October 2005 - Test - lists.nanog.org

Microwave link security.
by MARLON BORBA 22 Oct '05

22 Oct '05

Fellow NANOGers, Please, do you know any documents and/or links about securing data microwave links? I am writing a project for MAN interconnection of several buildings with MW radios and concerned about possible security threats. TIA, Marlon Borba, CISSP.

3 2

BGP Analysis BOF at NANOG-35
by Mohit Lad 22 Oct '05

22 Oct '05

Dear All, This NANOG meeting in LA will feature a BGP Analysis Tools BOF on Monday afternoon. The purpose of this BOF is to showcase some existing free BGP analysis tools. (http://www.nanog.org/mtg-0510/ lad.html) Link-Rank is one of the tools to be presented in this BOF. Link- Rank is a tool used to visualize BGP routing dynamics and a new version is now freely available from http://linkrank.cs.ucla.edu/ At last Nanog, we got some requests from operators who were interested in visualizing their own dynamics instead of Routeviews and RIPE. Keeping this in mind, we have setup a temporary web service where you can upload a small period of your ISP's BGP data to our web server. This data will then be processed and made visualization ready by NANOG time, so during the BGP analysis BOF, you can contact us and be able to see your ISPs routing dynamics. For more information goto: http://linkrank.cs.ucla.edu/nanog35/ We highly encourage you to upload a MRT format Rib file and a small period (a few hours) of MRT format BGP update logs to see if you can find LinkRank useful at your ISP. Please email me if you have any questions. Thanks Mohit Lad UCLA.

1 0

RE: IANA Blackhole Servers Ill?
by John van Oppen 21 Oct '05

21 Oct '05

It is probably important to know that those servers are anycasted via the AS112 project (www.as112.net) Perhaps the AS112 operator you are seeing is having issues. You could try to identify which one and let them know. Thanks, John :) -----Ursprüngliche Nachricht----- Von: Peter Dambier [mailto:peter@peter-dambier.de] Gesendet: Friday, October 21, 2005 2:20 PM An: crist.clark(a)globalstar.com Cc: nanog Betreff: Re: IANA Blackhole Servers Ill? To me they do answer: ; <<>> DiG 9.1.3 <<>> -t any 10.in-addr.arpa. @blackhole-1.iana.org. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20469 ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;10.in-addr.arpa. IN ANY ;; ANSWER SECTION: 10.in-addr.arpa. 604800 IN SOA prisoner.iana.org. hostmaster.root-servers.org.\ 2002040800 1800 900 604800 604800 10.in-addr.arpa. 604800 IN NS blackhole-1.iana.org. 10.in-addr.arpa. 604800 IN NS blackhole-2.iana.org. ;; Query time: 113 msec ;; SERVER: 192.175.48.6#53(blackhole-1.iana.org.) ;; WHEN: Fri Oct 21 23:15:39 2005 ;; MSG SIZE rcvd: 162 ; <<>> DiG 9.1.3 <<>> -t any 10.in-addr.arpa. @blackhole-2.iana.org. ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 43116 ;; flags: qr aa rd; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;10.in-addr.arpa. IN ANY ;; ANSWER SECTION: 10.in-addr.arpa. 604800 IN SOA prisoner.iana.org. hostmaster.root-servers.org.\ 2002040800 1800 900 604800 604800 10.in-addr.arpa. 604800 IN NS blackhole-1.iana.org. 10.in-addr.arpa. 604800 IN NS blackhole-2.iana.org. ;; Query time: 112 msec ;; SERVER: 192.175.48.42#53(blackhole-2.iana.org.) ;; WHEN: Fri Oct 21 23:15:49 2005 ;; MSG SIZE rcvd: 162 Regards, Peter and Karin Dambier Crist Clark wrote: > > We got some very weird compaints about applications "hanging." Tracked > it down to reverse lookups timing out. Reverse lookups to RFC1918 space. > Looks like the IANA blackhole servers for RFC1918 are not well? > > 1 0.00000 207.88.152.10 -> 192.175.48.6 DNS C > 52.143.18.172.in-addr.arpa. Internet PTR ? > 2 0.01375 192.175.48.6 -> 207.88.152.10 ICMP Destination unreachable > (UDP port 53 unreachable) > 3 0.68455 207.88.152.10 -> 192.175.48.6 DNS C > 111.143.18.172.in-addr.arpa. Internet PTR ? > 4 0.00529 192.175.48.6 -> 207.88.152.10 ICMP Destination unreachable > (UDP port 53 unreachable) > 5 3.00417 207.88.152.10 -> 192.175.48.42 DNS C > 111.143.18.172.in-addr.arpa. Internet PTR ? > 6 0.00548 192.175.48.42 -> 207.88.152.10 ICMP Destination > unreachable (UDP port 53 unreachable) > 7 0.68462 207.88.152.10 -> 192.175.48.42 DNS C > 69.160.18.172.in-addr.arpa. Internet PTR ? > 8 0.00623 192.175.48.42 -> 207.88.152.10 ICMP Destination > unreachable (UDP port 53 unreachable) > 9 0.60348 207.88.152.10 -> 192.175.48.6 DNS C > 52.143.18.172.in-addr.arpa. Internet PTR ? > 10 0.00523 192.175.48.6 -> 207.88.152.10 ICMP Destination unreachable > (UDP port 53 unreachable) > > Looks like the hosts are up but not listening on 53/udp? Anyone else > seeing this? Heard about it? > > (Of course, the fix is to claim authority for the RFC1918 space you are > using in your own DNS servers.) -- Peter and Karin Dambier Public-Root Graeffstrasse 14 D-64646 Heppenheim +49-6252-671788 (Telekom) +49-179-108-3978 (O2 Genion) +49-6252-750308 (VoIP: sipgate.de) mail: peter(a)peter-dambier.de mail: peter(a)echnaton.serveftp.com http://iason.site.voila.fr http://www.kokoom.com/iason

