- NANOG - lists.nanog.org

Weekly Routing Table Report
by Routing Table Analysis 10 Sep '04

10 Sep '04

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 11 Sep, 2004 Analysis Summary ---------------- BGP routing table entries examined: 146736 Prefixes after maximum aggregation: 87224 Unique aggregates announced to Internet: 70017 Total ASes present in the Internet Routing Table: 18024 Origin-only ASes present in the Internet Routing Table: 15648 Origin ASes announcing only one prefix: 7294 Transit ASes present in the Internet Routing Table: 2376 Transit-only ASes present in the Internet Routing Table: 78 Average AS path length visible in the Internet Routing Table: 4.8 Max AS path length visible: 22 Prefixes from unregistered ASNs in the Routing Table: 39 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 16 Number of addresses announced to Internet: 1337060260 Equivalent to 79 /8s, 177 /16s and 235 /24s Percentage of available address space announced: 36.1 Percentage of allocated address space announced: 58.3 Percentage of available address space allocated: 61.9 Total number of prefixes smaller than registry allocations: 67256 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 28030 Total APNIC prefixes after maximum aggregation: 14146 Prefixes being announced from the APNIC address blocks: 26260 Unique aggregates announced from the APNIC address blocks: 14223 APNIC Region origin ASes present in the Internet Routing Table: 2133 APNIC Region origin ASes announcing only one prefix: 633 APNIC Region transit ASes present in the Internet Routing Table: 331 Average APNIC Region AS path length visible: 4.8 Max APNIC Region AS path length visible: 22 Number of APNIC addresses announced to Internet: 161753472 Equivalent to 9 /8s, 164 /16s and 41 /24s Percentage of available APNIC address space announced: 73.8 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 23552-24575 APNIC Address Blocks 58/7, 60/7, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 83838 Total ARIN prefixes after maximum aggregation: 51137 Prefixes being announced from the ARIN address blocks: 64173 Unique aggregates announced from the ARIN address blocks: 22648 ARIN Region origin ASes present in the Internet Routing Table: 9534 ARIN Region origin ASes announcing only one prefix: 3401 ARIN Region transit ASes present in the Internet Routing Table: 927 Average ARIN Region AS path length visible: 4.5 Max ARIN Region AS path length visible: 18 Number of ARIN addresses announced to Internet: 231930912 Equivalent to 13 /8s, 210 /16s and 252 /24s Percentage of available ARIN address space announced: 69.1 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647,29695-30719, 31744-33791 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/7, 72/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 27170 Total RIPE prefixes after maximum aggregation: 18966 Prefixes being announced from the RIPE address blocks: 24008 Unique aggregates announced from the RIPE address blocks: 15815 RIPE Region origin ASes present in the Internet Routing Table: 5804 RIPE Region origin ASes announcing only one prefix: 3120 RIPE Region transit ASes present in the Internet Routing Table: 996 Average RIPE Region AS path length visible: 5.4 Max RIPE Region AS path length visible: 21 Number of RIPE addresses announced to Internet: 170824000 Equivalent to 10 /8s, 46 /16s and 145 /24s Percentage of available RIPE address space announced: 59.9 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-34815 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 6416 Total LACNIC prefixes after maximum aggregation: 2282 Prefixes being announced from the LACNIC address blocks: 6182 Unique aggregates announced from the LACNIC address blocks: 3543 LACNIC Region origin ASes present in the Internet Routing Table: 393 LACNIC Region origin ASes announcing only one prefix: 119 LACNIC Region transit ASes present in the Internet Routing Table: 78 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 15 Number of LACNIC addresses announced to Internet: 15884544 Equivalent to 0 /8s, 242 /16s and 97 /24s Percentage of available LACNIC address space announced: 47.3 LACNIC AS Blocks 26592-26623, 27648-28671 LACNIC Address Blocks 200/7 Emerging AfriNIC Region Analysis Summary ---------------------------------------- Prefixes being announced by AfriNIC Region ASes: 1243 Total AfriNIC prefixes after maximum aggregation: 690 Prefixes being announced from the AfriNIC address blocks: 827 Unique aggregates announced from the AfriNIC address blocks: 662 AfriNIC Region origin ASes present in the Internet Routing Table: 92 AfriNIC Region origin ASes announcing only one prefix: 21 AfriNIC Region transit ASes present in the Internet Routing Table: 12 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 16 Number of AfriNIC addresses announced to Internet: 2060032 