May 2003 - Test - lists.nanog.org

realtime monitoring apps?
by Dan Hollis 02 May '03

02 May '03

Anyone know of decent realtime network monitoring applications similar to trafshow? Something can can realtime summarize traffic by originating ip (eg ip addresses of source hosts sorted by traffic volume) -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]

4 4

Keeping track of those rascal spammers.
by just me 02 May '03

02 May '03

I've gotten a few emails curious about the MySQL output I sometimes refer to in posts. I just finished blowing the dust off a paper I wrote several months ago, documenting some of the antispam measures I've developed. I added some info about how I use a database to store historical info. It's been an invaluable tool not only for presenting clear evidence of abuse, but for efficiently maintaining access lists, as well. The paper is at http://www.snark.net/snarkspam.html It's not the most polished document, as its main purpose was for me to document the system for myself, but I hope it can provide some hints or techniques for other folks to deal with the spam problem. Matt Ghali On Thu, 1 May 2003, Jeremy T. Bouse wrote: Matt, I'm curious as I've seen you spitting out what seems to be MySQL query results as records of spam... I'd very much be interrested in what you have setup to allow you to do this... I'm using MySQL with my IDS but having spam attempts as well would be very helpful... Thanks in advance, Jeremy --mghali(a)snark.net------------------------------------------<darwin>< Flowers on the razor wire/I know you're here/We are few/And far between/I was thinking about her skin/Love is a many splintered thing/Don't be afraid now/Just walk on in. #include <disclaim.h>

1 0

Topics for Salt Lake City
by Susan Harris 02 May '03

02 May '03

Here are the talks we've scheduled so far for June: Tutorials --------- - ISP Security: Deploying and Using Sinkholes Barry Raveendren Greene, Cisco, and Danny McPherson, Arbor - Introduction to MPLS Joe Soricelli, Juniper - BGP Multihoming Techniques Philip Smith, Cisco - Deploying Interdomain IP Multicast Mike McBride, Cisco General Session --------------- - Lawful Interception: Should There be Standards? Jeff Schiller, MIT - XML Router Configs - Progress and Predictions (Panel) Randy Bush, IIJ, moderator - @Home Cable Backbone Deployment Experiences Cathy Wittbrodt - BGP Attack Trees - Real World Examples Sue Hares, NextHop - MPLS-Based Synchronous Traffic Shunt Yehudah Afek, Riverstone, and Roy Brooks, Cisco - IPv4/IPv6 Dual-Stack on Abilene Grover Browning, Indiana University - Implementation of ARIN's Lame DNS Delegation Policy Ed Lewis, ARIN - NRIC Best Practices for ISP Security Ross Callon, Juniper RESEARCH FORUM -------------- - Inter-provider Coordination for Real-Time Tracebacks Kathleen M. Moriarty, MIT - Achieving Record Speed Trans-Atlantic End-to-end TCP Throughput Les Cottrell, Stanford University Monday Evening BOFs ------------------- - Device Discovery Protocols Dave Ward, Cisco, and Pedro Roque Marques, Juniper, moderators - ISP Security BOF III Barry Raveendran Greene, Cisco, moderator More info here: http://www.nanog.org/mtg-0306/ PS - the hotel block ends on May 10. See you soon!

