November 1999 - Test - lists.nanog.org

The Cidr Report
by Tony Bates 05 Nov '99

05 Nov '99

This is an auto-generated mail on Fri Nov 5 12:00:00 PST 1999 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 05Nov99 0) General Status Table History ------------- Date Prefixes 301099 65527 311099 65581 311099 65559 011199 65613 021199 65961 031199 65896 041199 66135 051199 66177 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- *** Bogus 110.30.236.0/24 from AS577 *** Bogus 219.91.160.0/22 from AS7742 *** Bogus 219.91.164.0/23 from AS7742 AS Summary ---------- Number of ASes in routing system: 5979 Number of ASes announcing only one prefix: 3170 (1742 cidr, 1428 classful) Largest number of cidr routes: 626 announced by AS701 Largest number of classful routes: 965 announced by AS701 1) Gains by aggregating at the origin AS level --- 05Nov99 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 384 142 242 63.0% BCnet Backbone AS7046 435 261 174 40.0% UUNET-CUSTOMER AS6944 134 19 115 85.8% RapidSite, Inc. AS1221 626 514 112 17.9% TELSTRA-AS AS2609 126 16 110 87.3% EUnet-TN AS9269 132 26 106 80.3% Hong Kong CTI AS7657 249 161 88 35.3% The Internet Group Limited AS174 563 476 87 15.5% Performance Systems International AS7545 144 58 86 59.7% TPG Internet Pty Ltd AS577 265 180 85 32.1% Bell Canada Backbone AS4293 222 140 82 36.9% Internal ASN for C&W AS7496 118 37 81 68.6% Power Up AS3749 138 63 75 54.3% TECNET AS4200 180 110 70 38.9% AGIS (Apex Global Information Ser AS209 328 269 59 18.0% Qwest Communications AS4740 340 287 53 15.6% Ozemail Pty Ltd (ASN-OZEMAIL) AS2764 472 422 50 10.6% connect.com.au pty ltd AS816 226 181 45 19.9% UUNET Canada (ASN-UUNETCA-AS4) AS684 91 46 45 49.5% Manitoba Regional Network Backbon AS9304 55 16 39 70.9% Hutchcity AS4755 107 68 39 36.4% Videsh Sanchar Nigam Ltd. India AS6528 45 7 38 84.4% WORLD-LYNX AS549 215 177 38 17.7% ONet Backbone AS2493 125 87 38 30.4% iSTAR Internet, Inc. AS701 965 928 37 3.8% Alternet AS719 199 163 36 18.1% LANLINK autonomous system AS1 501 466 35 7.0% GTE Internetworking AS7568 48 14 34 70.8% C.S. Communications Co., Ltd. AS3737 99 66 33 33.3% PenTeleData Inc. (ASN-PTD) AS1785 237 205 32 13.5% NYSERNet Backbone For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

mea-east
by Tatsuya Kawasaki 05 Nov '99

05 Nov '99

Nanog, Could anyone tell me is there any problem that traffic passes through mae-east? how common or difficult is it to maintain VPN connection whose traffic is goes though mea-east. One of our upper providers told me that from their core router at the mae-east, he could not ping "any" peering site without losing packets. Could anyone give me insight on this? TIA, Tatsuya /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ Tatsuya Kawasaki Allegiance Telecom Unlock the Power of the Internet http://www.kivex.com Phone 301.215.6777 Fax 301.215.5991 Affiliation given for identification not representation /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

1 0

Baseline information and postive Y2K reporting
by Sean Donelan 05 Nov '99

05 Nov '99

At the Y2K meeting today in L.A. there were a couple requests from the folks from the US Y2K coordination center for information about the Internet. They are looking for baseline information on what a "normal" number of problems would be for the Internet on a typical weekend. They want this information to know if, on January 1, there are more or less problems than normal. For example, they have information on how many ATM cash machines are not working on a typical weekend, and will be able to compare it to reports during the Y2K roll-over. I think most ISPs keep track of information such as how many calls, trouble tickets, modems out of servers, etc they get each day. The Y2K CC isn't looking for ISP by ISP comparisions, but for an industry summary. Is anyone aware of a source or study which already generated this information? Or failing that, are there any ISPs willing to contribute a few key service metrics so a third-party could generate an aggregate report for the Y2K CC? I was thinking of using these service metrics as the basis for a broad "state of the Internet" - total modems/modems in use/modems out of service - total dedicated access ports/ports out of service - total number of web sites/sites out of service - total number of customer calls/trouble tickets opened - total number of bytes in/out (network aggregate) Since Dec31/Jan1 is a weekend, it would be great to have 7 days worth of daily or hourly data from a wednesday to wednesday. Any data would be usefull, but to make the aggregate more accurate may I suggest everyone use the time period begining December 1, 1999 0000UTC and ending at December 7, 1999 2359UTC. Hopefully this would give us a good baseline. The second issue was the process for postive status reporting about the Internet during the Y2K roll-over. IOPS.ORG is handling this for their member ISPs, but are there any other groups collecting status for other ISP and Internet services (e.g. exchange points). The Y2KCC can't handle every ISP calling them directly, but are willing to work with a small number of groups willing to funnel summary information to them. Even if I gave everyone my cellphone number, I can't take reports from 8,000 ISPs. For reporting purposes, it needs to be hierarchical. The hierarchy doesn't need to be by size, e.g. find a lead ISP or person in each region or state willing to collect the information in their area and feeding it to the next level. But it would require some comittiment from both the ISPs reporting the status, and for the next-level up to use the information only to prepare the aggregate report. For postive reporting, its "simple" to set up a couple of e-mail addresses (diversity) and a standardized template reporting ASN nnnn is A-Ok. And even though I think things are going to work, I would need to present a reasonable backup process. If we can't get ISPs to get together, I was thinking asking companies like Inverse for dialup availability and Keynote for web availability. If only 10 Internet Services (isps, exchange points, db's, etc) are willing to do positive status reporting, I guess I could just give them my email and cellphone number and consider that as good as it will get. Suggestions from operators for either how to quickly collect the baseline information or postive status reporting during the event would be appreciated.