Equivalent to 0 /8s, 31 /16s and 111 /24s Percentage of available AfriNIC address space announced: 12.3 AfriNIC AS Blocks <none> AfriNIC Address Blocks 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 832 4193 156 Data Communications Bureau 1221 811 1184 585 Telstra Pty Ltd 4766 558 3409 265 Korea Internet Exchange for " 9583 527 41 101 Satyam Infoway Ltd., 4755 366 133 50 Videsh Sanchar Nigam Ltd. Aut 9929 356 162 34 China Netcom Corp. 9443 355 70 81 Primus Telecommunications 2907 352 1840 326 SINET Japan 17676 348 5180 39 XTAGE CORPORATION 17557 314 22 155 Pakistan Telecom 703 312 341 241 UUNET 2764 285 274 233 connect.com.au pty ltd 7474 272 270 202 Optus Communications Pty Ltd 4802 232 28 142 Wantree Development 9942 231 73 127 COMindico Australia 9800 228 372 66 CHINA UNICOM 9498 226 49 51 BHARTI BT INTERNET LTD. 17974 202 61 10 PT TELEKOMUNIKASI INDONESIA 4837 201 2256 105 chinanet IDC center beijing n 10036 201 18 184 C&M Communication Co. Ltd. ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1398 6751 967 AT&T WorldNet Services 701 1270 8423 913 UUNET Technologies, Inc. 1239 943 2866 629 Sprint 2386 825 561 589 AT&T Data Communications Serv 4323 779 633 216 Time Warner Telecom 18566 739 208 6 Covad Communications 6197 718 363 340 BellSouth Network Solutions, 721 715 21026 295 DLA Systems Automation Center 209 621 3431 495 Qwest 20115 583 418 295 Charter Communications 3356 581 10967 449 Level 3 Communications, LLC 6347 539 296 116 SAVVIS Communications Corpora 852 511 1141 398 Telus Advanced Communications 7843 488 674 104 Adelphia Corp. 3561 466 2390 348 Cable & Wireless USA 6198 455 401 210 BellSouth Network Solutions, 7132 436 8157 378 SBC Internet Services 705 428 163 270 UUNET Technologies, Inc. 22773 395 960 19 Cox Communications, Inc. Atla 5668 393 87 18 Century Telephone RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 642 2031 532 UUNET - Commercial IP service 3320 301 2470 238 Deutsche Telekom AG 3301 281 1098 271 TeliaNet Sweden 8220 276 444 262 COLT Internet - International 21502 268 40 3 NUMERICABLE is a cabled netwo 680 251 2025 239 DFN-IP service G-WiN 3246 217 475 214 Song Networks 13083 217 51 8 Mannesmann Datenverarbeitung 1257 213 747 182 SWIPnet Swedish IP Network 8708 203 113 182 Romania Data Systems S.A. 5515 199 842 145 Sonera Solution Autonomous Sy 3215 182 876 77 France Telecom Transpac 786 177 1794 177 The JANET IP Service 719 157 288 102 LANLINK autonomous system 5400 156 209 126 BT Ignite European Backbone 6746 154 29 131 Dynamic Network Technologies, 25186 153 154 109 France Telecom Transpac's Tra 3303 147 610 130 Swisscom Ltd 3269 145 1195 66 TELECOM ITALIA 8866 138 17 20 Bulgarian Telecommunication C LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6140 395 138 66 ImpSat 11172 355 83 52 Servicios Alestra S.A de C.V 8151 285 406 131 UniNet S.A. de C.V. 16814 212 13 7 NSS, S.A. 6147 191 86 19 Telefonica Del Peru 11664 151 11 22 Keytech SA 6505 135 90 93 Global One Communicaoes Ltda 6503 134 187 90 AVANTEL, S.A. 7303 121 55 19 Telecom Argentina Stet-France 11992 90 9 31 Integrated Systems 14420 87 6 35 ANDINATEL S.A. 6535 84 5 18 Chilesat Servicios Empresari 10481 81 32 7 Prima S.A. 11556 81 41 3 Cable-Wireless Panama 11311 80 7 20 Sinectis S.A. 5639 77 8 8 Telecommunications Services o 15311 76 21 36 Telefonica Empresas 4270 70 18 9 Red de Interconexion Universi 14117 70 5 4 Telefonica del Sur S.A. 10292 68 6 26 TELECOMMUNICATIONS OF JAMAICA AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 252 632 219 The Internet Solution 5536 114 16 4 Internet Egypt Network 2018 94 297 92 Tertiary Education Network 2905 92 276 81 The Internetworking Company o 20928 59 16 1 Noor Advanced Technologies AS 14988 48 16 1 Botswana Telecommunications C 24835 36 34 7 RAYA Telecom - Egypt 6713 31 42 10 Itissalat Al-MAGHRIB 5713 26 125 24 Telkom SA Ltd 8524 25 1 4 AUCEGYPT Autonomous System 9129 25 3 4 UUNET Kenya 16637 24 10 19 Johnnic e-Ventures 10798 18 1 12 Standard Bank of South Africa 12258 18 3 12 Vodacom Internet Company 12455 17 4 2 Jambonet Autonomous system 8346 15 7 14 SONATEL-AS Autonomous System 15706 15 4 2 Sudatel Internet Exchange Aut 21280 14 2 3 Swift Global Kenya Ltd.Is an 21491 14 1 3 UTL On-line is RF broadband I 15808 13 1 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 18566 739 733 Covad Communications 4134 832 676 Data Communications Bureau 4323 779 563 Time Warner Telecom 9583 527 426 Satyam Infoway Ltd., 6347 539 423 SAVVIS Communications Corpora 721 715 420 DLA Systems Automation Center 7843 488 384 Adelphia Corp. 6197 718 378 BellSouth Network Solutions, 22773 395 376 Cox Communications, Inc. Atla 5668 393 375 Century Telephone 6467 390 360 E.Spire Communications, Inc. 701 1270 357 UUNET Technologies, Inc. 27364 365 346 Armstrong Cable Services 22909 365 330 Comcast Cable Corporation 6140 395 329 ImpSat 