April 2012 - Test - lists.nanog.org

AMS-IX for local loop
by Shacolby Jackson 10 Apr '12

10 Apr '12

I know this is a bit off topic since Amsterdam isn't exactly in North America but... Has anyone used AMS-IX for a private interconnect from one datacenter to another to avoid a classic local loop to another party or provider? For example, I'm in Equinix but might want to connect directly to someone at Interxion. -shac

3 3

AT&T DSL bypass first line
by Brandon Ewing 10 Apr '12

10 Apr '12

I've been an AT&T DSL customer for 3+ years, with no issues until they started sending people into my neighborhood to "start retrofitting for UVerse". Since they've visited, my PPPoE has dropped once an hour, many times requiring me to restart my router (Cisco 877) to get my virtual interface to come back up. Speaking with the front line on the phone has given me nothing but problems (in their defense, I do have a non-standard modem) -- could someone with knowledge provide me with a way to bypass the CSRs and speak to someone with clue to work out debug logs and figure out why I am suddenly an unhappy AT&T customer? -- Brandon Ewing (nicotine(a)warningg.com)

6 6

Cablevision / Lightpath / Optimum Online hard limit
by Babak Pasdar 09 Apr '12

09 Apr '12

Hello, Is there anyone on the Cablevision / Lightpath / Optimum Online IP team that can work with us on a hard 60mbps limit between us and a client's network? Thanks Babak -- Babak Pasdar Bat Blue Networks (p) 212.461.3322 x3005 | (f) 212.584.9999 | www.BatBlue.com Bat Blue: AS 25885 | BGP Policy | Peering Policy Watch: Cloud Security Video | Cloud Network Video Read: Official Provider for ESPN X Games

1 0

FYI Coresite xconn price increases
by David Miller 09 Apr '12

09 Apr '12

Just as an FYI, anyone with space and xconns in a Coresite facility (e.g. OW) might want to double check their recent invoices. Coresite more than doubled our MRC on existing and new fiber xconns. I have heard from others that they also had the same increase across the board for all xconns at all locations. We had this more than double price increase on our latest invoices even at locations where we, by contract, locked in our xconn prices. We are fighting this with their folks now. It appears that they did a global search and replace in their billing system for xconn prices without regard to the actual contract. -DMM

1 0

Fwd: AusNOG 2012 Call For Presentations
by Mark Prior 09 Apr '12

09 Apr '12

In case anyone wants a trip down under in September. Mark. -------- Original Message -------- Subject: AusNOG 2012 Call For Presentations Date: Mon, 9 Apr 2012 20:25:30 +0930 From: Matthew Moyle-Croft <mmc(a)mmc.com.au> To: Ausnog(a)ausnog.net (ausnog(a)ausnog.net) <ausnog(a)ausnog.net> Call for presentations for AusNOG 2012 =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Langham Hotel **Melbourne** 6 & 7 September, 2012 Notes =-=-=- The AusNOG organisers have decided to change the name of the conference to reflect the year instead of the number of the event. So this year's conference is going to be known as AusNOG 2012. It's hoped this will remove some confusion. AusNOG 2012 is being held in Melbourne for the first time. The organisers encourage Melbourne based network operators, especially those that have not previously attended an AusNOG, will take advantage of this opportunity to not only attend the meeting but also present! Topics =-=-=-= Internet operations can be a broad topic and the presentation selection committee will be short-listing presentations in the following focus areas: * Improving the redundancy/resiliency/sustainability of your network * Making leaps in service or network availability * Taking the network operations BCP to the next level * Using 'offline' communications tools to keep the network working * How technology is changing network architectures * Evolution in network architectures and scaling issues Other topics which are of interest to the network operator community are also welcome at AusNOG 2012. Naturally, presentations of a marketing nature are not welcome at this technical event. Notes to presenters =-=-=-=-=-=-=-=-=-= Preference will be given to presentations that result in actual operational outcomes. Session speakers should be prepared to present for 30 minutes. Keynote speakers will be expected to present for 45 minutes to 1 hour. Short presentations of strong operational content are also acceptable. Once the final slides are submitted, changes will only be permitted where the presentation requires the most up to date information or data. By submitting a presentation for consideration in the AusNOG 2012 programme, and if selected the presenter will allow AusNOG to: * Take photographs of the presentation and presenter. * Record and rebroadcast video and audio of the presentation and presenter. * Redistribute, the presentation slides, audio, video, and photographs electronically, on the AusNOG website, or otherwise but leaving all intellectual property in the hands of presenter or rightful property holder where possible[1]. Deadlines =-=-=-=-=- 01 June: Submission of presentation title, presentation description (300 words), and presenter biography (200-400 words) 15 July: Presenters notified of their acceptance status as an AusNOG 2012 presentation. August 29: Submission of final presentation slides as Portable Document Format (pdf), PowerPoint, or Keynote. Provision of a recent digital photograph (<500k) of the presenter. All submissions must be sent to organisers at ausnog.net. A separate call for lightning talks will be made closer to the AusNOG 2012 event [1]: AusNOG accepts that some speakers are unable to allow us to archive their presentation due to company or corporate policy, and if the situation arises AusNOG will delete all copies in its possession after the presentation.

