- NANOG - lists.nanog.org

Mellanox 100GE switches
by Jay Hanke 16 Feb '16

16 Feb '16

Does anyone have experiences they can share regarding the Mellanox 100GE Ethernet switches? Thanks! Jay

2 1

Call for Presentations - CHI-NOG 06 (May 12th)
by Tom Kacprzynski 16 Feb '16

16 Feb '16

*Call for Presentations* CHI-NOG 06 - (Chicago Network Operators Group) May 12th 2016, Chicago, IL The Chicago Network Operators Group (CHI-NOG) is a vendor neutral organization. Our goal is to create a regional community of network professionals by presenting the latest technology trends, enabling collaboration and providing networking opportunities. CHI-NOG will be hosting its sixth annual conference May 12th, 2016 in downtown Chicago. For more information please see http://chinog.org. The CHI-NOG Program Committee is seeking proposals for presentations on relevant networking technologies with a focus on the following topics: * Network Automation/ DevOps * Interconnection/Peering/Cloud Exchanges * Low Latency Networks/Financial Networks * Network Security * Internet Monitoring * Advanced BGP/MPLS Technologies * Software Defined Networking * Cloud Networking Technologies * Network Operation * Academic Research in Networking and Related Infrastructure Fields * Open Source Networking Tools * Optical Networking/Data Center Interconnect * Data Center Fabric * Wireless * IPv6 *Session Format* Each presentation is 30 minutes, which includes a questions and answers. The duration can be extended per individual request to 60 minutes and will be considered by the program committee. Presentations should not contain any marketing material and should avoid discussion of commercial products but rather focus on the underlying technology. *Key Dates* * Presentation Abstract Submission Deadline ------------------- 3/15/16 * Abstract Selection ---------------------------------------------------- 3/18/16 * Presentation Full Slides Submission Deadline ----------------- 4/15/16 * Final Selection --------------------------------------------------------- 4/29/16 * Conference ------------------------------------------------------------- 5/12/16 *Submission* Please submit presentation’s abstract proposal by filling out the submission form at http://chinog.org/meetings/chi-nog-06/abstract-submission/ . Once your presentation is selected please provide the program committee with your photo and a short bio for web publication. All accepted speakers will receive complimentary tickets to the conference. The program committee is looking forward to your submission and attendance at the conference.

1 0

Automated alarm notification
by Frank Bulk 15 Feb '16

15 Feb '16

Is anyone aware of software, or perhaps a service, that will take SNMP traps, properly parse them, and perform the appropriate call outs based on certain content, after waiting 5 or 10 minutes for any alarms that don't clear? I looked at PagerDuty, but they don't do any SNMP trap parsing, and nothing with set/clear. Frank

10 9

Shared cabinet "security"
by Mike Hammett 15 Feb '16

15 Feb '16

I say "security" because I know that in a shared space, nothing is completely secure. I also know that with enough intent, someone will accomplish whatever they set out to do regarding breaking something of someone else's. My concern is mainly towards mitigation of accidents. This could even apply to a certain degree to things within your own space and your own careless techs If you have multiple entities in a shared space, how can you mitigate the chances of someone doing something (assuming accidentally) to disrupt your operations? I'm thinking accidentally unplug the wrong power cord, patch cord, etc. Accidentally power off or reboot the wrong device. Obviously labels are an easy way to point out to someone that's looking at the right place at the right time. Some devices have a cage around the power cord, but some do not. Any sort of mesh panels you could put on the front\rear of your gear that you would mount with the same rack screw that holds your gear in? ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest-IX http://www.midwest-ix.com

12 20

Re: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability
by Adrian M 15 Feb '16

