March 2007 - Test - lists.nanog.org

RE: On-going Internet Emergency and Domain Names
by Fergie 31 Mar '07

31 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Matt Ghali <matt(a)snark.net> wrote: >On Sat, 31 Mar 2007, Fergie wrote: > >> The Registry policies, as they stand today, enable criminals. > >and airlines enable drug smugglers. idiot. > So very clever. If you're not part of the solution... etc. Cheers, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDt11q1pz9mNUZTMRAk/yAKD0Io4pZSmtlXtnRs2DyhG3uCoufQCg4XWr htOnWKGKRCrKPm08RbRlzZk= =kJw0 -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

RE: On-going Internet Emergency and Domain Names
by Fergie 31 Mar '07

31 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "william(at)elan.net" <william(a)elan.net> wrote: >But those are policy process issues and this is an operations mail >list. Original question raised is who is ultimately better at acting >on dns operational issues? Do you want all issues going through 100s >of different registrars with some as "responsible" as RegisterFly? When the policies are broken, and allow this type of behaviors, then it becomes an operational issue. Period. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDtw/q1pz9mNUZTMRAhDfAKCDM2CIzl2ukDUYVPpXVytFBfr0ZACfZQMX w9csTPEvM3mtCYLkcPmU0lY= =MPPT -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Re: On-going Internet Emergency and Domain Names
by Fergie 31 Mar '07

31 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Gadi Evron <ge(a)linuxbox.org> wrote: >There is a current on-going Internet emergency: a critical 0day >vulnerability currently exploited in the wild threatens numerous desktop >systems which are being compromised and turned into bots, and the domain >names hosting it are a significant part of the reason why this attack has >not yet been mitigated. > >This incident is currenly being handled by several operational groups. > ...and before people starting bashing Gadi for being off-topic, etc., I'll side with him on the fact that this particular issue appears to be quite serious. Please check the facts regarding this issue before firing up your flame-throwers -- this weekend could prove to be a quite horrible one. - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDcayq1pz9mNUZTMRAj48AKCVdw3bZ63ryIAI6f/NSbABZR10VACg3iZf thCHKv5hpQ6Dqrq+iY4j1J8= =MoWp -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

5 4

Re: On-going Internet Emergency and Domain Names
by Fergie 30 Mar '07

30 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- Jeff Shultz <jeffshultz(a)wvi.com> wrote: >So, is there a list of domains that we could null-route if we could convince our DNS managers to set us up as the SOA for those domains on our local DNS servers - thus protecting our own customers somewhat? > >I won't discount the assertion that there is some sort of emergency occurring. I would however, like to see a bit of a reference to where we can learn more about what is going on (I assume this is the javascript exploit I heard about a couple days ago). > Yes -- I would suggest that the best point of reference right now is the SANS ISC Daily Handler's Diary. They have done a great job of summarizing the issues: http://isc.sans.org/ - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDcucq1pz9mNUZTMRAp6KAKCB2Pm1AE1Muawlfz33pSfb0Ij67wCeM7Sk 57+JNx+REjiILkNkdSerqQQ= =d3Bq -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Link-Rank 1.0 alpha for visualizing BGP routing changes
by Mohit Lad 30 Mar '07

30 Mar '07

Dear all, We recently released an alpha version of Link-Rank 1.0 tool. Summary: Link-Rank works by weighing AS-AS links from each BGP router by the number of BGP routes carried, and visualizes routing events as changes in AS-AS link weights. Red edges represent loss of routes while green edges represent gain of routes. The tool can currently visualize data starting from January 1, 2007 from RouteViews' Oregon collector, with a time lag of 1-2 hours. The tool can be downloaded from http://sourceforge.net/projects/link-rank/ More information about the Link-Rank project can be found on the website http://linkrank.cs.ucla.edu/ The new version has various improvements over existing version including 1. Better handling of very large routing events. 2. Ability to save and load graphs. Some sample events are included in the "Examples" directory. 3. Near real-time continuous visualization (This feature is being tested and will be available in the beta release soon). 4. Redesigned GUI based on feedback from previous release. We expect to move to beta release in a few weeks and would really appreciate any bug reports or feature requests. The full source code of the tool will be available with the beta release. We will also be releasing a set of scripts and instructions to be able to use the tool with your own BGP data. We hope you find this tool useful. Feel free to send us an email at linkrankhelp-at-cs-dot-ucla-dot-edu Thanks Link-Rank team

