December 2004 - Test - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 17 Dec '04

17 Dec '04

This report has been generated at Fri Dec 17 21:44:30 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 10-12-04 149527 103159 11-12-04 148711 103159 12-12-04 148711 103159 13-12-04 148711 102276 14-12-04 148842 102348 15-12-04 148877 102440 16-12-04 148981 102427 17-12-04 149025 102515 AS Summary 18554 Number of ASes in routing system 7609 Number of ASes announcing only one prefix 1413 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 90494720 Largest address span announced by an AS (/32s) AS721 : DNIC DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 17Dec04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 149055 102542 46513 31.2% All ASes AS18566 755 7 748 99.1% CVAD Covad Communications AS4134 820 197 623 76.0% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 813 227 586 72.1% TWTC Time Warner Telecom AS27364 441 33 408 92.5% ARMC Armstrong Cable Services AS721 1057 652 405 38.3% DNIC DoD Network Information Center AS7018 1413 1011 402 28.5% ATTW AT&T WorldNet Services AS22773 416 24 392 94.2% CXA Cox Communications Inc. AS7843 483 95 388 80.3% ADELPH-13 Adelphia Corp. AS6197 819 455 364 44.4% BNS-14 BellSouth Network Solutions, Inc AS22909 422 97 325 77.0% CMCS Comcast Cable Communications, Inc. AS17676 388 64 324 83.5% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS6478 466 144 322 69.1% ATTW AT&T WorldNet Services AS1239 934 624 310 33.2% SPRN Sprint AS9929 344 40 304 88.4% CNCNET-CN China Netcom Corp. AS4355 384 99 285 74.2% ERSD EARTHLINK, INC AS21502 272 3 269 98.9% ASN-NUMERICABLE NUMERICABLE is a cabled network in France, AS4766 535 271 264 49.3% KIXS-AS-KR Korea Telecom AS14654 262 6 256 97.7% WAYPOR-3 Wayport AS2386 861 616 245 28.5% ADCS-1 AT&T Data Communications Services AS9443 366 121 245 66.9% INTERNETPRIMUS-AS-AP Primus Telecommunications AS6140 371 131 240 64.7% IMPSA ImpSat AS25844 244 17 227 93.0% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS6198 443 222 221 49.9% BNS-14 BellSouth Network Solutions, Inc AS22291 290 81 209 72.1% CC04 Charter Communications AS3602 319 112 207 64.9% SPCA Sprint Canada Inc. AS4814 213 6 207 97.2% CHINA169-BBN CNCGROUP IP network¡ªChina169 Beijing Broadband Network AS9583 577 374 203 35.2% SIFY-AS-IN Sify Limited AS15270 238 41 197 82.8% PDP-14 PaeTec.net -a division of PaeTecCommunications, Inc. AS5668 423 237 186 44.0% CIH-12 CenturyTel Internet Holdings, Inc. AS6517 305 119 186 61.0% YIPS Yipes Communications, Inc. Total 15674 6126 9548 60.9% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.38.0/24 AS25994 NPGCAB NPG Cable, INC 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 64.17.32.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.17.33.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.17.37.0/24 AS5024 BRIDGE-75 BridgeNet, LC 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.57.160.0/19 AS3561 SAVVI-3 Savvis 64.92.128.0/19 AS3561 SAVVI-3 Savvis 64.127.0.0/18 AS7018 ATTW AT&T WorldNet Services 64.209.192.0/18 AS3561 SAVVI-3 Savvis 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 132.0.0.0/10 AS721 DNIC DoD Network Information Center 137.0.0.0/13 AS721 DNIC DoD Network Information Center 138.136.0.0/13 AS721 DNIC DoD Network Information Center 158.0.0.0/13 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 ELISA-AS Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.70.164.0/24 AS25689 NRCC-2 National Research Council of Canada 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.153.144.0/21 