January 2006 - Test - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 20 Jan '06

20 Jan '06

This report has been generated at Fri Jan 20 21:46:42 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 13-01-06 175331 116944 14-01-06 176919 116794 15-01-06 175363 116841 16-01-06 175331 116943 17-01-06 175450 116905 18-01-06 175507 116948 19-01-06 175709 117045 20-01-06 176004 117172 AS Summary 21264 Number of ASes in routing system 8807 Number of ASes announcing only one prefix 1463 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91246848 Largest address span announced by an AS (/32s) AS721 : DLA-ASNBLOCK-AS - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 20Jan06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 176028 117148 58880 33.4% All ASes AS4323 1198 237 961 80.2% TWTC - Time Warner Telecom AS18566 891 9 882 99.0% COVAD - Covad Communications Co. AS721 1030 309 721 70.0% DLA-ASNBLOCK-AS - DoD Network Information Center AS4134 974 254 720 73.9% CHINANET-BACKBONE No.31,Jin-rong Street AS22773 608 39 569 93.6% CCINET-2 - Cox Communications Inc. AS855 571 65 506 88.6% CANET-ASN-4 - Canadian Research Network AS7018 1463 957 506 34.6% ATT-INTERNET4 - AT&T WorldNet Services AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS3602 520 107 413 79.4% SPRINT-CA-AS - Sprint Canada Inc. AS812 438 28 410 93.6% ROGERS-CABLE - Rogers Cable Inc. AS6197 969 570 399 41.2% BATI-ATL - BellSouth Network Solutions, Inc AS11492 644 249 395 61.3% CABLEONE - CABLE ONE AS9498 507 128 379 74.8% BBIL-AP BHARTI BT INTERNET LTD. AS4766 678 303 375 55.3% KIXS-AS-KR Korea Telecom AS17676 477 102 375 78.6% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS17488 436 81 355 81.4% HATHWAY-NET-AP Hathway IP Over Cable Internet AS6467 389 52 337 86.6% ESPIRECOMM - e.spire Communications, Inc. AS4755 633 306 327 51.7% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS9583 838 545 293 35.0% SIFY-AS-IN Sify Limited AS22047 379 89 290 76.5% VTR BANDA ANCHA S.A. AS18101 326 37 289 88.7% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS15270 356 75 281 78.9% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS14654 292 13 279 95.5% WAYPORT - Wayport AS5668 515 243 272 52.8% AS-5668 - CenturyTel Internet Holdings, Inc. AS3352 302 34 268 88.7% TELEFONICA-DATA-ESPANA Internet Access Network of TDE AS6167 332 65 267 80.4% CELLCO-PART - Cellco Partnership AS9929 322 57 265 82.3% CNCNET-CN China Netcom Corp. AS16814 295 42 253 85.8% NSS S.A. AS1239 848 605 243 28.7% SPRINTLINK - Sprint AS6517 369 128 241 65.3% YIPESCOM - Yipes Communications, Inc. Total 18163 5794 12369 68.1% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.25.224.0/20 AS12180 INTERNAP-2BLK - Internap Network Services 64.25.224.0/22 AS15083 INFOLINK-MIA-US - Infolink Information Services Inc. 64.38.96.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 64.127.128.0/17 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.224.0/20 AS3356 LEVEL3 Level 3 Communications 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.51.134.0/24 AS29876 LNTC - Latency LLC 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.0.0/21 AS30033 NHI-NETWORKS - NHI Networks 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.117.9.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.16.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.18.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.20.0/24 AS30085 NHI-COLOCATIONS - New Horizon Collocations 66.117.21.0/24 AS30033 NHI-NETWORKS - NHI Networks 66.117.23.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.25.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.26.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.117.27.0/24 AS31972 EMGINECONCEPT-01 - Emagine Concept, Inc. 66.186.192.0/19 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.187.96.0/24 AS10026 ANC Asia Netcom Corporation 66.187.108.0/24 AS10026 ANC Asia Netcom Corporation 66.187.109.0/24 AS10026 ANC Asia Netcom Corporation 66.216.0.0/18 AS19654 HOSTING-NETWORK - HOSTING-NETWORK, INC. 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 85.129.3.0/24 AS14585 CIFNET - CIFNet, Inc. 85.129.4.0/24 AS14585 CIFNET - CIFNet, Inc. 90.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 90.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 132.0.0.0/10 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 137.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 138.136.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.44.0.0/24 AS5501 FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.72.0.0/16 AS4780 SEEDNET Digital United Inc. 192.72.0.0/18 AS4780 SEEDNET Digital United Inc. 192.72.192.0/18 AS4780 SEEDNET Digital United Inc. 