- NANOG - lists.nanog.org

Re: BGP unsupported capability code
by Mike White 21 Aug '06

21 Aug '06

I recently implemented BGP graceful restart capability in a custom BGP app and encountered the same notification. By looking at the capabilities being advertised by the router, and advertising various subsets of those capabilities, I narrowed it down to the MPLS capability. It turned out the router deemed MPLS capability as a prerequisite for graceful restart. Adding the MPLS IPv4 unicast capability to the OPEN message along with the graceful restart capability fixed things for me. Hope this helps. - Mike

1 0

Open Source NMS Software
by Gary T. Giesen 21 Aug '06

21 Aug '06

I'm looking at depolying an open source-based NMS solution, and I'm looking at a couple products, mostly OpenNMS (http://www.opennms.org) and Zenoss (http://www.zenoss.org) I like the looks of Zenoss, but I've never really heard of it and I'm wondering if anyone has any experiences with it that they can share before I go and spend hours on an install/configuration. Is there something wrong with it, and that's why I've never heard of anyone using it? Am I just out of the loop? Even better would be someone who's used both products and could give me a quick comparison. I'd also welcome suggestions of another product (as long as it's not bb, nagios, or hobbit) that I should be looking at. Thanks, Gary Giesen

4 3

Cox leaking 128.0.0.0/1
by Richard A Steenbergen 18 Aug '06

18 Aug '06

Seeing as this has been going on for over 2h30m, no one can seem to get ahold of any live bodies who can fix it, and the emails about it to the noc contacts have gone unanswered, I'm reduced to trying the old public embarassment approach... Would Cox please stop announcing 128.0.0.0/1. Thanks. route-views.oregon-ix.net>sh ip bgp 128.0.0.1 BGP routing table entry for 128.0.0.0/1, version 471808 Paths: (14 available, best #14, table Default-IP-Routing-Table) Not advertised to any peer 852 22773 154.11.11.113 from 154.11.11.113 (154.11.11.113) Origin IGP, metric 0, localpref 100, valid, external Community: 852:180 852 22773 154.11.98.225 from 154.11.98.225 (154.11.98.225) Origin IGP, metric 0, localpref 100, valid, external Community: 852:180 3277 6820 3267 3343 174 174 174 22773 194.85.4.55 from 194.85.4.55 (194.85.4.55) Origin IGP, localpref 100, valid, external Community: 3277:6820 3277:65361 3277:65364 2493 3602 812 22773 206.186.255.223 from 206.186.255.223 (206.186.255.223) Origin IGP, localpref 100, valid, external Community: 812:2 3602:65011 3602:65535 7500 2516 22773 202.249.2.86 from 202.249.2.86 (203.178.133.115) Origin IGP, localpref 100, valid, external 6539 22773 216.18.63.137 from 216.18.63.137 (216.18.63.137) Origin IGP, localpref 100, valid, external 11608 3491 22773 207.246.129.13 from 207.246.129.13 (207.246.129.15) Origin IGP, localpref 100, valid, external Community: 3491:2000 3491:2007 3491:22773 11608:1004 11608:5504 22773:130 22773:60101 22773:64002 22773:64100 22773:64101 7660 2516 22773 203.181.248.233 from 203.181.248.233 (203.181.248.13) Origin IGP, localpref 100, valid, external 1221 4637 22773 203.62.252.26 from 203.62.252.26 (203.62.252.26) Origin IGP, localpref 100, valid, external 3333 1103 1273 22773 193.0.0.56 from 193.0.0.56 (193.0.0.56) Origin IGP, localpref 100, valid, external 8001 22773 209.123.12.51 from 209.123.12.51 (209.123.12.51) Origin IGP, localpref 100, valid, external Community: 8001:3000 8001:3023 8001:6008 22773:130 22773:60101 22773:64002 22773:64100 22773:64101 12956 22773 213.140.32.146 from 213.140.32.146 (213.140.32.146) Origin IGP, localpref 100, valid, external Community: 12956:18500 12956:28200 12956:28201 22773:130 22773:60101 22773:64002 22773:64100 22773:64101 5650 22773 74.40.7.35 from 74.40.7.35 (207.173.112.63) Origin IGP, metric 0, localpref 100, valid, external 5650 22773 74.40.7.36 from 74.40.7.36 (74.40.0.11) Origin IGP, metric 0, localpref 100, valid, external, best Oh and if you are on this list (and therefore accepting that prefix), you may need better filters. :) -- Richard A Steenbergen <ras(a)e-gerbil.net> http://www.e-gerbil.net/ras GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)