AS721 DNIC DoD Network Information Center 192.172.0.0/19 AS721 DNIC DoD Network Information Center 192.188.208.0/20 AS721 DNIC DoD Network Information Center 192.200.100.0/24 AS7018 ATTW AT&T WorldNet Services 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS721 DNIC DoD Network Information Center 198.97.80.0/20 AS721 DNIC DoD Network Information Center 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.240.0/20 AS721 DNIC DoD Network Information Center 198.97.247.0/24 AS3475 DEPART-52 Department of the Navy 198.101.4.0/22 AS721 DNIC DoD Network Information Center 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.206.52.0/22 AS701 UU UUNET Technologies, Inc. 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS721 DNIC DoD Network Information Center 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.96.44.0/23 AS19092 360NE-1 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NE-1 360Networks (USA) Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS721 DNIC DoD Network Information Center 199.114.128.0/18 AS721 DNIC DoD Network Information Center 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.134.0/24 AS3541 DISAUN DISA/UNRRA 199.114.136.0/24 AS27044 DNIC DoD Network Information Center 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS27033 DNIC DoD Network Information Center 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS27034 DNIC DoD Network Information Center 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DNIC DoD Network Information Center 199.123.0.0/18 AS721 DNIC DoD Network Information Center 199.123.16.0/20 AS721 DNIC DoD Network Information Center 199.123.80.0/21 AS721 DNIC DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.197.8.0/22 AS21814 PARSON-18 Parsons Corp. 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 200.26.224.0/20 AS26473 CURANET N.V. 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 TELEONE-HK TeleTeleOne (HK) Limited 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.170.14.0/23 AS6648 ASN-SKYINTERNET Autonomous System Number peering of Sky Internet - BAYANTEL Inc. - Philppines 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.10.120.0/22 AS14123 SFS-60 Sungard Futures Systems 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 206.29.168.0/21 AS10248 IPI Internet Partners, Inc. 206.128.104.0/21 AS11709 VIIN VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.253.190.0/23 AS8123 POLYBA Polybase 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 208.138.48.0/20 AS7955 SOURCE-48 SourceNet Corporation 209.17.80.0/24 AS32272 CLEAR-17 ClearSkye Communications Inc 209.27.51.0/24 AS14132 INTERN-582 Internet Gateway Inc. 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.48.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.49.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 210.4.160.0/24 AS27047 DNIC DoD Network Information Center 216.37.110.0/23 AS4264 CERFN California Education and Research Federation Network 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/21 AS10758 INWAVE INWave Internet, Inc 216.145.184.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.185.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.186.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.187.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.188.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.189.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.190.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.191.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org swinog(a)swinog.ch