1 0

Re: CAR remote-trigger..
by haesu＠towardex.com 02 May '03

02 May '03

some people asked me to share.. This is pretty much the concluded thought for remotely triggered CAR. I haven't tested this at all though. still thinking this through before i test it in the lab... Note: all numbers here such as ASN's and ip's are made up for testing purposes On Customer router: ! hostname customer-gw ! router bgp 10 network 10.1.10.0 mas 255.255.255.0 redist static route-map DoSed nei 172.16.10.2 remote 20 nei 172.16.10.2 send-commun ! ip bgp-commun new ! ip route 10.1.10.56 255.255.255.255 Null0 254 tag 666 ! route-map DoSed per 10 match tag 666 set commun 10:31337 no-expo ! route-map DoSed per 20 ! On ISP edge: ! hostname aggr0 ! interface Serial2/0 description serial circuit to Customer bgp-policy source ip-qos-map rate-lim input qos-group 50 1544000 8000 8000 conform transmit exceed drop ! router bgp 20 table-map DoS-evasive nei 172.16.10.1 remote 10 nei 172.16.10.1 desc Customer nei 172.16.10.1 ebgp 2 nei 172.16.10.1 update-so loop0 ! ip bgp-commun new ! ip community-list 1 per 10:31337 ! ! route-map DoS-evasive per 10 match commun 1 set ip qos-group 50 ! route-map DoS-evasive per 20 ! -hc On Fri, May 02, 2003 at 11:46:00AM -0400, Eric Oosting wrote: > > Would you mind summarizing to the list? Others may be interested. > > -- > Eric Oosting eoosting(a)sockeye.com office:781-693-7041 > Network Engineer Network Eng and Operations Sockeye Networks > > On Fri, 2 May 2003 haesu(a)towardex.com wrote: > > > > > Hi, this is now figured out. A lot of people have provided assistance off-list. Thank you! > > > > -hc > > > > On Thu, May 01, 2003 at 12:59:22PM -0400, Haesu D. Jeon wrote: > > > > > > Uhh just to clarify... hehe > > > > > > I was talking about CAR as in committed access rate (the rate-limit commands on Cisco) , not as in automobile :-D > > > > > > Thanks, > > > -hc > > > > > > On Thu, May 01, 2003 at 11:33:30AM -0400, haesu(a)towardex.com wrote: > > > > > > > > My apologies if this has been discussed before... > > > > > > > > Do any of you have any real-world 'practical' examples of setup for having CAR remotely-triggered via BGP? > > > > > > > > > > > > Thanks, > > > > -hc > > -- Sincerely, Haesu J. TowardEX Technologies, Inc WWW: http://www.towardex.com E-mail: haesu(a)towardex.com

1 0

Guardian for ARIN
by Sean Donelan 02 May '03

02 May '03

Once upon a time, NSI handled both domain names and network addresses. NSI originally only checked the sender of the e-mail address matched its database. Spoofing the sender of an e-mail address is/was trivial, and eventually several domain names were hijacked by other unauthorized individuals. NSI added "Guardian" to their template process. Guardian permitted the points of contact (NIC-Handle) for objects in the NSI database to add a password (and allegedly a PGP key) to their records. Only templates using the correct password would be processed. Since NSI handled both names and numbers, a password on NIC-Handle protected both names and networks. ARIN was formed, and the duties associated with IP numbers (AS and IP addresses) were transfered to the new ARIN. However, Guardian or some alternative didn't seem to get transferred. So we're back to anyone who can spoof the point of contacts e-mail address can make changes to the ARIN records. Is it time for ARIN to re-add security to their database update procedures?

7 6

CAR remote-trigger..
by haesu＠towardex.com 02 May '03

02 May '03

My apologies if this has been discussed before... Do any of you have any real-world 'practical' examples of setup for having CAR remotely-triggered via BGP? Thanks, -hc

3 3

ETSI V1 and V2 SS7 standards.
by Shashi Kumar 02 May '03

02 May '03

Hi, Please let me know the list of documents/standards which constitute "ETSI V1 and V2 SS7 specification"? Sorry if this is not a relevant question on this forum. Thanks, Shashi **************************Disclaimer************************************ Information contained in this E-MAIL being proprietary to Wipro Limited is 'privileged' and 'confidential' and intended for use only by the individual or entity to which it is addressed. You are notified that any use, copying or dissemination of the information contained in the E-MAIL in any manner whatsoever is strictly prohibited. ***************************************************************************

