- Test - lists.nanog.org

tel script
by Robert Drake 29 Mar '16

29 Mar '16

This is a program for logging into devices. You can find it here: https://github.com/rfdrake/tel I don't like to self promote things, but I'm interested in feedback. I'm also interested in alternatives if someone wrote something better. I started it a long time ago as a lighter clogin which didn't hang as much. Moving from expect to perl cut and bunch of the cruft out because of how verbose the TCL language is. My script is now larger than clogin and no longer consists of a single file. It's also arguably much cruftier in places, but it's gained some features I think people may like: Color syntax highlighting for "show interface" and some other commands An attempt to make backspace work on platforms with differing opinions of ^H vs ^? Run multiple script files and multiple devices in the same command (tel -x script1.txt -x script2.txt router router2 router3) Unified logout command: ctrl-d send slow (tel -s .5 -x script1.txt router) for sending scripts to devices with buffering issues send slow interactively (tel -S .5 router) for cut and paste to devices with buffering issues (some terminal emulators will do this if it's the only thing you need) change your device profile after login (tel -A zhone oob-test-lab:2004) helpful if you login through an out of band console which is made by one vendor into a device made by another vendor Support for KeePass, Pass, PWSafe3, and Gnome/KDE/MacOS Keyring, as well as a combination of these for storing passwords in encrypted files The entire thing is very customizeable for people who know perl or scripting languages. It's designed for NOC use on bounce servers where the administrator might setup the global profile in /etc/telrc, then the individual users would make their own profiles in their home directories to override individual settings. Limitations: I'm pretty sure I tried to build this on Cygwin once and it failed for reasons that probably can never be fixed. I've also never tested on MacOSX. I've run it successfully on various Linux as well as FreeBSD and OpenBSD.

1 0

AWS Contact
by Mike Hammett 27 Mar '16

27 Mar '16

Could anyone with AWS Direct Connect or AWS Partner Network reach out to me? I filled out the form on the web site almost a month ago that promised a five day turn around. I also had someone else in here at Amazon poking the Direct Connect people, but no response there either. :-\ ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com

1 0

Cogent Communications
by Brandon Vincent 26 Mar '16

26 Mar '16

Does anyone have a NOC/SOC contact for Cogent? I found a improperly secured router on the Internet and I'd like to report it. Thank you, Brandon Vincent

