- NANOG - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 19 Mar '04

19 Mar '04

This report has been generated at Fri Mar 19 21:45:13 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 12-03-04 132560 92562 13-03-04 132899 92608 14-03-04 133028 92592 15-03-04 133046 92628 16-03-04 133135 92646 17-03-04 133235 92656 18-03-04 132066 92668 19-03-04 132066 92823 AS Summary 16800 Number of ASes in routing system 6762 Number of ASes announcing only one prefix 1387 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 73517824 Largest address span announced by an AS (/32s) AS568 : DISOUN DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 19Mar04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 132089 92791 39298 29.8% All ASes AS4323 694 200 494 71.2% TWC-34 Time Warner Communications, Inc. AS7018 1387 966 421 30.4% ATTW AT&T WorldNet Services AS7843 536 115 421 78.5% ADELPH-13 Adelphia Corp. AS6197 683 301 382 55.9% BNS-14 BellSouth Network Solutions, Inc AS701 1305 942 363 27.8% UU UUNET Technologies, Inc. AS27364 388 33 355 91.5% ARMC Armstrong Cable Services AS22909 374 32 342 91.4% CMCS Comcast Cable Communications, Inc. AS6198 547 216 331 60.5% BNS-14 BellSouth Network Solutions, Inc AS4134 632 308 324 51.3% CHINANET-BACKBONE No.31,Jin-rong Street AS22773 353 40 313 88.7% CXAB Cox Communications Inc. Atlanta AS1239 961 660 301 31.3% SPRN Sprint AS4355 385 101 284 73.8% ERSD EARTHLINK, INC AS6347 370 87 283 76.5% SAVV SAVVIS Communications Corporation AS9583 395 122 273 69.1% SATYAMNET-AS Satyam Infoway Ltd., AS6140 379 113 266 70.2% IMPSA ImpSat AS1221 891 634 257 28.8% ASN-TELSTRA Telstra Pty Ltd AS17676 297 43 254 85.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS25844 243 16 227 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS14654 221 4 217 98.2% WAYPOR-3 Wayport AS209 722 511 211 29.2% QWEST-4 Qwest AS11305 243 33 210 86.4% INTERL-80 Interland Incorporated AS20115 623 414 209 33.5% CHARTE-72 Charter Communications AS6478 263 68 195 74.1% ATTW AT&T WorldNet Services AS9443 362 168 194 53.6% INTERNETPRIMUS-AS-AP Primus Telecommunications AS4766 439 246 193 44.0% KIX Korea Internet Exchange for "96 World Internet Exposition AS2386 429 240 189 44.1% ADCS-1 AT&T Data Communications Services AS3356 863 680 183 21.2% LEVEL3 Level 3 Communications AS4519 204 21 183 89.7% MAASCO Maas Communications AS5668 353 173 180 51.0% CIH-12 CenturyTel Internet Holdings, Inc. AS9929 209 30 179 85.6% CNCNET-CN China Netcom Corp. Total 15751 7517 8234 52.3% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 64.46.0.0/18 AS7850 IHIGHW iHighway.net, Inc. 64.46.4.0/22 AS11711 TULARO TULAROSA COMMUNICATIONS 64.46.12.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.46.34.0/24 AS3408 64.46.60.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.63.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.62.126.0/23 AS25700 SWIFTD SWIFTDESK VENTURE 66.114.0.0/19 AS16526 BIRCHT Birch Telecom, Inc. 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 132.0.0.0/10 AS568 DISOUN DISO-UNRRA 137.0.0.0/13 AS568 DISOUN DISO-UNRRA 138.136.0.0/13 AS568 DISOUN DISO-UNRRA 158.0.0.0/13 AS568 DISOUN DISO-UNRRA 164.234.0.0/16 AS721 DNIC DoD Network Information Center 164.234.0.0/18 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 LANLINK Elisa Oyj 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.64.84.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.81.182.0/24 AS719 LANLINK Elisa Oyj 192.81.183.0/24 AS719 LANLINK Elisa Oyj 192.81.184.0/24 AS719 LANLINK Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.153.144.0/21 AS568 DISOUN DISO-UNRRA 192.172.0.0/19 AS568 DISOUN DISO-UNRRA 192.188.208.0/20 AS568 DISOUN DISO-UNRRA 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS568 DISOUN DISO-UNRRA 198.97.80.0/20 AS568 DISOUN DISO-UNRRA 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.192.0/20 AS568 DISOUN DISO-UNRRA 198.97.240.0/20 AS568 DISOUN DISO-UNRRA 198.101.4.0/22 AS568 DISOUN DISO-UNRRA 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.161.165.0/24 AS852 AGTA Telus Advanced Communications 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS568 DISOUN DISO-UNRRA 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.84.0.0/16 AS701 UU UUNET Technologies, Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS568 DISOUN DISO-UNRRA 199.114.128.0/18 AS568 DISOUN DISO-UNRRA 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.136.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 DISOUN DISO-UNRRA 199.123.0.0/18 AS568 DISOUN DISO-UNRRA 199.123.16.0/20 AS568 DISOUN DISO-UNRRA 199.123.80.0/21 AS568 DISOUN DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 202.2.64.0/20 AS9729 IS-AP iAdvantage Limited 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.24.0/24 AS17888 SINGTEL-HK SingTel Hong Kong Limited 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.70.240.0/20 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.142.0/24 AS30362 HAWAI-1 Hawaii-Pacific Teleport 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.143.56.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/20 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.240.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.149.248.0/21 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.155.243.0/24 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 203.32.4.0/23 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.87.224.0/19 AS4799 CHINA169-JT CNCGROUP old Jitong IP network 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.118.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.122.0/24 AS4802 WANTREE-AS-AP Wantree Development 203.132.123.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 203.132.124.0/24 AS18065 CENTRALDATA-WA Central Data Pty Ltd. 204.69.144.0/22 AS5668 CIH-12 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 206.41.32.0/19 AS14824 NCC-105 NewSouth Communications Corp. 206.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 206.108.34.0/24 AS852 AGTA Telus Advanced Communications 206.108.35.0/24 AS852 AGTA Telus Advanced Communications 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL-33 Telesat International Ltd. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 209.169.219.0/24 AS189 GNTY Genuity 209.169.223.0/24 AS189 GNTY Genuity 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.205.95.0/24 AS6347 SAVV SAVVIS Communications Corporation 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.50.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.51.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.55.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.56.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL-33 Telesat International Ltd. 209.240.96.0/19 AS10815 KCNETI-1 KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 209.251.64.0/19 AS10266 MDCN MDC, Inc. 210.213.0.0/19 AS6453 GIEUROPE Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