1 0

The Cidr Report
by cidr-report＠potaroo.net 02 May '03

02 May '03

This report has been generated at Fri May 2 21:46:00 2003 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 25-04-03 122236 86991 26-04-03 122273 86957 27-04-03 122324 87007 28-04-03 122329 87096 29-04-03 122365 86914 30-04-03 121955 86756 01-05-03 122321 86833 02-05-03 122251 86861 AS Summary 15044 Number of ASes in routing system 5943 Number of ASes announcing only one prefix 1537 Largest number of prefixes announced by an AS AS701 : ALTERNET-AS UUNET Technologies, Inc. 73191424 Largest address span announced by an AS (/32s) AS568 : SUMNET-AS DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 02May03 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 122242 86832 35410 29.0% All ASes AS4151 1003 77 926 92.3% USDA-1 USDA AS7132 961 207 754 78.5% SBIS-AS SBC Internet Services - Southwest AS7843 684 188 496 72.5% ADELPHIA-AS Adelphia Corp. AS701 1537 1098 439 28.6% ALTERNET-AS UUNET Technologies, Inc. AS4323 586 171 415 70.8% TW-COMM Time Warner Communications, Inc. AS3908 895 523 372 41.6% SUPERNETASBLK SuperNet, Inc. AS7018 1299 935 364 28.0% ATT-INTERNET4 AT&T WorldNet Services AS1221 1104 791 313 28.4% ASN-TELSTRA Telstra Pty Ltd AS705 529 234 295 55.8% ALTERNET-AS UUNET Technologies, Inc. AS1239 960 681 279 29.1% SPRINTLINK Sprint AS6198 460 182 278 60.4% BATI-MIA BellSouth Network Solutions, Inc AS6197 478 202 276 57.7% BATI-ATL BellSouth Network Solutions, Inc AS22927 288 13 275 95.5% AR-TEAR2-LACNIC TELEFONICA DE ARGENTINA AS4814 297 23 274 92.3% CHINANET-BEIJING-AP China Telecom (Group) AS4355 381 108 273 71.7% ERMS-EARTHLNK EARTHLINK, INC AS2386 544 312 232 42.6% INS-AS AT&T Data Communications Services AS17676 243 25 218 89.7% GIGAINFRA XTAGE CORPORATION AS27364 270 63 207 76.7% ACS-INTERNET Armstrong Cable Services AS22773 208 8 200 96.2% CCINET-2 Cox Communications Inc. Atlanta AS6347 368 171 197 53.5% DIAMOND SAVVIS Communications Corporation AS209 492 297 195 39.6% ASN-QWEST Qwest AS3561 505 327 178 35.2% CWUSA Cable & Wireless USA AS2048 260 88 172 66.2% LANET-1 State of Louisiana AS690 487 317 170 34.9% MERIT-AS-27 Merit Network Inc. AS6327 189 23 166 87.8% SHAWFIBER Shaw Fiberlink Limited AS17557 375 218 157 41.9% PKTELECOM-AS-AP Pakistan Telecom AS4200 175 21 154 88.0% AGIS-NET Apex Global Information Services, Inc. AS20115 475 323 152 32.0% CHARTER-NET-HKY-NC Charter Communications AS2686 256 105 151 59.0% AS2686 AT&T Global Network Services - EMEA AS7303 255 104 151 59.2% AR-TAST-LACNIC Telecom Argentina Stet-France Telecom S.A. Total 16564 7835 8729 52.7% Top 30 total Possible Bogus Routes 24.2.128.0/21 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.7.10.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.11.98.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.14.197.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.18.132.0/23 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.23.8.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.119.0.0/16 AS11492 CABLEONE CABLE ONE 24.180.60.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.185.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.186.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.187.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.188.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.189.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.183.191.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 24.223.128.0/17 AS11060 NEO-RR-COM Time Warner Cable Northeast Ohio 24.244.192.0/18 AS16949 EDAP Edaptivity.com Inc 61.12.32.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 61.12.34.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 64.30.64.0/19 AS14900 USLEC-CORP-1 USLEC Corp. 64.140.140.0/24 AS5696 WNST WINSTAR 64.181.1.0/24 AS11893 LOLIGO-ASN Loligo Cache Systems, Inc. 64.253.128.0/20 AS3356 LEVEL3 Level 3 Communications, LLC 65.2.165.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.145.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.146.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.147.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.150.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.6.151.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.8.0.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.11.200.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.11.201.