15 Feb '16

In previous release 9.1(6) this line was ok: nat (inside,outside) source static obj-1.0.0.36_32 obj-1.0.0.36_32 destination static obj-1.0.0.36_32 obj-1.0.0.36_32 In 9.1.(7) wasn't working anymore, so the solution was to add *no-proxy-arp *at the end: nat (inside,outside) source static obj-1.0.0.36_32 obj-1.0.0.36_32 destination static obj-1.0.0.36_32 obj-1.0.0.36_32 *no-proxy-arp* On Mon, Feb 15, 2016 at 1:48 PM, Roberto <roberto(a)ipnetworks.it> wrote: > Hello, > > > > excuse me for this direct email: but about the > https://www.reddit.com/r/networking/comments/433kqx/cisco_asa_not_recording… > > > > " > > upgraded from 9.0(5) to 9.1(7) > > " > > > > Solved ! > > "Disable Proxy ARP" must be checked on NAT bypass rules (former nat 0). > > > > > > > > are you indicating for example > > that previously on 9.0(5) was: > > nat (inside,outside) source static obj-1.0.0.36_32 obj-1.0.0.36_32 > destination static obj-1.0.0.36_32 obj-1.0.0.36_32 route-lookup > > > > and now on 9.1(7) is: > > nat (inside,outside) source static obj-1.0.0.36_32 obj-1.0.0.36_32 > destination static obj-1.0.0.36_32 obj-1.0.0.36_32 *no-proxy-arp* > route-lookup > > > > > > > > > > > > > > Best Regards, > > _________________________________ > > Roberto Taccon > > > > e-mail: roberto(a)ipnetworks.it > > mobile: +39 340 4751352 > > fax: +39 045 4850850 > > skype: roberto.taccon > > > > -----Messaggio originale----- > Da: NANOG [mailto:nanog-bounces@nanog.org] Per conto di Adrian M > Inviato: lunedì 15 febbraio 2016 10.06 > A: nanog(a)nanog.org > Oggetto: Re: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and > IKEv2 Buffer Overflow Vulnerability > > > > Solved ! > > "Disable Proxy ARP" must be checked on NAT bypass rules (former nat 0). > > > > On Thu, Feb 11, 2016 at 3:53 PM, Adrian M <adrian.minta(a)gmail.com> wrote: > > > > > Be careful, It appears that something is broken with ARP on this release. > > > We have no ARP on lan interface, and somebody else has a similar problem: > > > > > > https://www.reddit.com/r/networking/comments/433kqx/cisco_asa_not_reco > > > rding_an_arp_entry/ > > > > > > > > > > > > On Wed, Feb 10, 2016 at 10:36 PM, Sadiq Saif <lists(a)sadiqs.com> wrote: > > > > > >> Update your ASAs folks, this is a critical one. > > >> > > >> > > >> -------- Forwarded Message -------- > > >> Subject: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 > > >> and > > >> IKEv2 Buffer Overflow Vulnerability > > >> Date: Wed, 10 Feb 2016 08:06:51 -0800 > > >> From: Cisco Systems Product Security Incident Response Team > > >> <psirt(a)cisco.com> > > >> Reply-To: psirt(a)cisco.com > > >> To: cisco-nsp(a)puck.nether.net > > >> CC: psirt(a)cisco.com > > >> > > >> Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer > > >> Overflow Vulnerability > > >> > > >> Advisory ID: cisco-sa-20160210-asa-ike > > >> > > >> Revision 1.0 > > >> > > >> For Public Release 2016 February 10 16:00 GMT (UTC) > > >> > > >> +-------------------------------------------------------------------- > > >> +- > > >> > > >> > > >> Summary > > >> ======= > > >> > > >> A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and > > >> IKE version 2 (v2) code of Cisco ASA Software could allow an > > >> unauthenticated, remote attacker to cause a reload of the affected > > >> system or to remotely execute code. > > >> > > >> The vulnerability is due to a buffer overflow in the affected code area. > > >> An attacker could exploit this vulnerability by sending crafted UDP > > >> packets to the affected system. An exploit could allow the attacker > > >> to execute arbitrary code and obtain full control of the system or to > > >> cause a reload of the affected system. > > >> > > >> Note: Only traffic directed to the affected system can be used to > > >> exploit this vulnerability. This vulnerability affects systems > > >> configured in routed firewall mode only and in single or multiple > > >> context mode. This vulnerability can be triggered by IPv4 and IPv6 > > >> traffic. > > >> > > >> Cisco has released software updates that address this vulnerability. > > >> This advisory is available at the following link: > > >> > > >> http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/ > > >> cisco-sa-20160210-asa-ike > > >> > > >> > > >> > > >> _______________________________________________ > > >> cisco-nsp mailing list cisco-nsp(a)puck.nether.net > > >> https://puck.nether.net/mailman/listinfo/cisco-nsp > > >> archive at http://puck.nether.net/pipermail/cisco-nsp/ > > >> > > >> > > >> > > > >