1 0

BGP unsupported capability code
by Joe Maimon 18 Aug '06

18 Aug '06

If A tries to peer with B, and B sends a BGP capability 64 to A, if A does not support that capability what would proper and/or reasonable behavior for A be? (a "published" source for it, if you could possibly do so.) a) send unsupported capability code 64 lengh 6 ## 2006-08-17 19:17:05 : [bgp/stack]: send NOTIFICATION msg code (Open-Error) subcode(Open Message Error: Unsupported Capability) to peer w9.x4.y7.z9 via socket 415 b) ignore it c) admin defined rfc3392.txt only appears to address the case where if A tries to peer with B, and B sends a BGP capability 64 to A, if A does not support that capability, B MAY terminate the connection with the above notification. (section 3 paragraph 5) Thanks, Joe

3 3

Weekly Routing Table Report
by Routing Analysis Role Account 18 Aug '06

18 Aug '06

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 19 Aug, 2006 Analysis Summary ---------------- BGP routing table entries examined: 195444 Prefixes after maximum aggregation: 107128 Unique aggregates announced to Internet: 95305 Total ASes present in the Internet Routing Table: 22909 Origin-only ASes present in the Internet Routing Table: 19924 Origin ASes announcing only one prefix: 9551 Transit ASes present in the Internet Routing Table: 2985 Transit-only ASes present in the Internet Routing Table: 70 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 29 Max AS path prepend of ASN (36728) 27 Prefixes from unregistered ASNs in the Routing Table: 26 Unregistered ASNs in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 9 Number of addresses announced to Internet: 1574577068 Equivalent to 93 /8s, 218 /16s and 35 /24s Percentage of available address space announced: 42.5 Percentage of allocated address space announced: 61.5 Percentage of available address space allocated: 69.1 Total number of prefixes smaller than registry allocations: 97295 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 42778 Total APNIC prefixes after maximum aggregation: 17444 Prefixes being announced from the APNIC address blocks: 40468 Unique aggregates announced from the APNIC address blocks: 18700 APNIC Region origin ASes present in the Internet Routing Table: 2674 APNIC Region origin ASes announcing only one prefix: 757 APNIC Region transit ASes present in the Internet Routing Table: 397 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 24 Number of APNIC addresses announced to Internet: 260538976 Equivalent to 15 /8s, 135 /16s and 130 /24s Percentage of available APNIC address space announced: 81.5 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 121/8, 122/7, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 98830 Total ARIN prefixes after maximum aggregation: 58753 Prefixes being announced from the ARIN address blocks: 72522 Unique aggregates announced from the ARIN address blocks: 27331 ARIN Region origin ASes present in the Internet Routing Table: 10905 ARIN Region origin ASes announcing only one prefix: 4114 ARIN Region transit ASes present in the Internet Routing Table: 1017 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 29 Number of ARIN addresses announced to Internet: 295414528 Equivalent to 17 /8s, 155 /16s and 171 /24s Percentage of available ARIN address space announced: 76.