael Dillon

1 0

FreeBSD Security Advisory FreeBSD-SA-06:20.bind (fwd)
by Gadi Evron 08 Sep '06

08 Sep '06

---------- Forwarded message ---------- Date: Wed, 6 Sep 2006 21:59:43 GMT From: FreeBSD Security Advisories <security-advisories(a)freebsd.org> Reply-To: freebsd-security(a)freebsd.org To: Bugtraq <bugtraq(a)securityfocus.com> Subject: FreeBSD Security Advisory FreeBSD-SA-06:20.bind -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-06:20.bind Security Advisory The FreeBSD Project Topic: Denial of Service in named(8) Category: contrib Module: bind Announced: 2006-09-06 Credits: The Measurement Factory Affects: FreeBSD 5.3 and later. Corrected: 2006-09-06 21:18:26 UTC (RELENG_6, 6.1-STABLE) 2006-09-06 21:19:21 UTC (RELENG_6_1, 6.1-RELEASE-p6) 2006-09-06 21:20:08 UTC (RELENG_6_0, 6.0-RELEASE-p11) 2006-09-06 21:20:54 UTC (RELENG_5, 5.5-STABLE) 2006-09-06 21:21:50 UTC (RELENG_5_5, 5.5-RELEASE-p4) 2006-09-06 21:22:39 UTC (RELENG_5_4, 5.4-RELEASE-p18) 2006-09-06 21:23:16 UTC (RELENG_5_3, 5.3-RELEASE-p33) CVE Name: CVE-2006-4095, CVE-2006-4096 For general information regarding FreeBSD Security Advisories, including descriptions of the fields above, security branches, and the following sections, please visit <URL:http://security.freebsd.org/>. I. Background BIND 9 is an implementation of the Domain Name System (DNS) protocols. The named(8) daemon is an Internet domain name server. DNS Security Extensions (DNSSEC) are additional protocol options that add authentication and integrity to the DNS protocols. II. Problem Description For a recursive DNS server, a remote attacker sending enough recursive queries for the replies to arrive after all the interested clients have left the recursion queue will trigger an INSIST failure in the named(8) daemon. Also for a a recursive DNS server, an assertion failure can occour when processing a query whose reply will contain more than one SIG(covered) RRset. For an authoritative DNS server serving a RFC 2535 DNSSEC zone which is queried for the SIG records where there are multiple SIG(covered) RRsets (e.g. a zone apex), named(8) will trigger an assertion failure when it tries to construct the response. III. Impact An attacker who can perform recursive lookups on a DNS server and is able to send a sufficiently large number of recursive queries, or is able to get the DNS server to return more than one SIG(covered) RRsets can stop the functionality of the DNS service. An attacker querying an authoritative DNS server serving a RFC 2535 DNSSEC zone may be able to crash the DNS server. All of the above issues will result in a Denial of Service situation. IV. Workaround A possible workaround is to only allow trusted clients to perform recursive queries. V. Solution Perform one of the following: 1) Upgrade your vulnerable system to 5-STABLE, or 6-STABLE, or