1 0

Fiber to the home specialists/consultants?
by Daniel Rohan 15 Feb '16

15 Feb '16

Can anyone point me at a firm that does or consults on FTTH from a technical *and* business perspective? Off-list responses would be appreciated. Thanks, Dan

4 3

Fwd: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability
by Sadiq Saif 15 Feb '16

15 Feb '16

Update your ASAs folks, this is a critical one. -------- Forwarded Message -------- Subject: [c-nsp] Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability Date: Wed, 10 Feb 2016 08:06:51 -0800 From: Cisco Systems Product Security Incident Response Team <psirt(a)cisco.com> Reply-To: psirt(a)cisco.com To: cisco-nsp(a)puck.nether.net CC: psirt(a)cisco.com Cisco Security Advisory: Cisco ASA Software IKEv1 and IKEv2 Buffer Overflow Vulnerability Advisory ID: cisco-sa-20160210-asa-ike Revision 1.0 For Public Release 2016 February 10 16:00 GMT (UTC) +--------------------------------------------------------------------- Summary ======= A vulnerability in the Internet Key Exchange (IKE) version 1 (v1) and IKE version 2 (v2) code of Cisco ASA Software could allow an unauthenticated, remote attacker to cause a reload of the affected system or to remotely execute code. The vulnerability is due to a buffer overflow in the affected code area. An attacker could exploit this vulnerability by sending crafted UDP packets to the affected system. An exploit could allow the attacker to execute arbitrary code and obtain full control of the system or to cause a reload of the affected system. Note: Only traffic directed to the affected system can be used to exploit this vulnerability. This vulnerability affects systems configured in routed firewall mode only and in single or multiple context mode. This vulnerability can be triggered by IPv4 and IPv6 traffic. Cisco has released software updates that address this vulnerability. This advisory is available at the following link: http://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-… _______________________________________________ cisco-nsp mailing list cisco-nsp(a)puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/

5 5

NTT Charles
by Jared Geiger 14 Feb '16

14 Feb '16

So who is this Charles fellow in the NTT reverse DNS? ge-102-0-0-0.happy-trails-Charles.r05.asbnva02.us.bb.gin.ntt.net ae-10.happy-trails-Charles.r22.asbnva02.us.bb.gin.ntt.net ae-5.happy-trails-Charles.r25.nycmny01.us.bb.gin.ntt.net ae-2.happy-trails-Charles.r08.nycmny01.us.bb.gin.ntt.net ae-7.happy-trails-Charles.r00.lsanca07.us.bb.gin.ntt.net

