November 2011 - Test - lists.nanog.org

NANOG Internet predictions for 2010
by Frank Bulk 25 Nov '11

25 Nov '11

On this slower-than-normal day I was cleaning up my office and found this article from 2006 making predictions for 2010. It's now a year later, and while many of these did not happen, some of them did and for others we are a step closer. Frank http://bpastudio.csudh.edu/fac/lpress/471/hout/nanog2010.htm Hi - At a content forum and NANOG in June 2006 I led some discussions involving predictions for what the Internet might look like in 2010. What makes this so interesting is that so many perspectives highlighted so many potential futures that others had not considered. When you then discuss the implications of such varying futures, again with a diverse crowd, you end up with a lively discussion and, well, some potential futures you may not have considered. I've tried to list some of these predictions from the Content Provider crowd and the ISP NANOG crowd here. Content Provider Predictions for 2010 ------------------------------------------------------ Here is the question I put to a group of Content Providers at a content forum: "We are sitting around this table in 2010 and we are commenting how remarkable the last few years have been, specifically that:" 1. Video streaming volume has grown 100 fold 2. Last mile wireless replaced local loop 3. Botnets (DDOS attacks) are still an issue 4. Non-mechanical (i.e. Flash) Drives replaced internal hard drives on laptops 5. 10% of all cell phones are now video phones 6. We have cell phones that we actually like 7. The U.S. is insignificant traffic wise relative to the rest of the world 8. Most popular question discussed around the table: 'How do we operate business in China?' 9. No online privacy. And the gov't watches everything 10. 18-25 demographic is best reached w/ads on the Internet 11. Next Gen 3D on-line Social Networks are so successful 12. No physical network interfaces are needed 13. We will big brother ourselves (video cams 'who scraped my car?') 14. So many special purpose Internet apps - in car google maps, live traffic updates, etc. 15. So much of our personal information is on the net 16. Video IM emerged as a dominant app 17. P2P will emerge for non-pirated videos - DRM in place and embraced 18. Voice calls are free, bundled with other things [some additional notable predictions from this group, but did not = receive simple majority validation] IPTV replaces cable TV IPv6 is adopted = Massive Internet Collapse - Metcalfe regurgitates his column Flexible screen deployment SPAM is no longer a problem in 2010 Windows embraces = distributed computing Net is not Neutral Powerline Broadband emerges FTTH massive deployment Internet Service Providers Predictions for 2010 ------------------------------------------------------------------ We didn't get to do this at the Peering BOF at NANOG, but I did some = table discussions outside in the hallways. There there was no voting so I am listing a subset of the predictions that seemed to resonate among a = couple dozen or so folks at the hallway tables where question was discussed: "We are sitting around this table in 2010 at NANOG and we are commenting = how remarkable the last few years have been, specifically that:" 1. We have 10G network interface(s) on laptops (I assumed wired, but someone else might have been thinking wireless) 2. $5/mbps is the common/standard price of transit (other prediction was $30/mbps) 3. Internet traffic is now so heavily localized (as in 75% of telephone calls are across town type of thing but for the Internet) 4. Ad revenue will cover the cost/or subsidize significantly of DSL 5. 90% of Internet bits will be video traffic 6. VoIP traffic exceeds the PSTN traffic 7. Private networks predominantly migrate to overlays over the Internet 8. Wireless Internet Service Providers (WISPs) are serious competitive threat to DSL and Cable Internet 9. Sprint is bought by Time Warner 10. Cable companies form cabal & hookup with Sprint or Level 3 11. Government passes Net Neutrality Law of some flavor 12. Earthlink successfully reinvents themselves as Wireless Metro player in Response to ATT and Verizon 13. 40% paid or subscription as opposed to Content Click Ads. Like Cable Company channel packages, folks will flock to subscriptions for Internet Content packages. 14. RIAA proposes surcharge on network access (like Canada tax on blank CDs) 15. NetFlix conversion to Internet delivery of movies to Tivo or PC, or open source set top box 16. ISPs will be in pain 17. Last mile (fiber, wireless, .) in metro will be funded by municipal bonds 18. Death of TV ads, Death of broadcast TV, Tivo & Tivo like appliances all use the Internet with emergence of targeted ads based on demographic profiles of viewer 19. Google in charge of 20% of ALL ads (TV, Radio, Billboards, .) 20. Ubiquitous wifi in every metro with wifi roaming agreements 21. Congestion issues drive selective customer acceptance of partial transit offerings 22. IPTV fully embraced by cable cos - VOD - no need for VDR and ala carte video services replace analog frequency 23. Near simultaneous release of movies to the theaters, DVDs for the home, PPV, and Internet download to meet needs of different = demographics. (Some get dressed up for theater, others have kids and can't leave home, others wantto watch on the flight to Tokyo - all watch the new release = movie at about the same time) Video Peering -------------------- For what it is worth, some of this resonates with the Peering BOF Video Peering discussion. With YouTube pushing 20Gbps after only one year in existance, and with the 30+ companies that often chase a high profile = market such as theirs, we have a potential additional Internet load approaching 600Gbps! YouTube at the BOF said that their traffic is growing at about = 20% per month, so it may be reasonable to expect their traffic to double a couple times over the next year. Even if you discount the competitors traffic flows, video still appears as a *massive* traffic volume coming into the Peering Ecosystem over the next bunch of months. And yes, they are willing to peer the traffic for free so you eyeball networks and they (YouTube) don't have to pay transit fees on the = traffic. Bill //------------------------------------------------ // William B. Norton ------------------------------------- Bill.St.Arnaud(a)canarie.ca www.canarie.ca/~bstarn skype: pocketpro SkypeIn: +1 614 441-9603

