- NANOG - lists.nanog.org

The Cidr Report
by Tony Bates 24 Apr '98

24 Apr '98

This is an auto-generated mail on Fri Apr 24 12:00:00 PDT 1998 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 24Apr98 0) General Status Table History ------------- Date Prefixes 170498 51188 180498 51220 190498 51064 200498 51247 210498 51425 220498 51496 230498 51401 240498 51504 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 3488 Number of ASes announcing only one prefix: 1659 (861 cidr, 798 classful) Largest number of cidr routes: 376 announced by AS3561 Largest number of classful routes: 1115 announced by AS701 1) Gains by aggregating at the origin AS level --- 24Apr98 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS2493 657 413 244 37.1% iSTAR Internet, Inc. AS4293 441 217 224 50.8% IMCI AS816 670 461 209 31.2% UUNET Canada (ASN-UUNETCA-AS4) AS701 1115 939 176 15.8% Alternet AS3602 469 306 163 34.8% Sprint Canada Inc. AS3749 219 64 155 70.8% TECNET AS174 750 601 149 19.9% Performance Systems International AS8505 156 30 126 80.8% Middle East Technical University AS7046 253 149 104 41.1% UUNET-CUSTOMER AS5668 119 45 74 62.2% Century Telephone Inc. AS2048 162 90 72 44.4% LaNet AS3221 110 41 69 62.7% EENet Autonomous System AS4755 97 29 68 70.1% Videsh Sanchar Nigam Ltd. India AS11003 127 59 68 53.5% UNKNOWN AS10928 104 44 60 57.7% UNKNOWN AS271 111 52 59 53.2% BCnet Backbone AS3804 200 142 58 29.0% Bell Solutions AS4313 67 14 53 79.1% DELTANET AS549 209 159 50 23.9% ONet Backbone AS1239 541 492 49 9.1% SprintLink Backbone AS72 84 36 48 57.1% Schlumberger Information Network AS1221 275 227 48 17.5% AARNET-AS AS6392 80 33 47 58.8% MidWest Communications, Inc. AS4763 123 76 47 38.2% Telstra New Zealand AS684 94 52 42 44.7% Manitoba Regional Network Backbon AS852 157 117 40 25.5% AGT Advance Communication AS4740 353 314 39 11.0% ASN-OZEMAIL (Ozemail Pty Ltd) AS3493 164 126 38 23.2% INTERLINK AS4200 129 92 37 28.7% AGIS (Apex Global Information Ser AS803 72 36 36 50.0% SaskNet Backbone For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

cflowd - seems OK now ;-)
by Leigh Porter 24 Apr '98

24 Apr '98

Hiya folks, With regards to my earlier problem: This is an extract of /var/log/messages Apr 24 18:44:52 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 928 Apr 24 18:44:52 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:52 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:53 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 400 Apr 24 18:44:53 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:54 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 208 Apr 24 18:44:54 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:54 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:56 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 400 Apr 24 18:44:56 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:56 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 1168 Apr 24 18:44:57 mekong cflowd[16202]: [E] recv.c:100 recvfrom() returned 208 And the offending code: len = recvfrom(sockfd, (char *)flowpdu, sizeof(*flowpdu),0, (struct sockaddr *)&Saddr,&alen); if (len < (sizeof(FLOW_PDU_HDR) + (ntohs(flowpdu->header.count) * sizeof(FLOW_PDU_ENTRY)))) { syslog(LOG_ERR,"[E] %s:%d recvfrom() returned %d", __FILE__,__LINE__,len); return(-1); } It was getting the flow data all the time, bit it did not like it. I am running 11.2.(9)P on which the command: ip flow-export version 5 origin-as Does not exist, only the following is there: ip flow-export dest Is it a version problem? Anyway, I commented out the above code and it's collecting stats, I get a lot of: Apr 24 18:58:32 mekong cflowd[16687]: [E] cflowd.c:364 missed 2.12341e+07 flows from 193.164.160.114 Apr 24 18:58:32 mekong cflowd[16687]: [E] cflowd.c:364 missed 2.91787e+07 flows from 193.164.160.114 Apr 24 18:58:32 mekong cflowd[16687]: [E] cflowd.c:364 missed 2.07987e+09 flows from 193.164.160.114 But it's collecting something...! -- Leigh Porter

2 2

Not much use :-(
by Leigh Porter 24 Apr '98

24 Apr '98

Hello, Further to my last email, it seems that it is not getting any usefull data ;-) Take a look: [root@mekong tmp]# cfdnets 193.164.160.114.netmatrix.cur | head Net Matrix ---------- number of net entries: 436 SRCNET/MASK DSTNET/MASK PKTS BYTES 192.0.0.0/19 0.32.0.0/216 2338702092 2339630048 128.0.0.0/19 0.32.0.0/243 1666817388 1669372960 192.0.0.0/19 0.32.0.0/80 1206167448 1207129420 192.0.0.0/19 0.32.0.128/89 1876078360 1876096604 192.0.0.0/19 0.32.0.128/89 1876090628 1876090628 192.0.0.0/19 0.32.0.0/12 1995179200 1997963672 [root@mekong tmp]# cfdprotos 193.164.160.114.protocol.cur | head Protocol Table -------------- protocol packets bytes 0 2076977636 2077221280 2 247947584 248023436 5 1286321320 1286586400 8 247931232 247966892 10 4201412532 4201768492 13 1333349088 1333353584 14 1581249504 1581374464 [root@mekong tmp]# I am off to the pub, maybe some beer will make it work ;-) -- Leigh