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.15.117.0/24 AS6478 ATT-INTERNET3 AT&T WorldNet Services 65.75.91.0/24 AS701 ALTERNET-AS UUNET Technologies, Inc. 66.41.192.0/18 AS13367 ATT-BBND-B AT&T Broadband 67.50.54.0/23 AS577 BACOM Bell Advanced Communications Inc. 68.192.0.0/14 AS6128 CABLE-NET-1 Cablevision Systems Corp. 69.11.0.0/20 AS803 SASKTEL SaskTel 132.0.0.0/10 AS568 SUMNET-AS DISO-UNRRA 137.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 138.136.0.0/13 AS568 SUMNET-AS DISO-UNRRA 140.240.0.0/13 AS1 GNTY-1 Genuity 155.32.0.0/12 AS1 GNTY-1 Genuity 155.36.0.0/16 AS14751 CONVERSENT Conversent Communications 158.0.0.0/13 AS568 SUMNET-AS DISO-UNRRA 165.212.0.0/16 AS7424 USANET USA.Net 166.16.0.0/16 AS3751 SNET-AS Southern New England Telephone 171.64.0.0/10 AS1 GNTY-1 Genuity 192.16.52.0/24 AS1239 SPRINTLINK Sprint 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 ALTERNET-AS UUNET Technologies, Inc. 192.83.16.0/20 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.32.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.64.0/19 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.96.0/22 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.83.100.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.119.135.0/24 AS270 PSCNI-AS National Aeronautics and Space Administration 192.124.252.0/22 AS680 AS680 DFN-IP service G-WiN 192.135.50.0/24 AS7018 ATT-INTERNET4 AT&T WorldNet Services 192.136.79.0/24 AS719 AS719 LANLINK autonomous system 192.153.136.0/21 AS568 SUMNET-AS DISO-UNRRA 192.153.144.0/21 AS568 SUMNET-AS DISO-UNRRA 192.172.0.0/19 AS568 SUMNET-AS DISO-UNRRA 192.188.208.0/20 AS568 SUMNET-AS DISO-UNRRA 192.228.0.0/16 AS4637 REACH Reach Network Border AS 192.243.32.0/23 AS2044 PALIN-AS Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLATLANTIC-COM Bell Atlantic, Inc. 198.97.72.0/21 AS568 SUMNET-AS DISO-UNRRA 198.97.80.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.88.0/24 AS89 NUSC-CSTLNET-AS Naval Underwater Systems Center 198.97.192.0/20 AS568 SUMNET-AS DISO-UNRRA 198.97.240.0/20 AS568 SUMNET-AS DISO-UNRRA 198.98.8.0/21 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 198.101.4.0/22 AS568 SUMNET-AS DISO-UNRRA 198.136.32.0/20 AS19329 MCNET Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY-NET CityNet, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM GT Group Telecom Services Corp. 198.161.165.0/24 AS852 ASN852 Telus Advanced Communications 198.163.155.0/24 AS684 MBNET-AS Manitoba Regional Network 198.167.0.0/16 AS7456 INTERHOP Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 198.168.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS Skotos Tech, Inc 199.10.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.43.184.0/21 AS577 BACOM Bell Advanced Communications Inc. 199.60.0.0/20 AS271 BCNET-AS University of British Columbia 199.79.32.0/20 AS3701 NERONET Oregon Joint Graduate Schools of Engineering 199.84.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.114.0.0/18 AS568 SUMNET-AS DISO-UNRRA 199.114.0.0/21 AS568 SUMNET-AS DISO-UNRRA 199.114.128.0/18 AS568 SUMNET-AS DISO-UNRRA 199.120.32.0/19 AS16582 NEXTLEVELINTERNET NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 SUMNET-AS DISO-UNRRA 199.123.16.0/20 AS568 SUMNET-AS DISO-UNRRA 199.123.80.0/21 AS568 SUMNET-AS DISO-UNRRA 199.167.25.0/24 AS701 ALTERNET-AS UUNET Technologies, Inc. 199.189.32.0/19 AS7332 IQUEST-AS IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS UUNET Technologies, Inc. 200.10.14.0/24 AS16990 CL-TRSA-LACNIC TRANSBANK S.A. 200.14.32.0/22 AS11751 BR-ICEP-LACNIC Instituto Cyber de Ensino e Pesquisa 200.14.34.0/23 AS11751 BR-ICEP-LACNIC Instituto Cyber de Ensino e Pesquisa 200.26.128.0/24 AS10834 AR-ATSA8-LACNIC Advance Telecomunicaciones S.A 202.0.32.0/19 AS9345 PARADISE-AS Paradise Net 202.0.52.0/22 AS9345 PARADISE-AS Paradise Net 202.0.180.0/24 AS4058 APNIC-4058 Asia Pacific Network Information Centre 202.3.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.145.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.146.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.152.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.155.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.156.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.157.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.3.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.4.252.0/22 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.4.255.0/24 AS4799 UNSPECIFIED Ji Tong Communications Co., Ltd. 202.6.96.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.97.