4 3

ARIN down?
by Mel Beckman 26 Mar '16

26 Mar '16

I haven’t been able to connect to http://arin.net for several hours, but was able to open a ticket this morning. I’ve tried from several different networks, all roads seem to lead to the same place, with packets dropping at the NTT interface 129.250.196.154. e.g.: $ traceroute arin.net<http://arin.net> traceroute: Warning: arin.net<http://arin.net> has multiple addresses; using 199.43.0.44 traceroute to arin.net<http://arin.net> (199.43.0.44), 64 hops max, 52 byte packets 1 l100.lsanca-vfttp-106.verizon-gni.net<http://l100.lsanca-vfttp-106.verizon-gni.net> (98.112.74.1) 5.992 ms 4.865 ms 4.943 ms 2 172.102.106.24 (172.102.106.24) 9.962 ms 9.723 ms 12.242 ms 3 ae2-0.lax01-bb-rtr2.verizon-gni.net<http://ae2-0.lax01-bb-rtr2.verizon-gni.net> (130.81.22.238) 29.982 ms * so-4-1-0-0.lax01-bb-rtr2.verizon-gni.net<http://so-4-1-0-0.lax01-bb-rtr2.verizon-gni.net> (130.81.151.248) 9.428 ms 4 0.ae6.br1.lax15.alter.net<http://ae6.br1.lax15.alter.net> (140.222.225.137) 9.806 ms * * 5 ae-7.r01.lsanca20.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.8.85) 10.409 ms 0.ae6.br1.lax15.alter.net<http://ae6.br1.lax15.alter.net> (140.222.225.137) 19.783 ms 9.757 ms 6 ae-7.r01.lsanca20.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.8.85) 10.292 ms 9.357 ms 12.291 ms 7 ae-17.r01.lsanca07.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.4.207) 22.541 ms ge-101-0-0-3.r06.asbnva02.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.196.153) 72.412 ms ae-17.r01.lsanca07.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.4.207) 22.167 ms 8 ge-101-0-0-3.r06.asbnva02.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.196.153) 72.510 ms 74.590 ms 72.258 ms 9 ge-101-0-0-3.r06.asbnva02.us.ce.gin.ntt.net<http://us.ce.gin.ntt.net> (129.250.196.154) 69.960 ms * 70.930 ms 10 * * * 11 * * * $ traceroute www.arin.net<http://www.arin.net> traceroute: Warning: www.arin.net<http://www.arin.net> has multiple addresses; using 199.43.0.43 traceroute to www.arin.net<http://www.arin.net> (199.43.0.43), 64 hops max, 40 byte packets 1 router1.sb.becknet.com<http://router1.sb.becknet.com> (206.83.0.1) 1.010 ms 0.420 ms 0.536 ms 2 206-190-77-9.static.twtelecom.net<http://206-190-77-9.static.twtelecom.net> (206.190.77.9) 3.983 ms 0.732 ms 0.686 ms 3 64-129-238-182.static.twtelecom.net<http://64-129-238-182.static.twtelecom.net> (64.129.238.182) 2.760 ms lax2-pr2-xe-1-3-0-0.us.twtelecom.net<http://lax2-pr2-xe-1-3-0-0.us.twtelecom.net> (66.192.241.218) 2.816 ms 64-129-238-186.static.twtelecom.net<http://64-129-238-186.static.twtelecom.net> (64.129.238.186) 18.203 ms 4 4.68.71.137 (4.68.71.137) 3.245 ms 2.877 ms 2.889 ms 5 * * * 6 ae-28.r00.lsanca07.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.9.93) 3.731 ms 3.483 ms 3.850 ms 7 ae-3.r01.lsanca07.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.5.29) 3.517 ms 3.433 ms 3.458 ms 8 ge-101-0-0-3.r06.asbnva02.us.bb.gin.ntt.net<http://us.bb.gin.ntt.net> (129.250.196.153) 69.503 ms 68.021 ms 68.072 ms 9 ge-101-0-0-3.r06.asbnva02.us.ce.gin.ntt.net<http://us.ce.gin.ntt.net> (129.250.196.154) 67.075 ms 67.102 ms 67.122 ms 10 * * * 11 * * * I recall ARIN had a DDoS attack a week or so ago. Does anybody know if this is a recurrence? -mel

6 13

Oh dear, we've all been made redundant...
by Warren Kumari 26 Mar '16

26 Mar '16

Found on Staple's website: http://www.staples.com/NetReset-Automated-Power-Cycler-for-Modems-and-Route… Fixes all issues, less downtime, less stress... Improves performance, eliminates buffering... It slices, it dices in teeny, tiny slices. It makes mounds of julienne fries in just seconds. ... Description - copied here for convenience: All the issues associated with the Internet being down can be solved by power cycling the modem and router. But that can be hard to do! NetReset resolves network issues by offering sequential power cycling. This means that when the modem and router are plugged into the device, they are powered up at different times. The modem is powered up first, then a minute later, the router is powered up. This rebooting will occur at initial setup, every 24 hours and after a power failure. Do you have a modem/router combo? No problem! NetReset will also power cycle the modem/router combo. Automatically resets user's Internet every 24 hours Maximizes Internet speed & reliability Eliminates media stream buffering Hands-free Internet reset Resets hard-to-reach modem/router Less Internet downtime Less daily stress No need to manually reset Reset occurs at programmed time Updated information from Internet service provider Proper reboot after a power failure Resetting allows equipment to auto-correct issues

21 23

mrtg alternative
by Baldur Norddahl 26 Mar '16

26 Mar '16

Hi I am currently using MRTG and RRD to make traffic graphs. I am searching for more modern alternatives that allows the user to dynamically zoom and scroll the timeline. Bonus points if the user can customize the graphs directly in the webbrowse. For example he might be able to add or remove individual peers from the graph by simply clicking a checkbox. What is the 2016 tool for this? Regards, Baldur