1 0

Re: Traffic Shapping
by Natambu Obleton 24 Apr '98

24 Apr '98

I am looking to do the shaping on Ethernet Interfaces for a large fiber plant. I have been looking the solution by Aponet. Anyone out there used it? I believe it is what above.net uses. -- Natambu Obleton - Network Administrator - Frontier Internet Inc. 970 385 4177 - fax: 970 385 6745 - http://www.frontier.net 777 Main St. - Suite #201 - Durango - Colorado - 81301 - USA -----Original Message----- From: Alex P. Rudnev <alex(a)Relcom.EU.net> To: Natambu Obleton <no(a)frontier.net> Cc: nanog(a)merit.edu <nanog(a)merit.edu> Date: Friday, April 24, 1998 10:33 AM Subject: Re: Traffic Shapping >Hmm, it depends of what do you mean as _successfully_ -:). > >It works, but creates some bugs under heavy conditions. > > > >On Thu, 23 Apr 1998, Natambu Obleton wrote: > >> Date: Thu, 23 Apr 1998 17:51:16 -0600 >> From: Natambu Obleton <no(a)frontier.net> >> To: nanog(a)merit.edu >> Subject: Traffic Shapping >> >> Has anyone here successfully implement the traffic shaping option on a Cisco >> router? >> -- >> Natambu Obleton - Network Administrator - Frontier Internet Inc. >> 970 385 4177 - fax: 970 385 6745 - http://www.frontier.net >> 777 Main St. - Suite #201 - Durango - Colorado - 81301 - USA >> >> >> > >Aleksei Roudnev, Network Operations Center, Relcom, Moscow >(+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager) >(+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax) >

2 1

Re: Traffic Shapping
by kli＠yurie.com 24 Apr '98

24 Apr '98

I believe that we have been doing traffic shapping for Bay's Centillion over OC3 interface for a while. Our Yurie switch can shape to satisfy all normal public ATM network requirement. The Yurie switch is also used in the Splitrock network and you can get service from them without shapping your output. Their Yurie switch will provide all buffering and necessary shapping. Kwok "Natambu Obleton" <no(a)frontier.net> on 04/24/98 12:52:04 PM To: nanog(a)merit.edu cc: (bcc: Kwok Li/HQ/Yurie) Subject: Re: Traffic Shapping > ---------- > From: Natambu Obleton[SMTP:NO@FRONTIER.NET] > Sent: Friday, April 24, 1998 11:52:04 AM > To: nanog(a)merit.edu > Subject: Re: Traffic Shapping > Auto forwarded by a Rule > I am looking to do the shaping on Ethernet Interfaces for a large fiber plant. I have been looking the solution by Aponet. Anyone out there used it? I believe it is what above.net uses. -- Natambu Obleton - Network Administrator - Frontier Internet Inc. 970 385 4177 - fax: 970 385 6745 - http://www.frontier.net 777 Main St. - Suite #201 - Durango - Colorado - 81301 - USA -----Original Message----- From: Alex P. Rudnev <alex(a)Relcom.EU.net> To: Natambu Obleton <no(a)frontier.net> Cc: nanog(a)merit.edu <nanog(a)merit.edu> Date: Friday, April 24, 1998 10:33 AM Subject: Re: Traffic Shapping >Hmm, it depends of what do you mean as _successfully_ -:). > >It works, but creates some bugs under heavy conditions. > > > >On Thu, 23 Apr 1998, Natambu Obleton wrote: > >> Date: Thu, 23 Apr 1998 17:51:16 -0600 >> From: Natambu Obleton <no(a)frontier.net> >> To: nanog(a)merit.edu >> Subject: Traffic Shapping >> >> Has anyone here successfully implement the traffic shaping option on a Cisco >> router? >> -- >> Natambu Obleton - Network Administrator - Frontier Internet Inc. >> 970 385 4177 - fax: 970 385 6745 - http://www.frontier.net >> 777 Main St. - Suite #201 - Durango - Colorado - 81301 - USA >> >> >> > >Aleksei Roudnev, Network Operations Center, Relcom, Moscow >(+7 095) 194-19-95 (Network Operations Center Hot Line),(+7 095) 239-10-10, N 13729 (pager) >(+7 095) 196-72-12 (Support), (+7 095) 194-33-28 (Fax) >