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.6.99.0/24 AS4761 INDOSAT1-AP INDOSATNET-ASN 202.27.0.0/16 AS4648 NZIX-2 Netgate 202.36.0.0/16 AS4648 NZIX-2 Netgate 202.41.160.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 202.41.161.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 202.41.163.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 202.41.164.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 202.41.165.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 202.44.112.0/20 AS17458 CWNETDG-IO-AP Cable and Wireless 202.44.192.0/18 AS4618 INET-TH-AS Internet Thailand Company Limited 202.44.192.0/19 AS4618 INET-TH-AS Internet Thailand Company Limited 202.44.192.0/20 AS4618 INET-TH-AS Internet Thailand Company Limited 202.56.160.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.160.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.161.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.162.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.163.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.164.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.165.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.166.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.167.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.168.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.169.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.170.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.171.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.172.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.173.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.174.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.56.175.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.57.240.0/20 AS703 ALTERNET-AS UUNET Technologies, Inc. 202.79.0.0/20 AS4637 REACH Reach Network Border AS 202.89.200.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.93.64.0/19 AS9425 I-NEXT-AS-AP Inter.net Philippines border AS 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.130.224.0/20 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.240.0/21 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.130.248.0/21 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.130.248.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.130.252.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 202.136.254.0/23 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.136.254.0/24 AS4808 CNCGROUP-BJ CNCGROUP-BJ 202.139.192.0/20 AS2524 RIM (Unknown) 202.140.230.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.232.0/23 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.234.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.140.235.0/24 AS9466 UUNET-JP-AP UUNET Japan Limited 202.142.130.0/23 AS17820 DIL-AP DIRECT INTERNET LTD. 202.142.132.0/22 AS17820 DIL-AP DIRECT INTERNET LTD. 202.143.48.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.143.56.0/21 AS4795 INDOSAT2-ID-AP INDOSATNET-ASN 202.146.4.0/24 AS18365 UBN-AP UBNet ASN 202.146.5.0/24 AS18365 UBN-AP UBNet ASN 202.159.128.0/17 AS4622 UNSPECIFIED IndoInternet PT. 202.161.0.0/19 AS10097 FLOWCOM flow communications level 2 541 kent st sydney nsw 2000 202.161.0.0/21 AS4634 -No Whois Entry- 202.161.8.0/21 AS4634 -No Whois Entry- 202.164.192.0/19 AS7599 IPXC-AS-AP IP Exchange 202.165.0.0/19 AS9443 INTERNETPRIMUS-AS-AP Primus Telecommunications 202.173.32.0/19 AS9671 APNIC-AS-3-BLOCK Asia Pacific Network Information Centre 203.10.16.0/24 AS9266 VIPER-AU-AP Vipernet 203.58.32.0/19 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.76.128.0/24 AS9729 IS-AP iAdvantage Limited 203.76.224.0/24 AS9549 COMDEK-ISP-AS-AP Comdek ISP 203.78.125.0/24 AS17653 PCM-HK-AP Pacific Century Matrix 203.86.2.0/23 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.90.192.0/20 AS9658 ETPI-IDS-AS-AP Eastern Telecoms Phils., Inc. 203.128.0.0/19 AS17911 BRAINPK-AS-AP Brain NET Pakistan 203.128.2.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.128.3.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.129.126.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 203.129.127.0/24 AS7473 SINGTEL-AS-AP Singapore Telecom 203.135.99.0/24 AS2687 IBM-MMD-AS IBM 203.135.224.0/19 AS4058 APNIC-4058 Asia Pacific Network Information Centre 203.161.39.0/24 AS4768 CLIX-NZ CLEAR Internet Exchange 203.175.128.0/19 AS10207 SSA-AP Shin Satellite Public Company Limited 204.19.224.