to the RELENG_6_1, RELENG_6_0, RELENG_5_5, RELENG_5_4, or RELENG_5_3 security branch dated after the correction date. 2) To patch your present system: The following patches have been verified to apply to FreeBSD 5.3, 5.4, 5.5, 6.0, and 6.1 systems. a) Download the relevant patch from the location below, and verify the detached PGP signature using your PGP utility. # fetch http://security.FreeBSD.org/patches/SA-06:20/bind.patch # fetch http://security.FreeBSD.org/patches/SA-06:20/bind.patch.asc b) Execute the following commands as root: # cd /usr/src # patch < /path/to/patch # cd /usr/src/lib/bind # make obj && make depend && make && make install # cd /usr/src/usr.sbin/named # make obj && make depend && make && make install c) Restart the named application: # /etc/rc.d/named restart VI. Correction details The following list contains the revision numbers of each file that was corrected in FreeBSD. Branch Revision Path - ------------------------------------------------------------------------- RELENG_5 src/contrib/bind9/bin/named/query.c 1.1.1.1.2.3 src/contrib/bind9/lib/dns/resolver.c 1.1.1.1.2.5 RELENG_5_5 src/UPDATING 1.342.2.35.2.4 src/sys/conf/newvers.sh 1.62.2.21.2.6 src/contrib/bind9/bin/named/query.c 1.1.1.1.2.2.2.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.1.2.4.2.1 RELENG_5_4 src/UPDATING 1.342.2.24.2.27 src/sys/conf/newvers.sh 1.62.2.18.2.23 src/contrib/bind9/bin/named/query.c 1.1.1.1.2.1.4.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.1.2.2.2.1 RELENG_5_3 src/UPDATING 1.342.2.13.2.36 src/sys/conf/newvers.sh 1.62.2.15.2.38 src/contrib/bind9/bin/named/query.c 1.1.1.1.2.1.2.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.1.2.1.2.1 RELENG_6 src/contrib/bind9/bin/named/query.c 1.1.1.1.4.2 src/contrib/bind9/lib/dns/resolver.c 1.1.1.2.2.3 RELENG_6_1 src/UPDATING 1.416.2.22.2.8 src/sys/conf/newvers.sh 1.69.2.11.2.8 src/contrib/bind9/bin/named/query.c 1.1.1.1.4.1.2.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.2.2.2.2.1 RELENG_6_0 src/UPDATING 1.416.2.3.2.16 src/sys/conf/newvers.sh 1.69.2.8.2.12 src/contrib/bind9/bin/named/query.c 1.1.1.1.6.1 src/contrib/bind9/lib/dns/resolver.c 1.1.1.2.2.1.2.1 - ------------------------------------------------------------------------- VII. References http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4095 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4096 http://www.kb.cert.org/vuls/id/697164 http://www.kb.cert.org/vuls/id/915404 http://www.niscc.gov.uk/niscc/docs/re-20060905-00590.pdf?lang=en The latest revision of this advisory is available at http://security.FreeBSD.org/advisories/FreeBSD-SA-06:20.bind.asc -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.5 (FreeBSD) iD8DBQFE/0NLFdaIBMps37IRApD/AKCczWj2UJ64iVlXWSLaN1BNA52nnQCgkvJY XIxfELRi5H7taKVtMJFK2tU= =4n+j -----END PGP SIGNATURE-----