1 0

RE: identifying application type of network traffic
by Cheung, Rick 16 Dec '04

16 Dec '04

I believe NBAR stats are accessible via SNMP, so you can use MRTG to graph application utilization. http://vermeer.org/display_doc.php?doc_id=6 ___________________________________________________________________ Thanks, Rick Cheung -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Adam Atkinson Sent: Thursday, December 16, 2004 11:17 AM To: NANGO Subject: RE: identifying application type of network traffic > Currently, I use (protocol, port_number) as indicator > of application. Referring to rfc on wellknown protocol > and port allocation, I can only identity about 50% of > traffic type. > > Is there a complete (protocol, port_number) list ? or > is there a better way to identify application type > based on netflow data? Cisco's "Network Based Application Recognition" can recognise quite a few things, particularly a fair few p2p applications. It looks at the actual contents of packets, not just the port numbers. This message, including any attachments, contains confidential information intended for a specific individual and purpose and is protected by law. If you are not the intended recipient, please contact sender immediately by reply e-mail and destroy all copies. You are hereby notified that any disclosure, copying, or distribution of this message, or the taking of any action based on it, is strictly prohibited. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The sender accepts no liability for any damage caused by any virus transmitted by this email. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message, which arise as a result of e-mail transmission.

1 0

RE: Interesting DNS problem.
by Hannigan, Martin 16 Dec '04

16 Dec '04

That's called "hosting". There only thing "wrong" with it is they aren't split across two - which is generally recommended operationally. Did you customer say why they thought that was a problem i.e. "can't reach" "won't resolve" etc.? ARIN says you own that IP space so I'm not sure what you are trying to tell us... OrgName: Internet Unlimited OrgID: ITUN Address: 602 S. Raguet City: Lufkin StateProv: TX PostalCode: 75904 Country: US NetRange: 63.151.0.0 - 63.151.7.255 CIDR: 63.151.0.0/21 NetName: QWEST-63-151-0-0 NetHandle: NET-63-151-0-0-1 Parent: NET-63-144-0-0-1 NetType: Reallocated Comment: RegDate: 2000-08-04 Updated: 2000-08-04 TechHandle: BM775-ARIN TechName: Martin, Bob TechPhone: +1-936-829-2166 TechEmail: dns(a)lin-tech.net -- Martin Hannigan (c) 617-388-2663 VeriSign, Inc. (w) 703-948-7018 Network Engineer IV Operations & Infrastructure hannigan(a)verisign.com > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of > Bob Martin > Sent: Thursday, December 16, 2004 3:31 PM > To: NANOG list > Subject: Interesting DNS problem. > > > > I've just been hired to fix problems at a small ISP. One of their > customers has listed several nameservers with a single IP. > > I didn't know this was possible. I thought there was a 1 to 1 > relationship with nameserver names/addresses. I'm trying to > figure out > if this is or will be a problem. > > Any input would be greatly appreciated. > Bob Martin > > Connected to whois.internic.net. > Escape character is '^]'. > nameserver 63.151.3.248 > > Whois Server Version 1.3 > > Domain names in the .com and .net domains can now be registered > with many different competing registrars. Go to > http://www.internic.net > for detailed information. > > NS3.ELPASOTRUCK.NET > NS2.ANGELOFREIGHTLINER.NET > NS2.ELPASOTRUCK.NET > NS2.WACOFREIGHTLINER.NET > NS2.TEMPLEFREIGHTLINER.NET > NS2.LONESTARFL.COM > NS2.FARMINGTONFREIGHTLINER.NET > NS3.FARMINGTONFREIGHTLINER.NET > NS2.ELPASOSELECT.NET > NS2.BRYANFREIGHTLINER.NET > NS2.WFFREIGHTLINER.NET > NS3.ABILENEFREIGHTLINER.NET > NS3.ABQFREIGHTLINER.NET > DOWNTOWN.INU.NET >

1 0

Thank you for the response!! Sincerely requesting help again for my Doctoral study
by Ananth 16 Dec '04

16 Dec '04

Dear Respected Participants of Nanog Greetings! I introduce myself as Ananth Chiravuri, a doctoral student at the University of Wisconsin Milwaukee. As part of my doctoral dissertation, I am working on how best to come to a consensus when capturing knowledge, and am studying the effectiveness of two techniques. I am writing to request help because in order for my research to contribute meaningfully, I need the participation of real world experts and not students. In this regard, I want to acknowledge and thank the experts, who responded very graciously, for agreeing to participate in my experiment. However, I still have a long way to go because the overall number of experts needed for my experiment is 100 and am resending an email with my request. The tasks that I have chosen relate to networking and therefore, I am looking for experts or professionals in network management or network design. (An expert would be anyone who has had more than 12-18 months of experience). The experiment will be conducted on-line using virtual teams and the time required may be at most 3-4 hours asynchronously (you can participate at your convenience). I am willing to customize the report to meet the requirements of your organization and anonymity of participants and the firms will be ensured. The results of this report will indicate an effective technique of capturing knowledge using virtual teams of experts. It may help your firm to use the technique to capture knowledge and come to a consensus at a much faster time, thus saving precious resources and time. Please kindly email me at ananthc2(a)uwm.edu or at anantc99(a)yahoo.com if you are interested to participate. I am looking for a total of 50 members (10 teams of five each) for each technique (a total of 100 participants) and therefore, I sincerely request and would highly appreciate if each one of you (and your firms) could help me and give me some of your precious time. Most importantly, your participation will ensure support for academic research in a big manner. Thanking you all in advance. I apologize for any inconvenience, if caused. Happy Holidays to all and hope that you make mine happy too! Regards ananth chiravuri Univ of Wisconsin Milwaukee Milwaukee, WI ananthc2@uwm.edu/anantc99@yahoo.com __________________________________ Do you Yahoo!? Yahoo! Mail - Helps protect you from nasty viruses. http://promotions.yahoo.com/new_mail