1 0

OT: I hate doing this
by Rich Sena 04 Nov '99

04 Nov '99

Can some folk please take the taim to play rate a provider with me - This will NOT be summarized to the list - please reply to me - not the list First hand experience is a plus... please rate and comment on give me good, bad, indifferent re: the following colo providers - seems my experience and oppinion aren't good enough (also beat me privately for this crap) ABOVENET AGIS GTE EXODUS VERIO SERVINT LEVEL3 CIGNAL -- I am nothing if not net-Q! - ras(a)poppa.thick.net

2 1

Bandwith meter
by Dror Mor 04 Nov '99

04 Nov '99

Hello all, I have a wireless CDPD modem that is connected to one of my Linux machines via serial. I need to check the bandwith of this modem for a long period of time (1-3 days), but I need a program for it. anybody knows of such a program? Thanks alot Dror Mor

3 2

Re: possible scam?
by Paul Vixie 04 Nov '99

04 Nov '99

> the author, Joe Baptista, is a known loon in the Toronto area. i heard from a usually reliable source that joe baptista is actually a sock puppet for richard sexton. if anyone here knows both of them i'd appreciate private mail to that effect. and btw, the mail abuse prevention system (MAPS) llc has blackholed the entire /24 where this loonie tune mail is coming from, since it is spam and since the provider won't stop and since they kept renumbering to different /32's as those were blocked.

1 0

Re: possible scam?y
by Jim Mercer 03 Nov '99

03 Nov '99

On Wed, Nov 03, 1999 at 11:41:18AM -0800, Laura Beck wrote: > Berkeley isn't spelled correctly in his message, and I would think if that > were what he was working on he would know how to spell it... true enough, but it is a common mis-spelling. i find it interesting that the home page of http://bind1999.pccf.net contains nothing, only the direct pages he refers to in his message. and http://www.pccf.net has nothing but a test pattern, a mailto: link and a wav file, no links to anything else. -- [ Jim Mercer jim(a)reptiles.org +1 416 506-0654 ] [ Reptilian Research -- Longer Life through Colder Blood ] [ Don't be fooled by cheap Finnish imitations; BSD is the One True Code. ]

2 1

1/2 of Netscape down for more than 4 hours
by Kai Schlichting 03 Nov '99

03 Nov '99

Whatever Netscape is doing with their server at 205.188.247.66 since 9:00a EST I really don't know, but it's down hard and its starting to generate significant customer feedback. Their own nameservers all seem to agree that www.netscape.com is CNAME'd to vwww-va2.netscape.com (which has the above IP) at this time, while ns.cw.net (their secondary) seems to think it's CNAME'd to www-ld1.netscape.com , with an A record of 207.200.75.200, which is actually responsive. Sometimes after 10:00a EST, this started to generate significant support calls. Currently trying to populate the DNS caches around here with the working version, which is tricky given that 3 out of 4 NS point to the dead CNAME. bye,Kai -- kai(a)conti.nu "Just say No" to Spam Kai Schlichting Palo Alto, New York, You name it Sophisticated Technical Peon Kai's SpamShield <tm> is FREE! http://SpamShield.Conti.nu | | LeasedLines-FrameRelay-IPLs-ISDN-PPP-Cisco-Consulting-VoiceFax-Data-Muxes WorldWideWebAnything-Intranets-NetAdmin-UnixAdmin-Security-ReallyHardMath

