August 2005 - Test - lists.nanog.org

RE: Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter
by Peter Lothberg 05 Aug '05

05 Aug '05

> > You can ping to 126.66.0.30/8. > and how does one ping a /8? > randy Just send 2^(24) ping packets! (not?) -P

1 0

cogent network issues.
by Christian Malo 05 Aug '05

05 Aug '05

Seems like cogent has been having issues this morning. I'm seeing high latency all over the place. Anyone has any idea what's going on? -chris

2 2

The Cidr Report
by cidr-report＠potaroo.net 05 Aug '05

05 Aug '05

This report has been generated at Fri Aug 5 21:45:43 2005 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 29-07-05 163523 110981 30-07-05 163622 111024 31-07-05 163605 110949 01-08-05 163533 110985 02-08-05 163928 110774 03-08-05 163280 110992 04-08-05 163767 111010 05-08-05 163780 110781 AS Summary 20079 Number of ASes in routing system 8291 Number of ASes announcing only one prefix 1485 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 90504960 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 05Aug05 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 163590 110783 52807 32.3% All ASes AS4323 1138 225 913 80.2% TWTC - Time Warner Telecom AS18566 833 8 825 99.0% COVAD - Covad Communications AS4134 950 229 721 75.9% CHINANET-BACKBONE No.31,Jin-rong Street AS27364 554 22 532 96.0% ACS-INTERNET - Armstrong Cable Services AS721 1081 558 523 48.4% DLA-ASNBLOCK-AS - DoD Network Information Center AS7018 1485 962 523 35.2% ATT-INTERNET4 - AT&T WorldNet Services AS22773 507 25 482 95.1% CCINET-2 - Cox Communications Inc. AS6197 935 513 422 45.1% BATI-ATL - BellSouth Network Solutions, Inc AS3602 550 147 403 73.3% SPRINT-CA-AS - Sprint Canada Inc. AS17676 463 103 360 77.8% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS6467 436 78 358 82.1% ESPIRECOMM - e.spire Communications, Inc. AS9583 715 402 313 43.8% SIFY-AS-IN Sify Limited AS4766 576 280 296 51.4% KIXS-AS-KR Korea Telecom AS9929 333 46 287 86.2% CNCNET-CN China Netcom Corp. AS14654 287 9 278 96.9% WAYPORT - Wayport AS15270 315 47 268 85.1% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS5668 501 235 266 53.1% AS-5668 - CenturyTel Internet Holdings, Inc. AS6167 328 66 262 79.9% CELLCO-PART - Cellco Partnership AS6140 403 150 253 62.8% IMPSAT-USA - ImpSat AS812 263 20 243 92.4% ROGERS-CABLE - Rogers Cable Inc. AS23126 265 24 241 90.9% KMCTELCOM-DIA - KMC Telecom, Inc. AS11456 313 73 240 76.7% NUVOX - NuVox Communications, Inc. AS1239 864 627 237 27.4% SPRINTLINK - Sprint AS2386 892 657 235 26.3% INS-AS - AT&T Data Communications Services AS9498 343 113 230 67.1% BBIL-AP BHARTI BT INTERNET LTD. AS7545 516 291 225 43.6% TPG-INTERNET-AP TPG Internet Pty Ltd AS6198 465 241 224 48.2% BATI-MIA - BellSouth Network Solutions, Inc AS19916 370 148 222 60.0% ASTRUM-0001 - OLM LLC AS9304 250 45 205 82.0% HUTCHISON-AS-AP Hutchison Global Communications AS16852 248 47 201 81.0% FOCAL-CHICAGO - Focal Data Communications of Illinois Total 17179 6391 10788 62.8% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.78.0/24 AS25994 NPG-001 - NPG Cable, INC 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 58.158.0.0/16 AS17506 JPNIC-JP-ASN-BLOCK Japan Network Information Center 58.159.0.0/17 AS17506 JPNIC-JP-ASN-BLOCK Japan Network Information Center 58.159.128.0/18 AS17506 JPNIC-JP-ASN-BLOCK Japan Network Information Center 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.34.192.0/19 AS30099 SB-2 - ServerBeach 64.46.0.0/18 AS15277 I-NET - INET OF NEW MEXICO 64.127.0.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 64.182.128.0/20 AS27474 CIHOST-CDC02 - C I Host 64.182.176.0/20 AS14501 CIHOST - C I Host 64.182.192.0/20 AS14501 CIHOST - C I Host 64.182.208.0/20 AS14501 CIHOST - C I Host 64.182.248.0/21 AS14501 CIHOST - C I Host 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.187.96.0/22 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.96.