1 0

Re: Question about peering
by Joel M Snyder 08 Apr '12

08 Apr '12

>It seems like that problem could be overcome by making the >IX a cooperative owned by the members, maybe? Even if an IX is a cooperative, that doesn't say anything about their costs and the costs of interconnection. Networks and buildings and cross-connects can get cheap for lots of reasons, but the nature of the ownership isn't really a factor. Cooperatives can be as poorly run or have as high costs as any commercial facility. In fact, you could argue that without some cross-subsidy of co-lo or one of the providers 'donating' space, a small cooperative is likely to be more expensive to put together than a large colo facility that has lots of revenue streams. Or you could argue the opposite. I'm just pointing out that motivation and ownership don't necessarily dictate final costs. That being said... >I am in almost that exact position (A peering n00b network) - Of >couse, I'm fairly certain I'm paying sucker prices, but I can get a >gigE to any2 at 55 s market for less than a third the price you quote. Well, bully for you, but at this very instant I'm looking at a contract from PCCW which has a component of a cross-connect in Telecity London (Harbour Exchange) where the cross-connect has been priced out at USD 2400/month (maybe that also includes 1U of space; it's hard to tell). I do understand that this is NANOG with emphasis on the "NA" part, and so costs in other geographies may not be all that interesting, but some facilities do charge an arm and a leg (or maybe PCCW is screwing us over on the proposal). jms -- Joel M Snyder, 1404 East Lind Road, Tucson, AZ, 85719 Senior Partner, Opus One Phone: +1 520 324 0494 jms(a)Opus1.COM http://www.opus1.com/jms

