- NANOG - lists.nanog.org

Announcing long AS-sets tomorrow
by Lorenzo Colitti 24 Jun '05

24 Jun '05

Hi, as part of our AS-set stuffing experiments (announced, including links to in-depth information, in [1]), we will be announcing unusually large AS-sets tomorrow, Thursday 16 June. The prefixes involved will be 84.205.73.0/24 and 84.205.89.0/24, both orignating in AS12654. The AS-sets will consist of AS12654 repeated n times, thus the paths will look like 12654 {12654, 12654, ..., 12654}. No other AS numbers will be used. The values of n we will use are 25, 50, 75 and 100. The announcements are designed to discover how far large AS-sets are propagated, and thus how effective our techniques can be, in today's Internet with today's IPv4 operational practices. This is *not* a test to see if routers will fall over: we have successfully tested longer AS-sets in the lab on both Cisco and Juniper, and longer AS-paths and AS-sets have been observed in the wild [2,3]. See [1] for more information on the safety of these announcements. The proposed schedule is as follows: 84.205.73.0/24 84.205.89.0/24 14:00 UTC: 25-element AS-set 50-element AS-set 14:30 UTC: withdrawal withdrawal 16:00 UTC: 75-element AS-set 100-element AS-set 16:30 UTC: withdrawal withdrawal If anyone should see a problem during the announcements, please contact me and I will take immediate action. Regards, Lorenzo [1] http://www.merit.edu/mail.archives/nanog/2005-06/msg00210.html [2] http://www.ripe.net/projects/ris/Talks/0101_RIPE38_AA/sld003.html [3] http://www.ripe.net/maillists/ncc-archives/ris-users/2002/msg00044.html -- lorenzo(a)ripe.net colitti(a)dia.uniroma3.it www.ripe.net www.dia.uniroma3.it/~compunet RIPE NCC Roma Tre Computer Networks research group