9929 356 322 China Netcom Corp. 4755 366 316 Videsh Sanchar Nigam Ltd. Aut 1239 943 314 Sprint 17676 348 309 XTAGE CORPORATION 11172 355 303 Servicios Alestra S.A de C.V List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 23456 UNALLOCATED 62.241.160.0/19 25346 Pipex Internet UK IS 23456 UNALLOCATED 81.86.0.0/16 25346 Pipex Internet UK IS 23456 UNALLOCATED 81.178.0.0/15 25346 Pipex Internet UK IS 65217 PRIVATE 192.102.236.0/24 217 University of Minnes 1877 UNALLOCATED 192.108.199.0/24 1876 Southern Methodist U 37799 UNALLOCATED 195.214.216.0/21 30799 VERANET Internet Ser 64572 PRIVATE 219.146.96.0/21 17633 ASN for Shandong Pro 64572 PRIVATE 219.146.104.0/21 17633 ASN for Shandong Pro 64573 PRIVATE 219.146.112.0/21 17633 ASN for Shandong Pro 64573 PRIVATE 219.146.120.0/21 17633 ASN for Shandong Pro 64576 PRIVATE 219.146.128.0/21 17633 ASN for Shandong Pro 64576 PRIVATE 219.146.136.0/21 17633 ASN for Shandong Pro 64582 PRIVATE 219.146.144.0/22 17633 ASN for Shandong Pro 64582 PRIVATE 219.146.148.0/22 17633 ASN for Shandong Pro 64584 PRIVATE 219.146.176.0/22 17633 ASN for Shandong Pro 64584 PRIVATE 219.146.180.0/22 17633 ASN for Shandong Pro 64575 PRIVATE 219.146.192.0/22 17633 ASN for Shandong Pro 64575 PRIVATE 219.146.196.0/22 17633 ASN for Shandong Pro 64580 PRIVATE 219.146.208.0/21 17633 ASN for Shandong Pro 64581 PRIVATE 219.146.216.0/21 17633 ASN for Shandong Pro 64585 PRIVATE 219.146.224.0/21 17633 ASN for Shandong Pro 64586 PRIVATE 219.146.232.0/21 17633 ASN for Shandong Pro 64582 PRIVATE 219.147.0.0/24 17633 ASN for Shandong Pro 64572 PRIVATE 222.173.128.0/20 17633 ASN for Shandong Pro 64572 PRIVATE 222.173.144.0/20 17633 ASN for Shandong Pro 64573 PRIVATE 222.173.160.0/20 17633 ASN for Shandong Pro 64573 PRIVATE 222.173.176.0/20 17633 ASN for Shandong Pro 64576 PRIVATE 222.173.192.0/20 17633 ASN for Shandong Pro 64576 PRIVATE 222.173.208.0/20 17633 ASN for Shandong Pro 64582 PRIVATE 222.173.224.0/20 17633 ASN for Shandong Pro 64582 PRIVATE 222.173.240.0/20 17633 ASN for Shandong Pro 64584 PRIVATE 222.174.96.0/20 17633 ASN for Shandong Pro 64584 PRIVATE 222.174.112.0/20 17633 ASN for Shandong Pro 64575 PRIVATE 222.174.160.0/20 17633 ASN for Shandong Pro 64575 PRIVATE 222.174.176.0/20 17633 ASN for Shandong Pro 64580 PRIVATE 222.174.224.0/19 17633 ASN for Shandong Pro 64581 PRIVATE 222.175.0.0/19 17633 ASN for Shandong Pro 64585 PRIVATE 222.175.32.0/19 17633 ASN for Shandong Pro 64586 PRIVATE 222.175.64.0/19 17633 ASN for Shandong Pro Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.43.230.0/24 4738 South Australian Academic Res 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.83.16.0/20 5515 Sonera Solution Autonomous Sy 192.83.32.0/19 5515 Sonera Solution Autonomous Sy 192.83.96.0/22 5515 Sonera Solution Autonomous Sy 192.83.100.0/24 5515 Sonera Solution Autonomous Sy 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.136.79.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.172.11.0/24 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:3 /10:6 /11:15 /12:63 /13:134 /14:304 /15:542 /16:8041 /17:2205 /18:3828 /19:9765 /20:10318 /21:7739 /22:10652 /23:12293 /24:80088 /25:238 /26:196 /27:103 /28:46 /29:24 /30:72 /31:0 /32:42 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 724 739 Covad Communications 2386 592 825 AT&T Data Communications Serv 6197 570 718 BellSouth Network Solutions, 7018 544 1398 AT&T WorldNet Services 702 395 642 UUNET - Commercial IP service 6347 390 539 SAVVIS Communications Corpora 1239 371 943 Sprint 9583 369 527 Satyam Infoway Ltd., 4766 361 558 Korea Internet Exchange for " 701 357 1270 UUNET Technologies, Inc. 27364 349 365 Armstrong Cable Services 5668 343 393 Century Telephone 6198 334 455 BellSouth Network Solutions, 20115 301 583 Charter Communications 6467 287 390 E.Spire Communications, Inc. 9929 285 356 China Netcom Corp. 6517 269 296 Yipes Communications, Inc. 21502 265 268 NUMERICABLE is a cabled netwo 13609 261 304 Choice One Communications Inc 3320 247 301 Deutsche Telekom AG Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:3 12:1387 13:1 15:5 16:2 17:3 20:9 24:704 32:66 33:3 38:78 40:54 44:4 52:3 55:1 56:3 57:17 60:6 61:477 62:494 63:1847 64:2307 65:2065 66:2474 67:389 68:538 69:703 70:68 80:521 81:543 82:318 83:144 84:26 128:109 129:171 130:87 131:190 132:26 134:186 135:17 136:186 137:55 138:169 139:35 140:162 141:107 142:120 143:67 144:155 145:41 146:293 147:95 148:423 149:108 150:87 151:70 152:168 153:68 154:2 155:129 156:58 157:79 158:142 159:160 160:57 161:71 162:388 163:80 164:204 165:159 166:111 167:224 168:288 169:114 170:267 171:9 192:5599 193:2888 194:2127 195:1466 196:584 198:3675 199:3256 200:3752 201:16 202:4827 203:5643 204:3228 205:2092 206:2322 207:2545 208:2151 209:3060 210:1479 211:600 212:1070 213:1189 214:130 215:31 216:3753 217:993 218:193 219:86 220:249 221:37 222:43 End of report