2 1

OT: Traffic Light Control (was Re: First real-world SCADA attack in US)
by Jay Ashworth 25 Nov '11

25 Nov '11

----- Original Message ----- > From: "Owen DeLong" <owen(a)delong.com> > As in all cases, additional flexibility results in additional ability > to make mistakes. Simple mechanical lockouts do not scale to the > modern world. The benefits of these additional capabilities far > outweigh the perceived risks of programming errors. The perceived risk in this case is "multiple high-speed traffic fatalities". I believe we rank that pretty high; it's entirely possible that a traffic light controller is the most potentially dangerous artifact (in terms of number of possible deaths) that the average citizen interacts with on a daily basis. -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

10 19

Weekly Routing Table Report
by Routing Analysis Role Account 25 Nov '11

25 Nov '11

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 26 Nov, 2011 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 383171 Prefixes after maximum aggregation: 167108 Deaggregation factor: 2.29 Unique aggregates announced to Internet: 188188 Total ASes present in the Internet Routing Table: 39373 Prefixes per ASN: 9.73 Origin-only ASes present in the Internet Routing Table: 32422 Origin ASes announcing only one prefix: 15459 Transit ASes present in the Internet Routing Table: 5298 Transit-only ASes present in the Internet Routing Table: 137 Average AS path length visible in the Internet Routing Table: 4.4 Max AS path length visible: 33 Max AS path prepend of ASN (48687) 24 Prefixes from unregistered ASNs in the Routing Table: 1776 Unregistered ASNs in the Routing Table: 904 Number of 32-bit ASNs allocated by the RIRs: 1995 Number of 32-bit ASNs visible in the Routing Table: 1653 Prefixes from 32-bit ASNs in the Routing Table: 3905 Special use prefixes present in the Routing Table: 2 Prefixes being announced from unallocated address space: 85 Number of addresses announced to Internet: 2493814272 Equivalent to 148 /8s, 164 /16s and 150 /24s Percentage of available address space announced: 67.3 Percentage of allocated address space announced: 67.3 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 91.6 Total number of prefixes smaller than registry allocations: 161781 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 95482 Total APNIC prefixes after maximum aggregation: 31239 APNIC Deaggregation factor: 3.06 Prefixes being announced from the APNIC address blocks: 91934 Unique aggregates announced from the APNIC address blocks: 38658 APNIC Region origin ASes present in the Internet Routing Table: 4601 APNIC Prefixes per ASN: 19.98 APNIC Region origin ASes announcing only one prefix: 1253 APNIC Region transit ASes present in the Internet Routing Table: 713 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 18 Number of APNIC region 32-bit ASNs visible in the Routing Table: 109 Number of APNIC addresses announced to Internet: 630811232 Equivalent to 37 /8s, 153 /16s and 106 /24s Percentage of available APNIC address space announced: 80.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-132095, 132096-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 145956 Total ARIN prefixes after maximum aggregation: 74537 ARIN Deaggregation factor: 1.96 Prefixes being announced from the ARIN address blocks: 118222 Unique aggregates announced from the ARIN address blocks: 48634 ARIN Region origin ASes present in the Internet Routing Table: 14758 ARIN Prefixes per ASN: 8.01 ARIN Region origin ASes announcing only one prefix: 5635 ARIN Region transit ASes present in the Internet Routing Table: 1565 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 25 Number of ARIN region 32-bit ASNs visible in the Routing Table: 12 Number of ARIN addresses announced to Internet: 803548096 Equivalent to 47 /8s, 229 /16s and 43 /24s Percentage of available ARIN address space announced: 63.