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 39282 Total RIPE prefixes after maximum aggregation: 26280 Prefixes being announced from the RIPE address blocks: 36240 Unique aggregates announced from the RIPE address blocks: 24435 RIPE Region origin ASes present in the Internet Routing Table: 8387 RIPE Region origin ASes announcing only one prefix: 4397 RIPE Region transit ASes present in the Internet Routing Table: 1384 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 24 Number of RIPE addresses announced to Internet: 261713988 Equivalent to 15 /8s, 153 /16s and 112 /24s Percentage of available RIPE address space announced: 82.1 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-41983 RIPE Address Blocks 62/8, 80/5, 88/6, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 12269 Total LACNIC prefixes after maximum aggregation: 3740 Prefixes being announced from the LACNIC address blocks: 10326 Unique aggregates announced from the LACNIC address blocks: 5938 LACNIC Region origin ASes present in the Internet Routing Table: 713 LACNIC Region origin ASes announcing only one prefix: 237 LACNIC Region transit ASes present in the Internet Routing Table: 130 Average LACNIC Region AS path length visible: 4.1 Max LACNIC Region AS path length visible: 24 Number of LACNIC addresses announced to Internet: 32148480 Equivalent to 1 /8s, 234 /16s and 140 /24s Percentage of available LACNIC address space announced: 47.9 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2259 Total AfriNIC prefixes after maximum aggregation: 911 Prefixes being announced from the AfriNIC address blocks: 1567 Unique aggregates announced from the AfriNIC address blocks: 985 AfriNIC Region origin ASes present in the Internet Routing Table: 160 AfriNIC Region origin ASes announcing only one prefix: 46 AfriNIC Region transit ASes present in the Internet Routing Table: 25 Average AfriNIC Region AS path length visible: 3.5 Max AfriNIC Region AS path length visible: 11 Number of AfriNIC addresses announced to Internet: 4188928 Equivalent to 0 /8s, 63 /16s and 235 /24s Percentage of available AfriNIC address space announced: 12.5 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1294 7973 236 CHINANET-BACKBONE 4755 969 255 67 Videsh Sanchar Nigam Ltd. Aut 9583 942 109 15 Sify Limited 9498 784 211 70 BHARTI BT INTERNET LTD. 4766 703 4435 304 Korea Telecom (KIX) 1221 612 1779 469 Telstra Pty Ltd 7545 541 124 72 TPG Internet Pty Ltd 17488 522 32 18 Hathway IP Over Cable Interne 17676 492 10613 96 Softbank BB Corp. 9443 450 111 83 Primus Telecommunications 18101 437 85 22 Reliance Infocom Ltd Internet 4812 412 739 59 China Telecom (Shanghai) 17849 410 30 122 Telecommunications Technology 17974 370 129 12 PT TELEKOMUNIKASI INDONESIA 17557 359 29 167 Pakistan Telecom 4802 356 84 149 Wantree Development 2907 336 1733 311 SINET Japan 4837 318 3523 136 chinanet IDC center beijing n 10139 308 23 6 Meridian Telekoms 7474 295 211 229 SingTel Optus Pty Ltd ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1473 6258 952 AT&T WorldNet Services 6197 1016 635 477 BellSouth Network Solutions, 721 1002 21940 313 DLA Systems Automation Center 4323 983 748 279 Time Warner Telecom 701 960 6782 785 UUNET Technologies, Inc. 18566 955 272 8 Covad Communications 2386 946 559 714 AT&T Data Communications Serv 174 945 5770 887 Cogent Communications 1239 839 2779 592 Sprint 20115 735 658 384 Charter Communications 19262 730 2224 185 Verizon Global Networks 11492 725 90 16 Cable One 22773 690 1744 46 Cox Communications, Inc. 209 687 3657 542 Qwest 7011 678 226 430 Citizens Utilities 6198 597 554 236 BellSouth Network Solutions, 852 587 1068 383 Telus Advanced Communications 19916 