- NANOG - lists.nanog.org

RE: Router crash unplugs 1m Swedish Internet users
by Stewart, William C (Bill), RTSLS 23 Jun '03

23 Jun '03

Jim wrote: > One router and it takes there entire network off-line... > Maybe someone needs a Intro to Networks 101 class. I assume things are designed in such a way that if the router were actually dead, the traffic would take an alternate route. But the posting commented that they'd been saying something about memory corruption. There are unfortunately too many ways for a router to be "not dead yet", happily answering routing protocol messages but not bothering to actually forward packets between network interfaces, and if that happens on the router that's your best route due to geography or BGP or whatever, it can take a while to catch. Dealing with that is at least Networks 203 or maybe Networks 532 :-) Additionally, while the article in the press referred to it as a "router", that may be an actual technical description accurately described by a reporter who knows the technology, or it may be press shorthand for "one of those high-tech thingies that ISPs use", or it may be the ISP's Speaker-To-Reporters's watered-down description of something.

1 0

RE: Router crash unplugs 1m Swedish Internet users
by Jim Deleskie 23 Jun '03

23 Jun '03

I've lived though one of these a few years ago, the core itself stayed up though crippled as it was :) David, you name sounds familiar have we worked @ the same place before? -Jim -----Original Message----- From: David Barak [mailto:thegameiam@yahoo.com] Sent: Monday, June 23, 2003 5:27 PM To: Jim Deleskie; nanog(a)merit.edu Subject: RE: Router crash unplugs 1m Swedish Internet users I've seen a case where a single error in the configuration file of a $VENDOR_1 router was accepted (due to an 'undocumented feature'), and this caused the wholesale importation of BGP routes into the IGP, which caused most of their $VENDOR_2 hardware to spaz out. Locating the single error was a matter of hours, not minutes, so effectively a typo took out that ISP - and it's considered by most to be a relatively well-designed network. -David Barak --- Jim Deleskie <jdeleski(a)rci.rogers.com> wrote: > > > One router and it takes there entire network > off-line... Maybe someone needs > a Intro to Networks 101 class. > > -jim > ===== David Barak -fully RFC 1925 compliant- __________________________________ Do you Yahoo!? SBC Yahoo! DSL - Now only $29.95 per month! http://sbc.yahoo.com

1 0

Re: ISPs are asked to block yet another port
by Paul Vixie 23 Jun '03

23 Jun '03

> Its a sucky world sometimes. Perhaps Paul complained to > ATT/<other-unnamed-provider> with logs and such? :) oh yes. i tried *several* ways to get their attention. however, this kind of activity is so common these days that a noc literally has no choice but to focus their efforts on less common and more damaging things than relayprobing. so i was not shocked that they did not answer me. > > so if you're going to block tcp/25 SYNs on outbound, please make sure > > you block SYN/ACK's on input too, or else you just give the spammers a > > little more work to do instead of a lot more work to do. > > Yup, this is in the works also... and yes, someone realized quickly enough > that the one-way filtering was dumb. oh well. live and learn! that's good news, thanks for sharing it. any schedule for a fix :-) ??

2 1

Re: Network discovery and mapping
by Sean Donelan 23 Jun '03

23 Jun '03

On Mon, 23 Jun 2003 rpcbind(a)speakeasy.net wrote: > On the subject, has anyone had success w/ any L2 discovery tools? > > psnmp seems promsing (http://psnmp.sourceforge.net/) but the lack of support > for Cisco, Extreme, and Foundry makes it a bit limiting. I've found that L3 > topology is often well documented (and reasonably easy to decipher), but > finding troublesome layouts in switched configs is one place where a decent > tool could come in handy. Fluke LAN Mapshot is a nice one-trick pony product for mapping L2 switches. Point it at a network, give it the right snmp community strings, and it generates a switch topology.

