March 2013 - Test - lists.nanog.org

Fake or Real Google servers from China Hong Kong (116.92.194.14x)?
by Manu Chao 25 Mar '13

25 Mar '13

Could someone confirm me following IP are legitimated from Google China (HK) or not (fake=dangerous) ??? 116.92.194.140 116.92.194.141 116.92.194.142 116.92.194.143 No DNS resolution from Google DNS, i am suspicious... Any help appreciate

5 4

Re: [c-nsp] DNS amplification
by Jon Lewis 25 Mar '13

25 Mar '13

On Sat, 16 Mar 2013, Robert Joosten wrote: > Hi, > >>> Can anyone provide insight into how to defeat DNS amplification attacks? >> Restrict resolvers to your customer networks. > > And deploy RPF uRPF / BCP38 is really the only solution. Even if we did close all the open recursion DNS servers (which is a good idea), the attackers would just shift to another protocol/service that provides amplification of traffic and can be aimed via spoofed source address packets. Going after DNS is playing whack-a-mole. DNS is the hip one right now. It's not the only one available. Many networks will say "but our gear doesn't do uRPF, and maintaining an ACL on every customer port is too hard / doesn't scale." Consider an alternative solution. On a typical small ISP / small service provider network, if you were to ACL every customer (because your gear won't do uRPF), you might need hundreds or even thousands of ACLs. However, if you were to put output filters on your transit connections, allowing traffic sourced from all IP networks "valid" inside your network, you might find that all you need is a single ACL of a handful to several dozen entries. Having one ACL to maintain that only needs changing if you get a new IP allocation or add/remove a customer who has their own IPs really isn't all that difficult. As far at the rest of the internet is concerned, this solves the issue of spoofed IP packets leaving your network. ---------------------------------------------------------------------- Jon Lewis, MCP :) | I route | therefore you are _________ http://www.lewis.org/~jlewis/pgp for PGP public key_________

34 120

Sabey opens Intergate.Manhattan DC
by Jay Ashworth 24 Mar '13

24 Mar '13

1M sq ft datacenter in former VZN CO at 375 Pearl: http://www.wallstreetandtech.com/it-infrastructure/worlds-largest-high-rise… >From the story: """ Intergate.Manhattan is not only one of the largest facilities [at 32 stories, all rentable space], but it also the only data center that is located in a city center, according to Sabey. However, some financial services IT experts question locating a large data center in Manhattan. "The fact that a building has integrity, and back up systems, is just one thing," says Steve Rubinow, CIO, Marketplaces Division, Thomson Reuters. "But, as we learned on 9/11 and during Sandy, you also need to be able to get people and materiel to and from the building in times of an emergency. And after 9/11, it became very apparent that building data centers on an island, whether it is Manhattan island or any other island, it is a real bother. It creates an added layer of complexity." Currently, the data center is in its first phase, providing 100,000 square feet of data center space and 5.4 Megawatts of power. Eventually, Intergate.Manhattan will accommodate 40 Megawatts of data center capacity on 600,000 square feet of data center floor space, with the additional 400,000 square feet dedicated to power, cooling and infrastructure. """ Cheers, -- jra -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