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 204.29.189.0/24 AS11755 WAYMARKCOMM Waymark Internet Services, Inc. 204.52.232.0/24 AS7177 DFWNET DFW Internet Services, Inc. 204.89.225.0/24 AS2495 KANREN Kansas Research and Education Network 204.154.240.0/21 AS11572 MEDIACOM Mediacom,llc / RidgeNet 204.194.110.0/23 AS10588 ICSNET Intelligent Computer Solutions, Inc 205.150.0.0/15 AS701 ALTERNET-AS UUNET Technologies, Inc. 205.173.248.0/21 AS2548 ALGX-ATCW-AS Allegiance Telecom Companies Worldwide 205.233.139.0/24 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.41.32.0/19 AS14824 NEWSOUTH NewSouth Communications Corp. 206.81.187.0/24 AS19194 JOVITA Sentris Network LLC 206.82.64.0/18 AS7029 ALLTELNET Alltel Information Services, Inc. 206.82.104.0/23 AS7029 ALLTELNET Alltel Information Services, Inc. 206.82.106.0/23 AS7029 ALLTELNET Alltel Information Services, Inc. 206.108.34.0/24 AS852 ASN852 Telus Advanced Communications 206.108.35.0/24 AS852 ASN852 Telus Advanced Communications 206.126.0.0/19 AS5750 FLEXNET-HAWAII FlexNet Inc. 206.191.64.0/18 AS15290 ATTCA-15290 AT&T Canada Telecom Services Company 206.251.69.0/24 AS10494 AAI Accurate Automation, Inc. 207.47.39.0/24 AS816 UUNET-AS4 UUNET Technologies, Inc. 207.47.155.0/24 AS577 BACOM Bell Advanced Communications Inc. 207.92.0.0/14 AS2551 ICG ICG NetAhead, Inc. 207.162.192.0/19 AS4589 EASYNET Easynet Group Plc 207.231.96.0/19 AS11194 NUNETPA NuNet Inc 208.65.232.0/23 AS701 ALTERNET-AS UUNET Technologies, Inc. 208.66.66.0/24 AS14985 VEROXITY Veroxity Technology Partners, Inc. 208.81.187.0/24 AS19194 JOVITA Sentris Network LLC 208.101.8.0/24 AS3561 CWUSA Cable & Wireless USA 208.104.103.0/24 AS1239 SPRINTLINK Sprint 209.104.198.0/24 AS6137 SISNA SISNA, Inc. 209.104.199.0/24 AS6137 SISNA SISNA, Inc. 209.104.218.0/24 AS6137 SISNA SISNA, Inc. 209.104.219.0/24 AS6137 SISNA SISNA, Inc. 209.104.252.0/22 AS12030 PACIFIC-ONLINE-PON Pacific Online Services 209.108.0.0/14 AS2551 ICG ICG NetAhead, Inc. 209.151.128.0/19 AS816 UUNET-AS4 UUNET Technologies, Inc. 209.160.60.0/23 AS13415 LUMIX Lumix Communications, Inc. 209.160.70.0/23 AS13415 LUMIX Lumix Communications, Inc. 209.160.73.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.209.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.160.210.0/24 AS13415 LUMIX Lumix Communications, Inc. 209.169.219.0/24 AS189 GENUITY-AS189 Genuity 209.169.223.0/24 AS189 GENUITY-AS189 Genuity 209.172.0.0/18 AS7770 TRITON Triton Technologies, Inc. 209.213.32.0/19 AS10629 INTERPAC Inter-Pacific Network Services 209.213.50.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.51.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.55.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.213.56.0/24 AS10629 INTERPAC Inter-Pacific Network Services 209.222.137.0/24 AS10494 AAI Accurate Automation, Inc. 209.240.96.0/19 AS10815 KCNET KCnet, Inc. 209.251.0.0/19 AS11036 SISCOM SISCOM, Inc 209.251.64.0/19 AS10266 NETWAY-AS MDC, Inc. 211.27.156.0/24 AS9768 PUBNET1-AS KT 216.18.224.0/21 AS11458 IMBRIS IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS IMBRIS, INC. 216.47.32.0/19 AS11304 SPLUS Solutions Plus Inc. 216.81.32.0/20 AS3356 LEVEL3 Level 3 Communications, LLC 216.81.64.0/20 AS3356 LEVEL3 Level 3 Communications, LLC 216.96.128.0/18 AS7018 ATT-INTERNET4 AT&T WorldNet Services 216.96.128.0/21 AS3356 LEVEL3 Level 3 Communications, LLC 216.96.184.0/22 AS3356 LEVEL3 Level 3 Communications, LLC 216.115.178.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.179.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.182.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.183.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.184.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/23 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.186.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.189.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.190.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.115.191.0/24 AS11676 ACSBPS Affiliated Computing Services Business ProcessSolutions 216.153.0.0/17 AS6203 ISDN-NET ISDN-Net Inc. 216.153.96.0/20 AS1239 SPRINTLINK Sprint 216.211.177.0/24 AS14473 KNET KNet, Inc. 216.226.108.0/22 AS3602 SPRINT-CA-AS Sprint Canada Inc. 216.252.64.0/20 AS3356 LEVEL3 Level 3 Communications, LLC 216.252.96.0/20 AS3356 LEVEL3 Level 3 Communications, LLC 217.117.117.0/24 AS2007 INFONET3 INFONET 219.228.0.0/16 AS4538 ERX-CERNET-BKB China Education and Research Network Center 219.229.0.0/16 AS4538 ERX-CERNET-BKB China Education and Research Network Center Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: Market-based address allocation
by Michael.Dillon＠radianz.com 02 May '03

