- NANOG - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 28 Mar '03

28 Mar '03

This report has been generated at Fri Mar 28 21:50:09 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 21-03-03 120815 86434 22-03-03 120741 86424 23-03-03 120589 86556 24-03-03 120679 86593 25-03-03 120712 86324 26-03-03 120739 86276 27-03-03 120877 86281 28-03-03 120855 86349 AS Summary 14836 Number of ASes in routing system 5851 Number of ASes announcing only one prefix 1555 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 73048064 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 28Mar03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 121000 86362 34638 28.6% All ASes AS3908 1048 537 511 48.8% SUPERNETASBLK SuperNet, Inc. AS18566 509 14 495 97.2% COVAD Covad Communications AS4151 585 107 478 81.7% USDA-1 USDA AS701 1555 1115 440 28.3% ALTERNET-AS UUNET Technologies, Inc. AS7843 599 198 401 66.9% ADELPHIA-AS Adelphia Corp. AS7018 1346 952 394 29.3% ATT-INTERNET4 AT&T WorldNet Services AS4323 561 176 385 68.6% TW-COMM Time Warner Communications, Inc. AS1221 1109 813 296 26.7% ASN-TELSTRA Telstra Pty Ltd AS1239 968 688 280 28.9% SPRINTLINK Sprint AS6197 476 202 274 57.6% BATI-ATL BellSouth Network Solutions, Inc AS22927 286 14 272 95.1% AR-TEAR2-LACNIC TELEFONICA DE ARGENTINA AS6198 450 182 268 59.6% BATI-MIA BellSouth Network Solutions, Inc AS705 534 268 266 49.8% ASN-ALTERNET UUNET Technologies, Inc. AS4355 382 116 266 69.6% ERMS-EARTHLNK EARTHLINK, INC AS1 685 429 256 37.4% GNTY-1 Genuity AS4814 267 15 252 94.4% CHINANET-BEIJING-AP China Telecom (Group) AS2386 499 249 250 50.1% INS-AS AT&T Data Communications Services AS17676 235 28 207 88.1% GIGAINFRA XTAGE CORPORATION AS22291 239 39 200 83.7% CHARTER-LA Charter Communications AS27364 265 65 200 75.5% ACS-INTERNET Armstrong Cable Services AS7132 674 475 199 29.5% SBIS-AS SBC Internet Services - Southwest AS4134 316 123 193 61.1% CHINANET-BACKBONE No.31,Jin-rong Street AS22773 197 8 189 95.9% CCINET-2 Cox Communications Inc. Atlanta AS209 526 339 187 35.6% ASN-QWEST Qwest AS690 503 316 187 37.2% MERIT-AS-27 Merit Network Inc. AS6347 373 193 180 48.3% DIAMOND SAVVIS Communications Corporation AS3561 520 344 176 33.8% CWUSA Cable & Wireless USA AS2048 259 87 172 66.4% LANET-1 State of Louisiana AS17557 375 214 161 42.9% PKTELECOM-AS-AP Pakistan Telecom AS6140 290 140 150 51.7% IMPSAT-USA ImpSat Total 16631 8446 8185 49.2% Top 30 total Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Photographs of Iraqi telecomunication facilities
by Sean Donelan 28 Mar '03

28 Mar '03

The Washington Post has on-line photographs of several of the major telecommunication facilities in Bahgdad. http://www.washingtonpost.com/wp-srv/inatl/longterm/fogofwar/index/photos.h… The Washington Times is reporting that US had infilitrated the main telecommunication exchange in Baghdad, and wiretapped some of the circuits. Which may explain why it wasn't attacked earlier.

1 0

Problems on internet today ?
by James-lists 28 Mar '03

28 Mar '03

Are others seeing latency and slow or stalled web pages today ? I opened a ticket with my provider, who indicates they are seeing problems with many of their peers. I am seeing very increased RTT to all the points I usually trace to. The latency does start past my provider, after they hand off to others, and is not specific to one major provider. james

2 3

Iraq Telecom Facility
by Jeffrey Meltzer 28 Mar '03

28 Mar '03

MSNBC just reported that 2 Iraq 'Telecom Facilities' were bombed. Anyone know if this is having further reaching effects on the PSTN/Internet in that region? Don't see a url on MSNBC or CNN yet. Jeff -- Jeffrey Meltzer Network Services Manager ICS/VillageWorld 631.218.0700 x100

2 1

aljazeera.net domain owned.
by Abdullah Ibn Hamad Al-Marri 27 Mar '03

27 Mar '03

Hello, aljazeera.net domain owned. Per what the Chief Editor of www.aljazeera.net told me in the phone a while ago the domain isn't in their control anymore. all the info got changed and they are wondering how did this happen. A visit to the website now would explian it all. Thanks, -Abdullah