1 0

ISPs & BCP38
by Fergie 30 Mar '07

30 Mar '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I would like to talk briefly to any ISPs who implement BCP38 -- just a couple of casual questions. If you could contact me off-list, it would be much appreciated. Cheers, - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.0 (Build 214) wj8DBQFGDVMtq1pz9mNUZTMRAlH5AKDYdEVAB7kRblbGIsDz884b3MR0OQCg7w3D wR4C+PcVHjQ2xBqL1IJbSMs= =b6rW -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 30 Mar '07

30 Mar '07

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 31 Mar, 2007 Analysis Summary ---------------- BGP routing table entries examined: 216896 Prefixes after maximum aggregation: 116021 Deaggregation factor: 1.87 Unique aggregates announced to Internet: 105580 Total ASes present in the Internet Routing Table: 24788 Origin-only ASes present in the Internet Routing Table: 21588 Origin ASes announcing only one prefix: 10438 Transit ASes present in the Internet Routing Table: 3200 Transit-only ASes present in the Internet Routing Table: 71 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 32 Max AS path prepend of ASN (31269) 23 Prefixes from unregistered ASNs in the Routing Table: 4 Unregistered ASNs in the Routing Table: 5 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1696136904 Equivalent to 101 /8s, 24 /16s and 254 /24s Percentage of available address space announced: 45.8 Percentage of allocated address space announced: 62.9 Percentage of available address space allocated: 72.8 Total number of prefixes smaller than registry allocations: 113042 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 49774 Total APNIC prefixes after maximum aggregation: 20064 APNIC Deaggregation factor: 2.48 Prefixes being announced from the APNIC address blocks: 46835 Unique aggregates announced from the APNIC address blocks: 21082 APNIC Region origin ASes present in the Internet Routing Table: 2911 APNIC Region origin ASes announcing only one prefix: 783 APNIC Region transit ASes present in the Internet Routing Table: 432 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 289521472 Equivalent to 17 /8s, 65 /16s and 191 /24s Percentage of available APNIC address space announced: 71.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 116/6, 120/6, 124/7, 126/8, 202/7 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 105390 Total ARIN prefixes after maximum aggregation: 61644 ARIN Deaggregation factor: 1.71 Prefixes being announced from the ARIN address blocks: 77433 Unique aggregates announced from the ARIN address blocks: 30092 ARIN Region origin ASes present in the Internet Routing Table: 11448 ARIN Region origin ASes announcing only one prefix: 4390 ARIN Region transit ASes present in the Internet Routing Table: 1049 Average ARIN Region AS path length visible: 3.4 Max ARIN Region AS path length visible: 21 Number of ARIN addresses announced to Internet: 323997824 Equivalent to 19 /8s, 79 /16s and 208 /24s Percentage of available ARIN address space announced: 71.5 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959 ARIN Address Blocks 24/8, 63/8, 64/5, 72/6, 76/8, 96/6, 199/8, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 44789 Total RIPE prefixes after maximum aggregation: 29241 RIPE Deaggregation factor: 1.53 Prefixes being announced from the RIPE address blocks: 41313 Unique aggregates announced from the RIPE address blocks: 27670 RIPE Region origin ASes present in the Internet Routing Table: 9394 RIPE Region origin ASes announcing only one prefix: 4949 RIPE Region transit ASes present in the Internet Routing Table: 1516 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 32 Number of RIPE addresses announced to Internet: 296694528 Equivalent to 17 /8s, 175 /16s and 51 /24s Percentage of available RIPE address space announced: 73.7 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-43007 RIPE Address Blocks 62/8, 77/8, 78/7, 80/5, 88/6, 92/7, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 14458 Total LACNIC prefixes after maximum aggregation: 4089 LACNIC Deaggregation factor: 3.54 Prefixes being announced from the LACNIC address blocks: 12533 Unique aggregates announced from the LACNIC address blocks: 7058 LACNIC Region origin ASes present in the Internet Routing Table: 779 LACNIC Region origin ASes announcing