1 0

BGP Update Report
by cidr-report＠potaroo.net 06 Apr '12

06 Apr '12

BGP Update Report Interval: 29-Mar-12 -to- 05-Apr-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 67283 3.7% 33.7 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS10201 52074 2.9% 197.2 -- DWL-AS-IN Dishnet Wireless Limited. Broadband Wireless 3 - AS14374 48402 2.7% 1210.0 -- AGRI-VALLEY - Agri-Valley Services Inc. 4 - AS9829 40535 2.2% 50.7 -- BSNL-NIB National Internet Backbone 5 - AS7843 34206 1.9% 1266.9 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 6 - AS12479 28304 1.6% 43.1 -- UNI2-AS France Telecom Espana SA 7 - AS7029 23655 1.3% 6.7 -- WINDSTREAM - Windstream Communications Inc 8 - AS7552 23336 1.3% 21.4 -- VIETEL-AS-AP Vietel Corporation 9 - AS32528 23234 1.3% 3319.1 -- ABBOTT Abbot Labs 10 - AS26615 21440 1.2% 24.0 -- Tim Celular S.A. 11 - AS2118 19486 1.1% 13.6 -- RELCOM-AS OOO "NPO Relcom" 12 - AS5800 17725 1.0% 57.4 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 13 - AS24560 17518 1.0% 39.2 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 14 - AS5976 16773 0.9% 148.4 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 15 - AS28683 16207 0.9% 274.7 -- BENINTELECOM 16 - AS28573 12874 0.7% 12.1 -- NET Servicos de Comunicao S.A. 17 - AS45899 9521 0.5% 29.1 -- VNPT-AS-VN VNPT Corp 18 - AS594 9181 0.5% 65.1 -- LVLT594-598 - Level 3 Communications, Inc. 19 - AS25620 8895 0.5% 57.4 -- COTAS LTDA. 20 - AS8452 8678 0.5% 8.2 -- TE-AS TE-AS TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS3563 3832 0.2% 3832.0 -- PILOT-ASN - Pilot Network Services, Inc 2 - AS17408 3365 0.2% 3365.0 -- ABOVE-AS-AP AboveNet Communications Taiwan 3 - AS32528 23234 1.3% 3319.1 -- ABBOTT Abbot Labs 4 - AS7843 34206 1.9% 1266.9 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 5 - AS14374 48402 2.7% 1210.0 -- AGRI-VALLEY - Agri-Valley Services Inc. 6 - AS55665 998 0.1% 998.0 -- STMI-AS-ID PT Sampoerna Telemedia Indonesia 7 - AS22733 910 0.1% 910.0 -- 8 - AS11553 888 0.1% 888.0 -- MANNATECH-AS MANNATECH 9 - AS57767 871 0.1% 871.0 -- RTTC-AS Federal State-owned Enterprise Russian Television and Radio Broadcasting Network 10 - AS44798 808 0.0% 808.0 -- PERVOMAYSK-AS PP "SKS-Pervomaysk" 11 - AS38364 1220 0.1% 610.0 -- CNNIC-LTEL-AP LONGTEL NETWORKS & TECHNOLOGIES LTD. 12 - AS38857 1121 0.1% 560.5 -- ESOFT-TRANSIT-AS-AP e.Soft Technologies Ltd. 13 - AS15825 2193 0.1% 548.2 -- UNSPECIFIED 14 - AS34369 1563 0.1% 521.0 -- SHATELIX SHATEL Internet Exchange 15 - AS27169 490 0.0% 490.0 -- TRIDENTAS - Trident Systems, Inc. 16 - AS52366 952 0.1% 476.0 -- Lunamen S.A. 17 - AS25600 454 0.0% 454.0 -- MATRIKON-1 - Matrikon Inc. 18 - AS37169 887 0.1% 443.5 -- SOLSI 19 - AS33377 866 0.1% 433.0 -- FHLBC - Federal Home Loan Bank of Chicago 20 - AS38455 830 0.1% 415.0 -- IPC-NETWORK-SERVICES-AS-AP IPC Network Services TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 130.36.34.0/24 11607 0.6% AS32528 -- ABBOTT Abbot Labs 2 - 130.36.35.0/24 11607 0.6% AS32528 -- ABBOTT Abbot Labs 3 - 204.234.0.0/17 11054 0.6% AS7029 -- WINDSTREAM - Windstream Communications Inc 4 - 62.36.252.0/22 8750 0.5% AS12479 -- UNI2-AS France Telecom Espana SA 5 - 205.107.121.0/24 7545 0.4% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 6 - 122.161.0.0/16 6862 0.3% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 7 - 62.36.249.0/24 6450 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 8 - 62.36.241.0/24 5921 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 9 - 62.36.210.0/24 5674 0.3% AS12479 -- UNI2-AS France Telecom Espana SA 10 - 205.106.248.0/24 5466 0.3% AS5976 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 11 - 23.54.176.0/22 5267 0.3% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 12 - 194.63.9.0/24 5145 0.3% AS1273 -- CW Cable and Wireless Worldwide plc 13 - 184.50.208.0/20 4913 0.2% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 14 - 205.211.136.0/24 4864 0.2% AS6407 -- PRIMUS-AS6407 - Primus Telecommunications Canada Inc. 15 - 173.222.100.0/22 4828 0.2% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 16 - 184.28.206.0/23 4826 0.2% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 17 - 23.54.188.0/22 4718 0.2% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 18 - 23.54.184.0/22 4718 0.2% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 19 - 23.54.180.0/22 4717 0.2% AS7843 -- TWCABLE-BACKBONE - Road Runner HoldCo LLC 20 - 182.64.0.0/16 4495 0.2% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 06 Apr '12