7 6

Weekly Routing Table Report
by Routing Analysis Role Account 12 Feb '16

12 Feb '16

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, SAFNOG, PaNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 13 Feb, 2016 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 581824 Prefixes after maximum aggregation (per Origin AS): 214337 Deaggregation factor: 2.71 Unique aggregates announced (without unneeded subnets): 284114 Total ASes present in the Internet Routing Table: 52719 Prefixes per ASN: 11.04 Origin-only ASes present in the Internet Routing Table: 36572 Origin ASes announcing only one prefix: 15807 Transit ASes present in the Internet Routing Table: 6405 Transit-only ASes present in the Internet Routing Table: 167 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 40 Max AS path prepend of ASN ( 40285) 34 Prefixes from unregistered ASNs in the Routing Table: 1054 Unregistered ASNs in the Routing Table: 384 Number of 32-bit ASNs allocated by the RIRs: 12696 Number of 32-bit ASNs visible in the Routing Table: 9742 Prefixes from 32-bit ASNs in the Routing Table: 37429 Number of bogon 32-bit ASNs visible in the Routing Table: 15 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 424 Number of addresses announced to Internet: 2803803204 Equivalent to 167 /8s, 30 /16s and 164 /24s Percentage of available address space announced: 75.7 Percentage of allocated address space announced: 75.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.0 Total number of prefixes smaller than registry allocations: 191360 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 149013 Total APNIC prefixes after maximum aggregation: 40951 APNIC Deaggregation factor: 3.64 Prefixes being announced from the APNIC address blocks: 158134 Unique aggregates announced from the APNIC address blocks: 64047 APNIC Region origin ASes present in the Internet Routing Table: 5129 APNIC Prefixes per ASN: 30.83 APNIC Region origin ASes announcing only one prefix: 1174 APNIC Region transit ASes present in the Internet Routing Table: 900 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 40 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1850 Number of APNIC addresses announced to Internet: 751867524 Equivalent to 44 /8s, 208 /16s and 150 /24s Percentage of available APNIC address space announced: 87.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 179133 Total ARIN prefixes after maximum aggregation: 88591 ARIN Deaggregation factor: 2.02 Prefixes being announced from the ARIN address blocks: 183852 Unique aggregates announced from the ARIN address blocks: 87082 ARIN Region origin ASes present in the Internet Routing Table: 16412 ARIN Prefixes per ASN: 11.20 ARIN Region origin ASes announcing only one prefix: 5905 ARIN Region transit ASes present in the Internet Routing Table: 1697 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 37 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1005 Number of ARIN addresses announced to Internet: 1101768512 Equivalent to 65 /8s, 171 /16s and 167 /24s Percentage of available ARIN address space announced: 58.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-395164 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 140206 Total RIPE prefixes after maximum aggregation: 69514 RIPE Deaggregation factor: 2.02 Prefixes being announced from the RIPE address blocks: 148360 Unique aggregates announced from the RIPE address blocks: 91537 RIPE Region origin ASes present in the Internet Routing Table: 18049 RIPE Prefixes per ASN: 8.22 RIPE Region origin ASes announcing only one prefix: 7952 RIPE Region transit ASes present in the Internet Routing Table: 3017 Average RIPE Region AS path length visible: 4.7 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 4444 Number of RIPE addresses announced to Internet: 702807424 Equivalent to 41 /8s, 227 /16s and 253 /24s Percentage of available RIPE address space announced: 102.2 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-204287 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 61377 Total LACNIC prefixes after maximum aggregation: 12042 LACNIC Deaggregation factor: 5.10 Prefixes being announced from the LACNIC address blocks: 74732 Unique aggregates announced from the LACNIC address blocks: 34869 LACNIC Region origin ASes present in the Internet Routing Table: 2456 LACNIC