3 2

any ENAN contact?
by Eric Brunner-Williams in Portland Maine 19 Mar '04

19 Mar '04

Anyone from the DOI's Educational Native American Network lurking here please contact me off-list.

1 0

RE: Personal Co-location Registry
by Brandon Butterworth 19 Mar '04

19 Mar '04

> I can imagine what a rack full of 1U's from varying vendors > with different cable management systems would be like. It can be tricky. Single vendor helps, even simpler if it's all Sun - http://www.bogons.net/pics/bogons_20021205b.jpg http://www.bogons.net/pics/bogons_20031005a.jpg Sun Netras are a perfect fit for the requirements listed so far - serial LOM for total control - net bootable, reinstall remotely - console diagnostics, you can figure out why it won't boot - low power use, can fill the rack - cheap on ebay - plenty around ex dead.com - consistent form factor, buy individually and not have every chassis be different - not 6 foot deep, you can close the rack doors, air can circulate - rails that work in most racks - easy wiring so pulling one box doesn't disturb the next - choice of OS to suit dogma The only down side is limited CPU speed, no dual 3GHz power guzzlers (which probably sit idle) but they're plenty to fill more bandwidth than people want to pay for I liked them so much I bought a rack full > And then again, this isn't mission critical stuff, and the charter > was for a "publicly usable personal 1u" aimed at the lowest price.... I'm not sure what the mission is but I've found people think they're most critical. brandon

