December 2008 - Test - lists.nanog.org

Sbc contact
by chaim.rieger＠gmail.com 14 Dec '08

14 Dec '08

Please contact me offlist. Regarding socal connectivity. Thanx Sent via BlackBerry from T-Mobile

1 0

UDP DoS mitigation?
by Rick Ernst 14 Dec '08

14 Dec '08

We've had an increasing rate of DoS attacks that spew tens-of-thousands of small UDP packets to a destination on our network. We are getting roughly 2x our entire normal pps across all providers through one interface, or about 4x normal through the individual interface. The Cisco 7206VXR/NPE-G1 CPU melts (>95% load vs 15% average, 20% normal peak) when this hits. I'm using CEF and ip-route-cache flow on the outside interface. Unicast RPF is also enabled on the interface. Unicast RPF in conjunction with a BGP black-hole generator handles TCP attacks fairly well. Two questions: - Are there any knobs I should be turning in the Cisco config to help with mitigate this? - Are there any platforms that deal with high PPS/small packet more gracefully? We are looking at a network refresh and aren't locked into Cisco as a vendor (although our current IP network consists entirely of Cisco gear). Our current aggregate (all providers, in- plus out-bound) bandwidth is ~500Mbs, but projected growth is 1Gbs within the year. Thanks, Rick

6 7

Re: DDOS - How much is "too much"?
by Jeffrey Lyon 13 Dec '08

13 Dec '08

DDoS protection packages are generally sold with Mbps, PPS, and often TCP-SYN / UDP session limits. -- Jeffrey Lyon, Leadership Team jeffrey.lyon(a)blacklotus.net | http://www.blacklotus.net Black Lotus Communications of The IRC Company, Inc. Look for us at HostingCon 2009 in Washington, DC on August 10th - 12th at Booth #401. > > On Thu, Dec 11, 2008 at 11:57 PM, Tuc at T-B-O-H <ml(a)t-b-o-h.net> wrote: >> Hi, >> >> I have a client who prior to me settled into a non-carrier-neutral >> facility. They were approached this week for "DoS/DDoS protection" which >> they could buy in X Mb/s, 2xX Mb/s or 4xX Mb/s scrubbing solutions. >> >> Maybe I've been out of the running my larger Managed Server >> Hosting Company too long, but wasn't the "non-elegant" solutions >> something ISPs just "did"? Was it only DoS, and when it comes to >> DDoS they tell you its just too much to handle. And blocking how many >> netblocks does an ISP consider "too many" before it tells the client >> there is only so much it can do for them? Do people tell/give clients >> their own solutions? (Like Zebra boxes that'll inject BGP into their >> site) >> >> They wanted me to come up with 3 reasons FOR the service, >> 3 against, and what I felt was a fair market value for this. I just need >> to know if people still did that type of stuff for each other or if >> everything costs nowadays.... >> >> Thanks, Tuc/TBOH >> >> > -- Jeffrey Lyon, Leadership Team jeffrey.lyon(a)blacklotus.net | http://www.blacklotus.net Black Lotus Communications of The IRC Company, Inc. Look for us at HostingCon 2009 in Washington, DC on August 10th - 12th at Booth #401.

1 0

Dedicated server provider in LA
by Jasper Bryant-Greene 13 Dec '08

13 Dec '08

Hi all, Apologies for the operational content, does anyone know (or is anyone) a dedicated server provider who can get a Linux server online for us in the next three hours? We urgently need to move a live site due to system failure. Preferably west coast USA, but beggars can't be choosers. Replies off-list. Thanks in advance, -- Jasper Bryant-Greene Managing Director Seektrack (NZ) Limited +64 21 129 9458