25 54

Weekly Routing Table Report
by Routing Table Analysis 24 Jun '05

24 Jun '05

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 25 Jun, 2005 Analysis Summary ---------------- BGP routing table entries examined: 165548 Prefixes after maximum aggregation: 95759 Unique aggregates announced to Internet: 80166 Total ASes present in the Internet Routing Table: 19940 Origin-only ASes present in the Internet Routing Table: 17366 Origin ASes announcing only one prefix: 8151 Transit ASes present in the Internet Routing Table: 2574 Transit-only ASes present in the Internet Routing Table: 75 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 24 Prefixes from unregistered ASNs in the Routing Table: 23 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 15 Number of addresses announced to Internet: 1402686944 Equivalent to 83 /8s, 155 /16s and 77 /24s Percentage of available address space announced: 37.8 Percentage of allocated address space announced: 58.2 Percentage of available address space allocated: 65.1 Total number of prefixes smaller than registry allocations: 78310 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 34367 Total APNIC prefixes after maximum aggregation: 16000 Prefixes being announced from the APNIC address blocks: 32250 Unique aggregates announced from the APNIC address blocks: 16352 APNIC Region origin ASes present in the Internet Routing Table: 2297 APNIC Region origin ASes announcing only one prefix: 672 APNIC Region transit ASes present in the Internet Routing Table: 352 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 19 Number of APNIC addresses announced to Internet: 187035776 Equivalent to 11 /8s, 37 /16s and 240 /24s Percentage of available APNIC address space announced: 69.4 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 124/7, 126/8, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 88880 Total ARIN prefixes after maximum aggregation: 54148 Prefixes being announced from the ARIN address blocks: 69457 Unique aggregates announced from the ARIN address blocks: 25547 ARIN Region origin ASes present in the Internet Routing Table: 10026 ARIN Region origin ASes announcing only one prefix: 3677 ARIN Region transit ASes present in the Internet Routing Table: 940 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 18 Number of ARIN addresses announced to Internet: 251011328 Equivalent to 14 /8s, 246 /16s and 33 /24s Percentage of available ARIN address space announced: 62.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/6, 74/7, 76/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 31616 Total RIPE prefixes after maximum aggregation: 21716 Prefixes being announced from the RIPE address blocks: 28690 Unique aggregates announced from the RIPE address blocks: 19252 RIPE Region origin ASes present in the Internet Routing Table: 6795 RIPE Region origin ASes announcing only one prefix: 3574 RIPE Region transit ASes present in the Internet Routing Table: 1115 Average RIPE Region AS path length visible: 5.2 Max RIPE Region AS path length visible: 24 Number of RIPE addresses announced to Internet: 209635648 Equivalent to 12 /8s, 126 /16s and 201 /24s Percentage of available RIPE address space announced: 73.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 8994 Total LACNIC prefixes after maximum aggregation: 3123 Prefixes being announced from the LACNIC address blocks: 7377 Unique aggregates announced from the LACNIC address blocks: 4304 LACNIC Region origin ASes present in the Internet Routing Table: 622 LACNIC Region origin ASes announcing only one prefix: 189 LACNIC Region transit ASes present in the Internet Routing Table: 113 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 21 Number of LACNIC addresses announced to Internet: 20373792 Equivalent to 1 /8s, 54 /16s and 225 /24s Percentage of available LACNIC address space announced: 30.4 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 1662 Total AfriNIC prefixes after maximum aggregation: 772 Prefixes being announced from the AfriNIC address blocks: 1016 Unique aggregates announced from the AfriNIC address blocks: 774 AfriNIC Region origin ASes present in the Internet Routing Table: 131 AfriNIC Region origin ASes announcing only one prefix: 39 AfriNIC Region transit ASes present in