only one prefix: 258 LACNIC Region transit ASes present in the Internet Routing Table: 136 Average LACNIC Region AS path length visible: 4.2 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 38542336 Equivalent to 2 /8s, 76 /16s and 28 /24s Percentage of available LACNIC address space announced: 57.4 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 2478 Total AfriNIC prefixes after maximum aggregation: 977 AfriNIC Deaggregation factor: 2.54 Prefixes being announced from the AfriNIC address blocks: 1883 Unique aggregates announced from the AfriNIC address blocks: 1147 AfriNIC Region origin ASes present in the Internet Routing Table: 184 AfriNIC Region origin ASes announcing only one prefix: 58 AfriNIC Region transit ASes present in the Internet Routing Table: 37 Average AfriNIC Region AS path length visible: 3.6 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 5439488 Equivalent to 0 /8s, 83 /16s and 0 /24s Percentage of available AfriNIC address space announced: 16.2 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1286 9438 280 CHINANET-BACKBONE 4755 1172 383 77 Videsh Sanchar Nigam Ltd. Aut 9583 1104 78 376 Sify Limited 9498 966 469 70 BHARTI BT INTERNET LTD. 4766 784 4943 313 Korea Telecom (KIX) 23577 784 35 709 Korea Telecom (ATM-MPLS) 17488 624 41 31 Hathway IP Over Cable Interne 7545 602 142 78 TPG Internet Pty Ltd 1221 580 1973 454 Telstra Pty Ltd 18101 538 116 27 Reliance Infocom Ltd Internet 17676 503 10935 65 Softbank BB Corp. 4668 502 68 10 LG-EDS Systems Inc. 9443 454 111 74 Primus Telecommunications 4812 451 791 72 China Telecom (Shanghai) 7474 380 215 259 SingTel Optus Pty Ltd 4802 360 86 149 Wantree Development 17557 360 35 175 Pakistan Telecom 4837 343 4484 154 chinanet IDC center beijing n 17974 341 129 14 PT TELEKOMUNIKASI INDONESIA 2907 338 1749 311 SINET Japan ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1493 6125 978 AT&T WorldNet Services 4323 1268 1020 352 Time Warner Telecom 2386 1090 558 732 AT&T Data Communications Serv 6478 1077 331 153 AT&T Worldnet Services 6197 1029 676 498 BellSouth Network Solutions, 11492 1017 102 12 Cable One 18566 998 288 9 Covad Communications 701 952 6660 726 UUNET Technologies, Inc. 174 942 6791 860 Cogent Communications 1239 820 2715 571 Sprint 20115 809 720 426 Charter Communications 7011 780 225 462 Citizens Utilities 19262 722 2582 162 Verizon Global Networks 209 721 3733 572 Qwest 22773 693 1871 42 Cox Communications, Inc. 721 620 21756 274 DLA Systems Automation Center 852 590 1095 377 Telus Advanced Communications 5668 581 160 17 CenturyTel Internet Holdings, 7029 567 456 81 Alltel Information Services, 19916 567 49 59 OLM LLC RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 521 1893 415 UUNET - Commercial IP service 24863 338 46 31 LINKdotNET AS number 3301 310 1199 289 TeliaNet Sweden 3320 302 4993 250 Deutsche Telekom AG 6746 271 95 249 Dynamic Network Technologies, 8220 268 468 258 COLT Telecommunications 680 258 2044 251 DFN-IP service G-WiN 5416 254 16 12 BATELCO-BH 3215 239 2256 92 France Telecom Transpac 8708 235 287 228 Romania Data Systems S.A. 1257 222 1180 168 SWIPnet Swedish IP Network 3269 215 2583 72 TELECOM ITALIA 3246 208 356 197 Song Networks 8551 206 196 30 Bezeq International 30890 206 17 96 SC Kappa Invexim SRL 20858 199 34 4 EgyNet 3352 195 1795 36 Ibernet, Internet Access Netw 3300 185 171 90 AUCS Communications Services 12479 185 578 6 Uni2 Autonomous System 786 175 1795 175 The JANET IP Service LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1060 2008 209 UniNet S.A. de C.V. 11830 483 299 19 Instituto Costarricense de El 11172 361 116 66 Servicios Alestra S.A de C.V 16814 361 22 8 NSS, S.A. 22047 307 206 11 VTR PUNTO NET S.A. 7303 262 142 23 Telecom Argentina Stet-France 6471 256 74 30 ENTEL CHILE S.A. 14117 241 17 14 Telefonica del Sur S.A. 11556 237 128 4 Cable-Wireless Panama 6147 230 182 20 Telefonica Del Peru 6503 212 171 84 AVANTEL, S.A. 20299 182 25 25 NEWCOM AMERICAS 10481 181 72 8 Prima S.A. 10620 163 48 21 TVCABLE BOGOTA 21826 156 28 59 INTERCABLE 23216 156 19 42 RAMtelecom Telecomunicaciones 7910 154 11 29 ANDINET ON LINE 19429 148 91 38 E.T.B. 18822 146 9 6 TELEFONICA MANQUEHUE 14522 145 22 5 SatNet S.A. AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 291 868 232 The Internet Solution 8452 207 