1 0

comast email issues, who else has them?
by Mark Jeftovic 08 Sep '06

08 Sep '06

Has comcast ever responded to a ping on this list? Has anyone ever managed to open a dialogue with symantec (or comcast) about that fscked up proprietary RBL they are using? We're on the verge of just giving up on comcast and telling our customers to forward their email someplace else (a lot of them are doing that anyway) -mark -- Mark Jeftovic <markjr(a)easydns.com> Founder & President, easyDNS Technologies Inc. ph. +1-(416)-535-8672 ext 225 fx. +1-(866) 273-2892

14 16

RE: Router / Protocol Problem
by Mike Walter 07 Sep '06

07 Sep '06

Good morning everyone. I just wanted to say thanks for all the help. I did discover the problem this morning and I should be hit with a herring. I upgraded the IOS on the router with the issue to match the other router and the problem was still there. So I tested and noticed the following line in the logs, since I was on console it popped up right in front of me. Sep 7 06:50:20.697 EST: %SEC-6-IPACCESSLOGP: list 166 denied tcp 69.50.222.8(25) -> 69.4.74.14(2421), 4 packets What is this I thought? What is my ACL 166 doing this? I thought I tested removing all access-lists from interfaces with the original problem came up. Apparently not. Here is my ACL 166, the first line is what was being matched. Apparently some how this connection is being matched via NBAR for good old Code Red. access-list 166 deny ip any any dscp 1 log access-list 166 deny tcp any any eq sunrpc access-list 166 deny tcp any any eq 135 access-list 166 deny tcp any any eq 137 access-list 166 deny tcp any any eq 138 access-list 166 deny tcp any any eq 139 access-list 166 deny tcp any any eq 445 access-list 166 deny tcp any any eq 5554 access-list 166 deny tcp any any eq 9996 access-list 166 deny tcp any any eq 1025 access-list 166 deny udp any any eq 1434 access-list 166 deny udp any any eq 135 access-list 166 deny udp any any eq netbios-ns access-list 166 deny udp any any eq netbios-dgm access-list 166 deny udp any any eq netbios-ss access-list 166 deny udp any any eq 445 access-list 166 deny icmp any any redirect access-list 166 deny ip 127.0.0.0 0.255.255.255 any access-list 166 deny ip 10.0.0.0 0.255.255.255 any access-list 166 deny ip 172.16.0.0 0.15.255.255 any access-list 166 deny ip 192.168.0.0 0.0.255.255 any access-list 166 permit ip any any class-map match-any http-hacks match protocol http url "*default.ida*" match protocol http url "*cmd.exe*" match protocol http url "*root.exe*" policy-map mark-inbound-http-hacks class http-hacks set ip dscp 1 I have always had this on my FE0/0 as an outbound ACL, well atleast since Code Red came about: ip access-group 166 out. Now I have two questions. Is that not a good idea to have this on FE0/0 out? Second, why the heck would a smtp connection be matched via my http-hacks class-map? Thanks again everyone, Mike -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Rodney Dunn Sent: Wednesday, September 06, 2006 8:45 PM To: Christopher L. Morrow Cc: Rodney Dunn; Mike Walter; Hank Nussbacher; Justin M. Streiner; nanog(a)merit.edu Subject: Re: Router / Protocol Problem Then that proves it's not a local router problem then. :) On Wed, Sep 06, 2006 at 07:49:26PM +0000, Christopher L. Morrow wrote: > On Wed, 6 Sep 2006, Rodney Dunn wrote: > > > > > Get a sniffer trace. Packets on the wire prove what's going on. > > provided the packets get back to him, it seems his problem is traffic > getting back to him :( so probably no packets will be on the wire > (none in question atleast)...

4 3

RE: Router / Protocol Problem
by Jeff Jirsa 07 Sep '06

07 Sep '06

On Sep 6, 2006, at 9:04 AM, Mike Walter wrote: > Recently with no changes to my network, I have been having problems > connecting to certain websites and mail servers. I am always able > to ping the sites and trace route without error. If I telnet to > port 80 or port 25 it does not connect. If I login to my router > and telnet sourcing my each of Internet Providers ports, I am able > to get to the sites. I have talked with all the providers and none Check a packet dump and see if your affected boxes are sending SWE (SYN with ECN enabled) instead of plain SYN packets. Some firewalls (at least default m0n0wall and older PIX) reject and dump ECN syn packets while allowing pure syns through. If your affected peer has you running through some weird filter that's dropping SWE packets, this would cause symptoms exactly as you're seeing - ping is fine, traceroute is fine, but TCP sessions never complete the handshake (as the receiving side never got the first SYN). - J