1 0

Re: IRR/RADB and BGP
by Kevin Oberman 23 Jun '03

23 Jun '03

> Date: Thu, 19 Jun 2003 15:30:32 -0700 > From: "Vandy Hamidi" <vandy.hamidi(a)markettools.com> > Sender: owner-nanog(a)merit.edu > > Our new ISP is asking that I create a maintainer object in the RADB and > associated AS/Routes for us to be about to eBGP peer. > This is the first time I've been asked by a provider to do this for > something as simple as peering to advertise a couple /24's. > > I've peered with ATT, Sprint, UUnet, Qwest, Savvis, SBC, and Internap in > the past and never had to do anything but have a valid ASN provided by > ARIN. > > Is this just so they can dynamically build their prefix/as-path lists? > Why would I need to do this and what advantages are there. Cost to > register with RADB is $250/year and I want to understand it before I > shell out. You need to have routes registered in the IRR, but not necessarily the RADB. The RADB is only a part of the IRR. Many larger ISPs and NSPs run their own registries and there are several international registries including APNIC and RIPE. There has been at least one free database out there. I just don't remember the URL. (It's in the archives, but the search may be painful.) I strongly approve of such requirement. I know that it is in the peering agreements of several carriers, but they often don't check or enforce this. Many register customer routes and ASes. If routes and policies were properly registered, securing the Internet would be a lot closer to being possible. -- R. Kevin Oberman, Network Engineer Energy Sciences Network (ESnet) Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) E-mail: oberman(a)es.net Phone: +1 510 486-8634

6 6

Network discovery and mapping
by Sean Donelan 23 Jun '03

23 Jun '03

Its been a few years since I looked at network discovery and mapping tools. Openview/et al did the job, but was always a pain to move all the boxes to the right spots on the resulting maps. Has network discovery and mapping improved for medium-scale wide area networks for ISPs (e.g. 1,000 networks, 100,000 network devices)? I've found lots of discovery tools, but intelligent mapping/layout still seems to be a problem. The usual requirements for SNMP smart discovery, interface/subnet mapping, device identification and connecting the right symbols with the right lines to all the other symbols.

7 8

BTinternet problems?
by Mike 23 Jun '03

23 Jun '03

We're receiving multiple complaints about problems reaching anything @bt. Is anyone else experiencing this? I.E. e-mails to @btopenworld and also @btinternet.com are bouncing. The root cause seems that we are unable to resolve anything within bt.com et al. For whatever reason, this is affecting all of the netblocks that we have nameservers in, but not some others we control. I.E. working ok from 204.188.96.0/20: % dig @194.72.6.52 bt.com | grep ^bt bt.com. 1D IN A 62.7.244.126 bt.com. 1D IN NS dns1.axion.bt.co.uk. bt.com. 1D IN NS ns1.bt.net. bt.com. 1D IN NS dns0.axion.bt.co.uk. Not working at all within 208.139.192.0/20: ns2# dig @194.72.6.52 bt.com ; <<>> DiG 9.2.1 <<>> @194.72.6.52 bt.com ;; global options: printcmd ;; connection timed out; no servers could be reached At the same time... ns2# tcpdump -n -s 1600 host 194.72.6.52 tcpdump: listening on xl0 10:40:07.235635 208.139.192.2.36647 > 194.72.6.52.53: 17495+ A? bt.com. (24) 10:40:12.241697 208.139.192.2.36647 > 194.72.6.52.53: 17495+ A? bt.com. (24) ns2# traceroute 194.72.6.52 traceroute to 194.72.6.52 (194.72.6.52), 64 hops max, 40 byte packets 1 cw-gw (208.139.192.1) 1.255 ms 5.908 ms 1.216 ms 2 denver-core-fe-0-0 (206.168.230.5) 7.285 ms 2.721 ms 2.597 ms 3 den1cspdaa02-v200.denver.terabeam.net (216.137.18.229) 4.406 ms 2.355 ms 6.978 ms 4 den1mcoraa01-ge110-v101.denver.terabeam.net (216.137.17.149) 1.261 ms 4.901 ms 7.538 ms 5 den1pcinaa01-ge020.denver.terabeam.net (216.137.17.21) 5.450 ms 6.128 ms 7.533 ms 6 12.124.158.25 (12.124.158.25) 1.163 ms 1.572 ms 4.476 ms 7 gbr1-p60.dvmco.ip.att.net (12.123.36.138) 2.529 ms 1.285 ms 6.739 ms 8 gbr4-p70.dvmco.ip.att.net (12.122.5.21) 1.365 ms 3.114 ms 4.32 ms 9 12.122.10.117 (12.122.10.117) 22.911 ms 19.350 ms 19.352 ms 10 tbr1-p012301.n54ny.ip.att.net (12.122.10.1) 38.500 ms 38.203 ms 44.327 ms 11 gar4-p300.n54ny.ip.att.net (12.123.3.2) 37.844 ms 37.614 ms 42.708 ms 12 12.126.124.82 (12.126.124.82) 39.463 ms 39.453 ms 39.360 ms 13 * * * 14 * * * 15 * * * 16 * * * 17 * * * 18 * * * 19 * * * 20 * * * 21 * * * 22 * * * 23 * * * 24 * * * 25 * * * 26 * * * 27 * * * 28 * * * 29 * * * 30 * * * I've fiddled with our routes here, tried from different netblocks to no avail. Don't see any mention of bt at the puck.nether.net NOC list either. Thought about sending them mail, but wound up back at step #1 above...