1 0

OT: Anybody from RBC.com read this?
by Alon Tirosh 10 Sep '04

10 Sep '04

Please contact me offlist. We're an account client of yours with periodic trouble getting mail to you for almost a year now, and Id like to get it resolved.

1 0

Re: Spammers Skirt IP Authentication Attempts
by Paul Vixie 10 Sep '04

10 Sep '04

> > you could bet that by closing off this avenue, SPF will force > > spammers to use other methods that are more easily detected / > > filtered, and that if you play this cat&mouse game long enough, it > > will drive the cost of spam so high (or drive the volume benefit so > > low) that it'll just die out. > > Good summary. This is the right strategy. on the contrary. it has been a bad strategy and is still a bad strategy. > > but to me, SPF is just a way to rearrange the deck chairs on the > > Titanic. > > I can swim but I believe that the water under the Titanic was quite > too cold to stay. Any advice to the people on the NANOG mailing list > before the boat goes down? the boat will never go all the way down -- the internet, and e-mail, are "survivable". however, it will get very cold where you are, since you'll be floating in atlantic icewater while clinging to floating wreckage. if that fate does not appeal to you, then embrace change. specifically, the kind of change that makes you cringe in fear because it is so alien. i'm referring to whitelists, webs of trust, trusted introducers, micropayments, and bonding. if you insist on an inbox that's open to all comers no matter what their intentions or reputation, then get out your snorkle.

1 0

Odd behavior from p4-0-0.MAR1.Austin-TX.us.xo.net
by Scott McGrath 10 Sep '04

10 Sep '04

We are originating traffic from AS11 and we are seeing an apparent loop downstream from the router listed in the header when attempting to connect to rsync1.spamhaus.org. Is this problem unique to us or are others seeing the same behavior. Scott C. McGrath

1 0

Re: "Intel calls for Internet overhaul"
by Fergie (Paul Ferguson) 10 Sep '04

10 Sep '04

Layer 8. - ferg -- Paul Vixie <paul(a)vix.com> wrote: update SAN FRANCISCO--The Internet needs to be upgraded with a new layer of abilities that will deal with imminent problems of capacity, security and reliability, Intel Chief Technology Officer Pat Gelsinger said Thursday. Gelsinger pointed to PlanetLab, an experimental network that sits on top of the Internet, as a step in the right direction. Hewlett-Packard and Intel have begun work trying to commercialize the project, which was started in 2002, in order to overlay the Internet with intelligence and adaptability. [...] http://news.com.com/Intel+calls+for+Internet+overhaul/2100-1006_3-5359743.h… -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net