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS559 SWITCH SWITCH, Swiss Education and Research Network 192.96.36.0/24 AS5713 AFRINIC African Network Information Center 192.96.37.0/24 AS10474 AFRINIC African Network Information Center 192.96.135.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.136.0/23 AS2018 TENET - 1 - The Uninet Project 192.96.140.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.143.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.145.0/24 AS2018 TENET - 1 - The Uninet Project 192.96.177.0/24 AS6083 AFRINIC African Network Information Center 192.96.250.0/24 AS2018 TENET - 1 - The Uninet Project 192.107.104.0/24 AS6458 GUATEL 192.119.135.0/24 AS270 PSCNI-AS - National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP DFN-IP service X-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.136.53.0/24 AS8346 SONATEL-AS Autonomous System 192.153.144.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.172.0.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 192.188.208.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 193.0.246.0/24 AS3303 SWISSCOM Swisscom Solutions Ltd 193.32.19.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.32.20.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.37.236.0/24 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.153.156.0/24 AS24865 KMITCHELL-AS Keith Mitchell's Network 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.92.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.222.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.249.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.250.0/24 AS2018 TENET - 1 - The Uninet Project 198.54.251.0/24 AS2018 TENET - 1 - The Uninet Project 198.97.72.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.80.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.96.0/19 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.97.240.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.101.4.0/22 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.160.171.0/24 AS7046 UUNET-CUSTOMER - UUNET Technologies, Inc. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.232.133.0/24 AS23075 SKOTOS-AS - Skotos Tech, Inc 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.128.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.130.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.132.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.150.0/24 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.0.0/18 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.16.0/20 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.123.80.0/21 AS721 DLA-ASNBLOCK-AS - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.74.32.0/19 AS9315 CWN-AS-AP Chomanan WorldNet Co., Ltd. 202.80.224.0/19 AS7613 DATALINETHAI-AS-AP Data Line Thai Co., LTD. Internet Service Provider 202.80.231.0/24 AS4750 LOXLEY-TH Loxley Information Co., Ltd. 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.134.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.138.0/24 AS9237 HUTCHCA-AS Corporate Access (HK) Ltd. 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.89.143.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.144.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.145.0/24 AS4637 REACH Reach Network Border AS 203.89.146.0/24 AS4637 REACH Reach Network Border AS 203.89.147.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.148.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.149.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.150.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.151.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.153.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.154.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.158.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.89.159.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.108.96.0/19 AS577 BACOM - Bell Advanced Communications Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.40.192.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.200.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.208.0/21 AS6487 CyberNet de Guatemala S.A. 209.40.216.0/21 AS6487 CyberNet de Guatemala S.A. 209.97.64.0/19 AS6132 INGRESSNET - Ingress Enterprises, Inc w/ Ingress Communications, Inc. 209.112.224.0/20 AS19817 DSLEXTREME - DSL Extreme 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 209.251.0.0/19 AS11036 SISCOM - SISCOM, Inc 216.37.110.0/23 AS4264 CERNET-ASN-BLOCK - California Education and Research Federation Network 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.82.160.0/20 AS20481 CALYX-NL Calyx Internet B.V. Netherlands 216.96.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.228.64.0/21 AS6295 WHIDBEY1 - Whidbey Internet Services 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Security inside AS
by Glen Kent 20 Jan '06