5 6

RE: The Cidr Report
by McBurnett, Jim 22 Jun '03

22 Jun '03

Not sure how relevent this may be but: Interland has recently been in a major network move.... They boight out Communitech and are in the process of moving datacenters to the Interland centers.. This could explain it.... But they should be doing a better job of it though... Jim -----Original Message----- From: Hank Nussbacher [mailto:hank@att.net.il] Sent: Saturday, June 21, 2003 3:41 PM To: Haesu; nanog(a)merit.edu Subject: Re: The Cidr Report At 01:00 PM 21-06-03 -0400, Haesu wrote: >What is up with ASN11305 generating humongous loads of unaggregated /24's? Sent them an email 11 days ago, no reply yet: >Date: Tue, 10 Jun 2003 10:56:46 +0200 >To: asnadmin(a)interland.com, abuse(a)interland.com >From: Hank Nussbacher <hank(a)att.net.il> >Subject: AS11305 - routing table bloat >Cc: "Terry Baranski" <tbaranski(a)mail.com>, bgreene(a)cisco.com > >AS11305 has been lately seen to be sending out too many prefixes not based >on CIDR boundries, thereby increasing the global router table size: > > ASnum NetsNow NetsAggr NetGain % Gain Description >AS11305 646 136 510 78.9% INTERLAND-NET1 Interland > Incorporated > >See http://www.mcvax.org/~jhma/routing/ and http://bgp.potaroo.net/cidr/ >and http://bgp.potaroo.net/cgi-bin/as-report?as=as11305&view=4637 >for further details. > >Regards, >Hank -Hank >-hc > > > Aggregation Summary > > The algorithm used in this report proposes aggregation only > > when there is a precise match using the AS path, so as > > to preserve traffic transit policies. Aggregation is also > > proposed across non-advertised address space ('holes'). > > > > --- 20Jun03 --- > > ASnum NetsNow NetsAggr NetGain % Gain Description > > > > Table 122681 87722 34959 28.5% All ASes > > > > AS7132 923 229 694 75.2% SBIS-AS SBC Internet Services > > - Southwest > > AS11305 647 137 510 78.8% INTERLAND-NET1 Interland > > Incorporated > > AS701 1514 1070 444 29.3% ALTERNET-AS UUNET > > Technologies, Inc. > > AS7843 614 175 439 71.5% ADELPHIA-AS Adelphia Corp. > > AS4323 600 177 423 70.5% TW-COMM Time Warner > > Communications, Inc. > > AS7018 1337 927 410 30.7% ATT-INTERNET4 AT&T WorldNet > > Services > > AS3908 889 521 368 41.4% SUPERNETASBLK SuperNet, Inc. > > AS1221 1062 756 306 28.8% ASN-TELSTRA Telstra Pty Ltd > > AS6197 518 225 293 56.6% BATI-ATL BellSouth Network > > Solutions, Inc > > AS4355 397 111 286 72.0% ERMS-EARTHLNK EARTHLINK, INC > > AS6198 475 189 286 60.2% BATI-MIA BellSouth Network > > Solutions, Inc > > AS1239 959 677 282 29.4% SPRINTLINK Sprint > > AS6347 367 92 275 74.9% DIAMOND SAVVIS Communications > > Corporation > > AS27364 319 87 232 72.7% ACS-INTERNET Armstrong Cable > > Services > > AS17676 250 24 226 90.4% GIGAINFRA XTAGE CORPORATION > > AS22773 220 8 212 96.4% CCINET-2 Cox Communications > > Inc. Atlanta > > AS209 498 305 193 38.8% ASN-QWEST Qwest > > AS705 508 331 177 34.8% ALTERNET-AS UUNET > > Technologies, Inc. > > AS2386 406 235 171 42.1% INS-AS AT&T Data > > Communications Services > > AS2048 258 87 171 66.3% LANET-1 State of Louisiana > > AS17557 341 173 168 49.3% PKTELECOM-AS-AP Pakistan > > Telecom > > AS6327 190 24 166 87.4% SHAWFIBER Shaw Fiberlink > > Limited > > AS13601 205 46 159 77.6% ASN-INNERHOST Innerhost, Inc. > > AS690 450 293 157 34.9% MERIT-AS-27 Merit Network > Inc. > > AS20115 463 311 152 32.8% CHARTER-NET-HKY-NC Charter > > Communications > > AS3602 226 79 147 65.0% SPRINT-CA-AS Sprint Canada > > Inc. > > AS2686 258 112 146 56.6% AS2686 AT&T Global Network > > Services - EMEA > > AS6140 297 155 142 47.8% IMPSAT-USA ImpSat > > AS7303 238 98 140 58.8% AR-TAST-LACNIC Telecom > > Argentina Stet-France > Telecom > > S.A. > > AS14654 145 6 139 95.9% WAYPORT Wayport > > > > Total 15574 7660 7914 50.8% Top 30 total > > > > > > Possible Bogus Routes > > > > 24.2.128.0/21 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.7.10.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.11.98.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.14.197.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.18.132.0/23 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.23.8.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.119.0.0/16 AS11492 CABLEONE CABLE ONE > > 24.119.66.0/24 AS11492 CABLEONE CABLE ONE > > 24.180.60.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.183.185.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.183.186.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.183.187.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.183.188.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.183.189.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.183.191.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 24.223.128.0/17 AS11060 NEO-RR-COM Time Warner > Cable Northeast Ohio > > 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd > > 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd > > 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. > > 65.2.165.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.6.145.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.6.146.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.6.147.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.6.150.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.6.151.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.8.0.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.11.200.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.11.201.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 65.15.117.