5 4

The Cidr Report
by cidr-report＠potaroo.net 10 Sep '04

10 Sep '04

This report has been generated at Fri Sep 10 21:50:46 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 03-09-04 142564 98111 04-09-04 142671 98023 05-09-04 142645 97946 06-09-04 142493 97997 07-09-04 142498 98214 08-09-04 142814 98395 09-09-04 143221 98358 10-09-04 143329 98574 AS Summary 17936 Number of ASes in routing system 7281 Number of ASes announcing only one prefix 1377 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 86705664 Largest address span announced by an AS (/32s) AS721 : DNIC DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 10Sep04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 143397 98481 44916 31.3% All ASes AS18566 739 7 732 99.1% CVAD Covad Communications AS4134 781 172 609 78.0% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 778 217 561 72.1% TWTC Time Warner Telecom AS7018 1377 950 427 31.0% ATTW AT&T WorldNet Services AS6347 539 116 423 78.5% SAVV SAVVIS Communications Corporation AS7843 488 104 384 78.7% ADELPH-13 Adelphia Corp. AS22773 394 21 373 94.7% CXAB Cox Communications Inc. Atlanta AS6467 385 30 355 92.2% ACSI e.spire Communications, Inc. AS701 1247 899 348 27.9% UU UUNET Technologies, Inc. AS9583 530 201 329 62.1% SATYAMNET-AS Satyam Infoway Ltd., AS27364 365 36 329 90.1% ARMC Armstrong Cable Services AS22909 365 43 322 88.2% CMCS Comcast Cable Communications, Inc. AS6197 717 396 321 44.8% BNS-14 BellSouth Network Solutions, Inc AS1239 951 636 315 33.1% SPRN Sprint AS9929 346 34 312 90.2% CNCNET-CN China Netcom Corp. AS17676 346 43 303 87.6% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS11172 352 51 301 85.5% Alestra AS6478 357 71 286 80.1% ATTW AT&T WorldNet Services AS4355 380 99 281 73.9% ERSD EARTHLINK, INC AS4766 545 266 279 51.2% KIXS-AS-KR Korea Telecom AS6140 396 125 271 68.4% IMPSA ImpSat AS21502 268 3 265 98.9% ASN-NUMERICABLE NUMERICABLE is a cabled network in France, AS14654 257 6 251 97.7% WAYPOR-3 Wayport AS9443 359 109 250 69.6% INTERNETPRIMUS-AS-AP Primus Telecommunications AS2386 826 592 234 28.3% ADCS-1 AT&T Data Communications Services AS6198 452 222 230 50.9% BNS-14 BellSouth Network Solutions, Inc AS25844 244 16 228 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS721 715 510 205 28.7% DNIC DoD Network Information Center AS6327 228 29 199 87.3% SHAWC-2 Shaw Communications Inc. AS5668 393 200 193 49.1% CIH-12 CenturyTel Internet Holdings, Inc. Total 16120 6204 9916 61.5% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.38.0/24 AS25994 NPGCAB NPG Cable, INC 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 64.46.4.0/22 AS11711 TULARO TULAROSA COMMUNICATIONS 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.46.34.0/24 AS3408 64.46.63.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.83.96.0/19 AS26956 NETFR NetFree Communications 66.54.112.0/24 AS32899 66.54.113.0/24 AS32899 66.54.114.0/24 AS32899 66.54.115.0/24 AS32899 66.114.0.0/19 AS16526 BIRCHT Birch Telecom, Inc. 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 69.54.208.0/20 AS27553 TELNE Telnet Worldwide 69.208.0.0/13 AS7132 SIS-80 SBC Internet Services 69.216.0.0/14 AS7132 SIS-80 SBC Internet Services 69.220.0.0/16 AS7132 SIS-80 SBC Internet Services 132.0.0.0/10 AS721 DNIC DoD Network Information Center 137.0.0.0/13 AS721 DNIC DoD Network Information Center 138.136.0.0/13 AS721 DNIC DoD Network Information Center 158.0.0.0/13 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 LANLINK Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.70.164.0/24 AS25689 NRCC-2 National Research Council of Canada 192.80.64.0/19 AS1 LVLT Level 3 Communications, Inc. 192.81.182.0/24 AS719 LANLINK Elisa Oyj 192.81.183.0/24 AS719 LANLINK Elisa Oyj 192.81.184.0/24 AS719 LANLINK Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.138.208.0/20 AS1 LVLT Level 3 Communications, Inc. 192.153.144.0/21 AS721 DNIC DoD Network Information Center 192.172.0.0/19 AS721 DNIC DoD Network Information Center 192.188.208.0/20 AS721 DNIC DoD Network Information Center 192.190.16.0/21 AS1 LVLT Level 3 Communications, Inc. 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 196.1.68.0/24 AS3356 LEVEL3 Level 3 Communications 196.1.104.0/24 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 196.1.105.0/24 AS2697 ERX-ERNET-AS National Centre for Software Technology 196.1.106.0/24 AS2697 ERX-ERNET-AS National Centre for Software Technology 196.1.109.0/24 AS2697 ERX-ERNET-AS National Centre for Software Technology 196.1.110.0/24 AS2697 ERX-ERNET-AS National Centre for Software Technology 196.1.111.0/24 AS2697 ERX-ERNET-AS National Centre for Software Technology 196.1.114.0/24 AS2697 ERX-ERNET-AS National Centre for Software Technology 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 196.3.65.0/24 AS4471 MICA-5 Michigan Internet Cooperative Association 196.12.32.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.33.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.34.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.36.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.37.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.38.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.39.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.40.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.41.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.42.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.43.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.44.