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 12 Dec '08

12 Dec '08

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 13 Dec, 2008 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 274910 Prefixes after maximum aggregation: 131479 Deaggregation factor: 2.09 Unique aggregates announced to Internet: 134428 Total ASes present in the Internet Routing Table: 30074 Prefixes per ASN: 9.14 Origin-only ASes present in the Internet Routing Table: 26178 Origin ASes announcing only one prefix: 12740 Transit ASes present in the Internet Routing Table: 3896 Transit-only ASes present in the Internet Routing Table: 96 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 25 Max AS path prepend of ASN (42115) 21 Prefixes from unregistered ASNs in the Routing Table: 529 Unregistered ASNs in the Routing Table: 194 Number of 32-bit ASNs allocated by the RIRs: 68 Prefixes from 32-bit ASNs in the Routing Table: 10 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 210 Number of addresses announced to Internet: 1970066112 Equivalent to 117 /8s, 108 /16s and 210 /24s Percentage of available address space announced: 53.2 Percentage of allocated address space announced: 63.5 Percentage of available address space allocated: 83.7 Percentage of address space in use by end-sites: 74.6 Total number of prefixes smaller than registry allocations: 134988 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 63380 Total APNIC prefixes after maximum aggregation: 22998 APNIC Deaggregation factor: 2.76 Prefixes being announced from the APNIC address blocks: 60296 Unique aggregates announced from the APNIC address blocks: 27407 APNIC Region origin ASes present in the Internet Routing Table: 3488 APNIC Prefixes per ASN: 17.29 APNIC Region origin ASes announcing only one prefix: 937 APNIC Region transit ASes present in the Internet Routing Table: 535 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 390867936 Equivalent to 23 /8s, 76 /16s and 43 /24s Percentage of available APNIC address space announced: 77.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 122980 Total ARIN prefixes after maximum aggregation: 64546 ARIN Deaggregation factor: 1.91 Prefixes being announced from the ARIN address blocks: 92217 Unique aggregates announced from the ARIN address blocks: 35011 ARIN Region origin ASes present in the Internet Routing Table: 12650 ARIN Prefixes per ASN: 7.29 ARIN Region origin ASes announcing only one prefix: 4886 ARIN Region transit ASes present in the Internet Routing Table: 1205 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 20 Number of ARIN addresses announced to Internet: 402263840 Equivalent to 23 /8s, 250 /16s and 15 /24s Percentage of available ARIN address space announced: 82.7 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 173/8, 174/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 61022 Total RIPE prefixes after maximum aggregation: 36518 RIPE Deaggregation factor: 1.67 Prefixes being announced from the RIPE address blocks: 56559 Unique aggregates announced from the RIPE address blocks: 37770 RIPE Region origin ASes present in the Internet Routing Table: 12349 RIPE Prefixes per ASN: 4.58 RIPE Region origin ASes announcing only one prefix: 6498 RIPE Region transit ASes present in the Internet Routing Table: 1883 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 25 Number of RIPE addresses announced to Internet: 382341984 Equivalent to 22 /8s, 202 /16s and 19 /24s Percentage of available RIPE address space announced: 87.7 