September 2012 - Test - lists.nanog.org

Are people still building SONET networks from scratch?
by Will Orton 11 Sep '12

11 Sep '12

We've run into an issue with a customer that has been confounding us for a few months as we try to design what they need. The customer has a location in the relative middle of nowhere that they are trying to build a protected OC3 to. Ultimately, their traffic on it will be packet data (IP/ethernet, not channelized/voice). But they seem to be absolutely 100% set on the idea that they build with Cisco ONS boxes and that they run and control the D1-D12 bytes in order to manage protection switching on the OC3 (and have their DCC channel for management). Since this is the middle of nowhere, we are having to piece it together from a few runs of dark fiber here and there and lit services from about 3 other providers to get from the desired point A to the desired point B. The issues we seem to be hitting are: -We seem to be unable to find anyone who sells lit OC3 with D1-D12 transparency for the client. Sometimes we can get D1-D3, but that's it. -lit OC3/12/48 is ridiculously expensive comapred to 1g ethernet waves or 10g waves (choice LAN/WAN ethernet or OC192) 10g waves are cheap enough that we have entertained the idea of buying them and putting OC-192/muxponders on the ends to provide the OC-3, but even then I'm having trouble finding boxes that will do D1-D12 transparency for client OC-3. Building the whole thing on dark fiber so that we could specify the exact equipment on every hop isn't going to happen, as the "protect" path is about 1000 miles and the geography is such that we don't really have a market for all the other wasted capacity there would be on that path. Having much more experience with ethernet/packet/MPLS setups, we are trying to get the client to admit that 1g/10g waves running ethernet with QoS would be as good as or better in terms of latency, jitter, and loss for their packet data. So far they will barely listen to the arguments. And then going the next leap and showing them that we could work towards <50ms protection switching with MPLS/BFD/etc packet-based protocols is another stretch. Am I missing something here that my customer isn't, or is it the other way around? -Will

15 19

Level3 BGP Issue
by Dennis Burgess 10 Sep '12

10 Sep '12

I have a prefix that is having an issue with BGP, its all inside of L3.... If there is someone that would be willing to assist with L3, shoot me a e-mail offlist J Dennis Burgess,

1 0

[NANOG-announce] Upcoming NANOG mail list maintenance notification - 13-Sept-2012
by Randy Epstein 10 Sep '12

10 Sep '12

On Thursday, September 13, 2012 beginning at 6 AM Eastern, the NANOG mail list service will be unavailable. Mailman will be upgraded and moved to a new location, and all lists will be synced, thus ensuring that no messages or archives are lost in the transition. We expect the outage to last no longer than 30 minutes. Regards, Randy Epstein NANOG CC Chair On behalf of the NANOG Communications Committee _______________________________________________ NANOG-announce mailing list NANOG-announce(a)nanog.org https://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Heads-Up: GoDaddy Broke the Interwebs...
by Aaron C. de Bruyn 10 Sep '12

10 Sep '12

For the last ~15 minutes I've been receiving complaints about DNS issues. GoDaddy DNS is apparently b0rked. I'm also seeing a lot of tweets about their hosting and VPS being down. I'm unable to access the control panel for one of my customer accounts. -A

6 5

[SPAM]BGP Issue with L3?
by Dennis Burgess 10 Sep '12

10 Sep '12

Doing a looking glass from the locally connected BGP peer for AS 16843, they are receiving it, the top path, but showing it received-only, and they want to use the "prepended" Path. The rest of L3, outside the local peer looking glass, i.e. the rest of the planet does not even show this path ? Thoughts suggestions? Dennis Paths: (3 available, best #3) 23077 174 7843 11427 16843, (received-only) AS-path translation: { SUNCOM COGENT ADELPHIA SCRR-11427 NORTHEAST-COMNET } WIRELESS-ME.car1.Houston1 from WIRELESS-ME.car1.Houston1 (8.24.196.1) Origin IGP, localpref 100, valid, external Community: 174:21000 174:22013 3549 3491 7459 16843 16843 16843 16843 16843 16843 16843 AS-path translation: { GBLX CAIS-ASN THRIFTYCALL NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET } edge4.Dallas3 (metric 3827) Origin IGP, metric 100000, localpref 88, valid, internal Community: North_America Lclprf_86 United_States Level3_Peer Dallas 3491:200 3549:300 3549:4292 3549:30840 Originator: edge4.Dallas3 3549 3491 7459 16843 16843 16843 16843 16843 16843 16843 AS-path translation: { GBLX CAIS-ASN THRIFTYCALL NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET NORTHEAST-COMNET } edge4.Dallas3 (metric 3827) Origin IGP, metric 100000, localpref 88, valid, internal, best Community: North_America Lclprf_86 United_States Level3_Peer Dallas 3491:200 3549:300 3549:4292 3549:30840 Originator: edge4.Dallas3