24 26

Weekly Routing Table Report
by Routing Analysis Role Account 25 Mar '16

25 Mar '16

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, SAFNOG, PaNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 26 Mar, 2016 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 587515 Prefixes after maximum aggregation (per Origin AS): 216203 Deaggregation factor: 2.72 Unique aggregates announced (without unneeded subnets): 287784 Total ASes present in the Internet Routing Table: 53221 Prefixes per ASN: 11.04 Origin-only ASes present in the Internet Routing Table: 36607 Origin ASes announcing only one prefix: 15753 Transit ASes present in the Internet Routing Table: 6412 Transit-only ASes present in the Internet Routing Table: 170 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 37 Max AS path prepend of ASN ( 40285) 34 Prefixes from unregistered ASNs in the Routing Table: 958 Unregistered ASNs in the Routing Table: 354 Number of 32-bit ASNs allocated by the RIRs: 13208 Number of 32-bit ASNs visible in the Routing Table: 10202 Prefixes from 32-bit ASNs in the Routing Table: 39714 Number of bogon 32-bit ASNs visible in the Routing Table: 14 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 363 Number of addresses announced to Internet: 2807921668 Equivalent to 167 /8s, 93 /16s and 124 /24s Percentage of available address space announced: 75.8 Percentage of allocated address space announced: 75.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.1 Total number of prefixes smaller than registry allocations: 191954 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 150519 Total APNIC prefixes after maximum aggregation: 41895 APNIC Deaggregation factor: 3.59 Prefixes being announced from the APNIC address blocks: 160568 Unique aggregates announced from the APNIC address blocks: 65534 APNIC Region origin ASes present in the Internet Routing Table: 5145 APNIC Prefixes per ASN: 31.21 APNIC Region origin ASes announcing only one prefix: 1180 APNIC Region transit ASes present in the Internet Routing Table: 909 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 35 Number of APNIC region 32-bit ASNs visible in the Routing Table: 1945 Number of APNIC addresses announced to Internet: 752726596 Equivalent to 44 /8s, 221 /16s and 178 /24s Percentage of available APNIC address space announced: 88.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 131072-135580 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 179920 Total ARIN prefixes after maximum aggregation: 88981 ARIN Deaggregation factor: 2.02 Prefixes being announced from the ARIN address blocks: 184947 Unique aggregates announced from the ARIN address blocks: 87842 ARIN Region origin ASes present in the Internet Routing Table: 16404 ARIN Prefixes per ASN: 11.27 ARIN Region origin ASes announcing only one prefix: 5887 ARIN Region transit ASes present in the Internet Routing Table: 1716 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 37 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1089 Number of ARIN addresses announced to Internet: 1101648192 Equivalent to 65 /8s, 169 /16s and 209 /24s Percentage of available ARIN address space announced: 58.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-395164 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 141408 Total RIPE prefixes after maximum aggregation: 69947 RIPE Deaggregation factor: 2.02 Prefixes being announced from the RIPE address blocks: 149984 Unique aggregates announced from the RIPE address blocks: 92642 RIPE Region origin ASes present in the Internet Routing Table: 18070 RIPE Prefixes per ASN: 8.30 RIPE Region origin ASes announcing only one prefix: 7924 RIPE Region transit ASes present in the Internet Routing Table: 2990 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 27 Number of RIPE region 32-bit ASNs visible in the Routing Table: 4592 Number of RIPE addresses announced to Internet: 704189824 Equivalent to 41 /8s, 249 /16s and 21 /24s Percentage of available RIPE address space announced: 102.