20 Jan '06

Hi, I understand that in theory we need to protect our IGPs from all sorts of attacks. But do we really have service providers who enable authentication (MD5, etc) inside their ASes for their IGPs (OSPF/IS-IS)? Thanks, Glen

2 2

ORDB.ORG Outage
by Jon R. Kibler 19 Jan '06

19 Jan '06

Anyone else having ORDB.ORG Temp lookup failures? Seems to have been going on since about 1900 UTC today. Using web site to do lookups also fails or is VERY slow. Anyone know what is going on here? THANKS! Jon Kibler -- Jon R. Kibler Chief Technical Officer A.S.E.T., Inc. Charleston, SC USA (843) 849-8214 ================================================== Filtered by: TRUSTEM.COM's Email Filtering Service http://www.trustem.com/ No Spam. No Viruses. Just Good Clean Email.

4 4

Re: [MailServer Notification]To sender: eManager settings were matche d and action was taken.
by Alexander Harrowell 19 Jan '06

19 Jan '06

Wank, did I use a fucking naughty shitting word? On 1/19/06, System Attendant <LONSRVMAL01-SA(a)patsystems.com> wrote: > **************** eManager Notification ***************** > > The following message was blocked because it contains sensitive content. > > Source mailbox: a.harrowell(a)gmail.com > Destination mailbox(es): > random@72616e646f6d20323030342d30342d31360a.nosense.org;anti.confidentiality > .notices@gmail.com;jerry@jerry.org;nanog@merit.edu > Rule/Policy: Profanity > Action: Quarantine to D:\Program > Files\Trend\SMCF\Quarantine\2004-09-04\15-50-25.10\2006-01-19\23-04-40.11853 > \DFImessagebody43d01b082e4d.tmp > > Note: ScanMail eManager content filter Blocked an email thought to contain > offensive or inappropriate information." Please contact Internal support if > you have any questions or believe this is a legitimate mail. > > ******************* End of message ********************* > DISCLAIMER: This e-mail is confidential and may also be legally privileged. > If you are not the intended recipient, use of the information contained in > this e-mail (including disclosure, copying or distribution) is prohibited > and may be unlawful. Please inform the sender and delete the message > immediately from your system. This e-mail is attributed to the sender and > may not necessarily reflect the views of the Patsystems Group and no member > of the Patsystems Group accepts any liability for any action taken in > reliance on the contents of this e-mail (other than where it has a legal or > regulatory obligation to do so) or for the consequences of any computer > viruses which may have been transmitted by this e-mail. The Patsystems Group > comprises Patsystems plc and its subsidiary group of companies. >

1 0

Re: Stupidity: A Real Cyberthreat.
by A Satisfied Mind 19 Jan '06

19 Jan '06

On 1/19/06, Jerry Pasker <jerry(a)jerry.org> wrote: > Terrorists want to kill people. Did anyone die when those two > fibers were cut? Did it cripple the US Economy? Did it close the > stock markets? When the markets opened the next day, did stock > prices fall across the board for weeks and months on end? Not > exactly. Will people put bumper stickers on their cars that say > "Remember 1/9?" or "Remember Buckeye and Reno Junction" No. Not one > person will do that. You are oversimplifying things here.... Why was the World Trade Center chosen (twice) to attack.... it is an economic target. All wars are economic, including drug wars and terror wars... what was the COST of 9/11??? A hell of a lot: http://www.ccc.nps.navy.mil/si/aug02/homeland.asp > that? We already cut enough of it without any help from terrorists. > Just in case no one was paying attention, the score is: Lack of > information + guy on backhoe = 675,000 cuts per year: Terrorists = > ZERO. Consider the economic impact of cutting a significant portion of the cross-country fiber capacity in such a way that it is very difficult and time-consuming to repair (let's say, shaped-charges along the two fiber routes every 1 mile or so for 50 miles, in remote terrain), in combination with ambush and execution of the work crews sent out to repair the damage, in combination with a similar types of attacks on major cable landing points in the US. And while you are at it, a truck bomb at 8:30 am Monday morning outside Wall Street. What about an attack that specifically targetted SFTI? http://sfti.siac.com/ How much more critical does this get when you consider that NYSE is going to all-electronic trading in the near future? The IRA carried out very effective economic bombing campaigns in London... is Al-Queda (or a hostile foreign government, say Syria) any less-capable?