1 0

RE: Router / Protocol Problem
by Hank Nussbacher 07 Sep '06

07 Sep '06

At 07:27 AM 07-09-06 -0400, Mike Walter wrote: Best moved to cisco-nsp. -Hank Nussbacher http://www.interall.co.il >Good morning everyone. I just wanted to say thanks for all the help. I >did discover the problem this morning and I should be hit with a >herring. I upgraded the IOS on the router with the issue to match the >other router and the problem was still there. So I tested and noticed >the following line in the logs, since I was on console it popped up >right in front of me. > >Sep 7 06:50:20.697 EST: %SEC-6-IPACCESSLOGP: list 166 denied tcp >69.50.222.8(25) -> 69.4.74.14(2421), 4 packets > >What is this I thought? What is my ACL 166 doing this? I thought I >tested removing all access-lists from interfaces with the original >problem came up. Apparently not. Here is my ACL 166, the first line is >what was being matched. Apparently some how this connection is being >matched via NBAR for good old Code Red. > >access-list 166 deny ip any any dscp 1 log >access-list 166 deny tcp any any eq sunrpc >access-list 166 deny tcp any any eq 135 >access-list 166 deny tcp any any eq 137 >access-list 166 deny tcp any any eq 138 >access-list 166 deny tcp any any eq 139 >access-list 166 deny tcp any any eq 445 >access-list 166 deny tcp any any eq 5554 >access-list 166 deny tcp any any eq 9996 >access-list 166 deny tcp any any eq 1025 >access-list 166 deny udp any any eq 1434 >access-list 166 deny udp any any eq 135 >access-list 166 deny udp any any eq netbios-ns >access-list 166 deny udp any any eq netbios-dgm >access-list 166 deny udp any any eq netbios-ss >access-list 166 deny udp any any eq 445 >access-list 166 deny icmp any any redirect >access-list 166 deny ip 127.0.0.0 0.255.255.255 any >access-list 166 deny ip 10.0.0.0 0.255.255.255 any >access-list 166 deny ip 172.16.0.0 0.15.255.255 any >access-list 166 deny ip 192.168.0.0 0.0.255.255 any >access-list 166 permit ip any any > >class-map match-any http-hacks >match protocol http url "*default.ida*" >match protocol http url "*cmd.exe*" >match protocol http url "*root.exe*" > >policy-map mark-inbound-http-hacks >class http-hacks >set ip dscp 1 > >I have always had this on my FE0/0 as an outbound ACL, well atleast >since Code Red came about: ip access-group 166 out. > >Now I have two questions. Is that not a good idea to have this on FE0/0 >out? Second, why the heck would a smtp connection be matched via my >http-hacks class-map? > >Thanks again everyone, > >Mike > >-----Original Message----- >From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of >Rodney Dunn >Sent: Wednesday, September 06, 2006 8:45 PM >To: Christopher L. Morrow >Cc: Rodney Dunn; Mike Walter; Hank Nussbacher; Justin M. Streiner; >nanog(a)merit.edu >Subject: Re: Router / Protocol Problem > > >Then that proves it's not a local router problem then. :) > >On Wed, Sep 06, 2006 at 07:49:26PM +0000, Christopher L. Morrow wrote: > > On Wed, 6 Sep 2006, Rodney Dunn wrote: > > > > > > > > Get a sniffer trace. Packets on the wire prove what's going on. > > > > provided the packets get back to him, it seems his problem is traffic > > getting back to him :( so probably no packets will be on the wire > > (none in question atleast)... > > +++++++++++++++++++++++++++++++++++++++++++ > This Mail Was Scanned By Mail-seCure System > at the Tel-Aviv University CC.

4 3

RE: Router / Protocol Problem
by Mike Walter 07 Sep '06

07 Sep '06

Sorry, I am running iBGP. I just swapped out the NPE225 engine to a NPE400 and 512MB and have not seen a change yet. I am still unable to reach the sites. I am going to give it a while and sometime soon reboot the other router. I removed the single /24 today out the one connection to see if that would change anything as well. Mike -----Original Message----- From: Hank Nussbacher [mailto:hank@efes.iucc.ac.il] Sent: Wednesday, September 06, 2006 12:07 PM To: Mike Walter Cc: Justin M. Streiner; nanog(a)merit.edu Subject: RE: Router / Protocol Problem On Wed, 6 Sep 2006, Mike Walter wrote: > > Thanks for everyone's great input. Here are answers to Justin's > questions. > > #1 - 12.3.6a - 7204VXR (NPE400) 512MB - 200+ MB free > #2 - 12.2.15T5 - cisco 7204VXR (NPE225) - 256MB (I have a NPE400 - 512MB > I want to swap in) - 23MB Free (Issue?) > > Full Routes from all peers. No internal routing protocol as of yet, all > static routes. Getting ready to implement OSPF. I have not rebooted > the routers as a test. I have CEF on both routers. I have had some > customers complaining about slowness. No internal routing protocol? Not even iBGP? How do the 2 routers exchange info? How do the internal systems know which router to exit from? Or are they both independent? I assume you are AS26241 and peer with 3356, 4323 and 6181. I also assume you should be announcing your 2 prefixes: 69.4.64.0/20 216.68.104.0/21 but you have deaggregated a single /24 - 69.4.71.0/24 which has sent 34 BGP updates in the past 24 hours (which might be ok). So, it is a bit hard to debug this with only partial info. Regards, Hank Nussbacher http://www.interall.co.il

