- NANOG - lists.nanog.org

radius question
by snort bsd 21 Jan '05

21 Jan '05

hi: are authentication packets between routers and radius servers encrypted or clear-text? Thanks dave_au __________________________________ Do you Yahoo!? Meet the all-new My Yahoo! - Try it today! http://my.yahoo.com

3 2

Major AboveNet problems?
by Chris A. Epler 21 Jan '05

21 Jan '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Anyone have any details on what is going on with AboveNet? Evidently something major but our support contacts didn't have a lot of details, said there'd be something out later this afternoon about it. Wondering if others are experiencing problems with them. - -- ~ /"\ ~ \ / ASCII RIBBON CAMPAIGN ~ X AGAINST HTML MAIL ~ / \ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.6 (GNU/Linux) iD8DBQFB8U0/25hr1at2zS8RApGYAJ9DosyIFlaCoR/vjWj4QYJyYhcVkQCgj6Db y16tFmLYkDM/jep4Ug9t1Vs= =i27H -----END PGP SIGNATURE-----

4 3

FW: Graphing Peering
by Daniel Golding 21 Jan '05

21 Jan '05

Additional information on MAC accounting from Hakan Lindholm... (specifically, the SNMPv2c object to pull 64bit MAC accounting counters) - Dan ------ Forwarded Message From: Hakan Lindholm <hakan(a)staff.spray.se> Date: Fri, 21 Jan 2005 20:36:45 +0100 (CET) To: Daniel Golding <dgolding(a)burtongroup.com> Cc: <druid(a)softdust.com>, andrew matthews <exstatica(a)gmail.com> Subject: Re: Graphing Peering I'm not registerred to post on nanog. You may send this info in, with or without quoting me.. On Thu, 20 Jan 2005, Daniel Golding wrote: > > Andrew, > > The 32 bit counters are a significant problem when using gigabit ethernet > public peering interfaces. Needless to say, MAC accounting was not designed > for gigabit speeds. Frequent polling is, sadly the only solution. If you > write your own scripts, make sure to account for counter wrapping. What about the .1.3.6.1.4.1.9.9.84.1.2.3.1.2 tree? Remeber to use SNMPv2c. We use the following to generate some MRTG config: while (!$session->{ErrorStr} and $$vars[0]->tag eq "ipNetToMediaNetAddress"){ if ($type eq "dynamic") { @mac = split(/:/, $mac); $decmac = join('.', hex $mac[0], hex $mac[1], hex $mac[2], hex $mac[3], hex $mac[4], hex $mac[5]); ($iname, @junk) = gethostbyaddr( pack( "C4", split( "\\.", $ip )), AF_INET ); if (-z $iname) {$iname = $ip}; if (!defined($peers{$ip})) {$peers{$ip} = "no BGP peer"}; $ifi = $ix{$router}[1]; print "\n"; print "Target\[$ip\]: 1.3.6.1.4.1.9.9.84.1.2.3.1.2.$ifi.1.$decmac\&1.3.6.1.4.1.9.9.84.1.2.3.1.2.$i fi.2.$decmac:$ARGV[1]\@$ARGV[0]:::::2\n", "MaxBytes\[$ip\]: 25000000\n", "Title\[$ip\]: $ix{$router}[0]: $peers{$ip}\n", "PageTop\[$ip\]: <H1>$ix{$router}[0]: $peers{$ip}</H1>\n", "\tIP: $ip, DNS: ", $iname, "\n"; } ($ip,$mac,$type) = $session->getnext($vars); }; (This is only part of the script. You should make it work in your environment quite easy though.) > - Dan > > on 1/20/05 9:45 AM, "druid(a)softdust.com" <druid(a)softdust.com> wrote: > >> >> On Wed, 2005-01-19 at 22:41, andrew matthews wrote: >> Another problem you might run into is counter wrapping. When polling >> every 5 minutes, some counters may wrap. (there is no 64 bit counter for >> the mac-address accounting). So you have to run it in short timeframes, >> causing more cpu utilization. Talking about Cisco, see above. There is such counters. >> But all in all, mac-accounting and Netflow source-as give you a very >> good overview of your network flows. Yes indeed. /H ------ End of Forwarded Message