the Internet Routing Table: 16 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2295552 Equivalent to 0 /8s, 35 /16s and 7 /24s Percentage of available AfriNIC address space announced: 6.8 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 918 5150 193 CHINANET-BACKBONE 9583 758 55 79 Sify Limited 1221 754 1453 532 Telstra Pty Ltd 4755 659 248 148 Videsh Sanchar Nigam Ltd. Aut 4766 595 3413 279 Korea Telecom (KIX) 7545 501 104 72 TPG Internet Pty Ltd 17676 436 6589 75 Softbank BB Corp. 9443 375 77 77 Primus Telecommunications 9929 355 221 48 China Netcom Corp. 2907 345 1822 320 SINET Japan 10036 345 65 311 C&M Communication Co. Ltd. 9498 323 83 61 BHARTI BT INTERNET LTD. 17557 319 22 154 Pakistan Telecom 7474 315 272 218 SingTel Optus Pty Ltd 4802 282 49 161 Wantree Development 4808 280 243 158 CNCGROUP IP network: China169 9837 278 80 182 Powertel Ltd 18302 270 108 151 SK Global co., Ltd 17974 267 65 14 PT TELEKOMUNIKASI INDONESIA 2764 254 238 199 AAPT Limited ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1485 6460 967 AT&T WorldNet Services 174 1153 5809 1071 Cogent Communications 4323 1121 647 217 Time Warner Telecom 721 1112 21787 313 DLA Systems Automation Center 701 1013 8168 855 UUNET Technologies, Inc. 6197 930 535 432 BellSouth Network Solutions, 1239 894 2903 645 Sprint 2386 885 526 652 AT&T Data Communications Serv 18566 824 224 7 Covad Communications 20115 648 497 321 Charter Communications 209 630 3507 498 Qwest 27364 565 43 18 Armstrong Cable Services 3356 560 10790 428 Level 3 Communications, LLC 3602 543 123 101 Sprint Canada, Inc. 852 539 1093 388 Telus Advanced Communications 3561 539 2385 422 Savvis 22773 495 1188 23 Cox Communications, Inc. 7725 491 60 15 MediaOne 5668 488 115 25 CenturyTel Internet Holdings, 6198 463 416 218 BellSouth Network Solutions, RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 596 2001 488 UUNET - Commercial IP service 3320 305 3232 242 Deutsche Telekom AG 3301 297 1081 284 TeliaNet Sweden 8220 269 469 264 COLT Telecommunications 680 244 2041 240 DFN-IP service G-WiN 8708 231 254 214 Romania Data Systems S.A. 3246 226 488 221 Song Networks 1257 199 712 175 SWIPnet Swedish IP Network 5515 179 778 129 Sonera Solution Autonomous Sy 786 174 1778 174 The JANET IP Service 5400 170 285 145 BT Ignite European Backbone 6746 169 47 147 Dynamic Network Technologies, 3269 168 1520 72 TELECOM ITALIA 8866 156 21 11 Bulgarian Telecommunication C 3300 153 184 86 AUCS Communications Services 6830 147 537 31 UPC Distribution Services 9121 142 272 36 TTnet Autonomous System 25186 139 137 96 France Telecom Transpac's Tra 3352 137 1272 35 Ibernet, Internet Access Netw 8551 133 116 20 Bezeq International LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 372 600 161 UniNet S.A. de C.V. 16814 264 16 12 NSS, S.A. 11172 219 98 52 Servicios Alestra S.A de C.V 6147 197 110 21 Telefonica Del Peru 11664 196 19 23 Keytech SA 14117 152 9 5 Telefonica del Sur S.A. 7303 149 68 21 Telecom Argentina Stet-France 22047 133 112 7 VTR PUNTO NET S.A. 6505 131 90 88 Global One Communicaoes Ltda 11556 131 64 3 Cable-Wireless Panama 19169 111 7 22 Telconet 18822 109 7 14 TELEFONICA MANQUEHUE 19632 109 14 5 Metropolis Intercom S.A. 13999 107 52 9 Mega Cable S.A. de C.V. 10481 101 40 7 Prima S.A. 6503 100 146 72 AVANTEL, S.A. 23216 96 24 23 RAMtelecom Telecomunicaciones 21826 95 13 20 INTERCABLE 22927 95 73 25 TELEFONICA DE ARGENTINA 5639 91 12 9 Telecommunications Services o AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 266 637 223 The Internet Solution 5536 119 15 17 Internet Egypt Network 20928 97 16 2 Noor Advanced Technologies AS 2018 91 295 86 Tertiary Education Network 8452 90 28 6 TEDATA 2905 75 266 67 The Internetworking Company o 6713 59 54 8 Itissalat Al-MAGHRIB 24835 57 34 6 RAYA Telecom - Egypt 9129 40 3 3 UUNET Kenya 12455 40 6 3 Jambonet Autonomous system 5713 36 142 29 Telkom SA Ltd 15475 34 84 4 Nile Online 15706 31 8 3 Sudatel Internet Exchange Aut 8524 25 1 4 AUCEGYPT Autonomous System 16637 22 10 19 Johnnic e-Ventures 10798 19 1 11 Standard Bank of South Africa 23889 19 5 8 MAURITIUS TELECOM 21491 18 1 1 UTL On-line is RF broadband I 12258 17 3 11 Vodacom Internet Company 15808 17 2 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1121 904 