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-49151 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 22722 Total LACNIC prefixes after maximum aggregation: 5633 LACNIC Deaggregation factor: 4.03 Prefixes being announced from the LACNIC address blocks: 20749 Unique aggregates announced from the LACNIC address blocks: 11546 LACNIC Region origin ASes present in the Internet Routing Table: 1038 LACNIC Prefixes per ASN: 19.99 LACNIC Region origin ASes announcing only one prefix: 335 LACNIC Region transit ASes present in the Internet Routing Table: 172 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 18 Number of LACNIC addresses announced to Internet: 58745856 Equivalent to 3 /8s, 128 /16s and 100 /24s Percentage of available LACNIC address space announced: 58.4 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 4298 Total AfriNIC prefixes after maximum aggregation: 1363 AfriNIC Deaggregation factor: 3.15 Prefixes being announced from the AfriNIC address blocks: 4600 Unique aggregates announced from the AfriNIC address blocks: 2195 AfriNIC Region origin ASes present in the Internet Routing Table: 271 AfriNIC Prefixes per ASN: 16.97 AfriNIC Region origin ASes announcing only one prefix: 84 AfriNIC Region transit ASes present in the Internet Routing Table: 56 Average AfriNIC Region AS path length visible: 3.9 Max AfriNIC Region AS path length visible: 15 Number of AfriNIC addresses announced to Internet: 13104128 Equivalent to 0 /8s, 199 /16s and 244 /24s Percentage of available AfriNIC address space announced: 26.0 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 17488 1443 101 99 Hathway IP Over Cable Interne 4766 1424 6409 364 Korea Telecom (KIX) 4755 1171 474 152 TATA Communications formerly 9583 1116 88 484 Sify Limited 4134 905 15509 354 CHINANET-BACKBONE 18101 784 168 32 Reliance Infocom Ltd Internet 4780 729 358 64 Digital United Inc. 9498 700 311 50 BHARTI BT INTERNET LTD. 7545 657 152 81 TPG Internet Pty Ltd 4808 632 1173 144 CNCGROUP IP network: China169 Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4385 3435 346 bellsouth.net, inc. 209 2981 4032 621 Qwest 20115 1819 1418 745 Charter Communications 1785 1702 717 155 PaeTec Communications, Inc. 6478 1613 369 286 AT&T Worldnet Services 4323 1599 1065 382 Time Warner Telecom 2386 1588 708 901 AT&T Data Communications Serv 7018 1428 5872 987 AT&T WorldNet Services 11492 1229 192 12 Cable One 3356 1094 10991 425 Level 3 Communications, LLC Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 435 1766 384 TDC Tele Danmark 30890 378 79 194 SC Kappa Invexim SRL 12479 373 578 6 Uni2 Autonomous System 3301 336 1413 303 TeliaNet Sweden 8866 331 109 22 Bulgarian Telecommunication C 29049 330 26 3 AzerSat LLC. 3320 329 7064 278 Deutsche Telekom AG 8452 322 188 11 TEDATA 3215 315 2792 96 France Telecom Transpac 8551 304 287 35 Bezeq International Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1404 2832 222 UniNet S.A. de C.V. 11830 667 299 9 Instituto Costarricense de El 10620 631 134 52 TVCABLE BOGOTA 22047 553 270 14 VTR PUNTO NET S.A. 7303 503 249 74 Telecom Argentina Stet-France 6471 426 54 41 ENTEL CHILE S.A. 16814 426 27 10 NSS, S.A. 11172 400 118 72 Servicios Alestra S.A de C.V 28573 364 489 28 NET Servicos de Comunicao S.A 14117 333 23 9 Telefonica del Sur S.A. Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 585 73 43 LINKdotNET AS number 3741 270 857 227 The Internet Solution 20858 264 34 3 EgyNet 2018 239 215 140 Tertiary Education Network 6713 144 135 11 Itissalat Al-MAGHRIB 33783 143 10 17 EEPAD TISP TELECOM & INTERNET 29571 121 15 8 Ci Telecom Autonomous system 5536 120 8 17 Internet Egypt Network 5713 119 555 68 Telkom SA Ltd 33776 116 6 3 Starcomms Nigeria Limited Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4385 3435 346 bellsouth.net, inc. 209 2981 4032 621 Qwest 20115 1819 1418 745 Charter Communications 1785 1702 717 155 PaeTec Communications, Inc. 6478 1613 369 286 AT&T Worldnet Services 4323 1599 1065 382 Time Warner Telecom 2386 1588 708 901 AT&T Data Communications Serv 17488 1443 101 99 Hathway IP Over Cable Interne 7018 1428 5872 987 AT&T WorldNet Services 4766 1424 6409 364 Korea Telecom (KIX) Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 209 2981 2360 Qwest 1785 1702 1547 PaeTec Communications, Inc. 17488 1443 1344 Hathway IP Over Cable Interne 6478 1613 1327 AT&T Worldnet Services 4323 1599 1217 Time Warner Telecom 11492 1229 1217 Cable One 8151 1404 1182 UniNet S.A. de C.V. 20115 1819 1074 Charter Communications 4766 1424 1060 Korea Telecom (KIX) 18566 1060 1050 Covad Communications Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 32326 UNALLOCATED 12.40.49.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.75.116.0/22 10796 ServiceCo LLC - Road Runner 24.75.160.0/19 7843 Adelphia Corp. 24.142.40.0/21 7018 AT&T WorldNet Services 24.142.160.0/19 7018 AT&T WorldNet Services 24.246.0.0/17 7018 AT&T WorldNet Services 24.246.128.0/18 7018 AT&T WorldNet Services 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 63.140.213.0/24 22555 Universal Talkware Corporatio 63.143.251.0/24 22555 Universal Talkware Corporatio Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:9 /10:19 /11:54 /12:158 /13:307 /14:554 /15:1085 /16:10232 /17:4468 /18:7707 /19:16569 /20:19491 /21:19057 /22:24149 /23:24750 /24:144035 /25:682 /26:835 /27:615 /28:99 /29:8 /30:1 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2864 4385 bellsouth.net, inc. 209 1705 2981 Qwest 2386 1267 1588 AT&T Data Communications Serv 17488 1232 1443 Hathway IP Over Cable Interne 11492 1200 1229 Cable One 1785 1162 1702 PaeTec Communications, Inc. 4766 1161 1424 Korea Telecom (KIX) 6478 1129 1613 AT&T Worldnet Services 18566 1041 1060 Covad Communications 9583 980 1116 Sify Limited Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:13 8:169 12:2221 13:2 15:21 16:3 17:5 20:36 24:1108 32:54 38:525 40:92 41:840 43:1 44:2 47:13 52:3 55:3 56:3 57:26 58:510 59:597 60:456 61:1058 62:1122 63:2012 64:3373 65:2463 66:3601 67:1437 68:658 69:2362 70:526 71:173 72:1592 73:7 74:1331 75:191 76:303 77:892 78:521 79:296 80:940 81:866 82:581 83:385 84:586 85:1041 86:506 87:652 88:355 89:1420 90:44 91:1765 92:305 93:1058 94:791 95:57 96:94 97:142 98:172 99:10 100:1 110:1 111:1 113:60 114:145 115:170 116:1062 117:416 118:261 119:558 120:105 121:696 122:903 123:452 124:858 125:1274 128:358 129:220 130:136 131:399 132:72 133:9 134:190 135:31 136:225 137:128 138:143 139:91 140:414 141:111 142:382 143:325 144:314 145:53 146:370 147:141 148:601 149:215 150:139 151:210 152:181 153:131 154:10 155:250 156:171 157:303 158:165 159:300 160:272 161:131 162:253 163:136 164:517 165:505 166:359 167:351 168:661 169:162 170:461 171:40 172:10 173:130 174:11 186:1 187:16 188:1 189:345 190:2512 192:5818 193:4156 194:3297 195:2658 196:1047 198:3703 199:3316 200:5534 201:1496 202:7845 203:8073 204:3931 205:2176 206:2302 207:2788 208:3766 209:3500 210:2742 211:1119 212:1564 213:1662 214:65 215:22 216:4493 217:1244 218:361 219:407 220:1189 221:455 222:290 End of report