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.97.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.98.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.99.0/24 AS9227 ONEHUNDRED-AS-AP ONE HUNDRED SERVICES, INC. 66.187.100.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.101.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.102.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.103.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.104.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.105.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.106.0/24 AS18194 PMMSI-AS-AP Philippine Multi-Media 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.205.193.0/24 AS174 COGENT Cogent/PSI 66.205.194.0/24 AS174 COGENT Cogent/PSI 69.31.160.0/20 AS30295 2ICSYSTEMSINC - 2iC Systems Inc. 69.77.192.0/19 AS6580 RAPIDNET-ASN - RapidNet LLC 72.16.192.0/20 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS 72.16.224.0/20 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS 72.16.240.0/21 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS 72.16.248.0/21 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS 72.24.0.0/16 AS11492 CABLEONE - CABLE ONE 72.53.0.0/20 AS11175 CYBERSURF - Cybersurf Inc. 72.53.16.0/20 AS11175 CYBERSURF - Cybersurf Inc. 72.53.32.0/19 AS11175 CYBERSURF - Cybersurf Inc. 72.53.64.0/19 AS11175 CYBERSURF - Cybersurf Inc. 72.53.96.0/19 AS3602 SPRINT-CA-AS - Sprint Canada Inc. 72.54.0.0/21 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS 72.54.16.0/21 AS17184 ATL-CBEYOND - CBEYOND COMMUNICATIONS 85.129.3.0/24 AS14585 CIFNET - CIFNet, Inc. 85.129.4.0/24 AS14585 CIFNET - CIFNet, Inc. 86.110.192.0/24 AS35374 RC-AS Region Connection 86.111.128.0/20 AS35408 DIMEDIA-AS DIMEDIA LLC 87.122.0.0/15 AS8881 VERSATEL Versatel routing policies 87.243.192.0/18 AS8419 HOTCHILLI Hotchilli Internet, United Kingdom 87.244.8.0/21 AS21335 TSNET-AS TSNET AS 87.244.8.0/22 AS21335 TSNET-AS TSNET AS 89.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 89.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 90.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 90.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.5.0.0/17 AS7629 INFOCOM-AS-AP INFOCOM Technologies, Inc. 125.5.128.0/17 AS7629 INFOCOM-AS-AP INFOCOM Technologies, Inc. 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 190.192.193.0/24 AS3301 TELIANET-SWEDEN TeliaNet Sweden 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.182.0/24 AS719 ELISA-AS Elisa Oyj 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS29259 DE-IABG-TELEPORT IABG Teleport, DE 192.107.104.0/24 AS6458 GUATEL 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.200.100.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 193.16.156.0/24 AS31494 DEVICE-MOBILE-INFONETS-AS Joint Stock Company "INFONETS" 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.47.157.0/24 AS31125 LINETEC-AS Linetec Linux Network Technologies GmbH 193.47.158.0/24 AS31079 WIX-AS Warsaw Internet eXchange 193.47.159.0/24 AS31079 WIX-AS Warsaw Internet eXchange 193.47.160.0/24 AS31079 WIX-AS Warsaw Internet eXchange 193.47.161.0/24 AS29037 TELIKO-AS TELIKO-AS# 193.47.162.0/24 AS25318 PROVISION SC ProVision Software Division SRL 193.47.163.0/24 AS12968 CDP Crowley Data Poland, sp. z o.o. 193.47.167.0/24 AS29686 PROBENETWORKS-AS Probe Networks 193.47.187.0/24 AS29686 PROBENETWORKS-AS Probe Networks 193.47.190.0/24 AS15576 NTS NTS workspace AG, Bern, Switzerland 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.97.0/24 AS3356 LEVEL3 Level 3 Communications 193.239.248.0/23 AS8514 INODE inode Telekommunikationsdienstleistungs GmbH 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.32.174.0/23 