1 0

RE: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
by James Laszko 21 Jan '05

21 Jan '05

Well, if the router CAN run BGP, the feed from Cymru is only about 84 prefixes - not a lot of memory tied up there, is there? If the router isn't capable of BGP, someone earlier today was kind enough to post a script that they use to find changes to one of the BOGON lists and suggested an Expect script to automatically update their router. Probably a little advanced for most leaf sites, but for someone who's responsible for a larger network -- doesn't seem that bad. James Laszko Pipeline Communications, Inc. james(a)pcipros.com -----Original Message----- From: Hank Nussbacher [mailto:hank@mail.iucc.ac.il] Sent: Thursday, January 20, 2005 10:51 PM To: James Laszko Cc: nanog(a)merit.edu Subject: RE: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19 On Thu, 20 Jan 2005, James Laszko wrote: > sort of mechanism. If they're not going to use something like the Cymru > BOGON BGP feed they should build their own and should have configured > their managed routers to query that from the beginning. As more How would this scale for say 200K routers? 2M? -Hank

4 3

INOC-DBA setup help?
by matthew zeier 21 Jan '05

21 Jan '05

If this is OT, my apologies. Trying to setup an INOC-DBA account after it was mentioned here a couple weeks back. I'm stuck after setting up a user account waiting for the organization's admin (me) to approve it. operator(a)pch.net hasn't responded to any of my emails but I don't know how active that address is. Is this still a live service? If it's simply a matter of waiting more than four some weeks and I'm not patient enough, let me know :) - mz -- matthew zeier - "Curiosity is a willing, a proud, an eager confession of ignorance." - Leonard Rubenstein