06 Apr '12

This report has been generated at Fri Apr 6 21:12:44 2012 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 30-03-12 406585 236412 31-03-12 406736 236071 01-04-12 406429 236409 02-04-12 406722 236897 03-04-12 406676 237014 04-04-12 406639 237399 05-04-12 406957 237397 06-04-12 407232 237558 AS Summary 40739 Number of ASes in routing system 17045 Number of ASes announcing only one prefix 3432 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 111508768 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 06Apr12 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 407551 237560 169991 41.7% All ASes AS6389 3432 199 3233 94.2% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS7029 3417 1822 1595 46.7% WINDSTREAM - Windstream Communications Inc AS4766 2480 1021 1459 58.8% KIXS-AS-KR Korea Telecom AS22773 1568 120 1448 92.3% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS18566 2092 705 1387 66.3% COVAD - Covad Communications Co. AS28573 1773 493 1280 72.2% NET Servicos de Comunicao S.A. AS2118 1394 141 1253 89.9% RELCOM-AS OOO "NPO Relcom" AS4323 1599 382 1217 76.1% TWTC - tw telecom holdings, inc. AS4755 1574 393 1181 75.0% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS1785 1896 807 1089 57.4% AS-PAETEC-NET - PaeTec Communications, Inc. AS10620 1795 825 970 54.0% Telmex Colombia S.A. AS7552 1172 219 953 81.3% VIETEL-AS-AP Vietel Corporation AS8402 1720 800 920 53.5% CORBINA-AS OJSC "Vimpelcom" AS7303 1353 439 914 67.6% Telecom Argentina S.A. AS26615 887 32 855 96.4% Tim Celular S.A. AS8151 1483 667 816 55.0% Uninet S.A. de C.V. AS18101 948 163 785 82.8% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS4808 1105 347 758 68.6% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS30036 1461 771 690 47.2% MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communications Corp AS17974 1782 1099 683 38.3% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS9394 892 210 682 76.5% CRNET CHINA RAILWAY Internet(CRNET) AS3356 1100 462 638 58.0% LEVEL3 Level 3 Communications AS17676 687 75 612 89.1% GIGAINFRA Softbank BB Corp. AS19262 997 402 595 59.7% VZGNI-TRANSIT - Verizon Online LLC AS24560 1021 433 588 57.6% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS22561 996 416 580 58.2% DIGITAL-TELEPORT - Digital Teleport Inc. AS3549 1012 440 572 56.5% GBLX Global Crossing Ltd. AS4804 655 95 560 85.5% MPX-AS Microplex PTY LTD AS22047 584 31 553 94.7% VTR BANDA ANCHA S.A. AS4780 808 257 551 68.2% SEEDNET Digital United Inc. Total 43683 14266 29417 67.3% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 14.192.0.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.4.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.8.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.12.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.16.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.20.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.24.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 14.192.28.0/22 AS45464 NEXTWEB-AS-AP Room 201, TGU Bldg 27.112.114.0/24 AS23884 PROENNET-AS Proimage Engineering and Communication Co.,Ltd. 41.222.79.0/24 AS36938 AMSCOTELECOMS Amsco Telecommunications Nigeria Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 66.171.32.0/20 AS705 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.207.32.0/20 AS23011 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.44.16.0/20 AS15054 HAMELTRONICS - Hameltronics, LLC 74.91.48.0/24 AS14208 74.91.49.0/24 AS14208 74.91.50.0/24 AS14208 74.91.51.0/24 AS14208 74.91.52.0/24 AS14208 74.91.53.0/24 AS14208 74.91.54.0/24 AS14208 74.91.55.0/24 AS14208 74.91.56.0/24 AS14208 74.91.57.0/24 AS14208 74.91.58.0/24 AS14208 74.91.59.0/24 AS14208 74.91.60.0/24 AS14208 74.91.61.0/24 AS14208 74.91.62.0/24 AS14208 74.91.63.0/24 AS14208 98.159.96.0/20 AS46975 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services Inc. 172.45.1.0/24 AS3356 LEVEL3 Level 3 Communications 172.45.2.0/24 AS29571 CITelecom-AS 172.45.3.0/24 AS29571 CITelecom-AS 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.223.60.0/22 AS6910 DIALTELECOMRO Dial Telecom S.R.L. 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.6.93.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.94.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.6.95.0/24 AS6400 Compañía Dominicana de Teléfonos, C. por A. - CODETEL 200.23.84.0/24 AS8151 Uninet S.A. de C.V. 200.24.73.0/24 AS26061 Equant Colombia 200.33.40.0/24 AS11172 Alestra, S. de R.L. de C.V. 200.34.0.0/20 AS6342 Instituto Tecnológico y de Estudios Superiores de Monterrey 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 202.1.224.0/24 AS10097 FLOWCOM Flow Communications 2/541 Kent St Sydney NSW 2000 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.86.32.0/20 AS18255 BRISBANE-AP Brisbane City Council 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.122.134.0/24 AS38615 202.140.128.0/19 AS9583 SIFY-AS-IN Sify Limited 202.160.152.0/22 AS10113 EFTEL-AS-AP Eftel Limited. 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.188.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.142.219.0/24 AS45149 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 206.123.129.0/24 AS10790 INREACH-AS - InReach Internet 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.91.56.0/21 AS22241 IC2NET - IC2NET 208.91.56.0/24 AS22241 IC2NET - IC2NET 208.91.57.0/24 AS22241 IC2NET - IC2NET 208.91.58.0/24 AS22241 IC2NET - IC2NET 208.91.59.0/24 AS22241 IC2NET - IC2NET 208.91.60.0/24 AS22241 IC2NET - IC2NET 208.91.61.0/24 AS22241 IC2NET - IC2NET 208.91.62.0/24 AS22241 IC2NET - IC2NET 208.91.63.0/24 AS22241 IC2NET - IC2NET 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 216.12.160.0/20 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.21.160.0/20 AS27876 American Data Networks 216.194.160.0/20 AS27876 American Data Networks Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