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services > > 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband > > 66.240.192.0/19 AS10439 CARI California Regional Intranet, > Inc. > > 66.240.192.0/20 AS10439 CARI California Regional Intranet, > Inc. > > 69.22.64.0/19 AS10994 TAMPA2-TWC-5 Time Warner > Communications > > 69.22.96.0/20 AS10994 TAMPA2-TWC-5 Time Warner > Communications > > 69.51.64.0/19 AS21947 PANGUICH-10 Cutthroat Communications > > 69.58.0.0/19 AS11877 FROGNET FrogNet, Inc. > > 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA > > 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA > > 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA > > 140.240.0.0/13 AS1 GNTY-1 Genuity > > 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA > > 165.212.0.0/16 AS7424 USANET USA.Net > > 166.16.0.0/16 AS7132 SBIS-AS SBC Internet Services - > Southwest > > 171.64.0.0/10 AS1 GNTY-1 Genuity > > 192.43.230.0/24 AS4738 SAARDNET-AS South Australian > Academic Research and Development Network > > 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. > > 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution > Autonomous System > > 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution > Autonomous System > > 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution > Autonomous System > > 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution > Autonomous System > > 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution > Autonomous System > > 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and > Space Administration > > 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN > > 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services > > 192.136.79.0/24 AS719 AS719 LANLINK autonomous system > > 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA > > 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA > > 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA > > 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA > > 192.228.0.0/16 AS4637 REACH Reach Network Border AS > > 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. > > 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. > > 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA > > 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA > > 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater > Systems Center > > 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA > > 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA > > 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate > Schools of Engineering > > 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA > > 198.136.32.0/20 AS19329 MCNET Martin County Board of > County Commissioners > > 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. > > 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom > Services Corp. > > 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications > > 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network > > 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES > Inc. > > 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom > Services Company > > 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. > > 198.169.0.0/16 AS803 SASKTEL SaskTel > > 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc > > 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA > > 199.60.0.0/20 AS271 BCNET-AS University of British > Columbia > > 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate > Schools of Engineering > > 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. > > 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA > > 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA > > 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA > > 199.114.140.0/24 AS3544 ITSDN-U7 DISA/UNRRA > > 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL > INTERNET, INC. > > 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA > > 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA > > 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA > > 199.167.25.0/24 AS701 ALTERNET-AS UUNET Technologies, Inc. > > 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet > > 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. > > 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom > > 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ > > 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications > Co., Ltd. > > 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN > > 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN > > 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN > > 202.10.72.0/21 AS9716 AUSTAR-AS-AP Austar Entertainement > > 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless > > 202.122.76.0/24 AS17553 TIMELESS-AP System Integration > provider > > 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ > > 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ > > 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) > > 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) > > 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ > > 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ > > 202.140.230.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited > > 202.140.232.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited > > 202.140.234.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited > > 202.140.235.