- NANOG - lists.nanog.org

G root not responding on UDP?
by Anurag Bhatia 18 Apr '16

18 Apr '16

Hello everyone I wonder if it's just me or anyone else also finding issues in g root reachability? ICMP, trace, UDP DNS queries all timing out. Only TCP seem to work. Trace is timing out on 208.46.37.38. traceroute to 192.112.36.4 (192.112.36.4), 64 hops max, 52 byte packets 1 router01.home (172.16.0.1) 4.926 ms 1.863 ms 1.845 ms 2 103.60.176.101 (103.60.176.101) 24.007 ms 24.507 ms 22.330 ms 3 nsg-static-137.49.75.182-airtel.com (182.75.49.137) 64.435 ms 64.359 ms 66.108 ms 4 182.79.206.46 (182.79.206.46) 331.787 ms 182.79.206.53 (182.79.206.53) 228.497 ms 182.79.222.189 (182.79.222.189) 224.966 ms 5 ldn-brdr-01.qwest.net (195.66.225.34) 162.745 ms 162.139 ms 162.031 ms 6 lon-ddos-01.inet.qwest.net (67.14.63.58) 162.138 ms 162.125 ms 162.916 ms 7 * * * 8 chp-edge-01.inet.qwest.net (208.46.37.37) 242.819 ms 242.793 ms 242.575 ms 9 208.46.37.38 (208.46.37.38) 253.176 ms 253.066 ms 252.807 ms 10 * * * 11 * * * 12 * * * dig @192.112.36.4 . ns ; <<>> DiG 9.8.3-P1 <<>> @192.112.36.4 . ns ; (1 server found) ;; global options: +cmd ;; connection timed out; no servers could be reached dig @192.112.36.4 . ns +tcp +noauth ; <<>> DiG 9.8.3-P1 <<>> @192.112.36.4 . ns +tcp +noauth ; (1 server found) ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 29674 ;; flags: qr aa rd; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 24 ;; WARNING: recursion requested but not available ;; QUESTION SECTION: ;. IN NS ;; ANSWER SECTION: . 518400 IN NS g.root-servers.net. . 518400 IN NS l.root-servers.net. . 518400 IN NS f.root-servers.net. . 518400 IN NS h.root-servers.net. . 518400 IN NS k.root-servers.net. . 518400 IN NS b.root-servers.net. . 518400 IN NS c.root-servers.net. . 518400 IN NS e.root-servers.net. . 518400 IN NS j.root-servers.net. . 518400 IN NS i.root-servers.net. . 518400 IN NS m.root-servers.net. . 518400 IN NS a.root-servers.net. . 518400 IN NS d.root-servers.net. ;; ADDITIONAL SECTION: a.root-servers.net. 3600000 IN A 198.41.0.4 b.root-servers.net. 3600000 IN A 192.228.79.201 c.root-servers.net. 3600000 IN A 192.33.4.12 d.root-servers.net. 3600000 IN A 199.7.91.13 e.root-servers.net. 3600000 IN A 192.203.230.10 f.root-servers.net. 3600000 IN A 192.5.5.241 g.root-servers.net. 3600000 IN A 192.112.36.4 h.root-servers.net. 3600000 IN A 198.97.190.53 i.root-servers.net. 3600000 IN A 192.36.148.17 j.root-servers.net. 3600000 IN A 192.58.128.30 k.root-servers.net. 3600000 IN A 193.0.14.129 l.root-servers.net. 3600000 IN A 199.7.83.42 m.root-servers.net. 3600000 IN A 202.12.27.33 a.root-servers.net. 3600000 IN AAAA 2001:503:ba3e::2:30 b.root-servers.net. 3600000 IN AAAA 2001:500:84::b c.root-servers.net. 3600000 IN AAAA 2001:500:2::c d.root-servers.net. 3600000 IN AAAA 2001:500:2d::d f.root-servers.net. 3600000 IN AAAA 2001:500:2f::f h.root-servers.net. 3600000 IN AAAA 2001:500:1::53 i.root-servers.net. 3600000 IN AAAA 2001:7fe::53 j.root-servers.net. 3600000 IN AAAA 2001:503:c27::2:30 k.root-servers.net. 3600000 IN AAAA 2001:7fd::1 l.root-servers.net. 3600000 IN AAAA 2001:500:9f::42 m.root-servers.net. 3600000 IN AAAA 2001:dc3::35 ;; Query time: 259 msec ;; SERVER: 192.112.36.4#53(192.112.36.4) ;; WHEN: Thu Apr 14 16:59:09 2016 ;; MSG SIZE rcvd: 744 Is UDP blocked recently or it has been like this from long? -- Anurag Bhatia anuragbhatia.com