563 49 54 OLM LLC 855 559 247 74 Canadian Research Network 3602 532 125 105 Sprint Canada, Inc. RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 560 1947 441 UUNET - Commercial IP service 3301 315 1186 300 TeliaNet Sweden 3320 298 5013 241 Deutsche Telekom AG 8220 280 471 266 COLT Telecommunications 24863 254 42 11 LINKdotNET AS number 680 247 2041 244 DFN-IP service G-WiN 6746 244 91 222 Dynamic Network Technologies, 3246 231 462 221 Song Networks 1257 220 744 167 SWIPnet Swedish IP Network 8708 216 278 203 Romania Data Systems S.A. 3215 204 1760 97 France Telecom Transpac 3269 202 2246 73 TELECOM ITALIA 8551 202 182 27 Bezeq International 30890 202 18 83 SC Kappa Invexim SRL 6830 194 879 43 UPC Distribution Services 8866 183 37 15 Bulgarian Telecommunication C 5416 180 12 11 BATELCO-BH 3300 173 171 98 AUCS Communications Services 786 170 1778 170 The JANET IP Service 9121 168 931 31 TTnet Autonomous System LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 769 1811 227 UniNet S.A. de C.V. 22047 456 206 11 VTR PUNTO NET S.A. 11172 358 96 85 Servicios Alestra S.A de C.V 16814 329 20 8 NSS, S.A. 6147 273 134 22 Telefonica Del Peru 6471 254 74 30 ENTEL CHILE S.A. 14117 217 13 7 Telefonica del Sur S.A. 6503 183 167 84 AVANTEL, S.A. 7303 182 85 29 Telecom Argentina Stet-France 10481 181 72 8 Prima S.A. 7910 144 9 25 ANDINET ON LINE 21826 134 17 23 INTERCABLE 11556 132 96 4 Cable-Wireless Panama 19429 131 80 40 E.T.B. 18822 129 8 10 TELEFONICA MANQUEHUE 19169 128 8 25 Telconet 14522 117 18 9 SatNet S.A. 7738 114 410 20 Telecomunicacoes da Bahia S.A 23216 113 21 9 RAMtelecom Telecomunicaciones 14259 112 10 15 GTD Internet S.A. AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 284 803 231 The Internet Solution 8452 169 60 7 TEDATA 6713 144 135 11 Itissalat Al-MAGHRIB 15475 142 84 4 Nile Online 2018 134 298 111 Tertiary Education Network 5536 121 8 18 Internet Egypt Network 24835 116 48 6 RAYA Telecom - Egypt 33783 106 6 2 EEPAD TISP TELECOM & INTERNET 2905 79 159 70 The Internetworking Company o 15706 44 8 3 Sudatel Internet Exchange Aut 5713 38 294 34 Telkom SA Ltd 33774 32 7 20 AS Number for Telecom Algeria 23889 26 8 11 MAURITIUS TELECOM 16637 24 15 22 Johnnic e-Ventures 10798 23 1 14 Standard Bank of South Africa 8524 22 1 5 AUCEGYPT Autonomous System 21280 22 4 4 Swift Global Kenya Ltd.Is an 21491 21 17 2 UTL On-line is RF broadband I 33766 21 2 1 Nyala Communications Pty Ltd 2561 19 6 2 Egyptian Universities Network Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4134 1294 1058 CHINANET-BACKBONE 18566 955 947 Covad Communications 9583 942 927 Sify Limited 4755 969 902 Videsh Sanchar Nigam Ltd. Aut 9498 784 714 BHARTI BT INTERNET LTD. 11492 725 709 Cable One 4323 983 704 Time Warner Telecom 721 1002 689 DLA Systems Automation Center 22773 690 644 Cox Communications, Inc. 19262 730 545 Verizon Global Networks 8151 769 542 UniNet S.A. de C.V. 6197 1016 539 BellSouth Network Solutions, 5668 532 514 CenturyTel Internet Holdings, 19916 563 509 OLM LLC 17488 522 504 Hathway IP Over Cable Interne 855 559 485 Canadian Research Network 7545 541 469 TPG Internet Pty Ltd 22047 456 445 VTR PUNTO NET S.A. 3602 532 427 Sprint Canada, Inc. 15270 460 427 PaeTec.net -a division of Pae List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65350 PRIVATE 124.236.0.0/19 17672 asn for Hebei Provin 65350 PRIVATE 124.236.240.0/20 17672 asn for Hebei Provin 65350 PRIVATE 124.239.192.0/24 17672 asn for Hebei Provin 65010 PRIVATE 203.117.213.0/24 9255 