AS8426 CLARANET-AS ClaraNET 194.59.176.0/20 AS1273 CW Cable & Wireless 194.59.178.0/24 AS8481 TRANSNET transnet INTERNET Services 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.187.72.0/23 AS34688 PL-MAVERICK-AS Maverick Marcin Pietrucha 194.187.74.0/24 AS34688 PL-MAVERICK-AS Maverick Marcin Pietrucha 194.187.80.0/22 AS35385 QOU Alquds Open University 194.187.88.0/22 AS35406 HOMING Homing.ch GmbH 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.3.162.0/24 AS6083 AFRINIC African Network Information Center 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.88.0/24 AS89 NUSC-CSTLNET-AS - Naval Underwater Systems Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.247.0/24 AS3475 LANT-AFLOAT - Department of the Navy 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GROUPTLCOM - GT Group Telecom Services Corp. 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.203.254.0/23 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.96.44.0/23 AS19092 360NETWORKS-US - 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NETWORKS-US - 360Networks (USA) Inc. 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.120.32.0/19 AS16582 NEXTLEVELINTERNET - NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 200.2.224.0/24 AS10778 MCL Internet 200.49.8.0/21 AS6140 IMPSAT-USA - ImpSat 202.86.252.0/22 AS4748 RESOLINK-AS Resources Linke Network Limited 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 202.142.144.0/24 AS23750 GERRYS-AS-AP GEERRYS INFORMATION TECHNOLOGY PVT LTD. 202.142.146.0/24 AS23750 GERRYS-AS-AP GEERRYS INFORMATION TECHNOLOGY PVT LTD. 202.142.147.0/24 AS23750 GERRYS-AS-AP GEERRYS INFORMATION TECHNOLOGY PVT LTD. 202.142.148.0/24 AS23750 GERRYS-AS-AP GEERRYS INFORMATION TECHNOLOGY PVT LTD. 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.142.160.0/19 AS17608 ABN-AS-KR Areum Broadcasting Network 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.14.224.0/21 AS26932 ICEBERG-NETWORKS - Iceberg Incorporated 204.14.240.0/22 AS18612 TRI-NET-SOLUTIONS - Tri-Net Solutions LLC. 204.14.244.0/22 AS33472 HUDSON-AS - Hudson Digital Limited Liability Company 204.14.248.0/21 AS701 ALTERNET-AS - UUNET Technologies, Inc. 204.15.24.0/21 AS33125 LIGHTPOINTNETLLC - LightPoint Networks, LLC 204.15.32.0/21 AS33361 THEWIRE - THE WIRE 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.188.160.0/20 AS15267 702COM - 702 communications 206.188.192.0/20 AS27357 RACKSPACE - Rackspace.com 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.58.224.0/20 AS22958 FIDELITY-001 - Fidelity Access Networks, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 208.53.224.0/19 AS13576 SDNET - SOUTH DAKOTA NETWORK 208.138.48.0/20 AS6971 ATG-1 - Advanced Telcom Group, Inc 209.40.208.0/21 AS16592 Cybernet El Salvador 209.40.216.0/21 AS16592 Cybernet El Salvador 209.44.124.0/24 AS22241 ICCEPTS - Integrated Communications Concepts 209.166.112.0/20 AS14325 OSHEAN - Ocean State Higher Education and Administration Network 209.196.192.0/23 AS36023 SIRIUSSATELLITERADIO - SIRIUS SATELLITE RADIO 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INTERPAC - Inter-Pacific Network Services 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.82.160.0/20 AS20481 CALYX-NL Calyx Internet B.V. Netherlands 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.178.37.0/24 AS3356 LEVEL3 Level 3 Communications 216.178.39.0/24 AS3356 LEVEL3 Level 3 Communications 216.178.42.0/24 AS3356 LEVEL3 Level 3 Communications 216.178.43.0/24 AS3356 LEVEL3 Level 3 Communications 216.182.176.0/20 AS11320 INTERNET-EXPRESS-INC - Internet Express, Inc. 216.219.80.0/21 AS6939 HURRICANE - Hurricane Electric 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Your router/switch may be less secure than you think
by Michael.Dillon＠btradianz.com 05 Aug '05