3 3

IANA Blackhole Servers Ill?
by Crist Clark 21 Oct '05

21 Oct '05

We got some very weird compaints about applications "hanging." Tracked it down to reverse lookups timing out. Reverse lookups to RFC1918 space. Looks like the IANA blackhole servers for RFC1918 are not well? 1 0.00000 207.88.152.10 -> 192.175.48.6 DNS C 52.143.18.172.in-addr.arpa. Internet PTR ? 2 0.01375 192.175.48.6 -> 207.88.152.10 ICMP Destination unreachable (UDP port 53 unreachable) 3 0.68455 207.88.152.10 -> 192.175.48.6 DNS C 111.143.18.172.in-addr.arpa. Internet PTR ? 4 0.00529 192.175.48.6 -> 207.88.152.10 ICMP Destination unreachable (UDP port 53 unreachable) 5 3.00417 207.88.152.10 -> 192.175.48.42 DNS C 111.143.18.172.in-addr.arpa. Internet PTR ? 6 0.00548 192.175.48.42 -> 207.88.152.10 ICMP Destination unreachable (UDP port 53 unreachable) 7 0.68462 207.88.152.10 -> 192.175.48.42 DNS C 69.160.18.172.in-addr.arpa. Internet PTR ? 8 0.00623 192.175.48.42 -> 207.88.152.10 ICMP Destination unreachable (UDP port 53 unreachable) 9 0.60348 207.88.152.10 -> 192.175.48.6 DNS C 52.143.18.172.in-addr.arpa. Internet PTR ? 10 0.00523 192.175.48.6 -> 207.88.152.10 ICMP Destination unreachable (UDP port 53 unreachable) Looks like the hosts are up but not listening on 53/udp? Anyone else seeing this? Heard about it? (Of course, the fix is to claim authority for the RFC1918 space you are using in your own DNS servers.) -- Crist J. Clark crist.clark(a)globalstar.com Globalstar Communications (408) 933-4387

3 2

Level3 problems
by Emilian Ursu 21 Oct '05

21 Oct '05

I see its completely down and several others are starting to have problems. Anyone knows whats up ? Thanks