Prefixes per ASN: 30.43 LACNIC Region origin ASes announcing only one prefix: 584 LACNIC Region transit ASes present in the Internet Routing Table: 546 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 24 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 2254 Number of LACNIC addresses announced to Internet: 170650112 Equivalent to 10 /8s, 43 /16s and 234 /24s Percentage of available LACNIC address space announced: 101.7 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 14514 Total AfriNIC prefixes after maximum aggregation: 3198 AfriNIC Deaggregation factor: 4.54 Prefixes being announced from the AfriNIC address blocks: 16322 Unique aggregates announced from the AfriNIC address blocks: 6218 AfriNIC Region origin ASes present in the Internet Routing Table: 738 AfriNIC Prefixes per ASN: 22.12 AfriNIC Region origin ASes announcing only one prefix: 192 AfriNIC Region transit ASes present in the Internet Routing Table: 171 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 21 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 189 Number of AfriNIC addresses announced to Internet: 76293888 Equivalent to 4 /8s, 140 /16s and 39 /24s Percentage of available AfriNIC address space announced: 75.8 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5594 4192 76 China Education and Research 4766 3130 11127 1103 Korea Telecom 7545 3054 350 175 TPG Telecom Limited 17974 2885 914 96 PT Telekomunikasi Indonesia 9829 2354 1444 411 National Internet Backbone 4755 2084 432 237 TATA Communications formerly 9808 1837 8717 29 Guangdong Mobile Communicatio 4808 1619 2281 513 CNCGROUP IP network China169 9583 1517 121 560 Sify Limited 17488 1437 229 234 Hathway IP Over Cable Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3295 2948 147 Cox Communications Inc. 6389 2412 3687 42 BellSouth.net Inc. 18566 2214 394 278 MegaPath Corporation 20115 1909 1914 411 Charter Communications 6983 1697 849 237 EarthLink, Inc. 30036 1697 339 289 Mediacom Communications Corp 4323 1589 1023 395 tw telecom holdings, inc. 209 1475 4340 1236 Qwest Communications Company, 701 1393 11453 661 MCI Communications Services, 11492 1245 232 602 CABLE ONE, INC. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 2515 135 9 SaudiNet, Saudi Telecom Compa 20940 2410 938 1724 Akamai International B.V. 34984 1948 322 417 TELLCOM ILETISIM HIZMETLERI A 8551 1226 376 53 Bezeq International-Ltd 8402 1152 544 15 OJSC "Vimpelcom" 12479 1142 982 75 France Telecom Espana SA 13188 1077 97 78 TOV "Bank-Inform" 31148 1041 47 41 Freenet Ltd. 9198 954 352 24 JSC Kazakhtelecom 6830 892 2712 462 Liberty Global Operations B.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3427 541 155 Telmex Colombia S.A. 8151 2174 3388 521 Uninet S.A. de C.V. 7303 1590 943 244 Telecom Argentina S.A. 11830 1439 366 25 Instituto Costarricense de El 6503 1435 453 57 Axtel, S.A.B. de C.V. 28573 1042 2173 156 NET Serviços de Comunicação S 6147 1027 377 27 Telefonica del Peru S.A.A. 7738 994 1882 41 Telemar Norte Leste S.A. 26615 992 2325 34 Tim Celular S.A. 3816 987 479 182 COLOMBIA TELECOMUNICACIONES S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 1416 1472 15 TE-AS 24863 1192 402 39 Link Egypt (Link.NET) 37611 608 41 45 Afrihost-Brevis Computer Serv 36903 552 278 103 Office National des Postes et 36992 484 1235 28 ETISALAT MISR 37492 356 215 64 Orange Tunisie 24835 332 146 12 Vodafone Data 29571 264 21 11 Cote d'Ivoire Telecom 37054 254 20 7 Data Telecom Service 2018 237 323 73 TENET (The UNINET Project) Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5594 4192 76 China Education and Research 10620 3427 541 155 Telmex Colombia S.A. 22773 3295 2948 147 Cox Communications Inc. 4766 3130 11127 1103 Korea Telecom 7545 3054 350 175 TPG Telecom Limited 17974 2885 914 96 PT Telekomunikasi Indonesia 39891 2515 135 9 SaudiNet, Saudi Telecom Compa 6389 2412 3687 42 BellSouth.net Inc. 20940 2410 938 1724 Akamai International B.V. 9829 2354 1444 411 National Internet Backbone Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 10620 3427 3272 Telmex Colombia S.A. 22773 3295 3148 Cox Communications Inc. 7545 3054 2879 TPG Telecom Limited 17974 2885 2789 PT Telekomunikasi Indonesia 39891 2515 2506 SaudiNet, Saudi Telecom Compa 6389 2412 2370 BellSouth.net Inc. 4766 3130 2027 Korea Telecom 9829 2354 1943 National Internet Backbone 18566 2214 1936 MegaPath Corporation 4755 2084 1847 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 5.143.176.0/20 15468 OJSC Rostelecom 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 3356 Level 3 Communicatio 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 46473 UNALLOCATED 8.27.122.