Time Warner Telecom 18566 824 817 Covad Communications 721 1112 799 DLA Systems Automation Center 4134 918 725 CHINANET-BACKBONE 9583 758 679 Sify Limited 27364 565 547 Armstrong Cable Services 4755 659 511 Videsh Sanchar Nigam Ltd. Aut 6197 930 498 BellSouth Network Solutions, 7725 491 476 MediaOne 22773 495 472 Cox Communications, Inc. 5668 488 463 CenturyTel Internet Holdings, 3602 543 442 Sprint Canada, Inc. 7545 501 429 TPG Internet Pty Ltd 6467 427 393 E.Spire Communications, Inc. 17676 436 361 Softbank BB Corp. 6140 403 329 ImpSat 20115 648 327 Charter Communications 4766 595 316 Korea Telecom (KIX) 9929 355 307 China Netcom Corp. 19262 408 304 Verizon Global Networks List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 65050 PRIVATE 168.96.148.0/24 6140 ImpSat 65507 PRIVATE 200.0.64.0/24 27750 Cooperación Latino A 65004 PRIVATE 200.0.113.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.0.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.1.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.2.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.3.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.4.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.5.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.6.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.7.0/24 28477 Universidad Autonoma 64512 PRIVATE 200.59.145.0/24 11664 Keytech SA 64512 PRIVATE 200.59.146.0/24 11664 Keytech SA 64512 PRIVATE 200.59.147.0/24 11664 Keytech SA 64512 PRIVATE 200.59.161.0/24 11664 Keytech SA 64512 PRIVATE 200.59.162.0/24 11664 Keytech SA 64512 PRIVATE 200.61.32.0/23 11664 Keytech SA 64512 PRIVATE 200.61.62.0/23 11664 Keytech SA 64512 PRIVATE 200.80.154.0/23 11664 Keytech SA 65005 PRIVATE 203.200.197.0/24 4755 Videsh Sanchar Nigam 65444 PRIVATE 212.25.125.0/24 8551 Bezeq International 65529 PRIVATE 216.21.199.0/24 14697 VDot.Net 65529 PRIVATE 216.152.237.0/24 14697 VDot.Net Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 50.160.0.0/13 1221 Telstra Pty Ltd 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 172.32.0.0/24 7011 Citizens Utilities 192.43.230.0/24 7575 Australian Academic and Rease 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.169.0.0/23 3970 RGnet, Inc. 192.172.0.0/19 721 DLA Systems Automation Center 192.200.100.0/24 7018 AT&T WorldNet Services Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:3 /10:8 /11:15 /12:73 /13:160 /14:310 /15:591 /16:8432 /17:2600 /18:4450 /19:10445 /20:11312 /21:9339 /22:12751 /23:13741 /24:90316 /25:329 /26:307 /27:172 /28:45 /29:29 /30:69 /31:0 /32:33 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 808 824 Covad Communications 6197 758 930 BellSouth Network Solutions, 7018 687 1485 AT&T WorldNet Services 2386 600 885 AT&T Data Communications Serv 9583 576 758 Sify Limited 27364 556 565 Armstrong Cable Services 4323 542 1121 Time Warner Telecom 7725 462 491 MediaOne 4766 413 595 Korea Telecom (KIX) 5668 402 488 CenturyTel Internet Holdings, 1239 381 894 Sprint 702 368 596 UUNET - Commercial IP service 6198 337 463 BellSouth Network Solutions, 10036 335 345 C&M Communication Co. Ltd. 7011 304 354 Citizens Utilities 6467 295 427 E.Spire Communications, Inc. 15270 286 311 PaeTec.net -a division of Pae 20115 280 648 Charter Communications 6517 274 296 Yipes Communications, Inc. 9929 274 355 China Netcom Corp. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:17 9:1 12:1545 13:1 15:9 16:2 17:3 18:3 20:4 24:1180 30:2 32:69 33:4 38:131 40:53 44:3 47:2 52:4 55:2 56:3 57:27 58:101 59:52 60:57 61:789 62:624 63:1881 64:2767 65:2091 66:2922 67:597 68:541 69:1067 70:120 71:10 72:245 80:583 81:571 82:448 83:277 84:209 85:265 86:27 128:183 129:174 130:87 131:297 132:37 133:1 134:145 135:43 136:135 137:67 138:168 139:59 140:263 141:105 142:149 143:144 144:194 145:32 146:287 147:109 148:303 149:171 150:106 151:65 152:107 153:88 154:4 155:142 156:78 157:99 158:160 159:169 160:77 161:69 162:208 163:92 164:212 165:178 166:154 167:242 168:431 169:139 170:310 171:9 172:1 192:5689 193:3197 194:2391 195:1573 196:659 198:3905 199:3305 200:4009 201:171 202:5849 203:6386 204:3764 205:2024 206:2461 207:2820 208:2086 209:3310 210:1712 211:857 212:1230 213:1337 214:264 215:31 216:3447 217:1158 218:207 219:133 220:393 221:230 222:112 End of report