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited > > 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. > > 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. > > 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN > > 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN > > 202.161.0.0/19 AS10097 FLOWCOM flow communications level > 2 541 kent st sydney nsw 2000 > > 202.161.0.0/21 AS4634 -No Whois Entry- > > 202.161.8.0/21 AS4634 -No Whois Entry- > > 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange > > 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus > Telecommunications > > 202.173.32.0/19 AS9671 APNIC-AS-3-BLOCK Asia Pacific > Network Information Centre > > 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic > and Reasearch Network (AARNet) > > 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited > > 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP > > 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix > > 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network > Information Centre > > 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms > Phils., Inc. > > 203.135.99.0/24 AS2687 IBM-MMD-AS IBM > > 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network > Information Centre > > 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. > > 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet > Services, Inc. > > 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. > > 204.89.225.0/24 AS2495 KANREN Kansas Research and > Education Network > > 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet > > 204.194.110.0/23 AS10588 ICSNET Intelligent Computer > Solutions, Inc > > 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. > > 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. > > 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC > > 206.82.64.0/18 AS7029 ALLTELNET Alltel Information > Services, Inc. > > 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications > > 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications > > 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. > > 206.167.57.0/24 AS376 RISQ-AS Reseau Interordinateurs > Scientique Quebecois (RISQ) > > 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom > Services Company > > 206.251.69.0/24 AS27429 TIL Telesat International Ltd. > > 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. > > 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. > > 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc > > 207.231.96.0/19 AS11194 NUNETPA NuNet Inc > > 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. > > 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC > > 208.104.103.0/24 AS1239 SPRINTLINK Sprint > > 209.104.198.0/24 AS6137 SISNA SISNA, Inc. > > 209.104.199.0/24 AS6137 SISNA SISNA, Inc. > > 209.104.218.0/24 AS6137 SISNA SISNA, Inc. > > 209.104.219.0/24 AS6137 SISNA SISNA, Inc. > > 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online > Services > > 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. > > 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. > > 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. > > 209.160.209.0/24 AS13415 LUMIX Lumix Communications, Inc. > > 209.169.219.0/24 AS189 GENUITY-AS189 Genuity > > 209.169.223.0/24 AS189 GENUITY-AS189 Genuity > > 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. > > 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network > Services > > 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network > Services > > 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network > Services > > 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network > Services > > 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network > Services > > 209.213.160.0/19 AS4355 ERMS-EARTHLNK EARTHLINK, INC > > 209.222.137.0/24 AS27429 TIL Telesat International Ltd. > > 209.240.96.0/19 AS10815 KCNET KCnet, Inc. > > 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc > > 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. > > 210.4.20.0/22 AS10095 AS10095 Segmentation Fault > > 210.4.60.0/24 AS10095 AS10095 Segmentation Fault > > 210.4.61.0/24 AS10095 AS10095 Segmentation Fault > > 211.27.156.0/24 AS9768 PUBNET1-AS KT > > 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. > > 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. > > 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. > > 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. > > 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services > > 216.115.178.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.179.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.182.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.183.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.184.0/23 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.186.0/23 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.186.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.189.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.190.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.115.191.0/24 AS11676 ACSBPS Affiliated Computing > Services Business ProcessSolutions > > 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. > > 216.211.177.0/24 AS14473 KNET KNet, Inc. > > 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. > > > > > > Please see http://www.cidr-report.org for the full report > > > > ------------------------------------ > > Copies of this report are mailed to: > > nanog(a)merit.edu > > eof-list(a)ripe.net > > apops(a)apops.net > > routing-wg(a)ripe.net > > afnog(a)afnog.org > >-- >Sincerely, > Haesu C. > TowardEX Technologies, Inc. > WWW: http://www.towardex.com > E-mail: haesu(a)towardex.com > Cell: (978) 394-2867