3 3

Cisco IOS GRE issue (fwd)
by Gadi Evron 06 Sep '06

06 Sep '06

---------- Forwarded message ---------- Date: Wed, 6 Sep 2006 18:33:44 +0200 From: FX <fx(a)phenoelit.de> To: full-disclosure(a)lists.grok.org.uk, bugtraq(a)securityfocus.com Subject: Cisco IOS GRE issue Phenoelit Advisory <wir-haben-auch-mal-was-gefunden #0815 +----> [ Title ] Cisco Systems IOS GRE decapsulation fault [ Authors ] FX <fx(a)phenoelit.de> Phenoelit Group (http://www.phenoelit.de) Advisory http://www.phenoelit.de/stuff/CiscoGRE.txt [ Affected Products ] Cisco IOS Tested on: C3550 IOS 12.1(19) Cisco Bug ID: CSCuk27655, CSCea22552, CSCei62762 CERT Vu ID: <not assinged> [ Vendor communication ] 07.07.05 Initial Notification, gaus(a)cisco.com 27.07.05 PSIRT realized that nobody took this bug, Paul Oxman took over 28.07.05 Paul successfully reproduces the issue 04.08.05 Paul notifies FX about availabe fixes 05.08.05 Paul notifies FX about new side effects discovered by Cisco 06.09.06 Final advisory going public as coordinated release *Note-Initial notification by phenoelit includes a cc to cert(a)cert.org by default [ Overview ] Cisco Systems IOS contains a bug when parsing GRE packets with GRE source routing information. A specially crafter GRE packet can cause the router to reuse packet packet data from unrelated ring buffer memory. The resulting packet is reinjected in the routing queues. [ Description ] The GRE protocol according to RFC1701 supports source routing different from the one known in IPv4. An optional header is added to the GRE header containing Source Route Entries for further routing. GRE header: 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |C|R|K|S|s|Recur| Flags | Ver | Protocol Type | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Checksum (optional) | Offset (optional) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Key (optional) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Sequence Number (optional) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | Routing (optional) | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ When a specially crafted GRE packet with routing information is received by a Cisco IOS device, the offset field is not verified to point inside the packet but is subtracted from what appears to be a short integer holding the overall length of the IP packet, causing an overflow of the same. This causes other memory contents of the packet ring buffers to be interpreted as the payload IP packet and reinjected into the routing queue with fairly large length information: GRE decapsulated IP 0.3.74.0->0.0.1.30 (len=65407, ttl=39) GRE decapsulated IP 176.94.8.0->0.0.0.0 (len=64904, ttl=0) GRE decapsulated IP 0.15.31.193->176.94.8.0 (len=64894, ttl=237) GRE decapsulated IP 128.42.131.220->128.0.3.74 (len=64884, ttl=128) The outer IP packet must come from the configured tunnel source and be sent to the configured tunnel destination IP address. By carefully filling the ring buffers with legitimate traffic like ICMP, containing an IP header at the right offset, an attacker can create IP packets with large length values inside IOS. PSIRT believes this cannot be done, Phenoelit differs on that. [ Example ] Internet Protocol, Src Addr: 85.158.1.110 (85.158.1.110), Dst Addr: 198.133.219.25 (198.133.219.25) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 Total Length: 28 Identification: 0xaffe (45054) Flags: 0x00 Fragment offset: 0 Time to live: 30 Protocol: GRE (0x2f) Header checksum: 0xf409 (correct) Source: 85.158.1.110 (85.158.1.110) Destination: 198.133.219.25 (198.133.219.25) Generic Routing Encapsulation (IP) Flags and version: 0x4000 0... .... .... .... = No checksum .1.. .... .... .... = Routing ..0. .... .... .... = No key ...0 .... .... .... = No sequence number .... 0... .... .... = No strict source route .... .000 .... .... = Recursion control: 0 .... .... 0000 0... = Flags: 0 .... .... .... .000 = Version: 0 Protocol Type: IP (0x0800) Checksum: 0x0000 Offset: 99 [ Notes ] IOS implements GRE source routing as forwarding of the inner IP packet. Thus, a Source Route Entry of 255.255.255.255 will cause IOS to resend the GRE packet to the specified address according to the routing table (all in this case) on the appropriate interface (all in this case). The source address of the new packet will be the router's IP address, the destination address according to the received packet. This can be used to circumvent Access Control Lists with GRE. [ Solution ] Stop using GRE. There is no way in IOS to turn off source routing for GRE tunnels. To correct the parsing issue, try to install an IOS version containing the fixes CSCuk27655 or CSCea22552 or CSCei62762. [ end of file ($Revision: 1.3 $) ] -- FX <fx(a)phenoelit.de> Phenoelit (http://www.phenoelit.de) 672D 64B2 DE42 FCF7 8A5E E43B C0C1 A242 6D63 B564