3 2

Weekly Routing Table Report
by Routing Table Analysis 21 Jan '05

21 Jan '05

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 22 Jan, 2005 Analysis Summary ---------------- BGP routing table entries examined: 155157 Prefixes after maximum aggregation: 90262 Unique aggregates announced to Internet: 74120 Total ASes present in the Internet Routing Table: 18844 Origin-only ASes present in the Internet Routing Table: 16362 Origin ASes announcing only one prefix: 7675 Transit ASes present in the Internet Routing Table: 2482 Transit-only ASes present in the Internet Routing Table: 78 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 19 Prefixes from unregistered ASNs in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 16 Number of addresses announced to Internet: 1368386088 Equivalent to 81 /8s, 143 /16s and 234 /24s Percentage of available address space announced: 36.9 Percentage of allocated address space announced: 59.7 Percentage of available address space allocated: 61.9 Total number of prefixes smaller than registry allocations: 72674 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 30684 Total APNIC prefixes after maximum aggregation: 14870 Prefixes being announced from the APNIC address blocks: 28712 Unique aggregates announced from the APNIC address blocks: 14618 APNIC Region origin ASes present in the Internet Routing Table: 2188 APNIC Region origin ASes announcing only one prefix: 647 APNIC Region transit ASes present in the Internet Routing Table: 325 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 171804544 Equivalent to 10 /8s, 61 /16s and 135 /24s Percentage of available APNIC address space announced: 78.4 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 23552-24575 APNIC Address Blocks 58/7, 60/7, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 87123 Total ARIN prefixes after maximum aggregation: 52178 Prefixes being announced from the ARIN address blocks: 65773 Unique aggregates announced from the ARIN address blocks: 24084 ARIN Region origin ASes present in the Internet Routing Table: 9824 ARIN Region origin ASes announcing only one prefix: 3546 ARIN Region transit ASes present in the Internet Routing Table: 970 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 16 Number of ARIN addresses announced to Internet: 239481856 Equivalent to 14 /8s, 70 /16s and 52 /24s Percentage of available ARIN address space announced: 71.4 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647,29695-30719, 31744-33791 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/7, 72/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 29208 Total RIPE prefixes after maximum aggregation: 20133 Prefixes being announced from the RIPE address blocks: 26177 Unique aggregates announced from the RIPE address blocks: 17156 RIPE Region origin ASes present in the Internet Routing Table: 6248 RIPE Region origin ASes announcing only one prefix: 3338 RIPE Region transit ASes present in the Internet Routing Table: 1060 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 19 Number of RIPE addresses announced to Internet: 185679936 Equivalent to 11 /8s, 17 /16s and 64 /24s Percentage of available RIPE address space announced: 65.1 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-34815 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 6814 Total LACNIC prefixes after maximum aggregation: 2381 Prefixes being announced from the LACNIC address blocks: 6683 Unique aggregates announced from the LACNIC address blocks: 3987 LACNIC Region origin ASes present in the Internet Routing Table: 413 LACNIC Region origin ASes announcing only one prefix: 120 LACNIC Region transit ASes present in the Internet Routing Table: 80 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 16 Number of LACNIC addresses announced to Internet: 17302016 Equivalent to 1 /8s, 8 /16s and 2 /24s Percentage of available LACNIC address space announced: 51.6 LACNIC AS Blocks 26592-26623, 27648-28671 LACNIC Address Blocks 200/7 Emerging AfriNIC Region Analysis Summary ---------------------------------------- Prefixes being announced