02 May '03

>If someone can figure out how to get the ISPs of the world to >participate in a routing prefix market, then it might be worth >revisiting this idea. Note that there is nothing stopping establishing >a routing prefix market now, so it could be done prior to changing >address allocation policies. Selling IP addresses clearly is a bad thing. But selling the right to use a block of n IP addresses could be workable. All the right-to-use certificates would need to be registered with an RIR to validate them in the same way that land ownership is registered in a land registry office. When you connect to the Internet, you buy a right-to-use cert for whatever you need/want. Present this to your ISP and they assign you a block of the size that you bought. If they need more addresses, they simply present a list of customer certs to the RIR and their allocation is expanded. If a 3 month buffer isn't enough, then the ISP pays for a 6 month buffer. The advantage to all of this is that it no longer assumes that everyone is following more-or-less the same business model. In the early days of the net, most people *WERE* following roughly similar business models. But today there is a lot more variety and that variety appears to be increasing. The whole IP address allocation system is creaky and old-fashioned and out of touch with the times. It needs to change and become simpler, more flexible and easier for outsiders to understand. But, on the other hand, with IPv6 looming which changes the playing field perhaps there is room for some fresh approaches. I think that a workable idea would be for a consortium of tier one providers to set a price on global routing table slots. The price would be sufficient to fund an organization to collect route info (like routeviews) and to periodically adjust the prices (yearly) with money left over to fund some research (like Bellcore?). Members of the consortium would pay for the number of routes they announce to other consortium members. The members would also collect money for routes from any peers who are not in the consortium. When an organization connects to the Internet, they must decide between free fate sharing with their ISP or paying for a route in the global routing table. This consortium really should be under the auspices of IANA, ARIN and the other RIRs but it may be necessary to start it independently first. There really should be no antitrust issues here as long as all consortium activity is done publicly and the prices are set in such a way that the global routing table can continue to grow but does not grow faster that technical capabilities and deployment. If this could work today then it can continue to work with IPv6 and any conceivable future networking protocol. --Michael Dillon

2 1

Re: Re[2]: The in-your-face hijacking example, was: Re: Who is announcing bogons?
by Dan Hollis 01 May '03

01 May '03

On Wed, 30 Apr 2003 emil(a)atrivo.com wrote: > Might I mention that Spews, SpamHaus or anyone that has made these > claims has not even attempted to give me a call. Maybe because they expect your email to actually work, and dont care to spend money calling you long distance? http://groups.google.com/groups?selm=jql2avgk84hporq5cj8vdkcvsghj8ae9so%404… Your role address bounces (yes, i did verify emil(a)atrivo.com bounces), and apparently you have a portscanner on 170.208.15.82. Looking through my logs for April I have received spams from 170.208.17.65, 170.208.17.67, 170.208.17.70, 170.208.17.92, 170.208.17.112, 170.208.17.113, 170.208.17.114, 170.208.17.115 You have got porno spammers in these netblocks scanning for open relays and relay raping innocent third parties. -Dan -- [-] Omae no subete no kichi wa ore no mono da. [-]

5 6