1 0

RE: any xo engineers around?
by Drew Weaver 19 Mar '04

19 Mar '04

I apologize for using Nanog as my personal phone directory, however I attempted to contact both companies using their published contact vectors and was unsuccessful in preventing damage being done to my network. I deeply apologize for wasting your bits. -Drew -----Original Message----- From: Suresh Ramasubramanian [mailto:suresh@outblaze.com] Sent: Thursday, March 18, 2004 11:15 PM To: Drew Weaver Cc: nanog(a)merit.edu Subject: Re: any xo engineers around? Drew Weaver writes on 3/19/2004 10:05 AM: > -Drew The first one you posted was UUNET I think ... May I suggest getting yourself an inoc-dba phone and checking the inoc-dba directory first, before posting a "paging $TIER-1" on nanog? http://www.pch.net/inoc-dba/ srs -- srs (postmaster|suresh)(a)outblaze.com // gpg : EDEDEFB9 manager, outblaze.com security and antispam operations

1 0

any xo engineers around?
by Drew Weaver 19 Mar '04

19 Mar '04

-Drew

3 2

Spamhaus Exposed
by Deep Throat 19 Mar '04

19 Mar '04

Disturbing information on one of the founders of Spamhaus.org http://www.geocities.com/jackjack9872004/ _________________________________________________________________ Check out MSN PC Safety & Security to help ensure your PC is protected and safe. http://specials.msn.com/msn/security.asp

21 30

need a network/ip guru from uunet
by Drew Weaver 19 Mar '04

19 Mar '04

Please contact me offllist asap! -Drew

1 0

Forum notify
by milton＠isomedia.com 19 Mar '04

19 Mar '04

1 0

Incoming message
by gherbert＠crl.com 19 Mar '04

19 Mar '04

1 0

Re: Firewall opinions wanted please
by Gregory Taylor 19 Mar '04

19 Mar '04

PIX firewalls are great if you configure them correctly for the application. 40 or less servers may not require something as complex, however if the data you are protecting is super-critical, I think a PIX might be your best solution. Proxy firewalls (i.e. Linux, BSD or variant gateways) are good if you're into doing a internal IP network with a NAT access point. But remember dealing with proxies, there is no such thing as a 'TRUE' transparent proxy, and having to go through all of the complexities of port forwarding, packet mangling, etc. might be too much if you are simply trying to firewall your web servers and whatnot. As discussed in a previous thread, I spoke about transparent bridging used for packet filtering and mangling. On a small application, that might be a good idea, because you get all of the true internet access (i.e. legit IPs, no proxying etc.) with the same ability to filter TCP, ICMP, UDP, IGMP etc. traffic. Disadvantages to dealing with transparent bridging is that you run into the whole MAC address collision and excess over-head announcements being made from the bridge itself every time it sends a packet through. The best option I guess is to figure out how important it is for you to have a firewall, what is the reason you need one and how important the data is on your servers. That will help you decide the best choice for a firewall or proxy application. Greg ---------- Original Message ---------------------------------- From: Nicole <nmh(a)daemontech.com> Date: Tue, 16 Mar 2004 14:27:16 -0800 (PST) > > > > Hi > I am looking for a good but reasonably priced firewall for a 40 or so server > site. Some people swear by Pix, others swear at it a lot. Also I have heard >good things about Netscreen. Or any others you would recommend for protecting >servers on a busy network. Don't really need anything with VPN just the >standard http, ftp, ssh, https, type traffic up to 100mb throughput. > From what I have heard a proxy firewall would be best? > > > > Thanks in advance!! > > > Nicole > > > > > >-- > |\ __ /| (`\ > | o_o |__ ) ) > // \\ > - nmh(a)daemontech.com - Powered by FreeBSD - >------------------------------------------------------ > " Daemons" will now be known as "spiritual guides" > -Politically Correct UNIX Page > > >

12 24