6 6

[Fwd: Re: FCC Outage Reports ..(.was Verizon outage in Southern California?)]
by Vicky Rode 21 Oct '05

21 Oct '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just taking a quick poll to see if nanog community would consider this a worthwhile effort to pursue? regards, /virendra - -------- Original Message -------- Subject: Re: FCC Outage Reports ..(.was Verizon outage in Southern California?) Date: Fri, 21 Oct 2005 21:26:51 +0300 (EEST) From: Juuso Lehtinen <jalehtin(a)cc.hut.fi> To: nanog(a)merit.edu References: <153C7BD7A0BE5E4C82C46650FEA94130050370BF(a)MKA46.pcc.int> <435873F1.7050702(a)socal.rr.com> <43592842.2050606(a)nrg4u.com> On Fri, 21 Oct 2005, Andre Oppermann wrote: > Here we see again that the secrecy ("to prevent terrorism") of this > information costs more than having it in the open as the FCC did in > the past. The whole terrorism sham was just a convenient excuse to > prevent outsiders from assessing the quality of the carriers network. In the field of security engineering, this is something called security through obscurity. Terrorists are well funded, and they, no doubt, can get hold on those 'secret' fiber maps if they have interest in them. > Do I feel better that neither me nor the terrorist know that my "redundant" > fiber routes are in the same dig? Or in the same cable even? We all know > how reliable the carriers bonus driven sales droid promises are... Only ones suffering are us... - -- juuso lehtinen -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDWUsYpbZvCIJx1bcRAh2IAJsGJqCMtsuyMjYSDJFhCjzI07GBKwCfW7aG uPBNNwW0I75xGyKP1Tlg9iw= =l5Jg -----END PGP SIGNATURE-----

1 0

Peering BOF X Detailed Agenda
by William B. Norton 21 Oct '05

21 Oct '05

Hi all - I'm happy to announce the 10th NANOG Peering BOF will be held in Los Angeles from 14:00 to 15:30 on Monday. We have a *very* full Peering BOF agenda: 14:00 Introduction / Welcome - William B. Norton (Equinix) 14:05 Ad Hoc Transit Survey - all Since the Peering vs. Transit issue contains a financial component, we will employ an anonymous straw poll of wholesale transit prices and do a quick Peering Breakeven Point calculation by the end of the BOF. 14:10 Peeringdb.com - Richard Steenbergen (nLayer) The peeringdb attempts to solve two related Peering Coordinator Community problems - first, one of the most difficult problems is finding out who to talk to about peering in the target ISP company. Second, IXes have had a very difficult time populating and maintaining peering contact information for its populations. Richard has volunteered and set up a central database of peering contact information for the Peering Coordinator Community and he will share some stats and encourage folks to register their peering information. 14:15 Good Peers / Good Customers - Peter Cohen (Telia) Are all peers created equal? Should an ISP prefer some customers over others based on their traffic patterns? Peter will share some insights into these questions. 14:30 Unified Peering Forum - Josh Snowhorn (Terramark) Josh will share updates regarding the combined peering forum initiative, intended to reduce Peering Coordinator travel expenses and maximize the chances for peering coordinators to meet each other. In the last few years, the number of peering forums grew, and the Peering Coordinator Community attending these various forums to some degree fractured, reducing the benefits to the community. This initiative seeks to, among other things, pull together the community to fewer, open and jointly run forums. 14:40 The Great Debate on Peering Ratios : Important Metric or Dinosaur PreReq of a Bygone Era - Peter Cohen vs. Richard Steenbergen One challenge the Peering Coordinator Community faces (besides making contact and working within financial constraints discussed earlier) is meeting the peering requirements of the large traffic potential peers. There are some peers that believe peering ratios help them scrutinize where to most fairly expend their engineering resources, and ratios are one way to determine the balance of benefits between the potential peers. The other view is that there is no valid technical reason to use ratios are a filter for potential peers. A: Opening Statement - Peering Ratios are a valuable metric B: Opening Statement - Peering Ratios have no technical merit for screening potential peers A: Attack B / Defend A position B: Attack A / Defend B position A: Closing Statement B: Closing Statement Audience Vote: Which side made the more compelling case? Audience Engages Debaters: A chance for the audience to ask questions and make points NOT made during the debate, or to help reinforce points not made strongly enough during the debate. Secondary Audience Vote - did the audience view change? With the advantage of the audience points and followup discussion, which side made the more compelling case? 15:20 Peering Personals - all We have a few minutes for those who travelled a great distance to introduce themselves to the Peering Coordinator Community as we break for coffee and cookies. If you would like to introduce yourself to the Peering Coordinator Community, please send a note to wbn(a)equinix.com BEFORE MONDAY including: Name: email: Company: AS#: Three things the Peering Coordinator Community should know about peering with you: 1) 2) 3) These three things will help me select who gets stage time in case there are more people than time, and please make sure you speak with me before the BOF so we can seat you up front in the interests of time.