1 0

[NANOG-announce] NANOG 45 Agenda Posted
by Todd Underwood 12 Dec '08

12 Dec '08

On behalf of the NANOG Program Committee and Merit I'm pleased to announce that an updated Agenda is available and posted at: http://www.nanog.org/meetings/nanog45/agenda.php We're excited about the quality of the agenda and we hope you are, too. I want to thank all of the members of the Program Committee who worked hard to recruit, review and select the presentations and tutorials that make up this program. I also want to thank everyone who submitted a proposal. The quality and variety seemed very high this time around. Please note that there remain a very small number of slots open for late-breaking or especially topical presentations, so if the Internet melts down completely between now and January, feel free to submit a presentation explaining what happened. Lighting Talk slots will officially open after the first of the year. If you have not already registered for the conference and reserved your hotel room, now is a great time to do that. See http://nanog.org/meetings/nanog45/ and in particular https://nanog.merit.edu/registration/ to get started. Remember that Hotel expenses are fantastically low this time, with rooms as cheap as $104 and cheap flights are still available to the SDQ airport. The overall cost of this NANOG should be the same or lower as previous ones. I mention this because I know that many travel budgets are tight and I hope that this information might be useful to your management. I look forward to seeing all of you in Santo Domingo. Todd Underwood Chair, NANOG Program Committee toddunder(a)gmail.com _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