2 1

BGP Update Report
by cidr-report＠potaroo.net 22 Mar '13

22 Mar '13

BGP Update Report Interval: 14-Mar-13 -to- 21-Mar-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS8402 40868 1.8% 34.5 -- CORBINA-AS OJSC "Vimpelcom" 2 - AS9829 34916 1.6% 38.2 -- BSNL-NIB National Internet Backbone 3 - AS4538 29018 1.3% 55.6 -- ERX-CERNET-BKB China Education and Research Network Center 4 - AS4795 28615 1.3% 117.8 -- INDOSATM2-ID INDOSATM2 ASN 5 - AS18004 24707 1.1% 348.0 -- WIRELESSNET-ID-AP WIRELESSNET AS 6 - AS3909 23240 1.1% 2905.0 -- QWEST-AS-3908 - Qwest Communications Company, LLC 7 - AS28573 22734 1.0% 10.3 -- NET Serviços de Comunicação S.A. 8 - AS2708 22300 1.0% 153.8 -- Universidad de Guanajuato 9 - AS35994 19617 0.9% 530.2 -- AKAMAI-AS - Akamai Technologies, Inc. 10 - AS13897 17712 0.8% 8856.0 -- CDC1 - Internet Brands Inc. 11 - AS23947 17666 0.8% 410.8 -- MORATELINDONAP-AS-ID PT.Mora Telematika Indonesia 12 - AS17974 14927 0.7% 7.7 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 13 - AS58113 14758 0.7% 22.2 -- LIR-AS LIR DATACENTER TELECOM SRL 14 - AS7029 14332 0.7% 9.5 -- WINDSTREAM - Windstream Communications Inc 15 - AS9198 13891 0.6% 36.9 -- KAZTELECOM-AS JSC Kazakhtelecom 16 - AS9583 13059 0.6% 9.6 -- SIFY-AS-IN Sify Limited 17 - AS2697 11839 0.5% 148.0 -- ERX-ERNET-AS Education and Research Network 18 - AS2 11735 0.5% 706.0 -- HPPL-AS-AP Hancock Prospecting Pty Ltd 19 - AS45271 11513 0.5% 44.8 -- ICLNET-AS-AP 5th Floor, Windsor Building, Off: CST Road 20 - AS35567 11230 0.5% 100.3 -- DASTO-BOSNIA-AS DASTO semtel d.o.o. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS13897 17712 0.8% 8856.0 -- CDC1 - Internet Brands Inc. 2 - AS6629 7682 0.3% 3841.0 -- NOAA-AS - NOAA 3 - AS40946 7563 0.3% 3781.5 -- PROCON - Sat Track 4 - AS3909 23240 1.1% 2905.0 -- QWEST-AS-3908 - Qwest Communications Company, LLC 5 - AS6174 5728 0.3% 2864.0 -- SPRINTLINK8 - Sprint 6 - AS37367 2663 0.1% 2663.0 -- CALLKEY 7 - AS14680 6725 0.3% 2241.7 -- REALE-6 - Auction.com 8 - AS18115 2137 0.1% 2137.0 -- JGS-AS-AP JG Group of Companies 9 - AS2 11735 0.5% 706.0 -- HPPL-AS-AP Hancock Prospecting Pty Ltd 10 - AS5074 3320 0.1% 1660.0 -- ASN-ATTELS - AT&T BMGS 11 - AS4467 1515 0.1% 1515.0 -- EASYLINK3 - AT&T Services, Inc. 12 - AS40279 2699 0.1% 1349.5 -- SWGA-NASHVILLE - Southwestern/Great American Inc. 13 - AS9950 4033 0.2% 1344.3 -- PUBNETPLUS2-AS-KR DACOM 14 - AS41023 3786 0.2% 1262.0 -- ARREKS-AS Agencja Rozwoju Regionalnego ARREKS S.A. 15 - AS36529 2488 0.1% 1244.0 -- AXXA-RACKCO - Rackco.com 16 - AS45344 1173 0.1% 1173.0 -- IIUM-MY International Islamic University Of Malaysia 17 - AS17293 4485 0.2% 1121.2 -- VTXC - VTX Communications 18 - AS45770 576 0.0% 576.0 -- SBY-EPROC-AS-ID Bagian Bina Program - Pemerintah Kota Surabaya 19 - AS46018 546 0.0% 546.0 -- DEPPERIN-AS-ID Departemen Perindustrian Republik Indonesia 20 - AS45698 540 0.0% 540.0 -- BONET-AS-ID Bonet Utama, PT TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 202.41.70.0/24 10457 0.4% AS2697 -- ERX-ERNET-AS Education and Research Network 2 - 98.158.200.0/24 8856 0.4% AS13897 -- CDC1 - Internet Brands Inc. 3 - 98.158.204.0/23 8856 0.4% AS13897 -- CDC1 - Internet Brands Inc. 4 - 192.58.232.0/24 7676 0.3% AS6629 -- NOAA-AS - NOAA 5 - 208.92.131.0/24 7561 0.3% AS40946 -- PROCON - Sat Track 6 - 151.118.255.0/24 7281 0.3% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 7 - 151.118.254.0/24 7281 0.3% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 8 - 151.118.18.0/24 7253 0.3% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 9 - 12.139.133.0/24 5507 0.2% AS14680 -- REALE-6 - Auction.com 10 - 194.63.9.0/24 4859 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 11 - 112.110.84.0/22 4268 0.2% AS45271 -- ICLNET-AS-AP 5th Floor, Windsor Building, Off: CST Road 12 - 112.110.82.0/23 4267 0.2% AS45271 -- ICLNET-AS-AP 5th Floor, Windsor Building, Off: CST Road 13 - 69.38.178.0/24 4209 0.2% AS19406 -- TWRS-MA - Towerstream I, Inc. 14 - 69.31.106.0/23 4187 0.2% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 15 - 192.108.213.0/24 4179 0.2% AS1880 -- STUPI Svensk Teleutveckling & Produktinnovation, STUPI AB 16 - 58.184.229.0/24 4022 0.2% AS9950 -- PUBNETPLUS2-AS-KR DACOM 17 - 23.79.253.0/24 3779 0.2% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 18 - 23.65.27.0/24 3751 0.2% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 19 - 23.2.6.0/23 3751 0.2% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. 20 - 184.27.116.0/23 3743 0.2% AS35994 -- AKAMAI-AS - Akamai Technologies, Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 22 Mar '13