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.45.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.46.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.47.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.48.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.49.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.50.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.51.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.52.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.53.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.54.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.55.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.56.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.57.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.58.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.59.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.62.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 196.12.63.0/24 AS7633 SOFTNET-AS-AP Software Technology Parks of India 198.17.1.0/24 AS2513 JPNIC-ASBLOCK-AP JPNIC 198.22.61.0/24 AS9792 CIS-AS-AP Corinthian Internet Services 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.48.0.0/22 AS23754 CITYLINK-AS-NZ Citylink 198.51.210.0/24 AS4736 MAGNADATA-AU Magnadata Australia Pty Ltd 198.97.72.0/21 AS721 DNIC DoD Network Information Center 198.97.80.0/20 AS721 DNIC DoD Network Information Center 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.208.0/23 AS721 DNIC DoD Network Information Center 198.97.209.0/24 AS1727 RITSC RITSC-PACSW 198.97.240.0/20 AS721 DNIC DoD Network Information Center 198.97.247.0/24 AS3475 DEPART-52 Department of the Navy 198.99.173.0/24 AS703 UNSPECIFIED UUNET 198.101.4.0/22 AS721 DNIC DoD Network Information Center 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.142.0.0/16 AS4804 MPX-AS Microplex PTY LTD 198.142.0.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.5.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.12.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.15.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.19.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.32.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.39.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.40.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.44.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.64.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.96.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.98.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.104.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.128.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.160.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.176.0/24 AS4804 MPX-AS Microplex PTY LTD 198.142.192.0/19 AS4804 MPX-AS Microplex PTY LTD 198.142.224.0/19 AS4804 MPX-AS Microplex PTY LTD 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.161.165.0/24 AS852 AGTA Telus Advanced Communications 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS721 DNIC DoD Network Information Center 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.96.44.0/23 AS19092 360NE-1 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NE-1 360Networks (USA) Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS721 DNIC DoD Network Information Center 199.114.128.0/18 AS721 DNIC DoD Network Information Center 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.134.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.136.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DNIC DoD Network Information Center 199.123.0.0/18 AS721 DNIC DoD Network Information Center 199.123.16.0/20 AS721 DNIC DoD Network Information Center 199.123.80.0/21 AS721 DNIC DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.197.8.0/22 AS21814 PARSON-18 Parsons Corp. 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.81.96.0/19 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.81.109.0/24 AS7657 TIG-US-PAS-AP The Internet Group Limited 202.81.121.0/24 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.84.192.0/19 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.192.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.208.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 204.196.0.0/14 AS1 LVLT Level 3 Communications, Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 205.159.72.0/24 AS1660 ANSCOM-5 ANS Communications 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL-33 Telesat International Ltd. 206.253.190.0/23 AS8123 POLYBA Polybase 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 209.143.192.0/18 AS3561 CWU Cable & Wireless USA 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.48.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.49.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.50.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.51.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.55.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.56.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 216.14.64.0/20 AS3561 CWU Cable & Wireless USA 216.37.110.0/23 AS4264 CERFN California Education and Research Federation Network 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.130.0/24 AS11937 TRXI TRX Inc. 216.145.132.0/24 AS11937 TRXI TRX Inc. 216.145.134.0/24 AS11937 TRXI TRX Inc. 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/21 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org swinog(a)swinog.ch