BGP Update Report
by cidr-report＠potaroo.net 12 Dec '08

12 Dec '08

BGP Update Report Interval: 05-Nov-08 -to- 06-Dec-08 (32 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4538 232133 1.9% 45.7 -- ERX-CERNET-BKB China Education and Research Network Center 2 - AS9583 228435 1.9% 180.9 -- SIFY-AS-IN Sify Limited 3 - AS6389 130689 1.1% 29.6 -- BELLSOUTH-NET-BLK - BellSouth.net Inc. 4 - AS29282 101489 0.8% 33829.7 -- EMENTOR-AS Enfo Oyj 5 - AS1803 94573 0.8% 66.6 -- ICMNET-5 - Sprint 6 - AS6629 84972 0.7% 1307.3 -- NOAA-AS - NOAA 7 - AS6298 83856 0.7% 38.4 -- ASN-CXA-PH-6298-CBS - Cox Communications Inc. 8 - AS24863 83220 0.7% 121.8 -- LINKdotNET-AS 9 - AS8151 73001 0.6% 33.2 -- Uninet S.A. de C.V. 10 - AS209 71988 0.6% 23.2 -- ASN-QWEST - Qwest Communications Corporation 11 - AS20115 63026 0.5% 30.4 -- CHARTER-NET-HKY-NC - Charter Communications 12 - AS6478 61690 0.5% 35.2 -- ATT-INTERNET3 - AT&T WorldNet Services 13 - AS4323 54750 0.5% 12.9 -- TWTC - tw telecom holdings, inc. 14 - AS6458 54576 0.5% 121.8 -- Telgua 15 - AS7643 52459 0.4% 32.4 -- VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 16 - AS2386 51415 0.4% 31.0 -- INS-AS - AT&T Data Communications Services 17 - AS3462 49113 0.4% 244.3 -- HINET Data Communication Business Group 18 - AS17488 48606 0.4% 33.4 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 19 - AS1785 45555 0.4% 26.6 -- AS-PAETEC-NET - PaeTec Communications, Inc. 20 - AS35805 42761 0.3% 206.6 -- UTG-AS United Telecom AS TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS29282 101489 0.8% 33829.7 -- EMENTOR-AS Enfo Oyj 2 - AS14106 32024 0.3% 16012.0 -- LEPMED01 - Leprechaun, LLC 3 - AS30287 4928 0.0% 4928.0 -- ALON-USA - ALON USA, LP 4 - AS30306 19541 0.2% 3908.2 -- AfOL-Sz-AS 5 - AS41007 18540 0.1% 3708.0 -- CTCASTANA CTC ASTANA, KZ 6 - AS46115 36509 0.3% 3650.9 -- LUTHER - Luther College 7 - AS4130 16771 0.1% 3354.2 -- UPITT-AS - University of Pittsburgh 8 - AS32398 26554 0.2% 3319.2 -- REALNET-ASN-1 9 - AS15561 2969 0.0% 2969.0 -- CDS-ITALY C.D.S. Informatica S.r.l. 10 - AS23917 2755 0.0% 2755.0 -- BRIBIE-NET-AS-AP Bribie Island Net Multihomed, Brisbane 11 - AS47731 2735 0.0% 2735.0 -- ISDC-AS SC ISDC ROMANIA SRL 12 - AS30969 21860 0.2% 2732.5 -- TAN-NET TransAfrica Networks 13 - AS5033 21730 0.2% 2414.4 -- ISW - Internet Specialties West Inc. 14 - AS28519 7180 0.1% 2393.3 -- Universidad Autonoma de Guadalajara 15 - AS43925 4293 0.0% 2146.5 -- MOLDCELL_AS Moldcell SA Autonomous System 16 - AS48131 2096 0.0% 2096.0 -- VANGUARD-BG-AS Vanguard SA 17 - AS31901 2083 0.0% 2083.0 -- THECHIMES - The Chimes, Inc. 18 - AS25799 2000 0.0% 2000.0 -- HOLMAN - Holman Enterprises 19 - AS19017 1988 0.0% 1988.0 -- QUALCOMM-QWBS-LV - Qualcomm Wireless Business Solutions 20 - AS149 1725 0.0% 1725.0 -- DNIC - DoD Network Information Center TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 77.95.144.0/22 71003 0.6% AS29282 -- EMENTOR-AS Enfo Oyj 2 - 221.134.222.0/24 60022 0.5% AS9583 -- SIFY-AS-IN Sify Limited 3 - 210.214.151.0/24 58695 0.5% AS9583 -- SIFY-AS-IN Sify Limited 4 - 221.135.80.0/24 38881 0.3% AS9583 -- SIFY-AS-IN Sify Limited 5 - 124.7.201.0/24 34334 0.3% AS9583 -- SIFY-AS-IN Sify Limited 6 - 217.69.48.0/20 30450 0.2% AS29282 -- EMENTOR-AS Enfo Oyj 7 - 192.102.88.0/24 27094 0.2% AS6629 -- NOAA-AS - NOAA 8 - 192.35.129.0/24 26804 0.2% AS6629 -- NOAA-AS - NOAA 9 - 198.77.177.0/24 26722 0.2% AS6629 -- NOAA-AS - NOAA 10 - 41.204.2.0/24 25863 0.2% AS32398 -- REALNET-ASN-1 11 - 64.162.116.0/24 21556 0.2% AS5033 -- ISW - Internet Specialties West Inc. 12 - 8.192.154.0/24 17463 0.1% AS14106 -- LEPMED01 - Leprechaun, LLC 13 - 150.212.224.0/19 16681 0.1% AS4130 -- UPITT-AS - University of Pittsburgh 14 - 192.12.120.0/24 16423 0.1% AS5691 -- MITRE-AS-5 - The MITRE Corporation 15 - 65.44.76.0/24 14561 0.1% AS14106 -- LEPMED01 - Leprechaun, LLC 16 - 89.4.131.0/24 11665 0.1% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 17 - 203.63.26.0/24 11403 0.1% AS9747 -- EZINTERNET-AS-AP EZInternet Pty Ltd 18 - 196.27.104.0/21 10553 0.1% AS30969 -- TAN-NET TransAfrica Networks 19 - 196.27.108.0/22 10508 0.1% AS30969 -- TAN-NET TransAfrica Networks 20 - 195.189.68.0/24 9247 0.1% AS41007 -- CTCASTANA CTC ASTANA, KZ Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 12 Dec '08