1 0

"Circuit of the americas" aka COTA
by Chris McDonald 08 Sep '12

08 Sep '12

Trendy name for the new racetrack/event venue outside austin. Does anyone know how one might get connectivity there? I figure there must be a few folks here prepping the place for the upcoming formula 1. The place seems to be a black hole to all the usual suspects. tia, chris -- Sent from my mobile device

3 2

Re: The End-To-End Internet (was Re: Blocking MX query)
by Joe St Sauver 08 Sep '12

08 Sep '12

Izaac <izaac(a)setec.org> commented: #I suspect your ISP is also stripping <sarcasm> tags. Let's try it out #again: # # You can tell that tcp port 25 filtering is a highly effective spam # mitigation technique because spam levels have declined in direct # proportion to their level of deployment. Today, we barely see any # spam on the internet due to amazing ability of these filters to # prevent bad people from sending bulk email. # #Was that properly marked? Actually, not sure sarcasm tags are appropriate. 1) Port 25 blocks target direct-to-MX spam delivered by bots. 2) The Spamhaus CBL tracks the level of bot spam currently seen, including breaking out statistics by a number of factors. 3) Currently, the US, where port 25 filtering is routinely deployed by most large ISPs, is ranked 158th among countries when you consider botted users on a per capita basis: http://cbl.abuseat.org/countrypercapita.html 4) While that's not perfect (after all, there are still at least 133,811 listings for the US), on a PER-CAPITA basis, it's not bad -- that's just ~0.055% of US Internet users that are infected, relative to some countries where the rate of detected infection (based on spam emission) may be 4 to 5% or more. So yes, actually, port 25 blocks *DO* tend to be effective in reducing bot-delivered email spam. Does this mean that port 25 blocks are the ONLY measure that is required to control spam? No, absolutely not. But it does clearly help. Regards, Joe

2 1

time-b.netgear.com/time-c.netgear.com dns queries
by Basil Baby 07 Sep '12

07 Sep '12

Noticed lot of "A" record queries for time-b.netgear.com/time-c.netgear.comon dns servers. Has anyone noticed similar behavior on any of your dns servers? Anyone aware about a known issue with netgear home routers which can create bulk dns queries? -Basil

5 5

CAIDA's AS-rank project
by Matthew Luckie 07 Sep '12

07 Sep '12

Hello, We have been working on refreshing the data and algorithms behind CAIDA's as-rank project. We have published AS-relationships and AS-rankings computed for June 2012. We are currently seeking further validation of our rankings and relationship inferences. http://as-rank.caida.org/ The core of the algorithm is the inference of business relationships. Over the past two years we have received a significant amount of ground truth from operators through the corrections facility provided within AS-rank: in particular we obtained >1200 p2p relationships as a result of our previous algorithm that assigned many more customer/provider (c2p) relationships than ASes had in reality. Our intuition is that network owners are a lot more concerned when we infer a provider relationship that is actually a peer relationship, but are less motivated to validate other inferences. We have validated our algorithm against available ground truth and find our relationship inferences have a 99.1% positive predictive value (PPV) for c2p and 94.7% for p2p for the validation data we have available. Because customer cone computation depends on the accuracy of our c2p inferences, we are reasonably confident in our computed rankings. We are now soliciting further feedback in any shape and form offered. The as-rank website provides the ability for operators to submit corrections through the right-most "corrections" button on an individual ASes information page, and relationships ground-truth is solicited through that channel, if at all possible. Other feedback, on or off-list, would also be appreciated. If you are curious as to why a particular relationship was inferred, please get in contact with me. Some ASes have advised of a particular business relationship in the past, but when I drill down into the data it turns out they have a misconfiguration and are leaking routes to a peer. At a minimum, this might be a useful sanity check for some ASes who may be providing free transit without realising it. In the future, we plan to annotate each relationship with examples as to why it was inferred the way it was, but we have not yet got that far yet. Thanks, Matthew Luckie CAIDA