by AfriNIC Region ASes: 1323 Total AfriNIC prefixes after maximum aggregation: 700 Prefixes being announced from the AfriNIC address blocks: 866 Unique aggregates announced from the AfriNIC address blocks: 684 AfriNIC Region origin ASes present in the Internet Routing Table: 95 AfriNIC Region origin ASes announcing only one prefix: 24 AfriNIC Region transit ASes present in the Internet Routing Table: 13 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2102016 Equivalent to 0 /8s, 32 /16s and 19 /24s Percentage of available AfriNIC address space announced: 12.5 AfriNIC AS Blocks <none> AfriNIC Address Blocks 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 881 4596 171 Data Communications Bureau 1221 787 1184 562 Telstra Pty Ltd 4766 576 3415 278 Korea Internet Exchange for " 9583 573 48 11 Satyam Infoway Ltd., 4755 454 177 95 Videsh Sanchar Nigam Ltd. Aut 17676 393 5900 61 XTAGE CORPORATION 9443 362 71 77 Primus Telecommunications 2907 354 1856 327 SINET Japan 9929 345 164 35 China Netcom Corp. 703 325 344 255 UUNET 17557 304 22 149 Pakistan Telecom 10036 294 27 270 C&M Communication Co. Ltd. 7545 278 86 67 TPG Internet Pty Ltd 2764 276 255 223 connect.com.au pty ltd 7474 273 268 203 Optus Communications Pty Ltd 9800 238 383 76 CHINA UNICOM 4808 234 172 128 CHINANET core WAN North 9498 232 81 52 BHARTI BT INTERNET LTD. 4802 230 28 139 Wantree Development 7563 226 48 158 Korea Internet Infrastructure ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1441 6602 971 AT&T WorldNet Services 721 1103 21739 309 DLA Systems Automation Center 701 1060 8331 910 UUNET Technologies, Inc. 1239 920 2879 613 Sprint 2386 849 523 601 AT&T Data Communications Serv 6197 834 378 391 BellSouth Network Solutions, 4323 827 671 224 Time Warner Telecom 18566 765 208 6 Covad Communications 209 674 3438 509 Qwest 3356 597 10867 441 Level 3 Communications, LLC 20115 566 470 302 Charter Communications 3561 549 2370 416 Cable & Wireless USA 852 526 1126 400 Telus Advanced Communications 6478 486 818 100 AT&T Worldnet Services 27364 460 44 19 Armstrong Cable Services 6198 450 388 200 BellSouth Network Solutions, 7132 450 8379 379 SBC Internet Services 22773 431 1085 19 Cox Communications, Inc. Atla 5668 429 87 17 Century Telephone 22909 418 915 65 Comcast Cable Corporation RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 620 2022 512 UUNET - Commercial IP service 3320 294 2992 228 Deutsche Telekom AG 3301 287 1112 275 TeliaNet Sweden 8220 279 466 267 COLT Internet - International 21502 276 40 3 NUMERICABLE is a cabled netwo 680 253 2041 239 DFN-IP service G-WiN 3246 226 487 221 Song Networks 13083 217 51 8 Mannesmann Datenverarbeitung 8708 207 119 188 Romania Data Systems S.A. 1257 205 708 171 SWIPnet Swedish IP Network 5515 191 842 138 Sonera Solution Autonomous Sy 3215 186 1022 79 France Telecom Transpac 786 176 1794 176 The JANET IP Service 6746 174 47 139 Dynamic Network Technologies, 8866 165 19 22 Bulgarian Telecommunication C 3269 159 1360 70 TELECOM ITALIA 719 158 322 104 LANLINK autonomous system 3300 158 165 80 AUCS Communications Services 25186 142 138 100 France Telecom Transpac's Tra 5400 137 217 121 BT Ignite European Backbone LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6140 356 140 69 ImpSat 8151 335 489 142 UniNet S.A. de C.V. 16814 234 14 6 NSS, S.A. 11172 217 99 54 Servicios Alestra S.A de C.V 6147 189 102 20 Telefonica Del Peru 11664 159 19 24 Keytech SA 7303 149 68 22 Telecom Argentina Stet-France 6505 136 90 92 Global One Communicaoes Ltda 6503 125 147 83 AVANTEL, S.A. 14117 114 7 5 Telefonica del Sur S.A. 11992 106 9 31 Integrated Systems 11556 97 48 3 Cable-Wireless Panama 13999 89 52 9 Mega Cable S.A. de C.V. 11311 86 8 22 Sinectis S.A. 6535 85 7 23 Chilesat Servicios Empresari 14420 85 6 40 ANDINATEL S.A. 10481 82 32 7 Prima S.A. 4270 80 18 9 Red de Interconexion Universi 5639 79 8 8 Telecommunications Services o 15311 78 25 37 Telefonica Empresas AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 268 636 226 The Internet Solution 5536 113 16 4 Internet Egypt Network 2018 102 297 98 Tertiary