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-204287 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 61729 Total LACNIC prefixes after maximum aggregation: 12154 LACNIC Deaggregation factor: 5.08 Prefixes being announced from the LACNIC address blocks: 75724 Unique aggregates announced from the LACNIC address blocks: 35785 LACNIC Region origin ASes present in the Internet Routing Table: 2472 LACNIC Prefixes per ASN: 30.63 LACNIC Region origin ASes announcing only one prefix: 582 LACNIC Region transit ASes present in the Internet Routing Table: 555 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 22 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 2382 Number of LACNIC addresses announced to Internet: 171034112 Equivalent to 10 /8s, 49 /16s and 198 /24s Percentage of available LACNIC address space announced: 101.9 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-265628 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 14146 Total AfriNIC prefixes after maximum aggregation: 3185 AfriNIC Deaggregation factor: 4.44 Prefixes being announced from the AfriNIC address blocks: 15929 Unique aggregates announced from the AfriNIC address blocks: 5656 AfriNIC Region origin ASes present in the Internet Routing Table: 732 AfriNIC Prefixes per ASN: 21.76 AfriNIC Region origin ASes announcing only one prefix: 180 AfriNIC Region transit ASes present in the Internet Routing Table: 166 Average AfriNIC Region AS path length visible: 4.6 Max AfriNIC Region AS path length visible: 18 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 194 Number of AfriNIC addresses announced to Internet: 77962752 Equivalent to 4 /8s, 165 /16s and 158 /24s Percentage of available AfriNIC address space announced: 77.4 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5594 4192 76 China Education and Research 7545 3211 352 187 TPG Telecom Limited 4766 3146 11142 1117 Korea Telecom 17974 2917 914 96 PT Telekomunikasi Indonesia 9829 2395 1448 427 National Internet Backbone 4755 2099 432 245 TATA Communications formerly 9808 1858 8717 30 Guangdong Mobile Communicatio 4808 1641 2288 524 CNCGROUP IP network China169 4788 1527 645 62 TM Net, Internet Service Prov 9583 1519 121 564 Sify Limited Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3347 2948 145 Cox Communications Inc. 6389 2357 3687 42 BellSouth.net Inc. 18566 2209 394 275 MegaPath Corporation 20115 1921 1931 400 Charter Communications 30036 1723 341 282 Mediacom Communications Corp 6983 1689 849 231 EarthLink, Inc. 4323 1573 1004 386 tw telecom holdings, inc. 209 1549 4635 1232 Qwest Communications Company, 701 1387 11446 663 MCI Communications Services, 11492 1277 236 589 CABLE ONE, INC. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 2515 135 9 SaudiNet, Saudi Telecom Compa 20940 2395 919 1741 Akamai International B.V. 34984 1960 323 414 TELLCOM ILETISIM HIZMETLERI A 8551 1260 376 54 Bezeq International-Ltd 6849 1158 355 21 JSC "Ukrtelecom" 12479 1147 980 86 France Telecom Espana SA 8402 1131 544 15 OJSC "Vimpelcom" 13188 1077 98 78 TOV "Bank-Inform" 31148 1040 47 41 Freenet Ltd. 9198 921 352 25 JSC Kazakhtelecom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3439 540 160 Telmex Colombia S.A. 8151 2211 3418 541 Uninet S.A. de C.V. 7303 1522 940 245 Telecom Argentina S.A. 11830 1441 366 25 Instituto Costarricense de El 6503 1432 453 56 Axtel, S.A.B. de C.V. 6147 1041 377 27 Telefonica del Peru S.A.A. 26615 995 2325 34 Tim Celular S.A. 3816 994 478 185 COLOMBIA TELECOMUNICACIONES S 7738 992 1882 41 Telemar Norte Leste S.A. 28573 892 2171 158 NET Serviços de Comunicação S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1240 403 36 Link Egypt (Link.NET) 8452 668 1472 15 TE-AS 37611 646 48 2 Afrihost-Brevis Computer Serv 36903 584 294 104 Office National des Postes et 36992 506 1357 25 ETISALAT MISR 37492 380 233 65 Orange Tunisie 24835 339 146 12 Vodafone Data 29571 278 37 12 Cote d'Ivoire Telecom 2018 250 327 74 TENET (The UNINET Project) 36947 232 807 13 Telecom Algeria Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5594 4192 76 China Education and Research 10620 3439 540 160 Telmex Colombia S.A. 22773 3347 2948 145 Cox Communications Inc. 7545 3211 352 187 TPG Telecom Limited 4766 3146 11142 1117 Korea Telecom 17974 2917 914 96 PT Telekomunikasi Indonesia 39891 2515 135 9 SaudiNet, Saudi Telecom Compa 9829 2395 1448 427 National Internet Backbone 20940 2395 919 1741 Akamai International B.V. 6389 2357 3687 42 BellSouth.net Inc. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 10620 3439 3279 Telmex Colombia S.A. 22773 3347 3202 Cox Communications Inc. 7545 3211 3024 TPG Telecom Limited 17974 2917 2821 PT Telekomunikasi Indonesia 39891 2515 2506 SaudiNet, Saudi Telecom Compa 6389 2357 2315 BellSouth.net Inc. 4766 3146 2029 Korea Telecom 9829 2395 1968 National Internet Backbone 18566 2209 1934 MegaPath Corporation 4755 2099 1854 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 2828 XO Communications 46467 UNALLOCATED 8.19.192.0/24 46887 Lightower Fiber Netw 16589 UNALLOCATED 8.20.247.0/24 35838 CCANET Limited 16589 UNALLOCATED 8.26.56.0/24 35838 CCANET Limited 46473 UNALLOCATED 8.27.122.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.124.0/24 3356 Level 3 Communicatio 27205 UNALLOCATED 8.38.16.0/21 3356 Level 3 Communicatio 15347 UNALLOCATED 8.224.147.0/24 12064 Cox Communications I 33628 UNALLOCATED 12.0.239.0/24 1239 Sprint Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.226.112.0/20 62788 >>UNKNOWN<< 23.249.144.0/20 40430 colo4jax, LLC 27.100.7.0/24 56096 >>UNKNOWN<< 37.46.10.0/23 36351 SoftLayer Technologies Inc. 37.46.14.0/24 36351 SoftLayer Technologies Inc. 37.46.15.0/24 36351 SoftLayer Technologies Inc. 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< 41.73.3.0/24 37004 >>UNKNOWN<< 41.73.4.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:101 /12:267 /13:513 /14:1032 /15:1768 /16:12975 /17:7578 /18:12696 /19:25816 /20:38153 /21:40031 /22:64976 /23:56380 /24:323558 /25:543 /26:593 /27:398 /28:20 /29:17 /30:11 /31:0 /32:24 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 22773 2526 3347 Cox Communications Inc. 39891 2472 2515 SaudiNet, Saudi Telecom Compa 18566 2111 2209 MegaPath Corporation 30036 1537 1723 Mediacom Communications Corp 6389 1499 2357 BellSouth.net Inc. 6983 1338 1689 EarthLink, Inc. 10620 1332 3439 Telmex Colombia S.A. 34984 1245 1960 TELLCOM ILETISIM HIZMETLERI A 11492 1183 1277 CABLE ONE, INC. 6849 976 1158 JSC "Ukrtelecom" Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1645 2:738 4:20 5:2052 6:27 8:927 12:1776 13:38 14:1649 15:45 16:2 17:74 18:20 20:49 23:1429 24:1775 27:2273 31:1761 32:54 33:2 34:2 35:5 36:256 37:2242 38:1179 39:27 40:87 41:2773 42:387 43:1691 44:41 45:1761 46:2468 47:73 49:1131 50:839 51:8 52:142 54:198 55:3 56:6 57:45 58:1528 59:859 60:570 61:1819 62:1483 63:1908 64:4471 65:2165 66:4188 67:2131 68:1101 69:3264 70:1046 71:469 72:1977 74:2550 75:339 76:414 77:1336 78:1304 79:849 80:1331 81:1363 82:939 83:685 84:805 85:1591 86:468 87:1022 88:561 89:1949 90:168 91:6050 92:850 93:2302 94:2353 95:2275 96:462 97:355 98:955 99:45 100:70 101:1025 103:10098 104:2331 105:152 106:400 107:1071 108:672 109:2133 110:1267 111:1641 112:955 113:1136 114:1040 115:1693 116:1541 117:1419 118:2153 119:1572 120:515 121:1174 122:2220 123:2004 124:1618 125:1753 128:722 129:380 130:411 131:1302 132:619 133:177 134:448 135:122 136:353 137:332 138:1726 139:213 140:251 141:470 142:636 143:862 144:601 145:161 146:843 147:645 148:1471 149:479 150:652 151:826 152:606 153:272 154:545 155:946 156:489 157:447 158:346 159:1100 160:437 161:737 162:2303 163:548 164:749 165:1039 166:313 167:1089 168:1635 169:626 170:1577 171:271 172:525 173:1676 174:720 175:919 176:1533 177:3998 178:2241 179:1109 180:2049 181:1703 182:1950 183:680 184:793 185:6044 186:3059 187:2090 188:2149 189:1747 190:7667 191:1201 192:8930 193:5724 194:4369 195:3774 196:1695 197:1070 198:5518 199:5645 200:6956 201:3704 202:10149 203:9629 204:4648 205:2713 206:2980 207:3064 208:4053 209:3795 210:3951 211:2039 212:2635 213:2182 214:832 215:72 216:5738 217:1920 218:761 219:568 220:1674 221:855 222:662 223:950 End of report