3 4

Re: IP Addresses from a different region
by Sam Stickland 19 Jan '06

19 Jan '06

That's a fair point David. I can't of course start naming our clients. I could harp on about how they are a multinational, running legimate operations and blah blah blah.. But you'd only have my word for it. So you'll just have to take my word for the fact that we run an operational that comes down hard on nefrarious activities. Sorry. Sam On Thu, 19 Jan 2006, David Ulevitch wrote: > Be wary. > > Who is this client? Some of us in the security abuse world wouldn't mind a > heads up... > > -david > > > On Jan 19, 2006, at 6:20 AM, Sam Stickland wrote: > >> >> Hi, >> >> Long story short... I'm under some considerable pressure from management to >> obtain a /24 of addresses from ARIN. We are a UK based ISP that are, of >> course, members of RIPE. Is this possible? If I approach one of ARIN's LIRs >> can they obtain ARIN PI space for our client, and are their any volunteers? >> Or, is it the case, that being outside of ARIN's geographic reach that we >> can't approach them? >> >> Short story long... This is for a client that currently has a USA based >> operation, that wants to consolidate everything in one of our colo centres. >> Their USA servers are involved in some of kind advertising system that >> attempts to do geographic location based on the IP address prefix. I am >> assured that traceroutes, SWIP data, and AS number play no part in this >> geographic lookup. >> >> The client insists that they must have addresses from a prefix that appear >> to have been allocated by ARIN for this system to continue to work. The >> language barrier between us has been scrupering attempts by me to get more >> techincal information from them. >> >> As usual management are interested in "solutions not problems" ;) and this >> deal is worth quite a bit of money. I hate to be contributing to the ever >> increasing PI swamp space, but unfortunately I don't pay my own wages. >> >> Any suggestions? >> >> Sam > >

4 3

PI space and colocation
by up＠3.am 19 Jan '06

19 Jan '06

Questions: If one gets PI space from ARIN for their network, then moves the servers to a rack at a data center (still using the space efficiently), will most colocation providers announce this space for them, or would most providers require them to take allocated space from them? Is it a reasonable alternative to establish a BGP connection with the provider over ethernet? Is this ok per ARINs requirements, assuming you first acquired this space under their multihomed network guidelines? TIA, James Smallacombe PlantageNet, Inc. CEO and Janitor up(a)3.am http://3.am =========================================================================

9 12

IP Addresses from a different region
by Sam Stickland 19 Jan '06

19 Jan '06

Hi, Long story short... I'm under some considerable pressure from management to obtain a /24 of addresses from ARIN. We are a UK based ISP that are, of course, members of RIPE. Is this possible? If I approach one of ARIN's LIRs can they obtain ARIN PI space for our client, and are their any volunteers? Or, is it the case, that being outside of ARIN's geographic reach that we can't approach them? Short story long... This is for a client that currently has a USA based operation, that wants to consolidate everything in one of our colo centres. Their USA servers are involved in some of kind advertising system that attempts to do geographic location based on the IP address prefix. I am assured that traceroutes, SWIP data, and AS number play no part in this geographic lookup. The client insists that they must have addresses from a prefix that appear to have been allocated by ARIN for this system to continue to work. The language barrier between us has been scrupering attempts by me to get more techincal information from them. As usual management are interested in "solutions not problems" ;) and this deal is worth quite a bit of money. I hate to be contributing to the ever increasing PI swamp space, but unfortunately I don't pay my own wages. Any suggestions? Sam

2 1

RE: Problems connectivity GE on Foundry BigIron to Cisco 2950T
by sam_ml＠spacething.org 19 Jan '06