6 6

Problem with policy-map update in Cisco ASR 1004
by Mohsen Dehghani 16 Apr '16

16 Apr '16

Hello everyone, I have a problem in updating PPPoE session policy-map via RADIUS CoA packet. When the RADIUS sends CoA to the BRAS, the policy of PPPoE session would not update. My software is asr1000rp2-adventerprisek9.03.13.00.S.154-3.S-ext.bin and The result of "debug aaa coa" is as follows: *Apr 11 04:55:42.152: COA: 80.191.122.6 request queued *Apr 11 04:55:42.152: RADIUS: authenticator 2C D3 08 A2 34 72 FB F2 - 5C 3C A4 F9 81 09 4D 77 *Apr 11 04:55:42.152: RADIUS: Vendor, Cisco [26] 11 *Apr 11 04:55:42.152: RADIUS: Sub_Policy_In [37] 5 "256" *Apr 11 04:55:42.152: RADIUS: Vendor, Cisco [26] 11 *Apr 11 04:55:42.152: RADIUS: Sub_Policy_Out [38] 5 "256" *Apr 11 04:55:42.152: RADIUS: Acct-Session-Id [44] 10 "001195E5" *Apr 11 04:55:42.152: COA: Message Authenticator missing or failed decode *Apr 11 04:55:42.152: ++++++ CoA Attribute List ++++++ *Apr 11 04:55:42.152: 7F78B212D7A8 0 00000081 sub-policy-In(420) 3 256 *Apr 11 04:55:42.152: 7F78B211FCA0 0 00000081 sub-policy-Out(422) 3 256 *Apr 11 04:55:42.152: 7F78B211FCE0 0 00000001 session-id(408) 4 1152485(1195E5) *Apr 11 04:55:42.152: *Apr 11 04:55:42.153: ++++++ Received CoA response Attribute List ++++++ *Apr 11 04:55:42.153: 7F78C82755D0 0 00000081 ssg-command-code(490) 2 10 00 *Apr 11 04:55:42.153: 7F78C8275610 0 00000001 session-id(408) 4 1152485(1195E5) *Apr 11 04:55:42.153: 7F78C8275650 0 00000081 ssg-account-info(488) 22 $IVirtual-Access2.5184 Any Help would be really appreciated.