05 Aug '05

Michael Lynn is not the only person out there reverse engineering routers, switches, printers and other embedded systems. Lynn's presentation gave far less info than other people have published. One person has published detailed instructions on how to exploit IOS including code to do the exploit and an example scenario of how to use it. Contrary to what some may be worrying about, it it not the GSRs that are most at risk. It is those old 2500's that are connected to your customers. Imagine that one of those customer routers is exploited, the hacker installs a tunnel, and then proceeds to anonymously probe the customer's network. This is the real risk and it may very well be happening right now to one of your customers. The following is one of the slides from a black hat presentation which is basically a primer on reverse engineering and exploiting embedded systems. --------8X---------------------- How to protect Cisco specific ! Have no overflows in IOS ! Keep your IOS up to date ! Do not run unneeded services (TFTP) ! Tell your IDS about it. Signature: \xFD\x01\x10\xDF\xAB\x12\x34\xCD ! debug sanity might stop less experienced attackers ! The hard way: config-register 0x00 ! Perform logging on a separate segment ! Protect your syslog host ---------8X----------------------- Other slides in the presentation talk about exploits in networked HP printers and various other brands of switches and routers. I think this should serve as a wakeup call to the entire industry that current engineering practices are not good enough any more. We should all be looking to the security auditing work done by the OpenBSD team for an example of how systems can be cleaned up, fixed, and locked down if there is a will to do so. --Michael Dillon

5 5

Just another lesson: Read the instructions before installing....
by John Palmer 04 Aug '05

04 Aug '05

http://blogs.sun.com/roller/page/ThinGuy?entry=the_war_on_terror_as

1 0

"Cisco gate" and "Meet the Fed" at Defcon....
by Fergie (Paul Ferguson) 04 Aug '05

04 Aug '05

No one ever said the Internet wasn't chock full of contradictions. One one hand, we have what some are now calling "Cisco gate": http://news.com.com/Hackers+rally+behind+Cisco+flaw+finder/2100-1002_3-5812… ...and on the other hand, we have the DOD Cyber Crime Center folks at Defcon looking to hire people: http://news.com.com/2061-10789_3-5812102.html Wow, what a world, huh? ;-) - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(a)netzero.net or fergdawg(a)sbcglobal.net ferg's tech blog: http://fergdawg.blogspot.com/

18 30

Re: Traffic to our customer's address(126.0.0.0/8) seems blocked by pa cket filter
by Fergie (Paul Ferguson) 03 Aug '05