Singapore Telecom 24409 UNALLOCATED 203.119.29.0/24 9808 Guangdong Mobile Com 64615 PRIVATE 203.144.48.0/24 16838 VeriSign Inc 65000 PRIVATE 211.72.199.0/24 3462 Data Communication B 65350 PRIVATE 219.148.0.0/22 17672 asn for Hebei Provin 65350 PRIVATE 219.148.4.0/23 17672 asn for Hebei Provin 65350 PRIVATE 219.148.8.0/21 17672 asn for Hebei Provin 65350 PRIVATE 219.148.24.0/21 17672 asn for Hebei Provin 65350 PRIVATE 219.148.32.0/19 17672 asn for Hebei Provin 65350 PRIVATE 222.222.0.0/21 17672 asn for Hebei Provin 65350 PRIVATE 222.222.8.0/21 17672 asn for Hebei Provin 65350 PRIVATE 222.222.16.0/20 17672 asn for Hebei Provin 65350 PRIVATE 222.222.32.0/20 17672 asn for Hebei Provin 65350 PRIVATE 222.222.48.0/20 17672 asn for Hebei Provin 65350 PRIVATE 222.222.208.0/21 17672 asn for Hebei Provin 65350 PRIVATE 222.222.216.0/21 17672 asn for Hebei Provin 65350 PRIVATE 222.223.187.0/24 17672 asn for Hebei Provin 65350 PRIVATE 222.223.188.0/22 17672 asn for Hebei Provin 65350 PRIVATE 222.223.192.0/22 17672 asn for Hebei Provin 65350 PRIVATE 222.223.196.0/23 17672 asn for Hebei Provin 65350 PRIVATE 222.223.200.0/22 17672 asn for Hebei Provin 65350 PRIVATE 222.223.206.0/23 17672 asn for Hebei Provin 65350 PRIVATE 222.223.224.0/19 17672 asn for Hebei Provin Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.84.205.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.249.0.0/20 3450 University of Tennessee, Knox Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:9 /10:10 /11:28 /12:97 /13:205 /14:376 /15:739 /16:8953 /17:3419 /18:5573 /19:12135 /20:13709 /21:12019 /22:15135 /23:16396 /24:105380 /25:414 /26:402 /27:196 /28:64 /29:42 /30:79 /31:0 /32:46 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 938 955 Covad Communications 6197 797 1016 BellSouth Network Solutions, 9583 774 942 Sify Limited 7018 773 1473 AT&T WorldNet Services 11492 713 725 Cable One 2386 664 946 AT&T Data Communications Serv 7011 581 678 Citizens Utilities 19916 557 563 OLM LLC 4766 514 703 Korea Telecom (KIX) 9498 466 784 BHARTI BT INTERNET LTD. 6198 443 597 BellSouth Network Solutions, 855 433 559 Canadian Research Network 15270 429 460 PaeTec.net -a division of Pae 5668 414 532 CenturyTel Internet Holdings, 4755 404 969 Videsh Sanchar Nigam Ltd. Aut 1239 399 839 Sprint 17849 397 410 Telecommunications Technology 6517 379 413 Yipes Communications, Inc. 18101 372 437 Reliance Infocom Ltd Internet 22773 363 690 Cox Communications, Inc. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 8:50 12:1618 13:1 15:15 16:3 17:3 18:4 20:41 24:809 25:1 32:61 38:243 40:53 41:14 44:3 47:6 52:4 55:1 56:3 57:26 58:197 59:251 60:191 61:908 62:834 63:1889 64:3056 65:2253 66:3016 67:639 68:658 69:1565 70:391 71:88 72:889 74:75 75:5 80:785 81:695 82:650 83:401 84:379 85:583 86:395 87:432 88:158 89:403 91:1 121:15 122:3 123:1 124:337 125:598 128:153 129:201 130:118 131:314 132:31 133:8 134:160 135:48 136:176 137:84 138:213 139:47 140:557 141:135 142:363 143:189 144:240 145:41 146:317 147:141 148:351 149:189 150:114 151:115 152:72 153:117 154:5 155:215 156:176 157:178 158:165 159:172 160:94 161:85 162:218 163:164 164:233 165:222 166:183 167:243 168:486 169:125 170:355 171:14 190:197 192:5726 193:3404 194:2715 195:2024 196:865 198:3886 199:3298 200:4636 201:1023 202:6802 203:7060 204:3890 205:2019 206:2384 207:2926 208:2225 209:3448 210:2174 211:832 212:1279 213:1450 214:368 215:41 216:4064 217:1149 218:328 219:252 220:765 221:381 222:233 End of report Report Website: http://thyme.apnic.net