19 Jan '06

Hopefully the cisco copper GBIC supports Auto-MDI though, so a straight cable should be good. S On Sun, 15 Jan 2006, David Prall wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > GigE 1000Base-T requires all 4 pairs of wire. Auto-MDI is not supported > on the 2950 series, so it won't handle this automagically. I would test > with speed set to 100 if the foundry can support 10/100/1000 with the > Copper GBIC. Put the two next to each other and test with 1000Base-T > crossover cable, removing all the extra stuff if that doesn't work. > > 1000Base-T requires that pairs 1 and 4 are also crossed along with 2 and 3. > http://en.wikipedia.org/wiki/Crossover_cable > > David > > - -- > David C Prall dcp(a)dcptech.com http://dcp.dcptech.com > > >> -----Original Message----- >> From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On >> Behalf Of Mark Smith >> Sent: Sunday, January 15, 2006 5:44 PM >> To: Randy Bush >> Cc: dhubbard(a)dino.hostasaurus.com; sam_ml(a)spacething.org; >> nanog(a)nanog.org >> Subject: Re: Problems connectivity GE on Foundry BigIron to >> Cisco 2950T >> >> >> Hi Randy, >> >> On Sun, 15 Jan 2006 11:10:04 -1000 >> Randy Bush <randy(a)psg.com> wrote: >> >>> >>>> You are using a crossover cable right? >>>>> I'm having a right mare trying to get a Foundry BigIron to >>>>> connect up to a cisco 2950T, via Gigabit copper. >>> >>> i was under the impression that gige spec handled crossover >>> automagically >>> >> >> According to "Ethernet, The Definitive Guide", that feature is an >> optional part of the spec. >> >> One thing I've heard people encounter is that if they use a cross-over >> cable, which probably really implies a 100BASE-TX cross-over, then the >> ports only go to 100Mbps. A Gig-E rated straight through, in >> conjunction >> with the automatic crossover feature, was necessary to get to GigE. >> >> Regards, >> Mark. >> >> -- >> >> "Sheep are slow and tasty, and therefore must remain >> constantly >> alert." >> - Bruce Schneier, "Beyond Fear" >> > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.0.3 (Build 2932) > > iQEVAwUBQ8rlb4YwPzEDHVgLAQjCAQgAnb36uEi0T6NuJZj7bu2vJXPgr7Y0rFK8 > TjDip2kT1DYwf3mF2j0ZPCWIh7eKM4skx431VB9C8nq5glUwtOv7LYxnyMHCsyTo > W6aixupMiDA2l4po1pxzoNaw1p2CVvdTxhVBEG/AP73+Ls9k2lgJii59X+4BF8qw > ChmZwGdQ8GDOIWKjvax63hbsprBhf1ORUwP2qZPcg2p8P4M0yqznhrk84VpSipGU > itdv/juvrFmfkGyPSozBqErpYx4hmVzBz6uLPQ2cF6ux48sPIUDz3+ta49xKlMwY > zhON0whXxZA49YlwZZV5CzbjAmp8/zJWfMnl76kYkISxOqgX0Xo9dg== > =D7cE > -----END PGP SIGNATURE----- > > >

2 1

Intradomain Traffic Engineering
by Hao Wang 18 Jan '06

18 Jan '06

Hi All, I'm a PhD student currently studying intra-domain traffic engineering, and I have two questions that I really wish to hear some opinions from you network operators. I'm experimenting with a prediction-based intra-domain traffic engineering technique. The technique uses traffic demand matrices observed in the history to predict future traffic demands, and computes a routing that minimizes maximum link utilization (MLU) for those future demands. I evaluate the performance of the technique using Abilene traffic traces collected at every 5 minutes interval. The results show that when the model is able to predict the real traffic matrix, the technique can achieve close to optimal MLU. However, when the model makes wrong prediction, the technique suffers very high MLU (as high as 140%). Basically, I have the following two questions: 1. In the traces I have, there exist several intervals with a huge, sudden increase of traffic on some links. The prediction model I use cannot predict those 'big spikes'. Do these 'big spikes' really happen in operational networks? Or are they merely measurement errors? If they really happen, is there a gradual ramp up of traffic in smaller time scale, say, on the order of tens of seconds? Or do these 'big spikes' really occur very quickly, say, in a few seconds? 2. I have the option to make a tradeoff between average case performance and worst case performance guarantee, but I don't know which one is deemed more important by you. Are ISP networks currently optimized for worst case or average case performance? Is the trade-off between these two an appealing idea, or may the ISP networks are already doing it? I really appreciate any feedback from you about the above two questions, and your help will be acknowledged in any publication about this work. Thanks, Edgar

2 2