22 Mar '13

This report has been generated at Fri Mar 22 21:13:18 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 15-03-13 448211 257346 16-03-13 448743 257380 17-03-13 448568 257603 18-03-13 448652 258302 19-03-13 448881 258115 20-03-13 448504 258217 21-03-13 448538 258322 22-03-13 449261 258110 AS Summary 43719 Number of ASes in routing system 18120 Number of ASes announcing only one prefix 3033 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 116943584 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 22Mar13 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 449068 258053 191015 42.5% All ASes AS6389 3033 91 2942 97.0% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4766 2952 941 2011 68.1% KIXS-AS-KR Korea Telecom AS17974 2504 498 2006 80.1% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS28573 2479 600 1879 75.8% NET Serviços de Comunicação S.A. AS10620 2362 698 1664 70.4% Telmex Colombia S.A. AS18566 2080 431 1649 79.3% COVAD - Covad Communications Co. AS7303 1673 436 1237 73.9% Telecom Argentina S.A. AS4323 1615 405 1210 74.9% TWTC - tw telecom holdings, inc. AS4755 1726 592 1134 65.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS2118 1116 83 1033 92.6% RELCOM-AS OOO "NPO Relcom" AS7029 2217 1253 964 43.5% WINDSTREAM - Windstream Communications Inc AS7552 1158 210 948 81.9% VIETEL-AS-AP Vietel Corporation AS7545 1849 917 932 50.4% TPG-INTERNET-AP TPG Internet Pty Ltd AS36998 1286 381 905 70.4% SDN-MOBITEL AS18101 1008 171 837 83.0% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS22773 1993 1168 825 41.4% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS18881 834 20 814 97.6% Global Village Telecom AS1785 1967 1193 774 39.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS17908 825 61 764 92.6% TCISL Tata Communications AS4808 1115 356 759 68.1% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS14754 942 215 727 77.2% Telgua AS13977 835 126 709 84.9% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS855 713 50 663 93.0% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS8151 1370 707 663 48.4% Uninet S.A. de C.V. AS22561 1079 454 625 57.9% DIGITAL-TELEPORT - Digital Teleport Inc. AS17676 722 101 621 86.0% GIGAINFRA Softbank BB Corp. AS3549 1051 444 607 57.8% GBLX Global Crossing Ltd. AS24560 1060 460 600 56.6% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS3356 1090 496 594 54.5% LEVEL3 Level 3 Communications AS19262 991 402 589 59.4% VZGNI-TRANSIT - Verizon Online LLC Total 45645 13960 31685 69.4% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 41.222.80.0/21 AS37110 moztel-as 62.12.96.0/19 AS38478 SUNNYVISION-AS-AP SunnyVision Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 64.187.208.0/24 AS174 COGENT Cogent/PSI 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.165.92.0/24 AS20077 IPNETZONE-ASN - IPNetZone 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS30097 NUWAVE - NuWave 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.91.48.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.49.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.50.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.51.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.52.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.53.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.54.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.55.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.56.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.57.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.58.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.59.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.60.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.61.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.62.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.63.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 81.22.64.0/20 AS5511 OPENTRANSIT France Telecom S.A. 82.101.160.0/19 AS5511 OPENTRANSIT France Telecom S.A. 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 151.216.0.0/17 AS50304 BLIX Blix Solutions AS 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 190.3.160.0/21 AS27975 SYNAPSIS COLOMBIA LTDA 190.124.252.0/22 AS7303 Telecom Argentina S.A. 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.53.0.0/19 AS13878 UOL DIVEO S.A. 200.58.248.0/21 AS27849 201.71.16.0/20 AS28638 QLINK TELECOMUNICACOES E INTERNET LTDA 201.77.96.0/20 AS28639 Econocell do Brasil Ltda 201.222.32.0/20 AS27821 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.65.96.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.73.240.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.142.219.0/24 AS45149 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.10.112.0/21 AS27027 ANBELL ASN-ANBELL 204.11.112.0/22 AS14745 INTERNAP-BLOCK-4 - Internap Network Services Corporation 205.211.160.0/24 AS30045 UHN-ASN - University Health Network 206.81.112.0/20 AS32618 ADKNO-KC - Adknowledge, Inc. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 208.77.164.0/24 AS22659 208.77.165.0/24 AS22659 208.77.166.0/24 AS22659 208.77.167.0/24 AS22659 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.85.212.0/22 AS32618 ADKNO-KC - Adknowledge, Inc. 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 208.91.72.0/24 AS21681 ANDOVER-TRADING - ANDOVER TRADING 208.91.73.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.76.0/23 AS21681 ANDOVER-TRADING - ANDOVER TRADING 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.234.112.0/23 AS32252 209.234.114.0/23 AS32252 209.234.116.0/24 AS32252 209.234.117.0/24 AS32252 209.234.118.0/24 AS32252 209.234.119.0/24 AS32252 209.234.120.0/24 AS32252 209.234.121.0/24 AS32252 209.234.122.0/24 AS32252 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.163.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.227.142.0/23 AS46856 GLOBAL-HOST-AS - The Global Host Exchange 216.227.144.0/21 AS46856 GLOBAL-HOST-AS - The Global Host Exchange 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 22 Mar '13