1 0

Re: Spammers Skirt IP Authentication Attempts
by Robert Bonomi 10 Sep '04

10 Sep '04

> Date: Wed, 8 Sep 2004 20:15:01 +0100 (BST) > From: Chris Edwards <C.Edwards(a)compserv.gla.ac.uk> > Subject: Re: Spammers Skirt IP Authentication Attempts > > | SPF verification query gets returns one of three kinds of result: > | 1) MISMATCH on point-of-origin vs domain 'authorized' senders. *VERY* > | probably spam. > > Either spam, or almost any item of forwarded mail :-( Beg to differ. Forwarded mail almost always shows an 'envelope from' of the _forwarding_ party. Case in point: all email, sent to nanog is 'forwarded' to me, and the other readers of the list. It has an "inside address" (per the 'From:' header) of whomever authored the message. *BUT*, the 'envelope from', in the SMTP transaction is completely different: <owner-nanog(a)merit.edu> A _successful_ SPF check on 'merit.edu' would, hopefully include 198.108.1.26 (trapdoor.merit.edu) in the list of 'official outgoing mail sources. Ignoring for the moment the fact that Merit hasn't added SPF records to DNS yet. :) Same thing applies for 'simple' forwarding via sendmails '~/.forward' mechanism. the mail server 'accepts' the mail from the original source, and then 're-sends' to the new destination. That re-send originates as the _forwarding_party_, WITH an 'envelope from' of that forwarding party, even though the internal content ofthe message may show a _different_, and unrelated, "From" address. An SPF check of the _immediate_ sender does *NOT* break forwarded mail. Unless the forwarding process is _totally_ borken, that is. <grin>