03 Aug '05

Mea culpa: I meant "a few /16's" as opposed to "2"... No flames, it's too late... - ferg -- "Fergie (Paul Ferguson)" <fergdawg(a)netzero.net> wrote: Philip, This sounds very much like a bully -- 2 /16's are a major problem, as opposed to a single /8? Where is the major heartburn in this particlualr case? I could understand if here were lots of farctured annnounced space (granted: I haven't checked this yet), but what's up with that? - ferg -- Philip Smith <pfs(a)cisco.com> wrote: mkawano(a)bb.softbank.co.jp said the following on 4/8/05 12:03: FWIW, if you don't announce your aggregate, do not be surprised if you experience continued disconnectivity to many parts of the Internet. Some SPs notice that SoftbankBB have received 126/8, so will likely filter as such. Leaking sub-prefixes may be fine for traffic engineering, but this generally only works best if you include a covering aggregate. Try including your /8 announcement and see if this improves reachability for you. Out of curiosity, why pick on a /16 for traffic engineering? Most people tend to analyse traffic flows and pick the appropriate address space size as a subdivision. Or do you have 256 links to upstream ISPs and need that level of fine-tuning? best wishes, philip

1 0

Re: Traffic to our customer's address(126.0.0.0/8) seems blocked by pa cket filter
by Fergie (Paul Ferguson) 03 Aug '05

03 Aug '05

Philip, This sounds very much like a bully -- 2 /16's are a major problem, as opposed to a single /8? Where is the major heartburn in this particlualr case? I could understand if here were lots of farctured annnounced space (granted: I haven't checked this yet), but what's up with that? - ferg -- Philip Smith <pfs(a)cisco.com> wrote: mkawano(a)bb.softbank.co.jp said the following on 4/8/05 12:03: FWIW, if you don't announce your aggregate, do not be surprised if you experience continued disconnectivity to many parts of the Internet. Some SPs notice that SoftbankBB have received 126/8, so will likely filter as such. Leaking sub-prefixes may be fine for traffic engineering, but this generally only works best if you include a covering aggregate. Try including your /8 announcement and see if this improves reachability for you. Out of curiosity, why pick on a /16 for traffic engineering? Most people tend to analyse traffic flows and pick the appropriate address space size as a subdivision. Or do you have 256 links to upstream ISPs and need that level of fine-tuning? best wishes, philip

1 0

RE: Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter
by mkawano＠bb.softbank.co.jp 03 Aug '05

03 Aug '05

Hi, >Just out of curiosity... are you going to continue to announce each >individual /16 or will you consolidate to a single /8 announcement? We aren't going to consolidate to a single /8 announcement. We are going to continue to announce each individual /16 for incoming traffic engineering. Best regards & Thanks in advance, -- Makoto Kawano <mkawano(a)bb.softbank.co.jp> SOFTBANK BB Corp. Yahoo!BB Network Operation Center -----Original Message----- From: John Payne [mailto:john@sackheads.org] Sent: Thursday, August 04, 2005 4:02 AM To: 河野　誠(ネットワーク運用本部) Cc: nanog(a)merit.edu; joelja(a)darkwing.uoregon.edu Subject: Re: Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter On Aug 3, 2005, at 7:45 AM, <mkawano(a)bb.softbank.co.jp> wrote: > > Hi > > Thank you for your reply. > >> Makoto san, can you provide an ip-address within your assigned range >> that people can ping to test? > You can ping to 126.66.0.30/8. Just out of curiosity... are you going to continue to announce each individual /16 or will you consolidate to a single /8 announcement? > > regards, > -- > Makoto Kawano <mkawano(a)bb.softbank.co.jp> > SOFTBANK BB Corp. > Yahoo!BB Network Operation Center > > -----Original Message----- > From: Joel Jaeggli [mailto:joelja@darkwing.uoregon.edu] > Sent: Wednesday, August 03, 2005 8:22 PM > To: 河野　誠(ネットワーク運用本部) > Cc: nanog(a)merit.edu > Subject: Re: Traffic to our customer's address(126.0.0.0/8) seems > blocked by packet filter > > > On Wed, 3 Aug 2005, mkawano(a)bb.softbank.co.jp wrote: > >> >> Dear Network Operators and whom it may concern >> >> I hope you are doing well, We are facing a difficult problem and we >> would like to ask your assistance! > > Makoto san, can you provide an ip-address within your assigned range > that people can ping to test? > > regards > joelja > >> The following address blocks were allocated from IANA to APNIC on the >> 27th of JAN of 2005. Please refer to the following link. >> http://www.cymru.com/Documents/bogon-list.html >> --- >> Changes in version 2.6 (27 JAN 2005) >> 124/8, 125/8 and 126/8 allocated to APNIC (JAN 2005). >> Removed from the bogon lists. >> --- >> >> Softbank BB (AS17676) was allocated 126/8 from APNIC, and Softbank BB >> (AS17676) immediately tried to use 126/8. >> However Softbank BB could not access the famous site using 126/8, It >> seems some of ISPs are blocking 126/8 due to outdated filter. >> >> Ladies and gentlemen, please check the following URL! >> http://www.cymru.com/Documents/bogon-list.html >> >> and if you find out you have outdated filter, please update the >> filter immediately. >> >> Please let me know if you have any problem, concern or doubt >> regarding opening a filter for 126/8, please let me know. >> >> Best regards & Thanks in advance, >> -- >> Makoto Kawano <mkawano(a)bb.softbank.co.jp> SOFTBANK BB Corp. >> Yahoo!BB Network Operation Center >> > > -- > ----------------------------------------------------------------------- > --- > Joel Jaeggli Unix Consulting > joelja(a)darkwing.uoregon.edu > GPG Key Fingerprint: 5C6E 0104 BAF0 40B0 5BD3 C38B F000 35AB B67F > 56B2 >