12 Dec '08

This report has been generated at Fri Dec 12 21:18:53 2008 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 05-12-08 290432 177961 06-12-08 292661 177588 07-12-08 294362 177884 08-12-08 294699 172849 09-12-08 282262 172817 10-12-08 282192 173193 11-12-08 282545 173526 12-12-08 282624 174029 AS Summary 30159 Number of ASes in routing system 12832 Number of ASes announcing only one prefix 4373 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 89828608 Largest address span announced by an AS (/32s) AS27064: DDN-ASNBLK1 - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 12Dec08 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 282952 173938 109014 38.5% All ASes AS6389 4373 356 4017 91.9% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4197 1719 2478 59.0% TWTC - tw telecom holdings, inc. AS209 2979 635 2344 78.7% ASN-QWEST - Qwest Communications Corporation AS17488 1442 336 1106 76.7% HATHWAY-NET-AP Hathway IP Over Cable Internet AS4766 1501 455 1046 69.7% KIXS-AS-KR Korea Telecom AS1785 1703 719 984 57.8% AS-PAETEC-NET - PaeTec Communications, Inc. AS4755 1178 200 978 83.0% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS22773 992 62 930 93.8% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS8151 1405 539 866 61.6% Uninet S.A. de C.V. AS6478 1604 804 800 49.9% ATT-INTERNET3 - AT&T WorldNet Services AS11492 1229 454 775 63.1% CABLEONE - CABLE ONE, INC. AS18566 1060 336 724 68.3% COVAD - Covad Communications Co. AS18101 783 95 688 87.9% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS19262 938 256 682 72.7% VZGNI-TRANSIT - Verizon Internet Services Inc. AS2386 1590 915 675 42.5% INS-AS - AT&T Data Communications Services AS3356 1104 458 646 58.5% LEVEL3 Level 3 Communications AS2706 543 21 522 96.1% HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited AS7545 678 171 507 74.8% TPG-INTERNET-AP TPG Internet Pty Ltd AS4808 632 159 473 74.8% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS4134 905 438 467 51.6% CHINANET-BACKBONE No.31,Jin-rong Street AS855 580 119 461 79.5% CANET-ASN-4 - Bell Aliant AS17676 522 64 458 87.7% GIGAINFRA BB TECHNOLOGY Corp. AS9443 525 84 441 84.0% INTERNETPRIMUS-AS-AP Primus Telecommunications AS20115 1850 1412 438 23.7% CHARTER-NET-HKY-NC - Charter Communications AS7018 1425 990 435 30.5% ATT-INTERNET4 - AT&T WorldNet Services AS24560 630 195 435 69.0% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS22047 553 121 432 78.1% VTR BANDA ANCHA S.A. AS4804 515 87 428 83.1% MPX-AS Microplex PTY LTD AS4668 691 276 415 60.1% LGNET-AS-KR LG CNS AS4780 730 329 401 54.9% SEEDNET Digital United Inc. Total 38857 12805 26052 67.0% Top 30 total Possible Bogus Routes 24.75.116.0/22 AS10796 SCRR-10796 - Road Runner HoldCo LLC 24.75.160.0/19 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.142.40.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.142.160.0/19 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.245.128.0/17 AS11492 CABLEONE - CABLE ONE, INC. 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 62.61.220.0/23 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS6453 GLOBEINTERNET TATA Communications 64.7.120.0/21 AS6453 GLOBEINTERNET TATA Communications 64.64.159.0/24 AS32004 BIG-ASN - Business Information Group, Inc. 64.79.88.0/24 AS26096 LODDEN - Lodden Services 64.79.89.0/24 AS26096 LODDEN - Lodden Services 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 87.244.128.0/18 AS8733 CHELLO-BELGIUM UPC Belgium - Chello Belgium 98.96.0.0/13 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 100.10.10.0/24 AS14000 AXTEL, S.A. de C.V. 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 124.109.16.0/21 AS38137 137.0.0.0/13 AS27064 DDN-ASNBLK1 - DoD Network Information Center 151.135.0.0/16 AS4768 CLIX-NZ TelstraClear Ltd 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 188.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 188.0.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 188.0.0.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.40.105.0/24 AS41701 CAP-FIN-AS Capgemini Finland Oy 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.47.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service G-WiN 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 193.9.26.0/24 AS12594 EXTERNET-AS EXTERNET Autonomus System 193.23.136.0/23 AS43711 SZERVERNET-HU-AS Szervernet Ltd. 193.23.142.0/24 AS47885 HOSTOFFICE-AS HostOffice Kft. 194.0.68.0/22 AS41704 OGS-AS ZAO "Orenburgskaya Gorodskaya Set", Orenburg, Russia 195.190.146.0/24 AS9167 WEBPARTNER WEBPARTNER A/S is a Danish Internet Service Provider 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.80.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.96.0/19 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.97.240.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.10.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.0.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.128.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.0.0/18 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.16.0/20 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.123.80.0/21 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 200.0.187.0/24 AS19132 200.5.32.0/21 AS19132 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.58.224.0/19 AS17925 202.58.224.0/20 AS17925 202.58.240.0/20 AS17925 202.58.240.0/24 AS17925 202.58.244.0/24 AS17925 202.58.249.0/24 AS17925 202.58.250.0/24 AS17925 202.58.253.0/24 AS17925 202.72.40.0/24 AS38205 202.72.41.0/24 AS38205 202.72.42.0/24 AS38205 202.72.46.0/24 AS38205 202.72.47.0/24 AS38205 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.122.120.0/21 AS17494 BTTB-AS-AP Telecom Operator & Internet Service Provider as well 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.150.56.0/24 AS38722 202.150.57.0/24 AS38722 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecommunications Ltd 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.217.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.48.32.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.48.58.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.48.60.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.162.224.0/19 AS23464 ILCSNET - Interlink Computer Services 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.220.240.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.64/26 AS22335 MREN - Metropolitan Research and Education Network 206.220.240.128/25 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.241.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.38.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 208.38.192.0/21 AS14237 BEAMSPEED1 - Beamspeed 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.54.93.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 209.54.111.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.74.96.0/19 AS10912 INTERNAP-BLK - Internap Network Services Corporation 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.229.51.0/24 AS15211 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