Education Network 2905 77 272 70 The Internetworking Company o 20928 77 16 2 Noor Advanced Technologies AS 24835 55 34 7 RAYA Telecom - Egypt 8452 47 20 5 TEDATA 6713 34 38 9 Itissalat Al-MAGHRIB 9129 33 3 2 UUNET Kenya 12455 28 7 4 Jambonet Autonomous system 5713 27 141 24 Telkom SA Ltd 8524 23 1 4 AUCEGYPT Autonomous System 16637 22 10 19 Johnnic e-Ventures 10798 18 1 12 Standard Bank of South Africa 12258 18 3 12 Vodacom Internet Company 21280 18 2 3 Swift Global Kenya Ltd.Is an 8346 15 7 14 SONATEL-AS Autonomous System 15706 15 4 2 Sudatel Internet Exchange Aut 21491 15 1 3 UTL On-line is RF broadband I 15808 13 1 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 721 1103 794 DLA Systems Automation Center 18566 765 759 Covad Communications 4134 881 710 Data Communications Bureau 4323 827 603 Time Warner Telecom 9583 573 562 Satyam Infoway Ltd., 6197 834 443 BellSouth Network Solutions, 27364 460 441 Armstrong Cable Services 22773 431 412 Cox Communications, Inc. Atla 5668 429 412 Century Telephone 6478 486 386 AT&T Worldnet Services 4755 454 359 Videsh Sanchar Nigam Ltd. Aut 22909 418 353 Comcast Cable Corporation 6467 372 341 E.Spire Communications, Inc. 17676 393 332 XTAGE CORPORATION 1580 334 318 ANOSCEUR 9929 345 310 China Netcom Corp. 1239 920 307 Sprint 13609 334 299 Choice One Communications Inc 4766 576 298 Korea Internet Exchange for " 6140 356 287 ImpSat List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 64826 PRIVATE 64.200.250.0/23 7911 Williams Communicati 26422 UNALLOCATED 196.46.184.0/22 3741 The Internet Solutio 65002 PRIVATE 208.179.184.0/24 11509 The Pajo Group 65529 PRIVATE 216.21.199.0/24 14697 VDot.Net 65529 PRIVATE 216.152.237.0/24 14697 VDot.Net Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.83.16.0/20 5515 Sonera Solution Autonomous Sy 192.83.32.0/19 5515 Sonera Solution Autonomous Sy 192.83.96.0/22 5515 Sonera Solution Autonomous Sy 192.83.100.0/24 5515 Sonera Solution Autonomous Sy 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.136.79.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.172.11.0/24 721 DLA Systems Automation Center 192.200.100.0/24 7018 AT&T WorldNet Services Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:3 /10:7 /11:15 /12:60 /13:143 /14:314 /15:575 /16:8256 /17:2381 /18:4070 /19:9997 /20:10520 /21:8305 /22:11560 /23:12891 /24:84836 /25:443 /26:366 /27:127 /28:62 /29:35 /30:127 /31:0 /32:45 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 750 765 Covad Communications 6197 680 834 BellSouth Network Solutions, 2386 622 849 AT&T Data Communications Serv 7018 610 1441 AT&T WorldNet Services 27364 445 460 Armstrong Cable Services 9583 400 573 Satyam Infoway Ltd., 4766 393 576 Korea Internet Exchange for " 702 379 620 UUNET - Commercial IP service 5668 370 429 Century Telephone 1239 366 920 Sprint 6198 327 450 BellSouth Network Solutions, 1580 320 334 ANOSCEUR 10036 294 294 C&M Communication Co. Ltd. 13609 291 334 Choice One Communications Inc 6467 283 372 E.Spire Communications, Inc. 6517 283 306 Yipes Communications, Inc. 4323 278 827 Time Warner Telecom 21502 273 276 NUMERICABLE is a cabled netwo 9929 270 345 China Netcom Corp. 701 265 1060 UUNET Technologies, Inc. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:9 12:1479 13:1 15:6 16:2 17:3 18:4 20:4 24:832 32:69 33:3 38:90 40:55 44:3 47:2 52:3 55:2 56:3 57:23 59:2 60:12 61:672 62:516 63:1852 64:2549 65:2085 66:2544 67:485 68:492 69:877 70:54 71:2 72:41 80:547 81:665 82:397 83:229 84:89 85:79 128:121 129:167 130:89 131:193 132:36 134:202 135:30 136:419 137:78 138:162 139:40 140:301 141:102 142:136 143:120 144:250 145:45 146:281 147:201 148:264 149:130 150:93 151:62 152:113 153:71 154:2 155:136 156:70 157:75 158:149 159:162 160:65 161:59 162:410 163:84 164:213 165:155 166:128 167:224 168:375 169:131 170:323 171:8 192:5651 193:3048 194:2235 195:1564 196:598 198:3826 199:3298 200:3941 201:44 202:5159 203:5930 204:3579 205:2067 206:2270 207:2621 208:2110 209:3062 210:1544 211:734 212:1149 213:1268 214:237 215:31 216:3725 217:1076 218:187 219:131 220:338 221:79 222:73 End of report