60 6 TEDATA 6713 143 135 11 Itissalat Al-MAGHRIB 2018 138 309 113 Tertiary Education Network 15475 128 84 4 Nile Online 5536 123 8 15 Internet Egypt Network 33783 111 6 5 EEPAD TISP TELECOM & INTERNET 2905 85 176 74 The Internetworking Company o 24835 85 48 6 RAYA Telecom - Egypt 15706 55 12 4 Sudatel Internet Exchange Aut 23889 49 16 13 MAURITIUS TELECOM 5713 44 294 34 Telkom SA Ltd 33774 42 13 23 AS Number for Telecom Algeria 12455 34 6 3 Jambonet Autonomous system 16637 33 21 25 Johnnic e-Ventures 33766 33 2 1 Nyala Communications Pty Ltd 8524 30 2 6 AUCEGYPT Autonomous System 33776 27 2 5 Starcomms Nigeria Limited 21280 25 4 4 Swift Global Kenya Ltd.Is an 10798 23 1 14 Standard Bank of South Africa Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4755 1172 1095 Videsh Sanchar Nigam Ltd. Aut 4134 1286 1006 CHINANET-BACKBONE 11492 1017 1005 Cable One 18566 998 989 Covad Communications 6478 1077 924 AT&T Worldnet Services 4323 1268 916 Time Warner Telecom 9498 966 896 BHARTI BT INTERNET LTD. 8151 1060 851 UniNet S.A. de C.V. 9583 1104 728 Sify Limited 22773 693 651 Cox Communications, Inc. 17488 624 593 Hathway IP Over Cable Interne 5668 581 564 CenturyTel Internet Holdings, 19262 722 560 Verizon Global Networks 6197 1029 531 BellSouth Network Solutions, 7545 602 524 TPG Internet Pty Ltd 18101 538 511 Reliance Infocom Ltd Internet 19916 567 508 OLM LLC 855 566 495 Canadian Research Network 4668 502 492 LG-EDS Systems Inc. 7029 567 486 Alltel Information Services, List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65332 PRIVATE 63.166.106.192/27 1803 SPRINT 65412 PRIVATE 124.254.58.0/23 7497 Computer Network Inf 24410 UNALLOCATED 203.119.28.0/24 4134 CHINANET-BACKBONE 65412 PRIVATE 220.113.17.0/24 7497 Computer Network Inf Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 7.1.1.0/24 1239 Sprint 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 172.33.1.0/24 7018 AT&T WorldNet Services 180.190.0.0/16 24003 JUBILANT ORGANOSYS LTD., INDI 192.0.10.0/24 9498 BHARTI BT INTERNET LTD. 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.153.136.0/21 721 DLA Systems Automation Center 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:9 /10:12 /11:32 /12:120 /13:230 /14:442 /15:845 /16:9340 /17:3803 /18:6259 /19:13409 /20:15005 /21:13598 /22:17626 /23:19002 /24:114859 /25:778 /26:805 /27:491 /28:61 /29:40 /30:71 /31:0 /32:40 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6478 1068 1077 AT&T Worldnet Services 11492 1003 1017 Cable One 18566 980 998 Covad Communications 9583 944 1104 Sify Limited 7018 815 1493 AT&T WorldNet Services 2386 812 1090 AT&T Data Communications Serv 6197 796 1029 BellSouth Network Solutions, 23577 770 784 Korea Telecom (ATM-MPLS) 7011 683 780 Citizens Utilities 9498 629 966 BHARTI BT INTERNET LTD. 4766 589 784 Korea Telecom (KIX) 4755 569 1172 Videsh Sanchar Nigam Ltd. Aut 19916 562 567 OLM LLC 4323 527 1268 Time Warner Telecom 4668 492 502 LG-EDS Systems Inc. 15270 484 516 PaeTec.net -a division of Pae 855 464 566 Canadian Research Network 18101 462 538 Reliance Infocom Ltd Internet 5668 449 581 CenturyTel Internet Holdings, 17488 446 624 Hathway IP Over Cable Interne Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 7:1 8:64 9:1 12:1793 15:19 16:3 17:3 18:8 20:36 24:934 25:1 32:53 38:291 40:56 41:111 44:2 47:4 52:4 55:1 56:3 57:25 58:355 59:359 60:224 61:905 62:1016 63:1973 64:3098 65:2316 66:3191 67:766 68:636 69:1792 70:489 71:110 72:1240 73:1 74:320 75:171 76:31 77:111 80:824 81:785 82:660 83:376 84:481 85:767 86:384 87:465 88:249 89:874 90:19 91:235 97:1 98:1 116:11 117:1 118:1 119:1 120:1 121:161 122:522 123:63 124:756 125:918 128:273 129:224 130:120 131:350 132:51 133:10 134:190 135:37 136:180 137:87 138:193 139:56 140:482 141:143 142:371 143:212 144:280 145:43 146:323 147:148 148:386 149:188 150:115 151:123 152:93 153:120 154:5 155:250 156:152 157:179 158:161 159:152 160:103 161:90 162:235 163:141 164:452 165:400 166:246 167:294 168:500 169:119 170:393 171:15 172:1 189:227 190:547 192:5735 193:3717 194:3061 195:2204 196:911 198:3735 199:3287 200:4607 201:1008 202:7243 203:7410 204:3972 205:2096 206:2415 207:2882 208:2599 209:3601 210:2396 211:931 212:1279 213:1422 214:410 215:39 216:3964 217:1174 218:355 219:298 220:905 221:389 222:272 End of report Report Website: http://thyme.apnic.net