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.124.0/24 3356 Level 3 Communicatio 27205 UNALLOCATED 8.38.16.0/21 3356 Level 3 Communicatio 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint 32805 UNALLOCATED 12.1.225.0/24 7018 AT&T Services, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.226.112.0/20 62788 >>UNKNOWN<< 23.249.144.0/20 40430 colo4jax, LLC 23.249.144.0/21 40430 colo4jax, LLC 23.249.152.0/21 40430 colo4jax, LLC 27.100.7.0/24 56096 >>UNKNOWN<< 37.46.10.0/23 36351 SoftLayer Technologies Inc. 37.46.14.0/24 36351 SoftLayer Technologies Inc. 37.46.15.0/24 36351 SoftLayer Technologies Inc. 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:101 /12:265 /13:510 /14:1016 /15:1747 /16:12963 /17:7473 /18:12564 /19:25689 /20:38058 /21:39949 /22:64484 /23:55439 /24:319911 /25:548 /26:576 /27:404 /28:16 /29:16 /30:9 /31:0 /32:21 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 22773 2480 3295 Cox Communications Inc. 39891 2472 2515 SaudiNet, Saudi Telecom Compa 18566 2116 2214 MegaPath Corporation 6389 1531 2412 BellSouth.net Inc. 30036 1512 1697 Mediacom Communications Corp 6983 1342 1697 EarthLink, Inc. 10620 1312 3427 Telmex Colombia S.A. 34984 1235 1948 TELLCOM ILETISIM HIZMETLERI A 11492 1154 1245 CABLE ONE, INC. 31148 960 1041 Freenet Ltd. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1596 2:839 4:19 5:2099 6:26 8:906 12:1786 13:34 14:1620 15:23 16:2 17:58 18:20 20:48 23:1363 24:1735 27:2230 31:1744 32:54 33:2 34:2 35:4 36:214 37:2349 38:1173 39:23 40:82 41:3167 42:382 43:1676 44:41 45:1655 46:2411 47:68 49:1120 50:844 51:3 52:64 54:156 55:5 56:6 57:44 58:1485 59:857 60:541 61:1779 62:1438 63:1895 64:4449 65:2177 66:4093 67:2081 68:1102 69:3284 70:1042 71:463 72:1979 74:2544 75:359 76:420 77:1313 78:1277 79:825 80:1312 81:1361 82:883 83:668 84:799 85:1578 86:474 87:1040 88:557 89:1934 90:163 91:6041 92:846 93:2326 94:2351 95:2281 96:470 97:352 98:945 99:45 100:68 101:891 103:9659 104:2227 105:99 106:387 107:1131 108:651 109:2189 110:1257 111:1608 112:941 113:1210 114:1110 115:1625 116:1522 117:1401 118:2010 119:1555 120:510 121:1168 122:2263 123:1998 124:1607 125:1752 128:739 129:363 130:425 131:1286 132:607 133:173 134:449 135:121 136:349 137:325 138:1674 139:198 140:249 141:471 142:625 143:814 144:591 145:151 146:834 147:599 148:1473 149:459 150:648 151:823 152:593 153:270 154:567 155:901 156:469 157:422 158:346 159:1082 160:422 161:741 162:2266 163:526 164:722 165:1109 166:313 167:1002 168:1470 169:592 170:1496 171:251 172:447 173:1617 174:718 175:852 176:1517 177:3944 178:2230 179:1050 180:2082 181:1642 182:1934 183:679 184:786 185:5657 186:3014 187:1971 188:2064 189:1771 190:7634 191:1245 192:8870 193:5722 194:4331 195:3720 196:1650 197:1359 198:5504 199:5550 200:6866 201:3707 202:10105 203:9520 204:4597 205:2695 206:2968 207:3030 208:4030 209:3874 210:3916 211:2007 212:2649 213:2135 214:823 215:72 216:5704 217:1908 218:741 219:560 220:1640 221:848 222:673 223:916 End of report

1 0

algorithm used by (RIPE region) ISPs to generate automatic BGP prefix filters
by Martin T 12 Feb '16

12 Feb '16

Hi, am I correct that ISPs (in RIPE region), who update their BGP prefix filters automatically, ask their IP transit customer or peering partner to provide their "route"/"route6" object(s) or "as-set" object in order to find all the prefixes which they should accept? If the IP transit customer or peering partner provides an "as-set", then ISP needs to ensure that this "as-set" belongs to this IP transit customer or peering partner because there is no automatic authentication for this, i.e. anybody can create an "as-set" object to database with random "members" attributes? This is opposite to "route"/"route6" objects which follow a strict authentication scheme. In addition, in case of "as-set", an ISP needs to recursively find all the AS numbers from "members" attributes because "as-set" can include other "as-sets"? Quite a lot of question, but I would simply like to be sure that I understand this correctly. thanks, Martin

8 9