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 92793 Total RIPE prefixes after maximum aggregation: 51275 RIPE Deaggregation factor: 1.81 Prefixes being announced from the RIPE address blocks: 84982 Unique aggregates announced from the RIPE address blocks: 54491 RIPE Region origin ASes present in the Internet Routing Table: 16128 RIPE Prefixes per ASN: 5.27 RIPE Region origin ASes announcing only one prefix: 7973 RIPE Region transit ASes present in the Internet Routing Table: 2549 Average RIPE Region AS path length visible: 4.8 Max RIPE Region AS path length visible: 33 Number of RIPE region 32-bit ASNs visible in the Routing Table: 1151 Number of RIPE addresses announced to Internet: 492677440 Equivalent to 29 /8s, 93 /16s and 169 /24s Percentage of available RIPE address space announced: 79.4 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 196608-198655 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 176/8, 178/8, 185/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 36535 Total LACNIC prefixes after maximum aggregation: 7956 LACNIC Deaggregation factor: 4.59 Prefixes being announced from the LACNIC address blocks: 35946 Unique aggregates announced from the LACNIC address blocks: 18739 LACNIC Region origin ASes present in the Internet Routing Table: 1554 LACNIC Prefixes per ASN: 23.13 LACNIC Region origin ASes announcing only one prefix: 442 LACNIC Region transit ASes present in the Internet Routing Table: 285 Average LACNIC Region AS path length visible: 4.5 Max LACNIC Region AS path length visible: 18 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 377 Number of LACNIC addresses announced to Internet: 93623936 Equivalent to 5 /8s, 148 /16s and 150 /24s Percentage of available LACNIC address space announced: 62.0 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 8328 Total AfriNIC prefixes after maximum aggregation: 2027 AfriNIC Deaggregation factor: 4.11 Prefixes being announced from the AfriNIC address blocks: 6387 Unique aggregates announced from the AfriNIC address blocks: 2014 AfriNIC Region origin ASes present in the Internet Routing Table: 499 AfriNIC Prefixes per ASN: 12.80 AfriNIC Region origin ASes announcing only one prefix: 156 AfriNIC Region transit ASes present in the Internet Routing Table: 107 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 4 Number of AfriNIC addresses announced to Internet: 27874816 Equivalent to 1 /8s, 169 /16s and 86 /24s Percentage of available AfriNIC address space announced: 41.5 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2516 11105 973 Korea Telecom (KIX) 17974 1636 511 36 PT TELEKOMUNIKASI INDONESIA 7545 1626 303 86 TPG Internet Pty Ltd 4755 1513 376 168 TATA Communications formerly 7552 1384 1064 7 Vietel Corporation 9829 1166 989 28 BSNL National Internet Backbo 9583 1095 80 494 Sify Limited 4808 1081 2072 311 CNCGROUP IP network: China169 24560 966 343 218 Bharti Airtel Ltd., Telemedia 18101 953 119 149 Reliance Infocom Ltd Internet Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3479 3814 217 bellsouth.net, inc. 7029 2909 1016 199 Windstream Communications Inc 18566 2093 383 177 Covad Communications 1785 1849 680 121 PaeTec Communications, Inc. 4323 1613 1078 389 Time Warner Telecom 20115 1600 1546 624 Charter Communications 22773 1502 2909 104 Cox Communications, Inc. 30036 1440 258 676 Mediacom Communications Corp 19262 1387 4683 401 Verizon Global Networks 7018 1314 7030 860 AT&T WorldNet Services Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1587 480 15 Corbina telecom 6830 651 1927 412 UPC Distribution Services 34984 612 114 193 BILISIM TELEKOM 20940 557 186 439 Akamai Technologies European 3320 512 8168 389 Deutsche Telekom AG 12479 498 603 18 Uni2 Autonomous System 3292 478 2106 406 TDC Tele Danmark 8866 463 133 26 Bulgarian Telecommunication C 8551 416 366 45 Bezeq International 31148 412 22 116 FreeNet ISP Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 1700 315 179 TVCABLE BOGOTA 28573 1515 1045 71 NET Servicos de Comunicao S.A 8151 1448 2973 342 UniNet S.A. de C.V. 7303 1238 751 173 Telecom Argentina Stet-France 27947 609 72 86 Telconet S.A 22047 581 322 17 VTR PUNTO NET S.A. 6503 553 434 68 AVANTEL, S.A. 7738 553 1050 31 Telecomunicacoes da Bahia S.A 3816 545 236 87 Empresa Nacional de Telecomun 11172 528 85 95 Servicios Alestra S.A de C.V Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 897 446 12 TEDATA 24863 781 146 36 LINKdotNET