1 0

Heads up: DNS survey traffic from 199.45.255.0/24
by Duane Wessels 24 Jun '05

24 Jun '05

Hi NANOG, Beginning monday of next week (2005-06-27) my company (The Measurement Factory) plans to begin a survey of DNS authoritative nameservers. You may see queries, including VERSION.BIND and zone transfer attempts, coming from 199.45.255.0/24. For more information please see http://dns.measurement-factory.com/surveys/200506.html Note: We submitted an ARIN template yesterday for this netblock with appropriate comments and contacts. However, we have not yet received an "approved" reply yet. Duane W.

1 0

[OT] GBLX to the courtesy phone
by Joe Abley 24 Jun '05

24 Jun '05

[Apologies in advance for the noise, to the vast majority of people here who are not GBLX ops people. The GBLX NOC is working a ticket for me through the usual channels, but prioritisation through the front line as a non-customer is understandably difficult.] I've spent a few days trying to fix a route propagation problem that is affecting reachability of a ccTLD slave server to many people in the cc in question, and that work would be enormously accelerated if a 3549 neteng type with a few spare minutes could drop me a line.

1 0

AS-set results, new experiments 30/06/2005
by Lorenzo Colitti 24 Jun '05

24 Jun '05

Hi, we have posted preliminary results of our long AS-set announcements to our web site: http://www.dia.uniroma3.it/~compunet/bgp-probing/diffusion.html While we are still working on an in-depth analysis, the results indicate that while the presence or absence of an AS-set in an announcement does have an effect on its propagation, the length of the AS-set, if present, does not have a significant effect. We would also like to move forward with further announcements to determine the effectiveness of our topology discovery algorithms in the IPv4 network. The algorithms, described in our posting a few weeks ago [1] and on the project's web page [2], make use of announcements involving the AS numbers of other ASes to allow ISPs to discover how their announcements can be propagated and how the policies of other ASes in the Internet affect their prefixes. The extensive tests we have performed on the global IPv6 Internet show that our algorithms are effective, but we would like to see how effective they are on the IPv4 Internet given the different operational practices in use. Therefore, starting on Thursday 30 June at 14:00 UTC the prefixes 84.205.73.0/24 and 84.205.89.0/24 will be announced with AS-paths of the form 12654 {...} where the AS-set contains the numbers of neighboring ASes. The announcements will not last more than a few days; as before, should anyone see any problems, please contact me and I will take immediate action. Finally, our tests show that our announcements cause no technical problems; however, if anyone would prefer their AS number not to appear in the AS-sets, and feels that filtering our prefixes is not sufficient, please contact me and we will not use them. Regards, Lorenzo [1] http://www.merit.edu/mail.archives/nanog/msg08501.html [2] http://www.dia.uniroma3.it/~compunet/bgp-probing/ -- lorenzo(a)ripe.net colitti(a)dia.uniroma3.it www.ripe.net www.dia.uniroma3.it/~compunet RIPE NCC Roma Tre Computer Networks research group