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 15 Apr '16

15 Apr '16

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, SAFNOG, PaNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 16 Apr, 2016 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 590122 Prefixes after maximum aggregation (per Origin AS): 217231 Deaggregation factor: 2.72 Unique aggregates announced (without unneeded subnets): 288719 Total ASes present in the Internet Routing Table: 53427 Prefixes per ASN: 11.05 Origin-only ASes present in the Internet Routing Table: 36609 Origin ASes announcing only one prefix: 15715 Transit ASes present in the Internet Routing Table: 6422 Transit-only ASes present in the Internet Routing Table: 169 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 41 Max AS path prepend of ASN ( 55644) 36 Prefixes from unregistered ASNs in the Routing Table: 966 Unregistered ASNs in the Routing Table: 358 Number of 32-bit ASNs allocated by the RIRs: 13487 Number of 32-bit ASNs visible in the Routing Table: 10396 Prefixes from 32-bit ASNs in the Routing Table: 40624 Number of bogon 32-bit ASNs visible in the Routing Table: 13 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 388 Number of addresses announced to Internet: 2807919940 Equivalent to 167 /8s, 93 /16s and 117 /24s Percentage of available address space announced: 75.8 Percentage of allocated address space announced: 75.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.1 Total number of prefixes smaller than registry allocations: 193326 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 150247 Total APNIC prefixes after maximum aggregation: 42132 APNIC Deaggregation factor: 3.57 Prefixes being announced from the APNIC address blocks: 160679 Unique aggregates announced from the APNIC address blocks: 65668 APNIC Region origin ASes present in the Internet Routing Table: 5167 APNIC Prefixes per ASN: 31.10 APNIC Region origin ASes announcing only one prefix: 1184 APNIC Region transit ASes present in the Internet Routing Table: 912 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 41 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2000 Number of APNIC addresses announced to Internet: 752212548 Equivalent to 44 /8s, 213 /16s and 218 /24s Percentage of available APNIC address space announced: 87.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 180699 Total ARIN prefixes after maximum aggregation: 89549 ARIN Deaggregation factor: 2.02 Prefixes being announced from the ARIN address blocks: 185776 Unique aggregates announced from the ARIN address blocks: 88178 ARIN Region origin ASes present in the Internet Routing Table: 16390 ARIN Prefixes per ASN: 11.33 ARIN Region origin ASes announcing only one prefix: 5863 ARIN Region transit ASes present in the Internet Routing Table: 1716 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 37 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1133 Number of ARIN addresses announced to Internet: 1101654336 Equivalent to 65 /8s, 169 /16s and 233 /24s Percentage of available ARIN address space announced: 58.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-395164 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 142165 Total RIPE prefixes after maximum aggregation: 70048 RIPE Deaggregation factor: 2.03 Prefixes being announced from the RIPE address blocks: 150969 Unique aggregates announced from the RIPE address blocks: 92852 RIPE Region origin ASes present in the Internet Routing Table: 18064 RIPE Prefixes per ASN: 8.36 RIPE Region origin ASes announcing only one prefix: 7900 RIPE Region transit ASes present in the Internet Routing Table: 3001 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 4649 Number of RIPE addresses announced to Internet: 704560256 Equivalent to 41 /8s, 254 /16s and 188 /24s Percentage of available RIPE address space announced: 102.