AS number 3741 281 939 230 The Internet Solution 15706 242 32 6 Sudatel Internet Exchange Aut 33776 240 13 8 Starcomms Nigeria Limited 6713 235 519 14 Itissalat Al-MAGHRIB 29571 218 17 13 Ci Telecom Autonomous system 12258 196 28 57 Vodacom Internet Company 24835 192 80 8 RAYA Telecom - Egypt 16637 157 664 83 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3479 3814 217 bellsouth.net, inc. 7029 2909 1016 199 Windstream Communications Inc 4766 2516 11105 973 Korea Telecom (KIX) 18566 2093 383 177 Covad Communications 1785 1849 680 121 PaeTec Communications, Inc. 10620 1700 315 179 TVCABLE BOGOTA 17974 1636 511 36 PT TELEKOMUNIKASI INDONESIA 7545 1626 303 86 TPG Internet Pty Ltd 4323 1613 1078 389 Time Warner Telecom 20115 1600 1546 624 Charter Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 7029 2909 2710 Windstream Communications Inc 18566 2093 1916 Covad Communications 1785 1849 1728 PaeTec Communications, Inc. 17974 1636 1600 PT TELEKOMUNIKASI INDONESIA 8402 1587 1572 Corbina telecom 4766 2516 1543 Korea Telecom (KIX) 7545 1626 1540 TPG Internet Pty Ltd 10620 1700 1521 TVCABLE BOGOTA 28573 1515 1444 NET Servicos de Comunicao S.A 22773 1502 1398 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 4323 Time Warner Telecom 32567 UNALLOCATED 12.25.107.0/24 4323 Time Warner Telecom 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 32873 UNALLOCATED 12.46.100.0/23 10912 InterNAP Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/21 12654 RIPE NCC RIS Project 128.0.24.0/24 12654 RIPE NCC RIS Project Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.225.128.0/18 36377 Comcast Telecommunications, I 24.225.192.0/23 36377 Comcast Telecommunications, I 24.225.192.0/18 36377 Comcast Telecommunications, I 24.225.224.0/21 36377 Comcast Telecommunications, I 24.225.237.0/24 36377 Comcast Telecommunications, I 24.225.248.0/21 36377 Comcast Telecommunications, I 41.222.79.0/24 37345 MEDALLION Communications 41.223.92.0/22 36936 >>UNKNOWN<< 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:12 /10:27 /11:81 /12:236 /13:465 /14:809 /15:1434 /16:12028 /17:6089 /18:10141 /19:20013 /20:27720 /21:27902 /22:38036 /23:35600 /24:199083 /25:1163 /26:1365 /27:775 /28:165 /29:3 /30:0 /31:0 /32:5 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 7029 2538 2909 Windstream Communications Inc 6389 2123 3479 bellsouth.net, inc. 18566 2042 2093 Covad Communications 10620 1595 1700 TVCABLE BOGOTA 8402 1562 1587 Corbina telecom 30036 1400 1440 Mediacom Communications Corp 11492 1118 1155 Cable One 1785 1058 1849 PaeTec Communications, Inc. 7011 1050 1167 Citizens Utilities 22773 962 1502 Cox Communications, Inc. Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:421 2:487 4:15 5:1 6:3 8:358 12:1952 13:1 14:555 15:11 16:3 17:7 20:9 23:68 24:1694 27:1036 31:684 32:66 33:2 34:2 36:4 38:767 39:1 40:109 41:2868 42:64 43:1 44:3 46:1098 47:3 49:296 50:450 52:13 55:6 56:2 57:49 58:928 59:486 60:360 61:1167 62:916 63:1966 64:4080 65:2309 66:4345 67:2011 68:1172 69:3148 70:904 71:359 72:1814 74:2650 75:430 76:320 77:897 78:891 79:461 80:1145 81:839 82:523 83:520 84:471 85:1149 86:401 87:908 88:353 89:1596 90:246 91:4287 92:537 93:1438 94:1322 95:1126 96:396 97:285 98:771 99:37 101:247 103:513 106:7 107:97 108:86 109:1201 110:679 111:812 112:363 113:503 114:630 115:714 116:907 117:722 118:876 119:1289 120:353 121:669 122:1562 123:1027 124:1357 125:1354 128:269 129:184 130:174 131:633 132:155 133:21 134:224 135:54 136:212 137:145 138:285 139:122 140:494 141:250 142:379 143:400 144:498 145:66 146:476 147:220 148:641 149:275 150:163 151:191 152:449 153:172 154:7 155:379 156:208 157:360 158:156 159:488 160:333 161:215 162:365 163:175 164:518 165:381 166:540 167:448 168:828 169:145 170:826 171:87 172:4 173:1752 174:581 175:435 176:332 177:403 178:1127 180:1174 181:39 182:664 183:247 184:394 185:1 186:1464 187:783 188:994 189:1160 190:5222 192:5933 193:5057 194:3540 195:3112 196:1277 197:170 198:3614 199:4227 200:5527 201:1701 202:8557 203:8523 204:4308 205:2410 206:2655 207:2837 208:4024 209:3583 210:2741 211:1471 212:2012 213:1803 214:784 215:91 216:4921 217:1478 218:575 219:341 220:1253 221:523 222:327 223:280 End of report