4 4

Re: Verisign vs. ICANN
by Paul Vixie 10 Sep '04

10 Sep '04

> ... > Unfortunately, SiteFinder did not have such a destructive effect as we > had all wanted it to have. > ... that apparently depends on what you wanted and what you consider destructive. to me, as a domain holder under .COM, the damage was latent, coming in the form of "unacceptable business risk". as long as i know that my competitors would have to actually register "nearby" names in order to steal business from me, then i know (a) their costs are linear with my risk, and (b) i can find out what they're doing and perhaps even who they're paying to do it. in the presence of a wildcard and paid advertising, (a) no longer holds and there is no way to do (b). if sitefinder returns, i'd expect to have to find a new parent domain, who has no wildcard-like keyword system, just for risk management reasons. some domain holders might prefer to manage this risk by paying verisign extra money to get all the nearby keywords, but i'd consider this blackmail and i'd rebrand my offerings out of .COM and .NET, and i expect that many other domain holders would feel (and do) the same. ultimately i'd expect domain registration fees in wildcard-free TLDs to cost more than domain registration fees in wildcard-containing TLDs. also, to me, as a domain holder under .com who uses my domain for more than just a web site, i can't tolerate the lack of RCODE=3 when a "nearby" name is used by mistake. verisign promised not to use the connections for anything nefarious, but they are not a public-benefit corporation and if they thought that the best way to return value to their shareholders was to keyword-search e-mail that was sent to them by mistake, then they would be stupid NOT to do so. (this has been called a strong argument for all TLD registries to be required to be public-benefit corporations... foxes guarding chicken houses, and so on.) > So while SideFinder was not as destructive as we might have thought > or hoped, ... i wasn't hoping for anything in particular. but sitefinder was incredibly damaging, and its return would mark a sharp uptick in my risk management costs, and there's no way you could say it wasn't "destructive" based simply on your local network traffic analysis. simply put, i would have chosen a different TLD if i'd known that wildcard processing was going to occur, and i do not recognize verisign's right to unilaterally change the terms under which my domain's delegation data is served.

9 14

Re: Spammers Skirt IP Authentication Attempts
by Paul Jakma 10 Sep '04

10 Sep '04

On Wed, 8 Sep 2004, David Cantrell wrote: > You forget, SPF doesn't just tell you who is authorised to speak on > behalf of foobar.com, it also tells you who is *not* authorised. That is sort of implied, yes. > If you get mail coming in from - eg - randomgibberish.comcast.net > claiming to be from foobar.com, then you know that it's dodgy > unless foobar.com's SPF record says that that cable modem address > is authorised. Except that, SPF records are as easy to setup for a spammer, as for you and I. If the above is a spammer, then SPF for foobar.com will list randomgibberish.comcast.net as an authorised sender. SPF will absolutely not have any effect on spam. And I say this merely as a disciple of Vixie - he thought of a form of SPF /years/ ago, and he knew /years/ ago it wouldnt do anything for Spam. The only difference between Vixie's MAIL-FROM MX records and SPF is the snake-oil: Vixie was honest in his claims for what it could do, the hype around SPF is not. regards, -- Paul Jakma paul(a)clubi.ie paul(a)jakma.org Key ID: 64A2FF6A Fortune: Reformatting Page. Wait...

10 12

RE: ISP Policies
by Michel Py 10 Sep '04

10 Sep '04

> Tulip Rasputin wrote: > Do the ISPs ever look for some particular AS number in the BGP > AS_PATH and then decide what action/preference/priority they > need to take/give based on the AS number(s) present in the BGP > AS_PATH_SEQ/SET? If there is a question that nobody here wants to answer, this would be it. Short answer: Publicly: No, heaven forbid. I'll just let BGP do its job. Privately: Hell yes. Michel.

5 4