1 0

TCP and WAN issue
by Philip Lavine 30 Mar '07

30 Mar '07

To all, I have an east coast and west coast data center connected with a DS3. I am running into issues with streaming data via TCP and was wondering besides hardware acceleration, is there any options at increasing throughput and maximizing the bandwidth? How can I overcome the TCP stack limitations inherent in Windows (registry tweaks seem to not functions too well)? Philip ____________________________________________________________________________________ Need Mail bonding? Go to the Yahoo! Mail Q&A for great tips from Yahoo! Answers users. http://answers.yahoo.com/dir/?link=list&sid=396546091

17 21

What is the correct way to get Whitelisted?
by Wil Schultz 30 Mar '07

30 Mar '07

Sorry of this is off topic: So at my workplace we have a fairly fast moving newsletter machine that people sign up for. Rules are followed as in: Mail isn't sent unless people request it, an address is removed upon subscription cancel, and addresses are removed after the 3rd bounce. Life was reasonably well up until about a week ago at which point we moved this newsletter machine and gave it a new address. At this point most of the major ISPs see a bunch of email coming from this new address and proceed to block it. I understand completely why they block this kind of traffic but I am wondering what we can do proactively to prove we are good internet citizens to minimize these problems in the future? We have already published SPF records and made sure forward and reverse entries exist, are there other things that can be done? On another side note, if anyone has information on how to get whitelisted (or DeBlacklisted :-) ) from Hotmail, MSN, Earthlink, AOL, Yahoo!, etc feel free to email offlist... Thanks!