1 0

Interesting DNS problem.
by Bob Martin 16 Dec '04

16 Dec '04

I've just been hired to fix problems at a small ISP. One of their customers has listed several nameservers with a single IP. I didn't know this was possible. I thought there was a 1 to 1 relationship with nameserver names/addresses. I'm trying to figure out if this is or will be a problem. Any input would be greatly appreciated. Bob Martin Connected to whois.internic.net. Escape character is '^]'. nameserver 63.151.3.248 Whois Server Version 1.3 Domain names in the .com and .net domains can now be registered with many different competing registrars. Go to http://www.internic.net for detailed information. NS3.ELPASOTRUCK.NET NS2.ANGELOFREIGHTLINER.NET NS2.ELPASOTRUCK.NET NS2.WACOFREIGHTLINER.NET NS2.TEMPLEFREIGHTLINER.NET NS2.LONESTARFL.COM NS2.FARMINGTONFREIGHTLINER.NET NS3.FARMINGTONFREIGHTLINER.NET NS2.ELPASOSELECT.NET NS2.BRYANFREIGHTLINER.NET NS2.WFFREIGHTLINER.NET NS3.ABILENEFREIGHTLINER.NET NS3.ABQFREIGHTLINER.NET DOWNTOWN.INU.NET

4 3

RE: identifying application type of network traffic
by Adam Atkinson 16 Dec '04

16 Dec '04

> Currently, I use (protocol, port_number) as indicator > of application. Referring to rfc on wellknown protocol > and port allocation, I can only identity about 50% of > traffic type. > > Is there a complete (protocol, port_number) list ? or > is there a better way to identify application type > based on netflow data? Cisco's "Network Based Application Recognition" can recognise quite a few things, particularly a fair few p2p applications. It looks at the actual contents of packets, not just the port numbers.

1 0

RE: identifying application type of network traffic
by Antonio Sanchez-Monge 16 Dec '04

16 Dec '04

Hi Joe, The official port list is: www.iana.org/assignments/port-numbers And the unofficial (for special applications) has many versions of course, one is: www.practicallynetworked.com/sharing/app_port_list.htm Cheers, Ato. -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Joe Shen Sent: jueves, 16 de diciembre de 2004 10:42 To: NANGO Subject: RE: identifying application type of network traffic Thanks for all your reply. My situation is not to apply QoS policy to those application but to get statistics of applications. According to netflow records, the traffic across our egress interface has port number range from 11 to 65534 , there is record for port 0! So, what are those applications ? regards Joe > Hi, > > if you run Cisco routers have a look at NBAR, it > might do what you want. > > http://www.cisco.com/warp/public/cc/so/neso/ienesv/cxne/nbar_ov.htm > http://www.cisco.com/warp/public/105/custompdlms.html > > Regards > Olav Langeland - Active 24 - > olav.langeland(a)active24.com > __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

1 0

RE: identifying application type of network traffic
by Joe Shen 16 Dec '04

16 Dec '04

Thanks for all your reply. My situation is not to apply QoS policy to those application but to get statistics of applications. According to netflow records, the traffic across our egress interface has port number range from 11 to 65534 , there is record for port 0! So, what are those applications ? regards Joe > Hi, > > if you run Cisco routers have a look at NBAR, it > might do what you want. > > http://www.cisco.com/warp/public/cc/so/neso/ienesv/cxne/nbar_ov.htm > http://www.cisco.com/warp/public/105/custompdlms.html > > Regards > Olav Langeland - Active 24 - > olav.langeland(a)active24.com > __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

2 1

Community list REACH
by James Ashton 15 Dec '04

15 Dec '04

Hey out there. I am in need of a list of community strings that REACH.COM accepts. Does anyone have a list of these? For the last several months I have been trying to get traffic coming from reach to traverse a different path to my AS. This is proving to be a project. Right now they are sending me traffic over Cogent and Cogent doesn't have any decent communities for this type of thing. My Australian customers are getting 400ms traceroutes coming through Telstra > Reach > Cogent to us. This is starting to get to be a VERY annoying problem. James Ashton Vortech, Inc 321-231-8057 james(a)vortechhosting.com AS32065

3 2

identifying application type of network traffic
by Joe Shen 15 Dec '04

15 Dec '04

Hi, I'm trying to identify applications which generate those traffic on our border routers. I use sampled netflow as data source and some flow-tools as analizer. Currently, I use (protocol, port_number) as indicator of application. Referring to rfc on wellknown protocol and port allocation, I can only identity about 50% of traffic type. Is there a complete (protocol, port_number) list ? or is there a better way to identify application type based on netflow data? regards Joe __________________________________________________ Do You Yahoo!? Log on to Messenger with your mobile phone! http://sg.messenger.yahoo.com

2 1