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-204287 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 62059 Total LACNIC prefixes after maximum aggregation: 12263 LACNIC Deaggregation factor: 5.06 Prefixes being announced from the LACNIC address blocks: 76192 Unique aggregates announced from the LACNIC address blocks: 35932 LACNIC Region origin ASes present in the Internet Routing Table: 2472 LACNIC Prefixes per ASN: 30.82 LACNIC Region origin ASes announcing only one prefix: 582 LACNIC Region transit ASes present in the Internet Routing Table: 557 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 22 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 2409 Number of LACNIC addresses announced to Internet: 170805824 Equivalent to 10 /8s, 46 /16s and 74 /24s Percentage of available LACNIC address space announced: 101.8 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 14252 Total AfriNIC prefixes after maximum aggregation: 3198 AfriNIC Deaggregation factor: 4.46 Prefixes being announced from the AfriNIC address blocks: 16118 Unique aggregates announced from the AfriNIC address blocks: 5740 AfriNIC Region origin ASes present in the Internet Routing Table: 743 AfriNIC Prefixes per ASN: 21.69 AfriNIC Region origin ASes announcing only one prefix: 186 AfriNIC Region transit ASes present in the Internet Routing Table: 173 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 205 Number of AfriNIC addresses announced to Internet: 78315008 Equivalent to 4 /8s, 170 /16s and 254 /24s Percentage of available AfriNIC address space announced: 77.8 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5591 4192 76 China Education and Research 7545 3269 353 203 TPG Telecom Limited 4766 3159 11145 1119 Korea Telecom 17974 2919 914 96 PT Telekomunikasi Indonesia 9829 2481 1457 447 National Internet Backbone 4755 2096 432 241 TATA Communications formerly 9808 1843 8717 30 Guangdong Mobile Communicatio 4808 1658 2300 539 CNCGROUP IP network China169 9583 1507 121 563 Sify Limited 38197 1474 91 207 Sun Network (Hong Kong) Limit Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3312 2948 143 Cox Communications Inc. 6389 2320 3687 42 BellSouth.net Inc. 18566 2209 394 276 MegaPath Corporation 20115 1924 1937 404 Charter Communications 30036 1747 343 279 Mediacom Communications Corp 6983 1690 849 231 EarthLink, Inc. 4323 1566 1004 384 tw telecom holdings, inc. 209 1549 4620 1232 Qwest Communications Company, 701 1294 10686 702 MCI Communications Services, 11492 1281 240 602 CABLE ONE, INC. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 2708 143 10 SaudiNet, Saudi Telecom Compa 20940 2408 915 1751 Akamai International B.V. 34984 1964 323 414 TELLCOM ILETISIM HIZMETLERI A 8551 1606 376 55 Bezeq International-Ltd 6849 1152 355 21 JSC "Ukrtelecom" 12479 1151 981 86 France Telecom Espana SA 13188 1079 98 68 TOV "Bank-Inform" 8402 1051 544 15 OJSC "Vimpelcom" 31148 1035 47 41 Freenet Ltd. 9198 941 352 25 JSC Kazakhtelecom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3441 538 188 Telmex Colombia S.A. 8151 2219 3318 543 Uninet S.A. de C.V. 7303 1512 940 241 Telecom Argentina S.A. 11830 1477 368 51 Instituto Costarricense de El 6503 1434 453 56 Axtel, S.A.B. de C.V. 6147 1057 377 27 Telefonica del Peru S.A.A. 3816 995 478 185 COLOMBIA TELECOMUNICACIONES S 26615 995 2325 34 Tim Celular S.A. 7738 987 1882 40 Telemar Norte Leste S.A. 28573 881 2177 159 NET Serviços de Comunicação S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1231 402 40 Link Egypt (Link.NET) 37611 646 48 2 Afrihost-Brevis Computer Serv 36903 587 295 101 Office National des Postes et 8452 559 1472 15 TE-AS 36992 509 1357 25 ETISALAT MISR 37492 394 234 67 Orange Tunisie 24835 329 210 13 Vodafone Data 29571 281 37 12 Cote d'Ivoire Telecom 2018 256 327 74 TENET (The UNINET Project) 36947 234 807 13 Telecom Algeria Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5591 4192 76 China Education and Research 10620 3441 538 188 Telmex Colombia S.A. 22773 3312 2948 143 Cox Communications Inc. 7545 3269 353 203 TPG Telecom Limited 4766 3159 11145 1119 Korea Telecom 17974 2919 914 96 PT Telekomunikasi Indonesia 39891 2708 143 10 SaudiNet, Saudi Telecom Compa 9829 2481 1457 447 National Internet Backbone 20940 2408 915 1751 Akamai International B.V. 6389 2320 3687 42 BellSouth.net Inc. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 10620 3441 3253 Telmex Colombia S.A. 22773 3312 3169 Cox Communications Inc. 7545 3269 3066 TPG Telecom Limited 17974 2919 2823 PT Telekomunikasi Indonesia 39891 2708 2698 SaudiNet, Saudi Telecom Compa 6389 2320 2278 BellSouth.net Inc. 4766 3159 2040 Korea Telecom 9829 2481 2034 National Internet Backbone 18566 2209 1933 MegaPath Corporation 4755 2096 1855 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 16589 UNALLOCATED 8.20.247.0/24 35838 CCANET Limited 16589 UNALLOCATED 8.26.56.0/24 35838 CCANET Limited 46473 UNALLOCATED 8.27.122.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.124.0/24 3356 Level 3 Communicatio 27205 UNALLOCATED 8.38.16.0/21 3356 Level 3 Communicatio 27205 UNALLOCATED 8.38.20.0/24 32787 Prolexic Technologie 27205 UNALLOCATED 8.38.22.0/24 32787 Prolexic Technologie Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.226.112.0/20 62788 >>UNKNOWN<< 23.249.144.0/20 40430 colo4jax, LLC 27.100.7.0/24 56096 >>UNKNOWN<< 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< 41.73.3.0/24 37004 >>UNKNOWN<< 41.73.4.0/24 37004 >>UNKNOWN<< 41.73.5.0/24 37004 >>UNKNOWN<< 41.73.6.0/24 37004 >>UNKNOWN<< 41.73.7.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:101 /12:267 /13:512 /14:1030 /15:1758 /16:12968 /17:7585 /18:12769 /19:25869 /20:38183 /21:39943 /22:65247 /23:56880 /24:325249 /25:556 /26:598 /27:420 /28:43 /29:32 /30:14 /31:1 /32:32 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 39891 2664 2708 SaudiNet, Saudi Telecom Compa 22773 2495 3312 Cox Communications Inc. 18566 2111 2209 MegaPath Corporation 30036 1562 1747 Mediacom Communications Corp 6389 1485 2320 BellSouth.net Inc. 10620 1346 3441 Telmex Colombia S.A. 6983 1340 1690 EarthLink, Inc. 34984 1249 1964 TELLCOM ILETISIM HIZMETLERI A 11492 1183 1281 CABLE ONE, INC. 8551 1103 1606 Bezeq International-Ltd Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1585 2:730 4:21 5:2058 6:28 8:950 12:1775 13:39 14:1673 15:45 16:2 17:79 18:87 20:48 23:1462 24:1778 27:2268 31:1748 32:57 33:2 34:2 35:5 36:283 37:2258 38:1212 39:24 40:87 41:2768 42:395 43:1708 44:42 45:1799 46:2507 47:74 49:1140 50:840 51:14 52:144 54:221 55:3 56:6 57:45 58:1533 59:867 60:346 61:1810 62:1489 63:1917 64:4471 65:2144 66:4273 67:2155 68:1087 69:3249 70:1060 71:468 72:1984 74:2545 75:339 76:418 77:1371 78:1265 79:1029 80:1316 81:1350 82:931 83:688 84:820 85:1574 86:467 87:1037 88:560 89:1971 90:167 91:6040 92:867 93:2321 94:2315 95:2291 96:476 97:359 98:943 99:45 100:72 101:1026 103:10417 104:2371 105:149 106:397 107:1096 108:683 109:2291 110:1244 111:1655 112:958 113:1166 114:1045 115:1556 116:1609 117:1431 118:2025 119:1593 120:521 121:1163 122:2223 123:2011 124:1566 125:1753 128:702 129:377 130:411 131:1319 132:621 133:174 134:450 135:123 136:373 137:354 138:1712 139:248 140:374 141:464 142:655 143:893 144:628 145:162 146:856 147:688 148:1469 149:500 150:653 151:753 152:608 153:269 154:599 155:949 156:491 157:476 158:345 159:1104 160:459 161:744 162:2280 163:534 164:753 165:1044 166:312 167:1099 168:1730 169:638 170:1572 171:272 172:526 173:1697 174:731 175:722 176:1678 177:3984 178:2211 179:1151 180:2068 181:1743 182:1905 183:689 184:794 185:6207 186:3131 187:2108 188:2124 189:1754 190:7714 191:1218 192:8939 193:5726 194:4365 195:3767 196:1722 197:1089 198:5554 199:5661 200:6924 201:3724 202:10173 203:9618 204:4653 205:2714 206:3013 207:3101 208:4047 209:3791 210:3920 211:2012 212:2663 213:2189 214:843 215:72 216:5776 217:1924 218:765 219:562 220:1672 221:857 222:659 223:971 End of report