1 0

OT: question re. the Volume of unwanted email (fwd)
by Miles Fidelman 22 Jun '03

22 Jun '03

Hi Folks, Someone on the cybertelecom list raised a question about the real costs of handling spam (see below) in terms of computer resources, transmission, etc. This dovetailed a discussion I had recently with several former BBN colleagues - where someone pointed out that email is not a very high percentage of total internet traffic, compared to all the multimedia and video floating around these days. Since a lot of the arguments about spam hinge on the various costs it imposes on ISPs, it seems like it would be a good thing to get a handle on quantitative data. It occurs to me that a lot of people on this list might have that sort of quantitative data - so... any comments? Regards, Miles Fidelman ---------- Forwarded message ---------- Date: Wed, 18 Jun 2003 09:15:08 -0400 From: Timothy Denton <tim(a)TMDENTON.COM> Reply-To: Telecom Regulation & the Internet <CYBERTELECOM-L(a)LISTSERV.AOL.COM> To: CYBERTELECOM-L(a)LISTSERV.AOL.COM Subject: Issue: the Volume of unwanted email Cybertelecomers: I want the advice and knowledge of people on this list. I dared not use the word spam lest I be filtered out, but the issue is the economic cost of spam for ISPs. There has been much to-do about spam of late. Figures from Canarie show that SMTP transmissions account for about .5% of the volume of Internet traffic. This may be typical of backbone networks, or not. Commercial networks are jealous of revealing information of this nature. ISPs report that spam is now about 46% of email, and that it adds to the cost of transmissions because of the extra machines that have to be bought and operated. Question: What is the economic cost of handling all this spam, in terms of additional boxes, software, transmission costs etc? I am aware that spam adds large costs in terms of time and attention at the user end. Is there evidence of what it adds in terms of hardware and software? As we head toward legislative remedies in the US and Canada, I would like to have a better idea of the economic impact of spam. Timothy Denton, BA,BCL 37 Heney Street Ottawa, Ontario Canada K1N 5V6 www.tmdenton.com 1-613-789-5397 tmdenton(a)magma.ca

12 17

Spam and "following the money"
by Joe St Sauver 22 Jun '03

22 Jun '03

Hi, Whenever the topic of spam comes up, the suggest always arises that people "follow the money" to track the spammers. Sometimes, it is true, that will be useful, but it takes a rather naive approach to the spammer's business model. In many cases, spammers don't actually need to *deliver a product or service* to the person they are spamvertising to make money from sending spam. Some spammers make their money via banner advertising revenues: if they can get you to visit one of their pages (even an "unsubscribe" page), they can get "hits" for some advertising program and make money from you. Or consider pump-and-dump stock tout spam... no direct product or service needs to be delivered to a spammee for the spammer to make money, assuming he can use spam to run the stock price up and the SEC doesn't jump on traders with unusual purchase and sale patterns. In some cases, the spammer's scheme is outright fraud: one of the reasons that penis enlargement spam (or spam for Viagra or other "embarassing"-to- purchase products) is so common is that spammers are counting on people being too embarassed to admit that they (a) fell for a scam, and (b) that they were dumb enough to send cash to some PO Box in Romania, and (c) that they needed the particular product that was being spamvertised in the first place. Likewise spam for pay-per-view cable descramblers/theft of service devices and other illegal/semi-illegal products: if your pay-per-view theft of service cable descrambler provider fails to deliver a functioning theft-of-service device for your use, who are you going to complain to, the police? It is also worth noting that in many cases people are providing their name, credit credit number, and expiration date to some random server hosted somewhere in China, hmm, whaddya think, any possibility of fraud taking place? I could make fifty bucks selling some fake human growth hormone, or thousands charging stuff on a steady stream of live credit card numbers. If I had to point at the most common way to make money from spam these days, I'd bet on credit card fishing... But even routine credit card fraud pails in comparison to the costs associated with trying to regain your financial identity after it has been completely co-opted following provision of complete financial details to some "mortgage referral specialist..." And then there are the pr0n "dialer" dudes, who offer "free" access to their pr0n site, you "just" need to use their special software (which calls a 900 number somewhere in the Caribean for $15.00/minute, and/or sends more spam for them). Lastly, there are plenty of spam service providers who make money from selling email addresses, selling spam software, selling spam hosting services, you name it... in fact, some of the largest American carriers are *perfectly* willing to provide connectivity for spamvertised web sites so long as the spam doesn't actually get sent from that connectivity (and with hundreds of thousands of open proxies out there, well, there's no need for a spammer to be that gauche!) If you want to stop spam, take the time to see where spamvertised web sites are being hosted, and who's providing transit for those hosts. I've been doing this for a while now, and I can *definitely* see some pretty obvious patterns. I guess those transpacific OC3s and OC12s for "strategic" customers are just too lucrative to risk jeopardizing with trifles like enforcing terms of service... Regards, Joe

5 4