1 0

BGP Update Report
by cidr-report＠potaroo.net 18 Aug '06

18 Aug '06

------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 18 Aug '06

18 Aug '06

This report has been generated at Fri Aug 18 21:44:55 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 11-08-06 192373 125579 12-08-06 192469 125391 13-08-06 192248 125495 14-08-06 192399 125585 15-08-06 192453 125795 16-08-06 192642 125743 17-08-06 192848 125900 18-08-06 192996 125754 AS Summary 22814 Number of ASes in routing system 9554 Number of ASes announcing only one prefix 1464 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91538944 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 18Aug06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 192964 125856 67108 34.8% All ASes AS4134 1264 263 1001 79.2% CHINANET-BACKBONE No.31,Jin-rong Street AS4755 964 71 893 92.6% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS18566 955 145 810 84.8% COVAD - Covad Communications Co. AS4323 979 282 697 71.2% TWTC - Time Warner Telecom, Inc. AS721 1004 315 689 68.6% DISA-ASNBLK - DoD Network Information Center AS22773 688 53 635 92.3% CCINET-2 - Suddenlink Communications AS9498 786 179 607 77.2% BBIL-AP BHARTI BT INTERNET LTD. AS6197 1018 486 532 52.3% BATI-ATL - BellSouth Network Solutions, Inc AS7018 1464 951 513 35.0% ATT-INTERNET4 - AT&T WorldNet Services AS19262 684 185 499 73.0% VZGNI-TRANSIT - Verizon Internet Services Inc. AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS17488 522 47 475 91.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS855 559 88 471 84.3% CANET-ASN-4 - Aliant Telecom AS11492 725 284 441 60.8% CABLEONE - CABLE ONE AS3602 530 106 424 80.0% AS3602-RTI - Rogers Telecom Inc. AS18101 437 27 410 93.8% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS17676 492 96 396 80.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS15270 451 57 394 87.4% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS812 414 46 368 88.9% ROGERS-CABLE - Rogers Cable Inc. AS4766 670 307 363 54.2% KIXS-AS-KR Korea Telecom AS22047 456 94 362 79.4% VTR BANDA ANCHA S.A. AS6198 598 243 355 59.4% BATI-MIA - BellSouth Network Solutions, Inc AS4812 413 59 354 85.7% CHINANET-SH-AP China Telecom (Group) AS6467 393 47 346 88.0% ESPIRECOMM - Xspedius Communications Co. AS16852 364 53 311 85.4% FOCAL-CHICAGO - Focal Data Communications of Illinois AS9583 943 639 304 32.2% SIFY-AS-IN Sify Limited AS8151 768 466 302 39.3% Uninet S.A. de C.V. AS16814 329 46 283 86.0% NSS S.A. AS6517 409 128 281 68.7% YIPESCOM - Yipes Communications, Inc. AS19115 363 92 271 74.7% CHARTER-LEBANON - Charter Communications Total 20205 5920 14285 70.7% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.163.96.0/20 AS25767 WAVEFORM - Waveform Technology, LLC 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 87.76.0.0/16 AS39525 SPRITELINK SpriteLink Autonomous System 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DISA-ASNBLK - DoD Network Information Center 132.0.0.0/10 AS721 DISA-ASNBLK - DoD Network Information Center 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 138.136.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 139.56.0.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.64.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.72.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.140.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.96.250.0/24 AS2018 TENET-1 192.107.104.0/24 AS6458 Telgua 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.172.0.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.9.34.0/23 AS13030 INIT7 Init Seven AG, Zurich, Switzerland 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.35.104.0/24 AS12445 SPIDERNET-AS Selene s.p.a. 196.6.108.0/24 AS5713 SAIX-NET 196.6.175.0/24 AS3741 IS 196.6.176.0/23 AS3741 IS 196.6.183.0/24 AS3741 IS 196.6.196.0/24 AS3741 IS 196.6.199.0/24 AS3741 IS 196.6.208.0/24 AS3741 IS 196.6.211.0/24 AS3741 IS 196.6.212.0/23 AS3741 IS 196.6.212.0/24 AS3741 IS 196.6.222.0/23 AS3741 IS 196.6.237.0/24 AS3741 IS 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.136.0/22 AS3741 IS 196.10.140.0/22 AS3741 IS 196.10.231.0/24 AS3741 IS 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.11.0.0/20 AS3741 IS 196.11.40.0/21 AS3741 IS 196.11.135.0/24 AS3741 IS 196.11.188.0/23 AS3741 IS 196.11.190.0/24 AS3741 IS 196.11.251.0/24 AS3741 IS 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.108.0/24 AS3741 IS 196.13.116.0/22 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.127.0/24 AS3741 IS 196.13.128.0/22 AS3741 IS 196.13.144.0/22 AS2905 TICSA-ASN 196.13.152.0/21 AS2905 TICSA-ASN 196.13.160.0/24 AS2905 TICSA-ASN 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.13.252.0/22 AS2018 TENET-1 196.98.17.0/24 AS1257 TELE2 AB 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.54.249.0/24 AS2018 TENET-1 198.54.250.0/24 AS2018 TENET-1 198.54.251.