1 0

ASR-9K CPU troubleshooting
by Rukka Pal 15 Apr '16

15 Apr '16

How do you guys troubleshoot high CPU utilization on the ASR-9K platform? Detailed guides are available for IOS platforms, but I can't seem to find anything useful for the ASR. The average line-card (0/0/CPU0: A9K-24x10GE-TR) CPU utilization of my routers is about 10%, however recently I have noticed that 3-5 times a day it increases to 40% and stays there for about an hour (20% spp + 10% netio + the rest). I know this is well withing the acceptable range, but I am the kind of person who likes to understand every change in his network and during the investigation I had to realize that I simply don't have the tools to troubleshoot the ASR CPU. Regards, Sandor

1 0

Juniper vMX evaluation - how?
by Bruce Simpson 14 Apr '16

14 Apr '16

Pardon if this is off-topic -- but this is really beginning to wind me up. So, http://www.juniper.net/us/en/dm/free-vmx-trial/ shows that Juniper Networks vMX is available for a 60-day evaluation. This requires filling out a form to create an account on juniper.net. I don't currently have such a login. $CLIENT filled out such a form well over a month ago, and never heard anything back. Normally, I'd expect to be able to download as soon as an account is approved. Meanwhile, we get preoccupied with other tasks. Is some special magic required to acquire an evaluation copy? The 60 day trial license is directly downloadable from the above link, but the tarball is not. $CLIENT was just referred to it by $RESELLER.

7 7

Re: phone fun, was GeoIP database issues and the real world consequences
by Scott Weeks 14 Apr '16

14 Apr '16

--- josh(a)kyneticwifi.com wrote: From: Josh Reynolds <josh(a)kyneticwifi.com> Is NANOG really the best place for this discussion? -------------------------------------- Filter it out. scott

1 0

Security Track @ NANOG 67 Call for Participation
by John Kristoff 14 Apr '16

14 Apr '16

[ Apologies if you saw this elsewhere already - jtk ] Friends, colleagues, fellow operators, The network security track, formerly known as the ISP security BoF, may be on the agenda at NANOG 67 in Chicago and if we can put together a reasonable agenda I may be your track facilitator. We not only seek your participation, but we are also interested you contributing to the track content. If you have an idea or if you know someone who might like to present, discuss or conduct a demonstration of something, we want to hear from you. Here is an incomplete list of relevant topics to stir your thoughts: * Privacy-related issues and topics * DDoS attacks and mitigation * Internet of Things and security * Government regulatory and compliance issues * IPv6 considerations * abuse@ management and war stories * 802.11 authentication, authorization and accounting * New security software projects and tools (non-commercial) * BGPSEC and RPKI * The latest in protocol abuse * <insert your new cool tool or idea here> John

1 0

FCC Privacy NPRM [was Re: GeoIP database]
by Livingood, Jason 14 Apr '16

14 Apr '16

I have not yet read all of the 147 pages of the FCC Privacy NPRM - https://www.fcc.gov/document/fcc-releases-proposed-rules-protect-broadband- consumer-privacy. But it may be worth noting, especially for this audience, that the FCC proposes considering things like IP addresses and geo-location information to be Customer Proprietary Information. While IANAL it seems that this could perhaps complicate efforts to make GeoIP services more accurate. But who knows. Jason P.S. While these proposed rules would only initially apply to ISPs, from what I understand following adoption there will be a move for so-called parity such that any app or edge provider in the US might have to meet the same standards. On 4/12/16, 8:17 PM, "NANOG on behalf of Jean-Francois Mezei" <nanog-bounces(a)nanog.org on behalf of jfmezei_nanog(a)vaxination.ca> wrote: >All GeoIP services would be forced to document their default lat/long >values so that users know that when these values, they know it is a >generic one for that country. (or supply +181.0000 +91.00000 which is an >invalid value indicating that there is no lat/long, look at country code >given). >

3 2

Re: phone fun, was GeoIP database issues and the real world consequences
by Jonathan Smith 14 Apr '16