1 0

RE: Router / Protocol Problem
by Mike Walter 06 Sep '06

06 Sep '06

Thanks for everyone's great input. Here are answers to Justin's questions. #1 - 12.3.6a - 7204VXR (NPE400) 512MB - 200+ MB free #2 - 12.2.15T5 - cisco 7204VXR (NPE225) - 256MB (I have a NPE400 - 512MB I want to swap in) - 23MB Free (Issue?) Full Routes from all peers. No internal routing protocol as of yet, all static routes. Getting ready to implement OSPF. I have not rebooted the routers as a test. I have CEF on both routers. I have had some customers complaining about slowness. Mike Walter, MCP Systems Administrator 3z.net a PCD Company http://www.3z.net "When Success is the Only Solution think 3z.net" Voice (859) 331-9004 Fax (859) 578-3522 -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Justin M. Streiner Sent: Wednesday, September 06, 2006 9:42 AM To: nanog(a)merit.edu Subject: Re: Router / Protocol Problem On Wed, 6 Sep 2006, Mike Walter wrote: > I normally would not post to the group, but I am 100% stumped and have > talked with peers with no luck. > > I have (2) Cisco 7204 Routers running BGP with 3 peers and HSRP. I am > not doing anything special with BGP, pretty much a default config that > has not changed in years. Please provide details on both your default config and the hardware you're using. You say you have two Cisco 7204s - are these straight '04s, or 7204VXRs? What NPE(s) are you using, and how much memory is on them? The BGP you're getting from your peers - are you getting full routes from any of them? Do you have CEF enabled on these routers? What IOS version(s) are running on these routers? What else are they doing besides slinging BGP routes? Does the problem go away for a while if you reboot one router or the other? Without knowing any of this, it sounds like you might have NPE-225, -300, or -400 with 256 MB of RAM and you are running into memory exhaustion issues from carrying full routes. That's been a pretty popular topic on this list and others like cisco-nsp in the last 12 months :) At a minimum, what do the output of "show mem summary" and "show ip bgp sum" from each router show you? Have you seen other performance problems lately, such as things getting mysteriously slower, beyond the rachability issues you mentioned above? If so, check if CEF is still running (if it was configured in the first place). When a 7200 gets dangerously low on free memory and CEF is running, it may cannibalize the IP CEF process to try to conserve memory. Earlier 12.0 releases did this - I don't know if newer ones still do it. jms

3 2