1 0

FCC Outage Reports ..(.was Verizon outage in Southern California?)
by Wallace Keith 21 Oct '05

21 Oct '05

I wasn't thinking in terms of automatic monitoring, that would open up a can of worms security wise. Just looking at some way of getting the manual reporting (that is still taking place to the FCC) back in the (semi?)public domain. Due to terrorism concerns, that information is no longer available online. I'm pretty sure the LEC's and IXC's like it that way also, as they no longer have to air their dirty laundry. I was able to get some information under the Freedom of Information act for an outage that affected me directly , but that takes days or weeks. As close to real-time information as possible is what's needed to assess and respond to a major outage, i.e. routing voice/data via different carriers, being able to explain to end users why their email or phone calls didn't go through , etc. and eliminating the need to open tons of trouble tickets during a major event. One master ticket - such as fiber cut affect xxx OC48's would suffice. Not sure how this can be balanced against DHS perceived needs though...any suggestions? -----Original Message----- From: Vicky Rode [mailto:vickyr@socal.rr.com] Sent: Wednesday, October 19, 2005 5:45 PM To: Wallace Keith Subject: Re: Verizon outage in Southern California? -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I wonder how would Telcos, ISPs and GOV agencies feel about a third party polling their devices, not to mention security. I think netcarft comes close to what you're suggesting. regards, /virendra Wallace Keith wrote: > All this speculation!! > Remember the good old days when you could see faxes of FCC outage > reports online? > Was sure nice to know what was going on, before the FCC took these > offline (due to DHS?) It would really by nice to have some sort of an > online clearing house, and gain some visibility again into overall > network status. This will become even more important as things > continue to converge. DACS and DC Power failures tend to affect > multiple services and in the case of power, multiple carriers that > are colo'd in the CO. > -Keith > > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf > Of Vicky Rode > Sent: Wednesday, October 19, 2005 1:29 PM > To: wb8foz(a)nrk.com > Cc: nanog list > Subject: Re: Verizon outage in Southern California? > > > I wonder what ever happened to redundancy? I guess 5 9s (dunno what > the going number is) got blown out of the water for them. > > > > regards, > /virendra > > David Lesher wrote: > >>>Speaking on Deep Background, the Press Secretary whispered: >>> >>> >>>>I'm not completely familiar with the telco jargon. >>>>Does Tandem mean the same as a local central office, where POTS >>>>lines terminate at the switch? Long Beach has a population of >>>>470,000. The C/Os I know of are: >>> >>> >>> >>>A "Central Office" switch talks to subscribers aka end-users. >>>On its backside, it talks to other CO's and tandems. Time was, that >>>was also VF copper pairs, but it's long since all >>>DS1 and up..... >>> >>>A tandem is a switch that talks not to subs, but only to CO's. In >>>days > > >>>of old, when a {dialup} call went to the other side of town, chances >>>are it went you-yourCO-downtown tandem-joesCO-joe. {copper all the >>>way...}. >>> >>>A tandem was always housed in large CO building, but might have been >>>ATT's vice the operationg company, etc... >>> >>>But ESS's and ""classless switching"" and massive expansion of the >>>plant really muddled the picture. An ESS could be both a CO switch >>>[for multiple prefixes and even multiple NPA's..] AND act like a >>>tandem.. And oh, the actual "line cards" can be remoted 100 miles >>>away > > >>>in a horz. phonebooth box alongside the road in Smallville.... >>>with DS1's/OC coming back. >>> >>>My guess is a DACS, a cross-connect point that is an software-driven >>>patch panel, lost its marbles. [engineering term of art.....] A DACS >>>could have dozen->MANY dozen DS1/DS3/OC-n going hither and yon. Some >>>will be leased circuits. Others will be the CO trunks going from one >>>switch to another. It may/may not have muxes internal, so that what >>>arrives on a DS1 leaves in a OC96.. >>> >>>I note it went down at 2:20 AM. That SCREAMS software upgrade/cutover. > > >>>What's to bet GEE, no...VZEEE, was doing just that and there was a >>>major ohshit. >>> >>>Sean noted a long while back that somehow, DACS crashes always seem >>>to > > >>>take hours to recover. Maybe the backups are on Kansas City standard >>>tapes, I donno.. but this sounds like that.. >>> > -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.5 (MingW32) Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org iD8DBQFDVr5HpbZvCIJx1bcRApndAKCyFEbNgzqSeqxfCj8I6A/Eq4x/QQCgoFRj CuS3SSCRkdL7vtHE+Bsto3E= =MQzx -----END PGP SIGNATURE-----