1 0

Re: Engineer headcount calculations
by Luke Parrish 24 Jun '05

24 Jun '05

Yes I agree, this is a topic that comes up time and time again in my conversations with other network managers, however I have yet to hear a clear way. Luke >I don't think it is the greatest approach so I am curious to hear if >there is some better ways of doing it. > >Glenn > > > >On 6/23/05, Luke Parrish <lukep(a)centurytel.net> wrote: > > > > Measuring a customer service rep's time on a daily basis is a pretty easy > > and straightforward task. You can get down to the minute by minute level of > > how a CSR spends their time each day. You can also easily relate that back > > to customer growth which gives you how many CSR's you need for your next > > budget year. CSR's have a set of tasks to complete that rarely change day > > to day. > > > > However, what about a network engineer? > > > > A day in the life of an engineer: > > > > outage resolution > > proactive projects(some 2 hours and some 300 hours) > > reactive projects(some 2 hours and some 300 hours) > > customer escalation > > escalated network issue > > maintenance windows > > writing/researching change management > > time spent in lab researching network issues > > turning up new service > > planning for new service > > turning down old service > > taking phone calls from internal business units needing support > > configuring interfaces for new dedicated customers > > ip administration(sometimes 3 minutes per request sometimes 2 days of > > justification on a request) > > equipment upgrades > > TAC research > > equipment evaluation > > reports > > shipping equipment > > boxing equipment > > meetings > > > > etc etc etc etc etc etc, everyone knows where I am going. > > > > So the million dollar question, how do you account for their time to prove > > in a business case that you need to add additional headcount. If you plan > > on adding 110,000 DSL subs next year then we all know that we have to add > > engineers to support the network that will have to be built. However, how > > do you prove that with numbers? > > > > I can say, I have to turn up 250 new DSLAMs, 60 new routers, 18 new > > internet drains, etc etc which I can easily relate back to manhours for > > turnup. However how do you allocate manhours to maintenance of the network? > > There are some easy ones, 1 IOS upgrade a year times number of devices on > > the network, 1 bandwidth upgrade per year times number of CO's, etc etc. > > But what about the day to day that I listed above? > > > > We have to sell this idea to accountants, not other engineers, they only > > see numbers on paper. Its easy to all of us, we know how many people we > > need, but how do you put a business case together to sell it? > > > > Can anyone out there share what type of system they use to account for > > engineers time, or really any insight at all would be helpful. > > > > One answer would be a system that the engineer would open and close time > > based tickets everytime they made a move during the day. However I dont > > know many network engineers at the enable level that are restricted this > > way, however it is an option. > > > > luke > > > > > > > > > > > > > > Luke Parrish Centurytel Internet Operations 318-330-6661