1 0

Registrar and registry backend processes.
by Michael Loftis 21 Jan '05

21 Jan '05

I think, briefly, that we need to force Verisign and the registrars to be FAR more public about the backend process for WHOIS data and for the TLD zone data. Especially with .com, .net, and probably .org, and this latest failure of 'the system' and the obvious lack of information on 'the system.' It's clearly broken, and needs to be put up for public review by 'the powers that be' so that it can be fixed. What's happening now feels close to a boiler room poker game, noone seems to know all the players, and even fewer know all the rules, so in the end everyone is a loser. I know this is adding fuel to the proverbial fire, but apparently we need to burn out this thing so we don't get scorched by yet another unexpected fire.

8 10

RE: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
by Fergie (Paul Ferguson) 21 Jan '05

21 Jan '05

As someone who used to "do" a great deal of managed network services, I can certainly attest to that. - ferg -- "Christopher L. Morrow" <christopher.morrow(a)mci.com> wrote: On Thu, 20 Jan 2005, James Laszko wrote: > > Well, if the router CAN run BGP, the feed from Cymru is only about 84 > prefixes - not a lot of memory tied up there, is there? > my point was that not all managed routers, the majority actually, can't and don't run BGP. their code doesn't even support bgp... -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

2 1

The Cidr Report
by cidr-report＠potaroo.net 21 Jan '05

21 Jan '05

This report has been generated at Fri Jan 21 21:44:23 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 14-01-05 149708 103062 15-01-05 149634 103087 16-01-05 149549 103118 17-01-05 149515 103257 18-01-05 149701 103146 19-01-05 149753 103186 20-01-05 149979 103368 21-01-05 150315 103512 AS Summary 18735 Number of ASes in routing system 7671 Number of ASes announcing only one prefix 1430 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 90147072 Largest address span announced by an AS (/32s) AS721 : DNIC DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 21Jan05 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 151111 103498 47613 31.5% All ASes AS18566 765 7 758 99.1% CVAD Covad Communications AS4134 834 200 634 76.0% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 825 232 593 71.9% TWTC Time Warner Telecom AS721 1100 595 505 45.9% DNIC DoD Network Information Center AS27364 460 34 426 92.6% ARMC Armstrong Cable Services AS22773 429 19 410 95.6% CXA Cox Communications Inc. AS6197 829 452 377 45.5% BNS-14 BellSouth Network Solutions, Inc AS7018 1430 1085 345 24.1% ATTW AT&T WorldNet Services AS6478 486 146 340 70.0% ATTW AT&T WorldNet Services AS9929 342 35 307 89.8% CNCNET-CN China Netcom Corp. AS1239 919 613 306 33.3% SPRN Sprint AS17676 391 89 302 77.2% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS22909 418 125 293 70.1% CMCS Comcast Cable Communications, Inc. AS4766 560 278 282 50.4% KIXS-AS-KR Korea Telecom AS21502 276 3 273 98.9% ASN-NUMERICABLE NUMERICABLE is a cabled network in France, AS14654 263 7 256 97.3% WAYPOR-3 Wayport AS9443 366 121 245 66.9% INTERNETPRIMUS-AS-AP Primus Telecommunications AS6140 377 134 243 64.5% IMPSA ImpSat AS4355 300 64 236 78.7% ERSD EARTHLINK, INC AS9583 572 340 232 40.6% SIFY-AS-IN Sify Limited AS25844 242 16 226 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS2386 848 626 222 26.2% ADCS-1 AT&T Data Communications Services AS6198 446 224 222 49.8% BNS-14 BellSouth Network Solutions, Inc AS15270 245 32 213 86.9% PDP-14 PaeTec.net -a division of PaeTecCommunications, Inc. AS3602 302 106 196 64.9% SPCA Sprint Canada Inc. AS5668 429 235 194 45.2% CIH-12 CenturyTel Internet Holdings, Inc. AS1580 197 13 184 93.4% DNIC DoD Network Information Center AS6517 304 121 183 60.2% YIPS Yipes Communications, Inc. AS19632 191 9 182 95.3% Metropolis Intercom AS9498 234 54 180 76.9% BBIL-AP BHARTI BT INTERNET LTD. Total 15380 6015 9365 60.9% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.38.0/24 AS25994 NPGCAB NPG Cable, INC 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 64.17.32.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.17.33.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.17.37.