DNS noise
by Nathan Eisenberg 06 Apr '12

06 Apr '12

Anyone else seeing this sort of noise lately? 10:35:00.958556 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:00.961055 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:01.262461 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:01.350979 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:01.351001 IP 66.171.180.48 > 72.20.23.24: ICMP 66.171.180.48 udp port 53 unreachable, length 74 10:35:01.573166 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:01.573204 IP 66.171.180.48 > 72.20.23.19: ICMP 66.171.180.48 udp port 53 unreachable, length 74 10:35:01.730128 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:01.970730 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:02.121218 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:02.374853 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:02.374879 IP 66.171.180.48 > 72.20.23.19: ICMP 66.171.180.48 udp port 53 unreachable, length 74 10:35:02.493257 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:02.493270 IP 66.171.180.48 > 72.20.23.24: ICMP 66.171.180.48 udp port 53 unreachable, length 74 10:35:02.726303 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:02.863667 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:03.023693 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:03.251935 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:03.251964 IP 66.171.180.48 > 72.20.23.24: ICMP 66.171.180.48 udp port 53 unreachable, length 74 10:35:03.326562 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:03.630514 IP 72.20.23.24.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) 10:35:03.638327 IP 72.20.23.19.53 > 66.171.180.48.53: 952+ [1au] ANY? ripe.net. (38) Note that the server involved does not run a DNS daemon, or listen on 53, or anything else that would attract attention.

8 10

Re: DNS noise
by Joe St Sauver 06 Apr '12

06 Apr '12

Jimmy commented: #The underlying problem is that "BCP38" is not really a "best common practice", #despite the name of the series. # #It's really a "Best Uncommon Practice that really ought to be more common", #but we can't control operators and force them to make it more common. # #Lots of networks don't and will not ever implement BCP38; BCP38 is not being #more widely implemented, and there's no obvious action that will #force it to change. Check out the MIT Spoofer Project (http://spoofer.csail.mit.edu/summary.php) BCP38 anti-spoofing filtering is more common than you might think (on the order of 80% of {netblocks, IPs, ASNs} filter as of October 2011) Regards, Joe

1 0