1 0

cflowd - works?
by Leigh Porter 24 Apr '98

24 Apr '98

Hiya, Thanks to the folks who posted the cflowd data, and to the anonymous scripter :) After getting cflowd to compile on a Linux box, it starts fine and two processes appear, bound to UDP port 2055 - seems OK. Some files are created in /var/tmp (I left the default on for now!) and all seems OK. But no data is collected.. I assume all that is required on the router is: ip flow-export 10.45.16.92 2055 An strace ran on the cflowd process shows it just waiting for select calls to timeout on both processes. Looks like the router is not sending anything out, it's running 11.2(9)P on a 7507 with 96Mb memory. Does the Cisco require any special software for this? Regards, -- Leigh Porter

1 0

cflowd utils
by Tim Flavin 24 Apr '98

24 Apr '98

============================================================== Tim Flavin Internet Access for St Louis & Chicago Internet 1st, Inc Toll Free Sales & Support 800-875-3173 http://www.i1.net For more information email info(a)i1.net ============================================================== ---------- Forwarded message ---------- Date: Sat, 18 Apr 1998 00:09:12 -0500 (CDT) From: Tim Flavin <tim(a)i1.net> To: cisco-nsp(a)iagnet.net Subject: cflowd utils After searching for utils to use the data from cflowd and coming up empty, anybody have any pointers to where something useful may be? Lots of cflowd mentions in the NANOG archives, but no utils. ============================================================== Tim Flavin Internet Access for St Louis & Chicago Internet 1st, Inc Toll Free Sales & Support 800-875-3173 http://www.i1.net For more information email info(a)i1.net ==============================================================

3 3

Re: AS8584 taking over the internet
by shields＠crosslink.net 24 Apr '98

24 Apr '98

In article <3.0.3.32.19980409083628.03cebbe8(a)mailhost.ip-plus.net>, philip bridge <bridge(a)ip-plus.net> wrote: > That is of course laudible. But the point has to be made that AS8584 is in > Israel. In an environment when a small ISP in a small country can cause a > lot of damage to the global Internet, a way has to be found to efficiently > propogate this knowledge far and wide. I don't understand this point. Would you have been happier if they were a small ISP in the United States? How about India? Finland? Why does it matter that AS8584 is in Israel? -- Shields, CrossLink.

10 11

Re: So, Cisco?
by kbrown＠primelink.com 24 Apr '98

24 Apr '98

Perhaps he was mis-spoken... I got ahold of someone internal to Cisco who faxed me a bit more information (summarized below:) similar to the PA-H supports speeds up to 45Mbps requires IOS 11.3.(3)T or later supported on 3620 and 3640 support for 2600 "not planned" So..either the document I received was in error, or all the "heads" aren't talking. I think perhaps the latter is more correct, as this product isn't listed anywhere on CCO. "Scott A. Keoseyan" <falcon(a)labyrinth.org> on 04/22/98 09:53:22 PM To: Kevin Brown/Huber & Associates cc: Subject: Re: So, Cisco? We had the product manager for the 2600 in our office the other day. He claimed that the 2600 is able to use the NM-1HSSI... I asked him directly... Scott On Wed, 22 Apr 1998 kbrown(a)primelink.com wrote: > According to the limited information I received, the NM-1HSSI is capable of > handling 45Mbps. The information I received did not disclose details of > interoperability with the 2600-series. A full product data sheet should be > available soon. > > > Kevin Brown > Networking Engineer > kbrown(a)primelink.com > > Huber & Associates, Inc. > http://www.primelink.com/haa > > > > > > Al Reuben <alex(a)nac.net> on 04/22/98 03:57:17 PM > > To: nanog(a)merit.edu > cc: (bcc: Kevin Brown/Huber & Associates) > Subject: So, Cisco? > > > > > > > So, I saw in the Cisco price guide, under 3600 Series: > > > NM-1HSSI Single port HSSI network module for 3640 and 3620 $6,000 > > > First, I can't find anything about it on the website. Second, if anyone at > Cisco would care to comment, how fast will this card go before the box > starts to mel? And last, will it now/ever work in a 2600? > > > Thanks! > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > Atheism is a non-prophet organization. > I route, therefore I am. > Alex Rubenstein, alex(a)nac.net, KC2BUO, ISP/C Charter Member > Father of the Network and Head Bottle-Washer > Net Access Corporation, 9 Mt. Pleasant Tpk., Denville, NJ 07834 > Don't choose a spineless ISP! We have more backbone! http://www.nac.net > -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- > > > > > > > ----------------------------------------------------------------------- Scott Keoseyan Director of Technology falcon(a)labyrinth.org Powercom -----------------------------------------------------------------------

4 3

Prefix filtering at /24?
by Adrian Chadd 24 Apr '98

24 Apr '98

Hi. Does anyone here on this list filter BGP routes learnt with prefixes longer than /24 ? Thanks, Adrian -- Adrian Chadd | "Once in a lifetime, you find someone, <adrian(a)creative.net.au> | Who touches not only your heart, | But also your soul."

4 6