1 0

Dynamic (changing) IPv6 prefix delegation
by Seth Mos 25 Nov '11

25 Nov '11

Hello List, As a pfSense developer I recently ran into a test system that (actually) gets a IPv6 prefix from it's ISP. (Hurrah). What is bewildering to me is that each time the system establishes a new PPPoE session to the ISP they assign a different IPv6 prefix via delegation together with a differing IPv4 address for the WAN. Is this going to be forward for other consumer ISPs in the world? One of the thoughts that came to mind is T-Online in Germany that still disconnects it's (PPPoE) user base every 24 hours for a new random IP. Short of setting really short timers on the RA messages for the LAN I can see a multitude of complications for consumers in the long run. People that configure their NAS, Media Player and Printer on their own network. And using ULA for either is not workable unless they somehow manage to grow DNS skill on the end user. Their NAS probably wants to download from the 'net and access videos from the NAS. The media player wants to be able to access youtube and the laptop needs to (reliably) find it's printer each time. I really hope that ISPs will commit to assigning the same prefix to the same user on each successive connection. Here is to hoping. Kind regards, Seth

19 30

APRICOT-2012: Call for Papers
by Mark Tinka 24 Nov '11

24 Nov '11

Asia Pacific Regional Internet Conference on Operational Technologies (APRICOT) 21 February - 2 March 2012, New Delhi, India http://www.apricot2012.net CALL FOR PAPERS =============== The APRICOT 2012 Programme Committee is now seeking contributions for Presentations and Tutorials for APRICOT 2012. We are looking for people and proposals that would: - Offer a technical tutorial on an appropriate topic; and/or - Participate in the technical conference sessions as a speaker; and/or - Convene and chair a Birds of a Feather (BOF) session. Please submit proposals on-line at: http://submission.apnic.net/ CONFERENCE MILESTONES --------------------- Call for Papers Opens: 22 November 2011 First Draft Program Published: 19 December 2011 Final Deadline for Submissions: 10 February 2012 Final Program Published: 17 February 2012 Final Slides Received: 25 February 2012 PROGRAM MATERIAL ---------------- The APRICOT Programme is organised in three parts, including workshops, tutorials and the conference. The APNIC Policy SIG and Annual Members Meeting will be held during the APRICOT conference. Topics for tutorials and conference would include amongst others relevant to Internet Operations and Technologies: - IPv4 / IPv6 Routing and operations - IPv4 address runout / IPv6 deployment and transition technologies - Backbone operations - ISP and Carrier services - Network security issues (NSP-SEC, DDoS Anti-Spam, Anti-Malware) - Peering / IXPs - DNS / DNSSEC - Internet policy (Security, Regulation, Content Management, Addressing, etc) - Access and Transport Technologies, including broadband deployment, Cable/DSL, wireless, WiMax, metro ethernet, fiber network, MPLS - Content & Service Delivery (Multicast, Voice, Video, "telepresence", Gaming) CfP SUBMISSION -------------- All draft and complete slides must be submitted in PDF format only. Draft slides for both tutorials and conference sessions MUST be provided with CfP submissions otherwise the Programme Committee will be unable to review the submission. For work in progress, the most current information available at time of submission is acceptable. Final slides are to be provided by the specified deadline for publication on the APRICOT website. While the majority of speaking slots will be filled by the first submission deadline, a limited number of slots may be available up to the final submission deadline for presentations that are exceptionally timely, important, or of critical operational importance. Please submit on-line at: http://submission.apnic.net/ Any questions or concerns should be addressed to the Programme Committee by e-mail at: pc-chairs at apricot.net We look forward to receiving your presentation proposals. Mark Tinka & Jonny Martin Co-Chairs, APRICOT Programme Committee program(a)apricot.net