2 1

RE: Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter
by mkawano＠bb.softbank.co.jp 03 Aug '05

03 Aug '05

Hi Thank you for your reply. >Makoto san, can you provide an ip-address within your assigned range that people can ping to test? You can ping to 126.66.0.30/8. regards, -- Makoto Kawano <mkawano(a)bb.softbank.co.jp> SOFTBANK BB Corp. Yahoo!BB Network Operation Center -----Original Message----- From: Joel Jaeggli [mailto:joelja@darkwing.uoregon.edu] Sent: Wednesday, August 03, 2005 8:22 PM To: 河野　誠(ネットワーク運用本部) Cc: nanog(a)merit.edu Subject: Re: Traffic to our customer's address(126.0.0.0/8) seems blocked by packet filter On Wed, 3 Aug 2005, mkawano(a)bb.softbank.co.jp wrote: > > Dear Network Operators and whom it may concern > > I hope you are doing well, We are facing a difficult problem and we > would like to ask your assistance! Makoto san, can you provide an ip-address within your assigned range that people can ping to test? regards joelja > The following address blocks were allocated from IANA to APNIC on the 27th of JAN of 2005. Please refer to the following link. > http://www.cymru.com/Documents/bogon-list.html > --- > Changes in version 2.6 (27 JAN 2005) > 124/8, 125/8 and 126/8 allocated to APNIC (JAN 2005). > Removed from the bogon lists. > --- > > Softbank BB (AS17676) was allocated 126/8 from APNIC, and Softbank BB (AS17676) immediately tried to use 126/8. > However Softbank BB could not access the famous site using 126/8, It seems some of ISPs are blocking 126/8 due to outdated filter. > > Ladies and gentlemen, please check the following URL! > http://www.cymru.com/Documents/bogon-list.html > > and if you find out you have outdated filter, please update the filter immediately. > > Please let me know if you have any problem, concern or doubt regarding opening a filter for 126/8, please let me know. > > Best regards & Thanks in advance, > -- > Makoto Kawano <mkawano(a)bb.softbank.co.jp> SOFTBANK BB Corp. > Yahoo!BB Network Operation Center > -- -------------------------------------------------------------------------- Joel Jaeggli Unix Consulting joelja(a)darkwing.uoregon.edu GPG Key Fingerprint: 5C6E 0104 BAF0 40B0 5BD3 C38B F000 35AB B67F 56B2

9 9