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.57.160.0/19 AS3561 SAVVI-3 Savvis 64.92.128.0/19 AS3561 SAVVI-3 Savvis 64.127.0.0/18 AS7018 ATTW AT&T WorldNet Services 64.209.192.0/18 AS3561 SAVVI-3 Savvis 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 132.0.0.0/10 AS721 DNIC DoD Network Information Center 137.0.0.0/13 AS721 DNIC DoD Network Information Center 138.136.0.0/13 AS721 DNIC DoD Network Information Center 158.0.0.0/13 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 ELISA-AS Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.70.164.0/24 AS25689 NRCC-2 National Research Council of Canada 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.153.144.0/21 AS721 DNIC DoD Network Information Center 192.172.0.0/19 AS721 DNIC DoD Network Information Center 192.188.208.0/20 AS721 DNIC DoD Network Information Center 192.200.100.0/24 AS7018 ATTW AT&T WorldNet Services 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS721 DNIC DoD Network Information Center 198.97.80.0/20 AS721 DNIC DoD Network Information Center 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.240.0/20 AS721 DNIC DoD Network Information Center 198.97.247.0/24 AS3475 DEPART-52 Department of the Navy 198.101.4.0/22 AS721 DNIC DoD Network Information Center 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS721 DNIC DoD Network Information Center 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.96.44.0/23 AS19092 360NE-1 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NE-1 360Networks (USA) Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS721 DNIC DoD Network Information Center 199.114.128.0/18 AS721 DNIC DoD Network Information Center 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.134.0/24 AS3541 DISAUN DISA/UNRRA 199.114.136.0/24 AS27044 DNIC DoD Network Information Center 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS27033 DNIC DoD Network Information Center 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS27034 DNIC DoD Network Information Center 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DNIC DoD Network Information Center 199.123.0.0/18 AS721 DNIC DoD Network Information Center 199.123.16.0/20 AS721 DNIC DoD Network Information Center 199.123.80.0/21 AS721 DNIC DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 201.239.0.0/16 AS22047 VTR BANDA ANCHA S.A. 202.72.240.0/20 AS24320 RAILCOM Mongolian Railway Commercial Center Railcom 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 TELEONE-HK TeleTeleOne (HK) Limited 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.170.14.0/23 AS6648 ASN-SKYINTERNET Autonomous System Number peering of BAYANTEL 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 206.29.168.0/21 AS10248 IPI Internet Partners, Inc. 206.128.104.0/21 AS11709 VIIN VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 208.138.48.0/20 AS7955 SOURCE-48 SourceNet Corporation 209.27.51.0/24 AS14132 INTERN-582 Internet Gateway Inc. 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.48.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.49.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 216.37.110.0/23 AS4264 CERFN California Education and Research Federation Network 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.185.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.186.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.187.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.188.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.189.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.190.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.191.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org swinog(a)swinog.ch

1 0

RE: Please Check Filters - BOGON Filtering IP Space 72.14.128.0/19
by James Laszko 21 Jan '05

21 Jan '05

> Wash, rinse, repeat for the other 70,000 routers you manage for > customers... This is definitely NOT a half-rack in a colo fix. Just > contacting the customers is a feat. And I completely agree that it's a big pain to coordinate this. In the same hand, SBC and all other 'big' providers use BGP to dynamically update their routing tables. Their BOGON filtering should use the same sort of mechanism. If they're not going to use something like the Cymru BOGON BGP feed they should build their own and should have configured their managed routers to query that from the beginning. As more old-BOGON IP's come into play, more and more of the Internet is going to 'fall off' to these legacy route access list restricted routers. As much as I would have liked to coin the term 'network monkey', I read it in this thread by someone much more creative than I. :-) James Laszko Pipeline Communications, Inc. james(a)pcipros.com

4 3