4 3

Weekly Routing Table Report
by Routing Table Analysis 21 Oct '05

21 Oct '05

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 22 Oct, 2005 Analysis Summary ---------------- BGP routing table entries examined: 172518 Prefixes after maximum aggregation: 98093 Unique aggregates announced to Internet: 83749 Total ASes present in the Internet Routing Table: 20734 Origin-only ASes present in the Internet Routing Table: 18027 Origin ASes announcing only one prefix: 8543 Transit ASes present in the Internet Routing Table: 2707 Transit-only ASes present in the Internet Routing Table: 75 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 21 Prefixes from unregistered ASNs in the Routing Table: 26 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 10 Number of addresses announced to Internet: 1435243072 Equivalent to 85 /8s, 140 /16s and 18 /24s Percentage of available address space announced: 38.7 Percentage of allocated address space announced: 58.3 Percentage of available address space allocated: 66.4 Total number of prefixes smaller than registry allocations: 82326 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 35851 Total APNIC prefixes after maximum aggregation: 15747 Prefixes being announced from the APNIC address blocks: 33663 Unique aggregates announced from the APNIC address blocks: 16681 APNIC Region origin ASes present in the Internet Routing Table: 2388 APNIC Region origin ASes announcing only one prefix: 693 APNIC Region transit ASes present in the Internet Routing Table: 362 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 203929728 Equivalent to 12 /8s, 39 /16s and 184 /24s Percentage of available APNIC address space announced: 75.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 124/7, 126/8, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 91650 Total ARIN prefixes after maximum aggregation: 55548 Prefixes being announced from the ARIN address blocks: 71720 Unique aggregates announced from the ARIN address blocks: 26944 ARIN Region origin ASes present in the Internet Routing Table: 10276 ARIN Region origin ASes announcing only one prefix: 3792 ARIN Region transit ASes present in the Internet Routing Table: 965 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 17 Number of ARIN addresses announced to Internet: 272820480 Equivalent to 16 /8s, 66 /16s and 233 /24s Percentage of available ARIN address space announced: 67.8 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/6, 74/7, 76/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 33529 Total RIPE prefixes after maximum aggregation: 22748 Prefixes being announced from the RIPE address blocks: 30530 Unique aggregates announced from the RIPE address blocks: 20448 RIPE Region origin ASes present in the Internet Routing Table: 7220 RIPE Region origin ASes announcing only one prefix: 3807 RIPE Region transit ASes present in the Internet Routing Table: 1194 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 21 Number of RIPE addresses announced to Internet: 221048320 Equivalent to 13 /8s, 44 /16s and 238 /24s Percentage of available RIPE address space announced: 65.9 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 RIPE Address Blocks 62/8, 80/5, 88/6, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 9695 Total LACNIC prefixes after maximum aggregation: 3231 Prefixes