1 0

possible scam?
by Jim Mercer 03 Nov '99

03 Nov '99

the following two messages were recieved by me (and more likely many others) the author, Joe Baptista, is a known loon in the Toronto area. i'm not sure if he has reformed or if this is some scam he is running. Message #1 ----- Forwarded message from hostmaster(a)pccf.net ----- Date: Wed, 3 Nov 1999 05:23:10 -0500 From: hostmaster(a)pccf.net To: nic(a)ns.reptiles.org Subject: hello hostmaster for SOA nic(a)ns.reptiles.org. - Hello: -- Hello: ******************************************************************* * ATTENTION - Our SMTP (MailServers) are being subjected to a DOS * * (Denial of Service) Attack. * * * BECAUSE OF THIS ATTACK - you may receive two copies of this * * this email. * ******************************************************************* I am a domain administrator with Planet Communications & Computing Facility. We are a private network research facility. I am contacting you with respect to the BIND 1999 Survey of Internet hosts and ICANN - the Internet Corporation for Assigned Names and Numbers. We conduct and maintain the BIND (Berkley Internet Name Daemon) survey databases. Over the years we have used the BIND surveys to assist the United States Government and the Department of Defense in closing security holes in the domain name system infrastructure. This year we have received financial assistance which has allowed us to conduct an extensive enumeration of internet domain name servers. You are receiving this message because servers where you are listed as the SOA (source of authority) have been included in the most recent BIND data. We would like to invite you to pickup a report from us which details all information available on your servers as reported in the public dns system. The report includes a number of tests results from queries made on your name servers and provides details on the status of any failed or passed tests. If you are running BIND versions which can be hacked, or are insecure, those detail are reported and supporting information provided to assist you in closing potential security holes. A separate message has been emailed to you with instructions on how to extract information on your servers from our databases. It's fairly simple, all you have to do is reply to the message and keep the subject line intact. We have emailed it with a subject header labeled CONFIDENTIAL. In the event you may want to forward this message to others, you can do so without inadvertently allowing access to your database records. We hope that you find this information of assistance. Our intention is to fix the numerous problems encountered in the public domain name system. This year we enumerated in excess of 200,000 name servers. Of those 25,000 have misconfigured SOA records, 12,000 do not resolve, 62,000 are no longer operational and 22,000 can be easily hacked. - ICANN - In conclusion I would like to ask that you take an active role in Internet Governance. The United States Government has assigned control of the Internet Domain System and Infrastructure to ICANN (The Internet Corporation for Assigned Names and Numbers) which represents big business interests, trademark lawyers and public telephone companys. ICANN intends to tax domain names and the ip infrastructure. To date a number of regulation have been imposed on internet registrars which take away existing rights and claims to second level domain names. As a result of these efforts, a number of organizations have started alternate root infrastructures and intend in competing with ICANN. This November 1-4 ICANN will be holding public meetings in Los Angeles. If you live in or near LA, please try to attend. If you don't, you can participate via remote. Please help us get the word out. Information on the meeting is available at: http://bind1999.pccf.net/resources/meetings/ Information on the people involved in what has been termed the domain name system wars is available at: http://bind1999.pccf.net/resources/ It is critcal to the internets future that it remain an open system. As a domain administrator you have control over the root cache file which now points to the United States Government (USG) root servers. If you don't like what ICANN and the USG is doing - you have the power to switch. A number of alternative root servers now exists to assist you in making that choice. Thank you for your time. Regards Joe Baptista, Director Public Research ----- End forwarded message ----- Message #2 ----- Forwarded message from hostmaster(a)pccf.net ----- Date: Wed, 3 Nov 1999 05:23:11 -0500 Message-Id: <199911031023.FAA11327(a)pccf.net> From: bind1999(a)pccf.net To: nic(a)ns.reptiles.org Subject: CONFIDENTIAL @TICKET:Nn181H4N@nic@ns.reptiles.org. - ACCESS to BIND report - Hello: ******************************************************************* * ATTENTION - Our SMTP (MailServers) are being subjected to a DOS * * (Denial of Service) Attack. Please see the following URL for * * more instructions http://bind1999.pccf.net/resources/ * * * * BECAUSE OF THIS ATTACK - you may receive two copies of this * * this email. * ******************************************************************* This message is automatically generated by the BIND (Berkeley Internet Name Daemon) Survey maintained by Planet Communications & Computing Facility, Ottawa, Ontario. A message with a detailed explaination of the survey has been emailed to you under separate email cover. ATTENTION - WARNING - ATTENTION This message contains details and access instructions on recovering survey data collected by us from the public domain name system. A report of all name servers under your SOA RR (source of authority resource record) in which you have been listed as hostmaster. To recover the information - you can reply to this message making sure you keep the subject header intact, or you can email bind1999(a)pccf.net with a subject line of: @TICKET:Nn181H4N@nic@ns.reptiles.org. Please include the entire ticket - including ending period. Please make sure you delete the body of the message, so you don't confuse our mailers. Please note, it may take up to 24 hours for the system to compile your report. We are currently experiencing a denial of service attack which has delayed delivery of email. If you mailer sends autoreplies, you may already have your report. Regards Joe Baptista, Director Public Research ----- End forwarded message -----

1 0

net management/people resources?
by Larry Snyder 01 Nov '99

01 Nov '99

For those running an 'umbrella' package (OV/Tivoli/CA/etc) I'm just wondering if there's a common ratio between the number of managed nodes in a reasonably dynamic environment and the number of people actually maintaining the management package (not the users). As an aside, I'm a bit curious as to the favorite umbrellas in use. thanx, -ls-

1 0