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.101.4.0/22 AS721 DISA-ASNBLK - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.199.198.0/24 AS13671 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 199.249.233.0/24 AS1239 SPRINTLINK - Sprint 199.249.234.0/24 AS1239 SPRINTLINK - Sprint 199.249.235.0/24 AS174 COGENT Cogent/PSI 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.9.224.0/19 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.224.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.225.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.226.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.227.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.228.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.230.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.232.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.233.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.236.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.237.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.238.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.240.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.241.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.242.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.243.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.251.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.252.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.94.65.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.94.74.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.75.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.77.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.83.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.85.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.87.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.95.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/22 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.204.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.205.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.206.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.207.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 202.137.224.0/24 AS9942 COMINDICO-AP COMindico Australia 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.160.146.0/24 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.160.152.0/22 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.160.158.0/23 AS9837 POWERTEL-AP Powertel Ltd 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.169.96.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 202.169.97.0/24 AS4802 ASN-IINET iiNet Limited 202.169.98.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 202.169.102.0/24 AS13700 CAPITAL-NETWORKS - Capital Networks Pty Ltd 202.182.128.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.129.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.130.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.131.0/24 AS9519 BRAENET Braenet Pty Ltd 202.182.132.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.133.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.134.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.135.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.136.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.140.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.144.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.145.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.146.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.147.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.157.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.158.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.159.0/24 AS9519 BRAENET Braenet Pty Ltd 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.153.104.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.153.106.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.153.107.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.159.128.0/19 AS209 ASN-QWEST - Qwest 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 216.65.160.0/19 AS7770 TRITON - Triton Technologies, Inc. 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.201.72.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.73.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.74.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.75.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.76.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.77.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.78.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.79.0/24 AS14709 Telefonica Moviles Panama S.A. 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 221.121.128.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.129.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.130.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.131.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.132.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.133.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.157.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.158.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.159.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