being announced from the LACNIC address blocks: 8001 Unique aggregates announced from the LACNIC address blocks: 4690 LACNIC Region origin ASes present in the Internet Routing Table: 646 LACNIC Region origin ASes announcing only one prefix: 207 LACNIC Region transit ASes present in the Internet Routing Table: 125 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 21 Number of LACNIC addresses announced to Internet: 22292992 Equivalent to 1 /8s, 84 /16s and 42 /24s Percentage of available LACNIC address space announced: 33.2 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 1763 Total AfriNIC prefixes after maximum aggregation: 819 Prefixes being announced from the AfriNIC address blocks: 1082 Unique aggregates announced from the AfriNIC address blocks: 800 AfriNIC Region origin ASes present in the Internet Routing Table: 140 AfriNIC Region origin ASes announcing only one prefix: 44 AfriNIC Region transit ASes present in the Internet Routing Table: 19 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2841088 Equivalent to 0 /8s, 43 /16s and 90 /24s Percentage of available AfriNIC address space announced: 8.5 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1006 6230 211 CHINANET-BACKBONE 9583 812 77 13 Sify Limited 1221 752 1327 513 Telstra Pty Ltd 4755 724 259 66 Videsh Sanchar Nigam Ltd. Aut 4766 619 3927 290 Korea Telecom (KIX) 7545 518 108 71 TPG Internet Pty Ltd 17676 470 6819 100 Softbank BB Corp. 9443 392 87 78 Primus Telecommunications 9498 382 211 58 BHARTI BT INTERNET LTD. 2907 338 1763 315 SINET Japan 17488 334 20 9 Hathway IP Over Cable Interne 7474 330 258 227 SingTel Optus Pty Ltd 9929 330 224 46 China Netcom Corp. 17557 329 24 161 Pakistan Telecom 4802 325 72 154 Wantree Development 18302 291 109 170 SK Global co., Ltd 9837 275 79 176 Powertel Ltd 17974 272 65 16 PT TELEKOMUNIKASI INDONESIA 18101 265 68 18 Reliance Infocom Ltd Internet 703 254 259 210 UUNET - Commercial IP service ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1519 6358 991 AT&T WorldNet Services 4323 1189 705 228 Time Warner Telecom 721 1080 21938 313 DLA Systems Automation Center 174 1052 5847 991 Cogent Communications 701 1004 8138 841 UUNET Technologies, Inc. 6197 944 399 488 BellSouth Network Solutions, 2386 923 513 685 AT&T Data Communications Serv 18566 864 240 7 Covad Communications 1239 858 2852 605 Sprint 209 641 3572 507 Qwest 20115 633 515 336 Charter Communications 3602 559 131 109 Sprint Canada, Inc. 22773 544 1348 27 Cox Communications, Inc. 19916 541 48 71 OLM LLC 3356 535 10639 411 Level 3 Communications, LLC 19262 492 1460 128 Verizon Global Networks 6198 489 577 212 BellSouth Network Solutions, 5668 484 147 23 CenturyTel Internet Holdings, 3561 475 2409 402 Savvis 7132 470 5061 401 SBC Internet Services RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 603 1976 476 UUNET - Commercial IP service 3301 305 1085 291 TeliaNet Sweden 3320 286 3231 241 Deutsche Telekom AG 8220 269 475 264 COLT Telecommunications 680 244 2040 239 DFN-IP service G-WiN 8708 239 274 224 Romania Data Systems S.A. 3246 226 474 219 Song Networks 6746 196 51 168 Dynamic Network Technologies, 1257 193 712 171 SWIPnet Swedish IP Network 5515 183 841 129 Sonera Solution Autonomous Sy 3269 182 1734 70 TELECOM ITALIA 786 174 1795 174 The JANET IP Service 5400 173 317 143 BT Ignite European