1 0

The Cidr Report
by cidr-report＠potaroo.net 24 Jun '05

24 Jun '05

This report has been generated at Fri Jun 24 21:50:19 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 17-06-05 161372 109621 18-06-05 161506 109697 19-06-05 161690 109630 20-06-05 161664 109789 21-06-05 161886 109859 22-06-05 161631 109842 23-06-05 161547 109959 24-06-05 161602 110059 AS Summary 19834 Number of ASes in routing system 8146 Number of ASes announcing only one prefix 1474 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 90545408 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 24Jun05 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 161697 110056 51641 31.9% All ASes AS4323 1116 220 896 80.3% TWTC - Time Warner Telecom AS18566 824 8 816 99.0% COVAD - Covad Communications AS4134 906 226 680 75.1% CHINANET-BACKBONE No.31,Jin-rong Street AS27364 565 22 543 96.1% ACS-INTERNET - Armstrong Cable Services AS721 1109 568 541 48.8% DLA-ASNBLOCK-AS - DoD Network Information Center AS7018 1474 958 516 35.0% ATT-INTERNET4 - AT&T WorldNet Services AS7725 491 15 476 96.9% CCH-AS7 - Comcast Cable Communications Holdings, Inc AS22773 494 25 469 94.9% CCINET-2 - Cox Communications Inc. AS6197 920 500 420 45.7% BATI-ATL - BellSouth Network Solutions, Inc AS3602 543 147 396 72.9% SPRINT-CA-AS - Sprint Canada Inc. AS6467 425 34 391 92.0% ESPIRECOMM - e.spire Communications, Inc. AS17676 436 80 356 81.7% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS4766 577 281 296 51.3% KIXS-AS-KR Korea Telecom AS9929 344 48 296 86.0% CNCNET-CN China Netcom Corp. AS14654 277 7 270 97.5% WAYPORT - Wayport AS6140 403 136 267 66.3% IMPSAT-USA - ImpSat AS15270 306 58 248 81.0% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS5668 488 241 247 50.6% AS-5668 - CenturyTel Internet Holdings, Inc. AS1239 887 644 243 27.4% SPRINTLINK - Sprint AS23126 260 22 238 91.5% KMCTELCOM-DIA - KMC Telecom, Inc. AS2386 884 653 231 26.1% INS-AS - AT&T Data Communications Services AS6167 308 80 228 74.0% CELLCO-PART - Cellco Partnership AS4755 517 290 227 43.9% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS6198 461 238 223 48.4% BATI-MIA - BellSouth Network Solutions, Inc AS812 242 20 222 91.7% ROGERS-CABLE - Rogers Cable Inc. AS22909 358 144 214 59.8% DNEO-OSP1 - Comcast Cable Communications, Inc. AS11456 312 99 213 68.3% NUVOX - NuVox Communications, Inc. AS9498 326 114 212 65.0% BBIL-AP BHARTI BT INTERNET LTD. AS6478 376 165 211 56.1% ATT-INTERNET3 - AT&T WorldNet Services AS7545 500 291 209 41.8% TPG-INTERNET-AP TPG Internet Pty Ltd Total 17129 6334 10795 63.0% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 64.9.224.0/19 AS209 ASN-QWEST - Qwest 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.127.0.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.187.96.0/22 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.96.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.97.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.98.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.99.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.100.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.101.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.102.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.103.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.104.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.105.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.205.193.0/24 AS174 COGENT Cogent/PSI 66.205.194.0/24 AS174 COGENT Cogent/PSI 66.205.206.0/24 AS21510 TRISTAR - Tristar Communications 70.64.0.0/13 AS6327 SHAW - Shaw Communications Inc. 72.24.0.0/16 AS11492 CABLEONE - CABLE ONE 72.29.80.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.81.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.82.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.83.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.84.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.85.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.86.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.87.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.88.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.89.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.90.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.91.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.92.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.93.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.94.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 72.29.95.0/24 AS22659 LIQUIDIX - LIQUID COMMUNICATIONS, INC. 80.92.48.0/20 AS20889 STELLAR-AS Stellar-PCS GmbH Germany 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS29259 DE-IABG-TELEPORT IABG Teleport, DE 192.107.104.0/24 AS6458 GUATEL 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.200.100.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 193.30.28.0/22 AS12374 LFNET-AS01 LF.net Netzwerksysteme GmbH 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications - www.colt.net 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.97.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.32.174.0/23 AS8426 CLARANET-AS ClaraNET 194.59.176.0/20 AS1273 CW Cable & Wireless 194.59.178.0/24 AS8481 TRANSNET transnet INTERNET Services 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 196.3.162.0/24 AS6083 AFRINIC African Network Information Center 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.88.0/24 AS89 NUSC-CSTLNET-AS - Naval Underwater Systems Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.247.0/24 AS3475 LANT-AFLOAT - Department of the Navy 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET - CityNet, Inc. 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM - GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.203.254.0/23 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.96.44.0/23 AS19092 360NETWORKS-US - 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NETWORKS-US - 360Networks (USA) Inc. 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 200.49.0.0/20 AS14551 ALTERNET-SA-AS - UUNET Technologies, Inc. 200.49.8.0/21 AS6140 IMPSAT-USA - ImpSat 202.86.252.0/22 AS4748 RESOLINK-AS Resources Linke Network Limited 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 TELEONE-HK TeleTeleOne (HK) Limited 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBIT - Exobit Networks Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.32.160.0/19 AS14563 MICROCAST - Microcast, Inc 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 208.53.224.0/19 AS13576 SDNET - SOUTH DAKOTA NETWORK 208.138.48.0/20 AS6971 ATG-1 - Advanced Telcom Group, Inc 209.40.208.0/21 AS16592 Cybernet El Salvador 209.40.216.0/21 AS16592 Cybernet El Salvador 209.44.124.0/24 AS22241 ICCEPTS - Integrated Communications Concepts 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INTERPAC - Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL - Telesat International Ltd. 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.82.160.0/20 AS20481 CALYX-NL Calyx Internet B.V. Netherlands 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.145.200.0/21 AS20304 JVLNET - JVLNET Internet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.178.37.0/24 AS3356 LEVEL3 Level 3 Communications 216.178.39.0/24 AS3356 LEVEL3 Level 3 Communications 216.178.42.0/24 AS3356 LEVEL3 Level 3 Communications 216.178.43.0/24 AS3356 LEVEL3 Level 3 Communications 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Engineer headcount calculations
by Luke Parrish 23 Jun '05