GTSM - Do you use it?
by John Smith 18 Aug '06

18 Aug '06

Hi, I would like to know if operators use GTSM techniques with BGP and other routing protocols today? Is any at the perimeter of the routing domain deployed? I would believe that GTSM can provide protection against attacks more than a hop away and thus can save against a lot of potential Dos attacks. Is anything done by the operators here? Thanks, John

5 5

i am not a list moderator, but i do have a request
by Paul Vixie 18 Aug '06

18 Aug '06

which is, please move these threads to a non-SP mailing list. R [ 41: Danny McPherson ] Re: mitigating botnet C&Cs has become useless R [ 22: "Laurence F. Sheldon] R < 45: Danny McPherson > R [ 62: "Laurence F. Sheldon] R [ 162: "J. Oquendo" ] Re: [Full-disclosure] what can be done with botnet C&C's? R < 211: "Payam Tarverdyan Ch> R [ 66: Michael Nicks ] i already apologized to the moderators for participating in a non-ops thread here. there are plenty of mailing lists for which botnets are on-topic. nanog is not one and should not become one. nanog has other useful purposes. -- Paul Vixie

10 10

Re: [Full-disclosure] what can be done with botnet C&C's?
by J. Oquendo 17 Aug '06

17 Aug '06

> Subject: what can be done with botnet C&C's? > "I work on this [C&C] for 30 days, only to find out one of you took it > down." -- US Federal Agent, two days ago, ISOI (DA Workshop). Oddly agents have resources right in front of them to assist them (CALEA, and other totalitarian laws) and yet they fail to use these resources properly only optioning to promote newer and even more stupider laws. > And still, sticking to networking issues, as obviously we cannot yet > depend on law enforcement to protect our networks for us, how do we handle > C&C's? Where in the rule book does it state that LEA's are here to protect any network. I say it begins with the CSO's, managers, engineers (both network and security engineers.) Bear in mind cross juridstiction across international boundaries. > When we kill them (and by "kill" I naturally mean "report our suspicion > to the responsible authority so they can investigate, confirm and proceed > according to their AUP") we kill them, but only to our knowledge. They > immediately move elsewhere we do not know about in our space or someone > else's, maybe misplacing an extremely smallish percentage of their > population while they are at it. Let's be realistic about this. Most providers in the US at least have some form of CALEA capabilities which can monitor what is coming from where in order to filter networks. > Okay, say I am right... What *can* we do? Re-write AUP's from the ISP level blocking out and allowing out on a needed basis. For those BOTNETS utilizing IRC, they'll be nipped at the bud, for those in these networks truly utilizing IRC and other similar venues, an ISP could either set up their own server and link to other servers, or the IRC user themselves are almost always smart enough to figure out how to jump on an IRC server. > We can take advantage: > 1. QoS and traffic limiting tools. > Many tools created in recent years, and used exstensively by many ISP's, > regardless of any Net Neutrality legislation, are at our disposal and > already implemented on our networks. QoS is a joke. The problem with QoS is a configuration issue. How many networks are still allowing broadcasts (Smurf). What makes one think that if they can't configure simple RFC filtering and containment of broadcast, they'd be able/capable/willing to configure QoS. Outside of this, the biggest argument will be a "not in my backyard" issue of "why are you filtering our traffic." > Much like, for business reasons, many of us would limit P2P, how about > limiting the traffic to compromised users? > How, what and when is up to you. Laziness. Come on now, and by the way greeting Gadi, you should know offhand the slack that comes from lazy admins unwilling to do squat but read this in the background and continue eating ho-ho's and donuts. > Watch the flows, block the users from communicating out to them. Watch > these users and see where else they are communicating in comparison to > other users, en-masse. Breaking laws here if you ask me. Watching flows. Isn't this an illegal wiretap. > 4. Stop internal network infections. It is unbelievable how the networks > with the most bots are the networks that allow internal users to connect > wherever they want within the network. Re-read my lazy admin donut syndrome. > My answer is this, if you fail to remove a spy, as another would just take > his place, wouldn't you rather know where that spy is and work to take > him down for good? One thing that will end up happening as is evident is, you will end up creating a smarter and smarter botnet. Filter from here, they move, filter this port, they jump. Most network admins know how to entirely block these things but they don't. How about a completely new approach via AUP. "Welcome to Foofoo Network's your ISP. We allow SMTP, HTTP, HTTPS, IM." Period. No need to keep the other 65531 ports open. > Do you know who your local fed is? Definitely not on Clue Avenue. If they were there would be no need to try and impose LawB atop LawA which never worked in the first place. > I would like to hear some opinions on what networks can do, ecnomically, > from people here. Please stick to network operations issues. > Gadi. Here is my opinion... Responsibility on both ends. For the user and the provider. The One-Two punch 1) For an ISP something like Campus Manager would work wonders (http://www.bradfordnetworks.com/products/security.html) Configured in the background it can take machines and shove them into a non useable VLAN until they get their act together. 2) Client breaching Terms of Service agreements? Hold them accountable. Users are responsible for their own machines: <analogy> UserA buys a gun and keeps it in his house. UserA does not buy a safe or take necessary precautions to safeguard his gun. LuzerB uses that gun for a crime. LuzerC (UserA's son or daughter brings it to show and tell) LuzerD (UserA's neighbor blows his brain out via Russian Roulette) </analogy> In all of these instances UserA would still have to answer for not taking the necessary precautions. Why not implement the same procedures when signing up a new user via TOS agreements. I'm sure more people would be reluctant to just close their eyes after one warning followed by them having to pay for not taking precautions. Sure, argue about the clueless ones who don't know who to tie their shoes. 1) Would make them more aware. 2) Would make networks safer since their is accountability. My two cents for the moment. -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743 sil infiltrated . net http://www.infiltrated.net "How a man plays the game shows something of his character - how he loses shows all" - Mr. Luckey ----- End forwarded message ----- -- =+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+ J. Oquendo http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x1383A743 sil infiltrated . net http://www.infiltrated.net "How a man plays the game shows something of his character - how he loses shows all" - Mr. Luckey

9 16