Backbone 6830 160 669 33 UPC Distribution Services 8866 160 37 9 Bulgarian Telecommunication C 3300 157 169 91 AUCS Communications Services 25186 151 227 106 France Telecom Transpac's Tra 3215 142 1229 81 France Telecom Transpac 24863 141 37 6 LINKdotNET AS number 1273 136 176 95 Cable & Wireless Deutschland LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 386 641 166 UniNet S.A. de C.V. 16814 297 18 7 NSS, S.A. 11172 280 86 65 Servicios Alestra S.A de C.V 11664 198 22 13 Keytech SA 19632 196 14 5 Metropolis Intercom S.A. 6147 189 118 21 Telefonica Del Peru 14117 169 10 5 Telefonica del Sur S.A. 22047 168 128 7 VTR PUNTO NET S.A. 7303 149 69 15 Telecom Argentina Stet-France 11556 133 64 3 Cable-Wireless Panama 19169 122 8 26 Telconet 6505 121 89 85 Global One Communicaoes Ltda 10481 121 48 8 Prima S.A. 13999 117 52 9 Mega Cable S.A. de C.V. 18822 112 7 13 TELEFONICA MANQUEHUE 6503 109 148 76 AVANTEL, S.A. 21826 108 14 17 INTERCABLE 5639 105 12 9 Telecommunications Services o 11311 99 8 10 Sinectis S.A. 4270 88 17 9 Red de Interconexion Universi AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 269 708 227 The Internet Solution 5536 123 8 12 Internet Egypt Network 8452 117 44 7 TEDATA 2018 95 295 86 Tertiary Education Network 15475 82 84 4 Nile Online 2905 78 211 71 The Internetworking Company o 6713 71 71 10 Itissalat Al-MAGHRIB 20928 61 16 2 Noor Advanced Technologies AS 24835 59 34 7 RAYA Telecom - Egypt 5713 37 149 33 Telkom SA Ltd 12455 35 6 3 Jambonet Autonomous system 15706 31 8 3 Sudatel Internet Exchange Aut 33774 30 3 20 AS Number for Telecom Algeria 8524 23 1 4 AUCEGYPT Autonomous System 16637 23 10 20 Johnnic e-Ventures 10798 22 1 13 Standard Bank of South Africa 21280 20 4 4 Swift Global Kenya Ltd.Is an 23889 19 5 9 MAURITIUS TELECOM 12258 17 3 11 Vodacom Internet Company 15808 17 2 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1189 961 Time Warner Telecom 18566 864 857 Covad Communications 9583 812 799 Sify Limited 4134 1006 795 CHINANET-BACKBONE 721 1080 767 DLA Systems Automation Center 4755 724 658 Videsh Sanchar Nigam Ltd. Aut 22773 544 517 Cox Communications, Inc. 19916 541 470 OLM LLC 5668 484 461 CenturyTel Internet Holdings, 6197 944 456 BellSouth Network Solutions, 3602 559 450 Sprint Canada, Inc. 7545 518 447 TPG Internet Pty Ltd 17676 470 370 Softbank BB Corp. 19262 492 364 Verizon Global Networks 6467 408 360 E.Spire Communications, Inc. 812 368 343 Rogers WAVE 11492 346 335 Cable One 4766 619 329 Korea Telecom (KIX) 17488 334 325 Hathway IP Over Cable Interne 9498 382 324 BHARTI BT INTERNET LTD. List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 65003 PRIVATE 57.250.244.0/24 13879 SITA-EQUANT 64900 PRIVATE 64.116.137.0/24 17399 Comsat Venezuela, CO 65002 PRIVATE 64.119.148.0/22 19406 Towerstream 65500 PRIVATE 64.146.64.0/24 19029 New Edge Networks 65506 PRIVATE 64.151.117.0/24 26228 ServePath, LLC 64826 PRIVATE 64.200.250.0/23 7911 Williams Communicati 64826 PRIVATE 64.200.255.0/24 7911 Williams Communicati 64643 PRIVATE 140.253.192.0/20 24434 James Cook Universit 65205 PRIVATE 152.163.5.0/24 2056 America Online 64512 PRIVATE 170.51.242.0/24 19037 CTI Compania de Tele 65111 PRIVATE 194.165.131.0/24 8376 GO-JOR Autonomous Sy 65004 PRIVATE 200.0.113.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.0.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.1.