6 6

Re[2]: Verizon mail server on MAPS RSS list
by Richard Welty 27 Mar '03

27 Mar '03

On Thu, 27 Mar 2003 13:24:06 -0800 (PST) Jay Hennigan <jay(a)west.net> wrote: > Verizon allows anyone who forges an @verizon.net From: address > to relay through their servers. This behavior is intentional. ah. then they will find it "challenging" to get off of anybody's open relay list. richard (just fixed one of those types of open relay at a customer's site) -- Richard Welty rwelty(a)averillpark.net Averill Park Networking 518-573-7592 Unix, Linux, IP Network Engineering, Security

1 0

burst.net DDoS?
by Danny 27 Mar '03

27 Mar '03

Hey, I've got a several domains hosted on bursts IP space and currently they are getting about 35-45% packet loss. Does anyone have any idea what is going on? I've tried calling them but to no avail sadly enough. Cheers Danny Network Security Engineer PGP Print: C6AD B205 E3C6 38AB 0164 6604 66F5 CCFC F4ED F1E0 PGP Key: http://akasha.irt.drexel.edu/danny.asc

3 2

Domain oddity - possibly early warning...
by Rodney Joffe 27 Mar '03

27 Mar '03

Hello, We've noticed something we've never noticed before that became evident at 14:00 today... and which could be an isolated glitch at Verisign/Netsol, or it could be a sign of a larger problem looming. The domain utclassifieds.com is answered as NXDOMAIN in the gtld-servers. [rjoffe@layer9 rjoffe]$ dig @a.gtld-servers.net utclassifieds.com ns ; <<>> DiG 8.3 <<>> @a.gtld-servers.net utclassifieds.com ns ; (1 server found) ;; res options: init recurs defnam dnsrch ;; got answer: ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4 ;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUERY SECTION: ;; utclassifieds.com, type = NS, class = IN ;; AUTHORITY SECTION: com. 2D IN SOA a.gtld-servers.net. nstld.verisign-grs.com. ( 2003032500 ; serial 30M ; refresh 15M ; retry 1W ; expiry 1D ) ; minimum ;; Total query time: 96 msec ;; FROM: layer9.com to SERVER: a.gtld-servers.net 192.5.6.30 ;; WHEN: Tue Mar 25 16:15:26 2003 However it has a whois record at networksolutions, but it has no nameservers in the whois record. And the domain is valid and expires in July 2003. http://www.networksolutions.com/cgi-bin/whois/whois?STRING=utclassifieds.co… If anyone else has a similar domain problem, I'd appreciate a note offline... Meantime we're trying to get an answer from NSI. -- Rodney Joffe CenterGate Research Group, LLC. http://www.centergate.com "Technology so advanced, even we don't understand it!"(SM)

2 2

Re: how to get people to upgrade? (Re: The weak link? DNS)
by Paul Vixie 27 Mar '03

27 Mar '03

> Isn't the problem with this that in order to get the code out, people need > to upgrade and you therefor risk ending up with only notifying the people > that upgrade anyway? eventually a hard drive fails or the operating system is replaced, and then a BIND upgrade happens as a side effect. statistically this takes between five and ten years for a server whose operator doesn't read CERT advisories. so while the opportunity isn't as frequent as i'd like, it does occur, and i'd like to slip in some logic that makes subsequent upgrades more frequent. (several nanoggers have pointed out that the trouble is human nature, not technology, but that doesn't mean we can't make it easier to do the right thing.)

1 0

Re: Both Iraqi state provider Uruklink.net name servers offline
by Brian McWilliams 27 Mar '03

27 Mar '03

Someone has apparently hacked the Uruklink.net DNS server, and is trying to redirect visitors to a third-party 9-11 memorial site. The Uruklink.net site is still generally available via its IP address: http://62.145.94.111 Details here: http://www.pc-radio.com/uruklink-0wned.html Brian At 02:57 AM 3/27/2003, Sean Donelan wrote: >Despite very old recommendations, the Iraqi state provider Uruklink.net >kept all of its name servers on the same subnet. Although this is >recognized as a poor design, many domain name server operators worldwide >do the same thing. > >nic1.baghdadlink.net. 2D IN A 62.145.94.1 >nic2.baghdadlink.net. 2D IN A 62.145.94.2 > >The nic2 (62.145.94.2) has been offline for over a week. Yesterday the >remaining name server nic1 (62.145.94.1) was running an old version of >bind (8.1.2). It was returning obviously bogus answers to queries. > >In the last 24 hours, the name server application on nic1 (62.145.94.1) >went offline. The server is online (responds to pings), but neither >tcp or udp port 53 responds. The name server application may have >crashed, been trashed, or shutdown by the system administrator.

1 0