22 Mar '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 23 Mar, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 446728 Prefixes after maximum aggregation: 183292 Deaggregation factor: 2.44 Unique aggregates announced to Internet: 220037 Total ASes present in the Internet Routing Table: 43605 Prefixes per ASN: 10.24 Origin-only ASes present in the Internet Routing Table: 34346 Origin ASes announcing only one prefix: 16005 Transit ASes present in the Internet Routing Table: 5773 Transit-only ASes present in the Internet Routing Table: 138 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 29 Max AS path prepend of ASN ( 28730) 25 Prefixes from unregistered ASNs in the Routing Table: 380 Unregistered ASNs in the Routing Table: 135 Number of 32-bit ASNs allocated by the RIRs: 4642 Number of 32-bit ASNs visible in the Routing Table: 3486 Prefixes from 32-bit ASNs in the Routing Table: 10051 Special use prefixes present in the Routing Table: 16 Prefixes being announced from unallocated address space: 190 Number of addresses announced to Internet: 2623636172 Equivalent to 156 /8s, 97 /16s and 130 /24s Percentage of available address space announced: 70.9 Percentage of allocated address space announced: 70.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.4 Total number of prefixes smaller than registry allocations: 157705 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 107650 Total APNIC prefixes after maximum aggregation: 33185 APNIC Deaggregation factor: 3.24 Prefixes being announced from the APNIC address blocks: 108812 Unique aggregates announced from the APNIC address blocks: 44235 APNIC Region origin ASes present in the Internet Routing Table: 4823 APNIC Prefixes per ASN: 22.56 APNIC Region origin ASes announcing only one prefix: 1232 APNIC Region transit ASes present in the Internet Routing Table: 818 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 23 Number of APNIC region 32-bit ASNs visible in the Routing Table: 471 Number of APNIC addresses announced to Internet: 719866944 Equivalent to 42 /8s, 232 /16s and 76 /24s Percentage of available APNIC address space announced: 84.1 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 157052 Total ARIN prefixes after maximum aggregation: 79231 ARIN Deaggregation factor: 1.98 Prefixes being announced from the ARIN address blocks: 157702 Unique aggregates announced from the ARIN address blocks: 72021 ARIN Region origin ASes present in the Internet Routing Table: 15558 ARIN Prefixes per ASN: 10.14 ARIN Region origin ASes announcing only one prefix: 5892 ARIN Region transit ASes present in the Internet Routing Table: 1613 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 18 Number of ARIN addresses announced to Internet: 1078545024 Equivalent to 64 /8s, 73 /16s and 74 /24s Percentage of available ARIN address space announced: 57.1 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 114247 Total RIPE prefixes after maximum aggregation: 59056 RIPE Deaggregation factor: 1.93 Prefixes being announced from the RIPE address blocks: 117881 Unique aggregates announced from the RIPE address blocks: 76026 RIPE Region origin ASes present in the Internet Routing Table: 17109 RIPE Prefixes per ASN: 6.89 RIPE Region origin ASes announcing only one prefix: 8154 RIPE Region transit ASes present in the Internet Routing Table: 2789 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2244 Number of RIPE addresses announced to Internet: 654647012 Equivalent to 39 /8s, 5 /16s and 30 /24s Percentage of available RIPE address space announced: 95.2 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 47537 Total LACNIC prefixes after maximum aggregation: 9355 LACNIC Deaggregation factor: 5.08 Prefixes being announced from the LACNIC address blocks: 51460 Unique aggregates announced from the LACNIC address blocks: 23836 LACNIC Region origin ASes present in the Internet Routing Table: 1868 LACNIC Prefixes per ASN: 27.55 LACNIC Region origin ASes announcing only one prefix: 548 LACNIC Region transit ASes present in the Internet Routing Table: 346 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 747 Number of LACNIC addresses announced to Internet: 124820520 Equivalent to 7 /8s, 112 /16s and 156 /24s Percentage of available LACNIC address space announced: 74.4 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 10057 Total AfriNIC prefixes after maximum aggregation: 2415 AfriNIC Deaggregation factor: 4.16 Prefixes being announced from the AfriNIC address blocks: 10683 Unique aggregates announced from the AfriNIC address blocks: 3745 AfriNIC