14 Apr '16

"If they're land lines, the NPA/NXX will be local to the CO so you won't have out-of-area numbers other than a rare corner case of a very expensive foreign exchange line." This hasn't been a true statement since Local Number Portability. NPA/NXX is nothing more than 'where the number originally was assigned from', and that only for the ones issued BEFORE LNP started; since is anyone's guess. They follow something similiar to what a routed phone call does, but ties into slightly different information that is 'supposed' to associate the end-client address with said LNI that is 'supposed' to be populated with accurate street address information. Similar to what VoIP has had to deal with since, most charge a fee, disclaim any responsibility as to the accuracy of the information that the end user provides. I am sure litigation on/around THAT particular issue is just around the corner. Regards, Jonathan Smith On Wed, Apr 13, 2016 at 11:22 PM, Jay Hennigan <jay(a)west.net> wrote: > On 4/13/16 8:54 PM, Peter Beckman wrote: > >> On Wed, 13 Apr 2016, Jay Hennigan wrote: >> > > When either of those people dial 9-1-1, where does the ambulance show up? >>> >> >> I suspect your response was sarcastic, but when you dig into what really >> happens, it's not nearly as sophisticated as one might hope. >> >> If the numbers are land or VoIP lines, and the address associated with >> the >> numbers are registered with the Automatic Location Information (ALI) >> database run by ILECs or 3rd parties to fetch the address keyed on the >> calling number, and the 911 PSAP is E911 capable, they operator will see >> the ALI address. >> > > If they're land lines, the NPA/NXX will be local to the CO so you won't > have out-of-area numbers other than a rare corner case of a very expensive > foreign exchange line. If they're VoIP lines, the address is *supposed* to > be so registered, but softphones and even VoIP handsets tend to move around > without the user considering 9-1-1. > > VoIP was the scenario to which I was referring. A VoIP phone native to > 408-land that moves with a remote office worker to Boston without a > conscious effort on his company and VoIP provider to track it down and > update ALI will reach a PSAP in San Jose or thereabouts. The PSAPs have > forwarding capability but generally only to neighboring PSAPs with a single > button. How quickly will they be able to get the call routed to Boston, if > at all? And as we saw at the beginning of the thread, forget geo-IP. The > ambulance goes to the Vogelmans' farm. If a remote office worker, it could > be VPN back to the VoIP PBX in 408-land anyway. > > So, it isn't just IP addresses that aren't easily geo-referenced. It's > also phone numbers. The number may start as a well-referenced PRI going to > an IP-PBX after which all bets are off. If the ANI is the company's HQ main > number where the PRI and IP-PBX are located, then it's just about > impossible to route 9-1-1 from a worker's IP phone in Boston to the right > PSAP. > > If they are mobile devices, it depends. Basic gives you nothing (all >> phones >> since 2003 should have GPS, but people hang on to phones a long time..); >> > > Mobile is a separate case where it's expected that the NPA-NXX isn't going > to be tied to a location. In California, mobile 9-1-1 goes to the CHP and > not the local PSAP based on the cell tower or GPS for that reason. If not a > traffic incident, they forward to the appropriate PSAP based on the > caller's info or perhaps whatever ALI (or estimate) they get from the > cellular provider. > > > -- > Jay Hennigan - CCIE #7880 - Network Engineering - jay(a)impulse.net > Impulse Internet Service - http://www.impulse.net/ > Your local telephone and internet company - 805 884-6323 - WB6RDV >

1 0

CHI-NOG 06 Conference Agenda
by Tom Kacprzynski 13 Apr '16

13 Apr '16

We are pleased to announce that the Chicago Network Operators Group will host their 6th annual meeting (CHI-NOG 06) on May 12th, 2016 in Chicago, IL. Presentation | Speaker 1. CHI-NOG Welcome and Introduction | Tom Kacprzynski 2. BGP Security: An Overview | Russ White 3. IPv6: Passing on Lessons Learned from My Journey | Denise Fishburne 4. EVPN: Or How I Learned to Stop Worrying and Love the BGP | Tom Dwyer and Clay Haynes 5. InterTubes: A Study of the US Long-Haul Fiber-Optic Infrastructure | Rakrishnan Durairajan 6. VXLAN Deployment in IX Fabrics | Hemanth Maturi 7. Regional IXP Introductions and OPEN-IX Overview 8. Source Routing Re-Imagined | Nick Slabakov 9. Segment Routing – Traffic Engineering | Diptanshu Singh 10. DDoS Threat Landscape | Ron Winward 11. Network Automation, A Practical Approach | Matt Griswold 12. Modern Tools for Visualizing Network Traffic | Jon Dugan 13. NetFlow, Flow-Like Data and Their Many Uses | Avi Freedman 14. The Real Metric in Evaluating CDN Performance | Matt Levine 15. Social Event Detailed agenda can be found at http://chinog.org/meetings/chi-nog-06/agenda/ Registration is still open, but ending soon. For more details please see http://chinog.org Thank you.

1 0