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.2.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.3.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.4.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.5.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.6.0/24 28477 Universidad Autonoma 65004 PRIVATE 200.4.7.0/24 28477 Universidad Autonoma 64900 PRIVATE 200.85.68.0/24 17399 Comsat Venezuela, CO 24413 UNALLOCATED 202.46.32.0/19 17623 China Netcom Corp. 18428 UNALLOCATED 203.91.0.0/24 9505 Taiwan Internet Gate 65103 PRIVATE 216.53.126.0/23 7270 Net2Phone Corp. 65500 PRIVATE 216.216.217.0/24 19029 New Edge Networks 65500 PRIVATE 216.217.188.0/24 19029 New Edge Networks Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.43.230.0/24 7575 Australian Academic and Rease 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:17 /9:5 /10:8 /11:18 /12:80 /13:182 /14:335 /15:654 /16:8595 /17:2852 /18:4785 /19:10884 /20:11940 /21:10001 /22:13217 /23:14222 /24:93807 /25:333 /26:280 /27:183 /28:36 /29:12 /30:39 /31:3 /32:30 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 848 864 Covad Communications 6197 771 944 BellSouth Network Solutions, 7018 741 1519 AT&T WorldNet Services 2386 637 923 AT&T Data Communications Serv 9583 635 812 Sify Limited 4323 570 1189 Time Warner Telecom 19916 532 541 OLM LLC 4766 427 619 Korea Telecom (KIX) 5668 389 484 CenturyTel Internet Holdings, 702 383 603 UUNET - Commercial IP service 7011 383 443 Citizens Utilities 1239 367 858 Sprint 6198 352 489 BellSouth Network Solutions, 11492 338 346 Cable One 6517 322 348 Yipes Communications, Inc. 15270 316 343 PaeTec.net -a division of Pae 13609 286 327 Choice One Communications Inc 701 285 1004 UUNET Technologies, Inc. 22773 277 544 Cox Communications, Inc. 18302 276 291 SK Global co., Ltd Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:3 8:25 12:1611 13:1 15:11 16:3 17:3 18:3 20:31 24:566 30:2 32:68 38:163 40:54 44:3 47:2 52:4 55:1 56:3 57:35 58:96 59:79 60:146 61:789 62:787 63:1886 64:2954 65:2111 66:2989 67:643 68:661 69:1292 70:219 71:32 72:409 80:651 81:570 82:504 83:307 84:291 85:362 86:140 87:64 125:15 128:152 129:168 130:97 131:296 132:36 133:1 134:148 135:40 136:158 137:68 138:166 139:68 140:465 141:141 142:148 143:141 144:218 145:34 146:300 147:131 148:272 149:187 150:107 151:68 152:112 153:93 154:6 155:141 156:78 157:114 158:162 159:174 160:87 161:76 162:237 163:146 164:183 165:189 166:153 167:254 168:447 169:144 170:313 171:11 190:1 192:5717 193:3321 194:2426 195:1562 196:664 198:3900 199:3247 200:4231 201:381 202:6199 203:6490 204:3823 205:2068 206:2451 207:2841 208:2027 209:3440 210:1698 211:826 212:1200 213:1359 214:315 215:39 216:3840 217:1133 218:222 219:134 220:509 221:293 222:131 End of report

1 0

RE: Level3 problems
by Gary Hale 21 Oct '05

21 Oct '05

Are you kidding? -gh -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of lgreenem(a)cmp.com Sent: Friday, October 21, 2005 11:03 AM To: nanog(a)merit.edu Subject: Re: Level3 problems I'm a reporter with InformationWeek magazine. I'm trying to get an idea of the significance of this morning's outage. Has Level 3 communicated with you about the cause of the outage? How greatly did the outage affect you or your customers? Was this an unusually large event? Thanks, lgreenem(a)cmp.com

2 1