1 0

automated config backups for SFTOS
by Jon Heise 24 Nov '11

24 Nov '11

Does anyone know of a method of automating config backups for force10 switches running SFTOS ? I've got an python expect script that works on our routers running FTOS, it uses a role account that can show the running configs without having to use the enable password. i could expand the script to use the enable password but i'm hesitant to have it lying around in a script Jon Heise

4 4

Posting for network engineers and operators...
by Brian Stengel 24 Nov '11

24 Nov '11

Apologies if this is not appropriate for this list... but I'm looking to hire network engineers for our project and would like to hear what job boards are best for network engineering types to view. I'm not a recruiter. We are looking for positions in Pennsylvania. Dice? Monster? Linked-in? thanks, brian -- Brian Stengel KINBER Director of Operations bstengel(a)kinber.org M: 412.398.2333 GV: 412.254.3481 Skype: brian_stengel KINBER - Keystone Initiative for Network Based Education and Research - www.kinber.org PennREN - Pennsylvania's Research and Education Network

8 7

Re: First real-world SCADA attack in US
by Hal Murray 23 Nov '11

23 Nov '11

> Like any of the decades largest breaches this could have been avoided by > following BCP's. In addition SCADA networks are easily protected via > behavioral and signature based security technologies. Is there a BCP that covers security for SCADA? Note that Google for "BCP SCADA" finds BS-25999 Business Continuity Plan Implementation Checklist ... ---------- Suppose a friend of yours was a low-level geek working for either a user/operator of a SCADA system or a vendor of software/hardware for that market. If he asked you for info about security, where would you send him? (Assume he knows all about SCADA but little about networks or security.) For that matter, is there any good security info for small to medium sized businesses? Say a local store, travel agency, or doctor/dentist. -- These are my opinions, not necessarily my employer's. I hate spam.

2 1

First real-world SCADA attack in US
by Jay Ashworth 23 Nov '11

23 Nov '11

On an Illinois water utility: http://www.msnbc.msn.com/id/45359594/ns/technology_and_science-security Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA http://photo.imageinc.us +1 727 647 1274