91.207.218.0/23 prefix in DFZ - AS3.21 / AS196629 - announced with AS_CONFED_SEQUENCE in AS4_PATH - propagated by 35320
by Andy Davidson 11 Dec '08

11 Dec '08

Hi, Further to my email two and a half hours ago, it seems that the prefix causing OpenBGPd speakers to die is 91.207.218.0/23, which is originated by a 4-byte ASN speaker. OpenBGPd is checking AS4_PATH to ensure that it contains only AS_SET and AS_SEQUENCE types, as per RFC4893. When processing the UPDATE for 91.207.218.0/23 it sees : 91.207.218.0/23 Path Attributes - Origin: Incomplete Flags: 0x40 (Well-known, Transitive, Complete) Origin: Incomplete (2) AS_PATH: xx xx 35320 23456 (13 bytes) AS4_PATH: (65044 65057) 196629 (7 bytes) RFC4893 is clear on the matter : " To prevent the possible propagation of confederation path segments outside of a confederation, the path segment types AS_CONFED_SEQUENCE and AS_CONFED_SET [RFC3065] are declared invalid for the AS4_PATH attribute. " OpenBGPd is therefore dropping the sessions when this update is received. Unideal if this attribute is learned on multiple upstreams... The impact today is fairly limited as there are relatively few bgp speakers honouring the 4-byte ASN protocol extension rules, but as code that support these features creeps around the internet, the next time this happens the impact could be much greater, so we need to understand which implementation of which BGP software caused this illegal origination. Modifying the OpenBGPd software to permit AS_CONFED_SEQUENCE, AS_CONFED_SET in an as4_path causes the path to be accepted and the session is not torn down. This isn't a great fix. From a software point of view, I agree that a configurable option to reject the route but keep the session, reject the route and drop the session, accept the route but log/send trap, etc. would be nicer, but this is an implementation thing and probably beyond the scope of this list. For now, does anyone have contacts at 196629 or 35320 who can explain the implementation and fix the behaviour ? Andy

4 4

_65000_ in as-path - paging 8544, 16229, 37958
by Andy Davidson 11 Dec '08

11 Dec '08

Hi, Seen in DFZ: 194.9.20.0 - 6661 42652 24611 34088 174 8544 16229 65000 196.216.161.0 - 8657 36881 36881 36881 36881 36881 36881 36881 36881 36881 36881 65000 33763 37036 We manage some bgp speakers running OpenBGPd. This software appears to tear down the session when encountering at least one of these paths : Dec 10 15:31:48 l1-c1 bgpd[15300]: neighbor 84.x.x.x (S): state change Established -> Idle, reason: Fatal error 194.9.20.0 looks like it started being originated by 65000 at 12:30 UTC today or so - this was also the time I started seeing openbgp behave this this way. Renesys thinks 12:58UTC. Andy

6 6