2 1

BGP Update Report
by cidr-report＠potaroo.net 07 Sep '12

07 Sep '12

BGP Update Report Interval: 30-Aug-12 -to- 06-Sep-12 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS6517 143391 6.8% 279.0 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 2 - AS30137 130915 6.2% 2146.1 -- SEA-BROADBAND - Sea Broadband, LLC 3 - AS10198 86716 4.1% 17343.2 -- CUP-AS-KR Catholic University of Pusan 4 - AS8402 43880 2.1% 30.5 -- CORBINA-AS OJSC "Vimpelcom" 5 - AS9829 36108 1.7% 29.2 -- BSNL-NIB National Internet Backbone 6 - AS22561 26219 1.2% 25.1 -- DIGITAL-TELEPORT - Digital Teleport Inc. 7 - AS24560 23941 1.1% 41.9 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 8 - AS13118 20062 1.0% 418.0 -- ASN-YARTELECOM OJSC Rostelecom 9 - AS1637 16835 0.8% 189.2 -- DNIC-AS-01637 - Headquarters, USAISC 10 - AS28238 14083 0.7% 440.1 -- 11 - AS3356 14040 0.7% 12.8 -- LEVEL3 Level 3 Communications 12 - AS25620 11921 0.6% 56.5 -- COTAS LTDA. 13 - AS27947 11885 0.6% 16.5 -- Telconet S.A 14 - AS2697 11748 0.6% 94.0 -- ERX-ERNET-AS Education and Research Network 15 - AS19361 11314 0.5% 332.8 -- Atrium Telecomunicacoes Ltda 16 - AS28573 10642 0.5% 4.9 -- NET Servicos de Comunicao S.A. 17 - AS7029 10532 0.5% 3.0 -- WINDSTREAM - Windstream Communications Inc 18 - AS21599 10127 0.5% 81.7 -- NETDIRECT S.A. 19 - AS5800 9861 0.5% 38.7 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 20 - AS38920 9159 0.4% 4579.5 -- TURKLANDBANK-TR TURKLANDBANK TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS10198 86716 4.1% 17343.2 -- CUP-AS-KR Catholic University of Pusan 2 - AS38920 9159 0.4% 4579.5 -- TURKLANDBANK-TR TURKLANDBANK 3 - AS14680 6671 0.3% 2223.7 -- REALE-6 - Auction.com 4 - AS30137 130915 6.2% 2146.1 -- SEA-BROADBAND - Sea Broadband, LLC 5 - AS44410 5228 0.2% 1742.7 -- ENTEKHAB-AS ENTEKHAB INDUSTRIAL GROUP 6 - AS38857 1596 0.1% 1596.0 -- ESOFT-TRANSIT-AS-AP e.Soft Technologies Ltd. 7 - AS36948 3143 0.1% 1571.5 -- KENIC 8 - AS6629 8923 0.4% 1274.7 -- NOAA-AS - NOAA 9 - AS13178 4286 0.2% 1071.5 -- DIGCOMM Digital communications, LTD 10 - AS41733 8324 0.4% 1040.5 -- ZTELECOM-AS JSC "Z-Telecom" 11 - AS29126 881 0.0% 881.0 -- DATIQ-AS Datiq B.V. 12 - AS46620 768 0.0% 768.0 -- WBH-ISC-RO - William Beaumont Hospital 13 - AS25715 1414 0.1% 707.0 -- UREACH-C - UREACH TECHNOLOGIES, INC. 14 - AS29398 503 0.0% 503.0 -- PETROBALTIC "Petrobaltic" S.A. 15 - AS32529 493 0.0% 493.0 -- CGI-FEDERAL-ASN-1 - CGI Federal 16 - AS56763 474 0.0% 474.0 -- INFOTELL-AS Infotell-Telecom Ltd 17 - AS28238 14083 0.7% 440.1 -- 18 - AS48696 436 0.0% 436.0 -- TEMP-AS TEMP Ltd. 19 - AS21023 432 0.0% 432.0 -- UPB-AS Joint Stock Company Ural Industrial Bank 20 - AS13118 20062 1.0% 418.0 -- ASN-YARTELECOM OJSC Rostelecom TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 109.161.64.0/19 20015 0.9% AS13118 -- ASN-YARTELECOM OJSC Rostelecom 2 - 110.9.62.0/23 17942 0.8% AS10198 -- CUP-AS-KR Catholic University of Pusan 3 - 110.9.64.0/23 17935 0.8% AS10198 -- CUP-AS-KR Catholic University of Pusan 4 - 110.9.61.0/24 17935 0.8% AS10198 -- CUP-AS-KR Catholic University of Pusan 5 - 203.232.208.0/21 16455 0.7% AS10198 -- CUP-AS-KR Catholic University of Pusan 6 - 210.93.62.0/23 16449 0.7% AS10198 -- CUP-AS-KR Catholic University of Pusan 7 - 184.159.130.0/23 13806 0.6% AS22561 -- DIGITAL-TELEPORT - Digital Teleport Inc. 8 - 199.250.214.0/24 11293 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 9 - 199.250.206.0/24 11291 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 10 - 199.250.213.0/24 11290 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 11 - 199.250.204.0/24 11289 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 12 - 199.250.215.0/24 11289 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 13 - 199.250.207.0/24 11289 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 14 - 199.250.195.0/24 11288 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 15 - 199.250.205.0/24 11286 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 16 - 199.250.193.0/24 11283 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 17 - 199.250.192.0/24 11283 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 18 - 199.250.212.0/24 11258 0.5% AS6517 -- RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 19 - 184.157.224.0/19 10921 0.5% AS22561 -- DIGITAL-TELEPORT - Digital Teleport Inc. 20 - 74.91.60.0/24 10908 0.5% AS30137 -- SEA-BROADBAND - Sea Broadband, LLC Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0