1 0

PitIX or pair.com
by Mike Hammett 24 Mar '16

24 Mar '16

Do any of you have any information on PitIX? It looks like it was another IX started by a datacenter that didn't pan out. Therefore, anyone have a contact at pair.com? An inquiry sent to their web site (well, whatever contact information they have on it) has gone unanswered. ----- Mike Hammett Intelligent Computing Solutions http://www.ics-il.com Midwest Internet Exchange http://www.midwest-ix.com

1 0

Paging someone at SonicWall/Dell
by Dan Mahoney, System Admin 24 Mar '16

24 Mar '16

All, If anyone has any contacts at Dell/SonicWall that can assist, their latest firewalls have a misfeature that have started blocking F-root (ISC, my Day-job) as a possible botnet responder. You can reach me, 24/7, at 703-338-2497, or at dmahoney(a)isc.org. Needless to say, this is seriously bad. As we ourselves are not Sonicwall users, our options here are limited. I've gotten their usual call center nonsense where they told me "I need to contact my system administrator" and wouldn't transfer me further. I've submitted a "removal" request via the form at http://botnet.global.sonicwall.com/change, but that still doesn't help if there's a firmware out there doing broken hueristics and mass-DDOSing folks. If for some reason there actually IS some botnet-related traffic going on toward the root servers (the root servers get a LOT of garbage, so this doesn't surprise me), we'd like to know that too. -Dan Mahoney -- --------Dan Mahoney-------- Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144 AIM: LarpGM Site: http://www.gushi.org ---------------------------

2 1

NTT communications horrible routing, unresponsive NOC
by Paras Jha 24 Mar '16

24 Mar '16

Hi all, I've been trying to get this issue resolved for the entire day now, but NTT has been pretty unreceptive here. We're announcing a large prefix for a client across our network, and we discovered some insanely high latency. After tracking down the issue, we determined it to be something wrong with NTT at their Seattle location. We anycast this prefix, but no matter where in the world traffic is originating from, it's going to Seattle and then to Atlanta. Example: Rotterdam in the Netherlands routes from Europe -> east coast -> west coast Seattle -> los angeles -> atlanta. The gist of it is that something is seriously messed up at NTT in Seattle. We contacted our transit provider to try and carry the issue upstream, and what they told us was Sorry for delay, I've asked NTT to clear the more specific for this one as well. The problem seems to be a bug on the NTT side which keeps stale routes in the routing table for more specifics ( at random ). If you have more routes affected please notify us of the routes and I will ask them to clear the routing table for these routes. NTT is working on this with their vendor to get this resolved as soon as possible. I had spoken to a sales rep for NTT a few weeks prior, and they assured me that the NOC was top notch, and that all routes were redundant, and they guaranteed less than 50ms in the US, and all kinds of marketing. However, it looks like it's all marketing - for this entire day this router has been causing tons of issues for our clients. No-exporting it to NTT does not even solve the problem, as NTT's router in Seattle apparently just decides to keep random small prefixes in it, causing traffic to go there. At a loss as to what to do now, since their NOC isn't receptive. Anyone have someone I can contact off-list to get this issue resolved? It's especially frustrating because the problem absolutely cannot be resolved on our end, even with a no-export since NTT is keeping the routes in their router.

4 3