23 Jun '05

Measuring a customer service rep's time on a daily basis is a pretty easy and straightforward task. You can get down to the minute by minute level of how a CSR spends their time each day. You can also easily relate that back to customer growth which gives you how many CSR's you need for your next budget year. CSR's have a set of tasks to complete that rarely change day to day. However, what about a network engineer? A day in the life of an engineer: outage resolution proactive projects(some 2 hours and some 300 hours) reactive projects(some 2 hours and some 300 hours) customer escalation escalated network issue maintenance windows writing/researching change management time spent in lab researching network issues turning up new service planning for new service turning down old service taking phone calls from internal business units needing support configuring interfaces for new dedicated customers ip administration(sometimes 3 minutes per request sometimes 2 days of justification on a request) equipment upgrades TAC research equipment evaluation reports shipping equipment boxing equipment meetings etc etc etc etc etc etc, everyone knows where I am going. So the million dollar question, how do you account for their time to prove in a business case that you need to add additional headcount. If you plan on adding 110,000 DSL subs next year then we all know that we have to add engineers to support the network that will have to be built. However, how do you prove that with numbers? I can say, I have to turn up 250 new DSLAMs, 60 new routers, 18 new internet drains, etc etc which I can easily relate back to manhours for turnup. However how do you allocate manhours to maintenance of the network? There are some easy ones, 1 IOS upgrade a year times number of devices on the network, 1 bandwidth upgrade per year times number of CO's, etc etc. But what about the day to day that I listed above? We have to sell this idea to accountants, not other engineers, they only see numbers on paper. Its easy to all of us, we know how many people we need, but how do you put a business case together to sell it? Can anyone out there share what type of system they use to account for engineers time, or really any insight at all would be helpful. One answer would be a system that the engineer would open and close time based tickets everytime they made a move during the day. However I dont know many network engineers at the enable level that are restricted this way, however it is an option. luke

1 0

md5 for bgp tcp sessions
by Todd Underwood 23 Jun '05

23 Jun '05

eric, all, not to pick on eric at all, but since he raised the issue... On Wed, Jun 22, 2005 at 11:42:46AM -0400, Eric Gauthier wrote: > likely need to make modifications to our IGP/EGP setup. Though we filter > OSPF multicast traffic, we wanted to add in MD5 passwords to our > neighbors. just a quick comment here. i would encourage you not to do that. the md5 password hack to protect tcp sessions is rapidly falling out of favor for a number of reasons. among them: 1) it protects against a very limited "vulnerability". for operating systems that stay up for reasonable periods of time, that generate sufficiently random ISNs and that check for in-windowness of syns and rsts, there is a very limited exposure. 2) the cure is worse than the disease: a) many (all?) implementations of md5 protection of tcp expose new, easy-to-exploit vulnerabilities in host OSes. md5 verification is slow and done on a main processor of most routers. md5 verification typically takes places *before* the sequence number, ports, and ip are checked to see whether they apply to a valid session. as a result, you've exposed a trivial processor DOS to your box. b) coordination problems cause downtime. password coordination problems are reported to be a major cause of downtime among peers that i interact with. this downtime is costly and is much greater than the downtime caused by the (theoretical and not actively exploited) tcp "vulnerability" i would encourage everyone to seriously rethink the routine use of MD5 passwords to protect BGP tcp sessions. t. -- _____________________________________________________________________ todd underwood director of operations & security renesys - interdomain intelligence todd(a)renesys.com www.renesys.com

7 8

RE: md5 for bgp tcp sessions
by Hannigan, Martin 23 Jun '05

23 Jun '05

> -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Todd Underwood > Sent: Thursday, June 23, 2005 5:57 AM > To: Richard A Steenbergen > Cc: nanog(a)merit.edu > Subject: Re: md5 for bgp tcp sessions > > > > ras, all, > > On Thu, Jun 23, 2005 at 12:14:12AM -0400, Richard A Steenbergen wrote: > > On Wed, Jun 22, 2005 at 10:04:09PM -0400, Todd Underwood wrote: > > rolling out magic code because your > vendor tells you to is a bad idea; That's mostly the result of the calamitous failure in vulnerability release methodology, not Operator stupidity. -M<

3 2