4 3

BGP Update Report
by cidr-report＠potaroo.net 30 Mar '07

30 Mar '07

BGP Update Report Interval: 16-Mar-07 -to- 29-Mar-07 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4621 18197 1.5% 128.1 -- UNSPECIFIED UNINET-TH 2 - AS17974 17117 1.4% 50.8 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 3 - AS24731 13611 1.1% 349.0 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 4 - AS306 11181 0.9% 61.4 -- DNIC - DoD Network Information Center 5 - AS9829 10205 0.8% 54.6 -- BSNL-NIB National Internet Backbone 6 - AS3255 9609 0.8% 72.2 -- UARNET-AS Ukrainian Academic and Research Network 7 - AS7545 9414 0.8% 16.0 -- TPG-INTERNET-AP TPG Internet Pty Ltd 8 - AS721 8374 0.7% 14.3 -- DISA-ASNBLK - DoD Network Information Center 9 - AS6198 8087 0.7% 13.2 -- BATI-MIA - BellSouth Network Solutions, Inc 10 - AS9583 8062 0.7% 7.4 -- SIFY-AS-IN Sify Limited 11 - AS702 7989 0.6% 13.1 -- AS702 MCI EMEA - Commercial IP service provider in Europe 12 - AS12654 7901 0.6% 202.6 -- RIPE-NCC-RIS-AS RIPE NCC RIS project 13 - AS9121 7530 0.6% 29.3 -- TTNET TTnet Autonomous System 14 - AS17885 7507 0.6% 85.3 -- JKTXLNET-AS-AP PT Excelcomindo Pratama 15 - AS17645 6766 0.5% 615.1 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 16 - AS18231 6416 0.5% 53.9 -- EXATT-AS-AP Exatt Technologies Private Ltd. 17 - AS4657 6287 0.5% 29.9 -- STARHUBINTERNET-AS Starhub Internet, Singapore 18 - AS8151 6267 0.5% 6.1 -- Uninet S.A. de C.V. 19 - AS5803 5983 0.5% 63.0 -- DDN-ASNBLK - DoD Network Information Center 20 - AS24326 5801 0.5% 52.3 -- TTT-AS-AP TT&T Public Company Limited, Service Provider,Bangkok TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS38151 1701 0.1% 1701.0 -- ENUM-AS-ID APJII-RD 2 - AS11828 3309 0.3% 1654.5 -- SOINET - State of Illinois/CMS 3 - AS31307 1200 0.1% 1200.0 -- YKYATIRIM YAPI KREDI YATIRIM 4 - AS34378 866 0.1% 866.0 -- RUG-AS Razguliay-UKRROS Group 5 - AS38077 3392 0.3% 848.0 -- TIMOR-TELECOM-AS-AP Timor Telecom, SA 6 - AS3043 3376 0.3% 844.0 -- AMPHIB-AS - Amphibian Media Corporation 7 - AS10210 823 0.1% 823.0 -- HOSTECHNET-AP Hostech.Net 8 - AS41664 784 0.1% 784.0 -- SEMSER-AS Semser Provider LLP 9 - AS31594 773 0.1% 773.0 -- FORTESS-AS Fortess LLC Network 10 - AS17645 6766 0.5% 615.1 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 11 - AS33188 1190 0.1% 595.0 -- SCS-NETWORK-1 - Sono Corporate Suites 12 - AS33025 554 0.0% 554.0 -- QE-ASN-01 - Quinn Emanuel Urquhart Oliver & Hedges LLP 13 - AS30707 1577 0.1% 525.7 -- 14 - AS19580 522 0.0% 522.0 -- ZONETEL - ZONE TELECOM, INC. 15 - AS39610 948 0.1% 474.0 -- LCH-CLEARNET LCH Clearnet 16 - AS29700 1338 0.1% 446.0 -- CYPRESS-SEMICONDUCTOR - Cypress Semiconductor 17 - AS12408 419 0.0% 419.0 -- BIKENT-AS Bikent Ltd. Autonomous system 18 - AS5310 386 0.0% 386.0 -- DODNIC - DoD Network Information Center 19 - AS22779 1093 0.1% 364.3 -- 20 - AS12890 359 0.0% 359.0 -- SEPTOR-NET Septor Ltd. TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 89.4.129.0/24 3440 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 2 - 89.4.131.0/24 3425 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 3 - 209.140.24.0/24 3373 0.2% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 4 - 163.191.160.0/19 3308 0.2% AS11828 -- SOINET - State of Illinois/CMS 5 - 89.4.128.0/24 3223 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 6 - 89.4.130.0/24 2435 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 7 - 58.65.1.0/24 2391 0.2% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 8 - 125.162.94.0/23 2372 0.1% AS17974 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 9 - 80.243.64.0/20 2192 0.1% AS21332 -- NTC-AS New Telephone Company 10 - 202.136.176.0/24 2173 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 11 - 202.136.182.0/24 2168 0.1% AS17645 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 12 - 62.89.226.0/24 2020 0.1% AS20663 -- INAR-VOLOGDA-AS Autonomous System of Vologda 13 - 59.94.240.0/20 1955 0.1% AS9829 -- BSNL-NIB National Internet Backbone 14 - 59.94.160.0/20 1955 0.1% AS9829 -- BSNL-NIB National Internet Backbone 15 - 59.94.192.0/20 1955 0.1% AS9829 -- BSNL-NIB National Internet Backbone 16 - 59.95.240.0/20 1955 0.1% AS9829 -- BSNL-NIB National Internet Backbone 17 - 203.119.54.0/24 1707 0.1% AS18347 -- IPNET-ID Indo Pratama CyberNet, PT. AS38151 -- ENUM-AS-ID APJII-RD 18 - 216.85.83.0/24 1598 0.1% AS4323 -- TWTC - Time Warner Telecom, Inc. 19 - 81.213.47.0/24 1590 0.1% AS9121 -- TTNET TTnet Autonomous System 20 - 64.95.193.0/24 1562 0.1% AS30707 -- Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0