24 44

Odd router brokenness
by Mark Radabaugh 23 Nov '11

23 Nov '11

Since this list likes to speculate with little facts on a regular basis (and I'll admit to being as guilty as anyone) I throw this one out for opinions : We were seeing very odd behavior on a Cogent circuit following a software upgrade to tol01.atlas. Two traceroutes: mark@angola-gw> traceroute 74.125.226.6 traceroute to 74.125.226.6 (74.125.226.6), 30 hops max, 40 byte packets 1 * * gi1-1.ccr01.tol01.atlas.cogentco.com (38.104.148.5) 110.315 ms 2 te4-2.ccr01.sbn01.atlas.cogentco.com (154.54.7.154) 139.520 ms 196.910 ms 5.728 ms 3 * * * 4 * te0-5-0-5.ccr21.ord03.atlas.cogentco.com (154.54.44.174) 8.310 ms te0-0-0-7.ccr21.ord03.atlas.cogentco.com (154.54.25.70) 8.752 ms 5 te0-0-0-0.ccr22.ord03.atlas.cogentco.com (154.54.24.214) 8.983 ms te0-1-0-0.ccr22.ord03.atlas.cogentco.com (66.28.4.66) 7.948 ms * 6 * * te-9-1.car4.Chicago1.Level3.net (4.68.127.129) 26.127 ms 7 GOOGLE-INC.car4.Chicago1.Level3.net (4.71.100.22) 38.132 ms 25.120 ms * 8 * * 209.85.254.122 (209.85.254.122) 24.539 ms 9 * 72.14.237.130 (72.14.237.130) 26.134 ms 72.14.237.108 (72.14.237.108) 25.021 ms MPLS Label=666803 CoS=4 TTL=1 S=1 10 216.239.46.161 (216.239.46.161) 31.816 ms 35.702 ms 32.249 ms 11 72.14.233.142 (72.14.233.142) 32.897 ms * * 12 * yyz06s05-in-f6.1e100.net (74.125.226.6) 33.319 ms * and a ping over the same path: --- www.l.google.com ping statistics --- 675 packets transmitted, 323 packets received, 52.1% packet loss round-trip min/avg/max/stddev = 12.834/28.831/129.743/28.987 ms and at the same time: mark@angola-gw> traceroute 38.100.128.10 traceroute to 38.100.128.10 (38.100.128.10), 30 hops max, 40 byte packets 1 gi1-1.ccr01.tol01.atlas.cogentco.com (38.104.148.5) 4.445 ms 1.841 ms 1.713 ms 2 te7-7.ccr02.cle04.atlas.cogentco.com (154.54.5.230) 5.318 ms te3-2.ccr02.cle04.atlas.cogentco.com (154.54.28.86) 4.755 ms te7-7.ccr02.cle04.atlas.cogentco.com (154.54.5.230) 4.982 ms 3 te4-2.ccr01.pit02.atlas.cogentco.com (154.54.30.10) 7.997 ms te3-2.ccr01.pit02.atlas.cogentco.com (154.54.30.6) 7.736 ms te4-2.ccr01.pit02.atlas.cogentco.com (154.54.30.10) 8.177 ms 4 te0-0-0-5.mpd21.dca01.atlas.cogentco.com (154.54.40.81) 17.197 ms te0-0-0-5.ccr22.dca01.atlas.cogentco.com (154.54.30.230) 16.907 ms te0-0-0-5.mpd21.dca01.atlas.cogentco.com (154.54.40.81) 17.008 ms 5 te0-1-0-0.mpd22.dca01.atlas.cogentco.com (154.54.2.193) 17.358 ms te0-0-0-0.mpd22.dca01.atlas.cogentco.com (154.54.31.38) 17.196 ms te0-1-0-0.mpd22.dca01.atlas.cogentco.com (154.54.2.193) 18.690 ms 6 te4-2.mpd01.iad03.atlas.cogentco.com (154.54.29.122) 17.885 ms * 18.537 ms 7 cogentco.com (38.100.128.10) 17.836 ms !<10> 17.918 ms !<10> 17.833 ms !<10> --- 38.100.128.10 ping statistics --- 236 packets transmitted, 236 packets received, 0.0% packet loss round-trip min/avg/max/stddev = 22.717/27.942/128.011/12.236 ms sh-3.2# Works perfectly. There is no asymmetric routing in this scenario (only 1 BGP peer running during this test), and it is not due to traffic congestion. Initial speculation over the dropped packets in the trace to 74.125.226.6 was ICMP depriortization. The results are too consistent for that to make sense (I have dozens of traceroutes to the same destination - they all appear similar). I realize there is a long history of Cogent/L3 ugliness but I'm pretty sure that this issue has nothing to do with that subject. Traceroutes and pings from the control plane of tol01.atlas sourced from 38.104.148.5 do not show any odd behavior. Inbound traffic (to us) is not affected by this. Our workaround while resolving this issue was to change local-pref on the affected prefixes to send traffic out our other providers. The issue started after a software upgrade to tol01.atlas and resolved after a (reported) reboot of tol01.atlas. The question is: How does a router break in this manner? It appears to unintentionally be doing something different with traffic based on the source address, not the destination address. I realize this can be done intentionally - but that is not the case here (unless somebody isn't telling me something). -- Mark Radabaugh Amplex mark(a)amplex.net 419.837.5015

4 6