
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down? Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) . Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.

Kai, i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip. 198.32.162.100 - jared On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers. ---Mike At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

route-views is up & happy - route-views.oregon-ix.net see: http://www.routeviews.org/ Lucy E. Lynch Academic User Services Computing Center University of Oregon llynch@darkwing.uoregon.edu (541) 346-1774/Cell: 912-7998 On Wed, 20 Nov 2002, Mike Tancsa wrote:
There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers.
---Mike
At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

bind problem... joelja On Wed, 20 Nov 2002, Lucy E. Lynch wrote:
route-views is up & happy -
route-views.oregon-ix.net
see: http://www.routeviews.org/
Lucy E. Lynch Academic User Services Computing Center University of Oregon llynch@darkwing.uoregon.edu (541) 346-1774/Cell: 912-7998
On Wed, 20 Nov 2002, Mike Tancsa wrote:
There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers.
---Mike
At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.
-- -------------------------------------------------------------------------- Joel Jaeggli Academic User Services joelja@darkwing.uoregon.edu -- PGP Key Fingerprint: 1DE9 8FCA 51FB 4195 B42A 9C32 A30D 121E -- In Dr. Johnson's famous dictionary patriotism is defined as the last resort of the scoundrel. With all due respect to an enlightened but inferior lexicographer I beg to submit that it is the first. -- Ambrose Bierce, "The Devil's Dictionary"

telnet to the domain works fine from here? confirm you have it correct- route-views.oregon-ix.net On Wed, 20 Nov 2002, Mike Tancsa wrote:
There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers.
---Mike
At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

I was getting dns resolver errors earlier back. (like the zone expired) it appears someone fixed something since. - jared On Wed, Nov 20, 2002 at 06:35:59PM +0000, Stephen J. Wilcox wrote:
telnet to the domain works fine from here?
confirm you have it correct- route-views.oregon-ix.net
On Wed, 20 Nov 2002, Mike Tancsa wrote:
There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers.
---Mike
At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

I too was seeing DNS timeouts on the servers I was asking. ---Mike At 01:37 PM 20/11/2002 -0500, Jared Mauch wrote:
I was getting dns resolver errors earlier back.
(like the zone expired)
it appears someone fixed something since.
- jared
On Wed, Nov 20, 2002 at 06:35:59PM +0000, Stephen J. Wilcox wrote:
telnet to the domain works fine from here?
confirm you have it correct- route-views.oregon-ix.net
On Wed, 20 Nov 2002, Mike Tancsa wrote:
There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers.
---Mike
At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the
address for
route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

pay no attention to that man behind the curtain. Lucy E. Lynch Academic User Services Computing Center University of Oregon llynch@darkwing.uoregon.edu (541) 346-1774/Cell: 912-7998 On Wed, 20 Nov 2002, Mike Tancsa wrote:
I too was seeing DNS timeouts on the servers I was asking.
---Mike
At 01:37 PM 20/11/2002 -0500, Jared Mauch wrote:
I was getting dns resolver errors earlier back.
(like the zone expired)
it appears someone fixed something since.
- jared
On Wed, Nov 20, 2002 at 06:35:59PM +0000, Stephen J. Wilcox wrote:
telnet to the domain works fine from here?
confirm you have it correct- route-views.oregon-ix.net
On Wed, 20 Nov 2002, Mike Tancsa wrote:
There is a second one as well which is 198.32.162.102. Its a little more responsive, but with less peers.
---Mike
At 01:04 PM 20/11/2002 -0500, Jared Mauch wrote:
Kai,
i'm not sure about the dns for the domain (i suspect the appropriate people are at ietf.. infact i know i saw their faces on the mcast stream) but you can reach it by ip.
198.32.162.100
- jared
On Wed, Nov 20, 2002 at 12:50:34PM -0500, Kai Schlichting wrote:
As some of you have noticed, the BGP4 route containing the
address for
route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.
-- Jared Mauch | pgp key available via finger from jared@puck.nether.net clue++; | http://puck.nether.net/~jared/ My statements are only mine.

On 11/20/2002 at 1:37 PM, Jared Mauch <jared@puck.Nether.net> wrote:
I was getting dns resolver errors earlier back.
(like the zone expired)
it appears someone fixed something since.
- jared
Mental note to self: never rely on results of an investigation you did a few days ago - *gulp* Indeed the resolver problems I had as well have triggered my email to the list, but I had previously investigated the "disappearance" of the network route-views.oregon-ix.net lives in - it plainly disappeared from my own site's BGP4 views. I am receiving other /24's out of 198.32.0.0/16 though (plenty of them), and route-flap dampening didn't kill it. Surely not a PBMS (problem between monitor and chair), and I expect a reaction from the NOC responsible through the regular support channel shortly. Thanks to Joel Jaeggli and Lucy E. Lynch from UO Academic User Services for pointing out the man behind the curtain that is BIND :) Go Ducks! Thanks, bye,Kai

As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
As others have noted, they just had DNS problems. Their routes appear to be live. In fact, the stability of 198.32.162.0/24 is pretty good, by and large. They did have one global outage of about an hour and a half on October 1st, starting at 12:03 GMT. Also, back on September 13th, between 12:32 and 13:51 GMT they were (accidentally or deliberately) being originated by 15919 (Interhost), creating a brief blackhole situation. They're otherwise usually advertised by 3701, although you'll also see Verio originating them depending on where you look.
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Yeah, for real forensics, neither looking glasses nor public route servers are ideal solutions. The former have single-site myopia and the latter have no good tools. That's why we built our own infrastructure (http://gradus.renesys.com).
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
Also 2516, 3257, 4513, 6730, and 6939, just in the last few weeks. --jim

cowie@renesys.com wrote:
As some of you have noticed, the BGP4 route containing the address for route-views.oregon-ix.net has disappeared a while ago (mid-October?). Their website seems to be gone, and I swear, I couldn't resolve the domain for a little while just now. Has the Oregon IX been shut down?
As others have noted, they just had DNS problems. Their routes appear to be live. In fact, the stability of 198.32.162.0/24 is pretty good, by and large.
They did have one global outage of about an hour and a half on October 1st, starting at 12:03 GMT. Also, back on September 13th, between 12:32 and 13:51 GMT they were (accidentally or deliberately) being originated by 15919 (Interhost), creating a brief blackhole situation. They're otherwise usually advertised by 3701, although you'll also see Verio originating them depending on where you look.
And 5650 if you are a customer...
Their route-server was probably the best-connected one, with the most views, of any public route server I am aware of (please prove me wrong, but do not torment me with any web-based looking glasses :) .
Yeah, for real forensics, neither looking glasses nor public route servers are ideal solutions. The former have single-site myopia and the latter have no good tools. That's why we built our own infrastructure (http://gradus.renesys.com).
Nothing like having to poke around 10 other RS's to establish that rogue AS 26212 really only has 1, 6402 and 2914 as their upstreams.
Also 2516, 3257, 4513, 6730, and 6939, just in the last few weeks. --jim
participants (8)
-
cowie@renesys.com
-
David McGaugh
-
Jared Mauch
-
Joel Jaeggli
-
Kai Schlichting
-
Lucy E. Lynch
-
Mike Tancsa
-
Stephen J. Wilcox