Region origin ASes present in the Internet Routing Table: 594 AfriNIC Prefixes per ASN: 17.98 AfriNIC Region origin ASes announcing only one prefix: 179 AfriNIC Region transit ASes present in the Internet Routing Table: 124 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 45373696 Equivalent to 2 /8s, 180 /16s and 89 /24s Percentage of available AfriNIC address space announced: 45.1 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2950 11558 922 Korea Telecom (KIX) 17974 2504 840 86 PT TELEKOMUNIKASI INDONESIA 7545 1845 301 89 TPG Internet Pty Ltd 4755 1726 392 197 TATA Communications formerly 9829 1464 1173 43 BSNL National Internet Backbo 9583 1279 97 525 Sify Limited 7552 1158 1062 11 Vietel Corporation 4808 1115 2056 320 CNCGROUP IP network: China169 9498 1069 310 74 BHARTI Airtel Ltd. 24560 1060 385 165 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3033 3694 87 bellsouth.net, inc. 7029 2216 1266 213 Windstream Communications Inc 18566 2080 382 185 Covad Communications 22773 1993 2929 125 Cox Communications, Inc. 1785 1967 677 125 PaeTec Communications, Inc. 20115 1683 1613 620 Charter Communications 4323 1613 1139 401 Time Warner Telecom 30036 1320 291 678 Mediacom Communications Corp 7018 1313 10810 849 AT&T WorldNet Services 11492 1210 222 329 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1832 544 16 Corbina telecom 2118 1116 97 13 EUnet/RELCOM Autonomous Syste 34984 1108 234 206 BILISIM TELEKOM 12479 841 786 66 Uni2 Autonomous System 13188 836 99 36 Educational Network 20940 799 278 635 Akamai Technologies European 31148 786 41 19 FreeNet ISP 6830 714 2314 435 UPC Distribution Services 8551 714 370 43 Bezeq International 58113 664 73 386 LIR DATACENTER TELECOM SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 2468 1338 90 NET Servicos de Comunicao S.A 10620 2362 407 238 TVCABLE BOGOTA 7303 1673 1148 209 Telecom Argentina Stet-France 8151 1357 2680 401 UniNet S.A. de C.V. 6503 1176 435 68 AVANTEL, S.A. 14754 942 128 85 Telgua S. A. 18881 834 716 18 Global Village Telecom 27947 795 87 96 Telconet S.A 11830 726 364 14 Instituto Costarricense de El 3816 692 306 85 Empresa Nacional de Telecomun Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1286 80 4 MOBITEL 24863 732 274 34 LINKdotNET AS number 6713 535 615 23 Itissalat Al-MAGHRIB 8452 345 958 13 TEDATA 24835 342 80 8 RAYA Telecom - Egypt 3741 262 906 220 The Internet Solution 12258 193 28 67 Vodacom Internet Company 15706 191 32 6 Sudatel Internet Exchange Aut 29975 191 667 21 Vodacom 16637 190 698 88 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3033 3694 87 bellsouth.net, inc. 4766 2950 11558 922 Korea Telecom (KIX) 17974 2504 840 86 PT TELEKOMUNIKASI INDONESIA 28573 2468 1338 90 NET Servicos de Comunicao S.A 10620 2362 407 238 TVCABLE BOGOTA 7029 2216 1266 213 Windstream Communications Inc 18566 2080 382 185 Covad Communications 22773 1993 2929 125 Cox Communications, Inc. 1785 1967 677 125 PaeTec Communications, Inc. 7545 1845 301 89 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 17974 2504 2418 PT TELEKOMUNIKASI INDONESIA 28573 2468 2378 NET Servicos de Comunicao S.A 10620 2362 2124 TVCABLE BOGOTA 4766 2950 2028 Korea Telecom (KIX) 7029 2216 2003 Windstream Communications Inc 18566 2080 1895 Covad Communications 22773 1993 1868 Cox Communications, Inc. 1785 1967 1842 PaeTec Communications, Inc. 8402 1832 1816 Corbina telecom 7545 1845 1756 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 26064 UNALLOCATED 12.149.37.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/24 2876 Jump Management SRL 128.0.16.0/21 43568 RIPE Network Coordination Cen 128.0.24.0/21 41794 Altline LLC 128.0.72.0/21 23456 32-bit ASN transition 128.0.80.0/20 52041 Timer LTD 128.0.96.0/21 12886 LEWTelNet GmbH 128.0.104.0/23 51848 FOP Gabidullina Ludmila Nikol 128.0.106.0/24 23456 32-bit ASN transition 128.0.128.0/20 29285 AMT closed joint-stock compan 128.0.144.0/22 59675 mywire Datentechnik GmbH Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 41.222.80.0/21 37110 Moztel LDA 62.12.96.0/19 38478 SunnyVision Limited 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.185.224.0/24 27431 JTL Networks Inc. 64.185.225.0/24 27431 JTL Networks Inc. 64.185.226.0/24 27431 JTL Networks Inc. 64.185.227.0/24 27431 JTL Networks Inc. 64.185.228.0/24 27431 JTL Networks Inc. 64.185.229.0/24 27431 JTL Networks Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:17 /9:13 /10:29 /11:88 /12:247 /13:483 /14:872 /15:1562 /16:12654 /17:6593 /18:10867 /19:21699 /20:31663 /21:33513 /22:46051 /23:41513 /24:234663 /25:1364 /26:1675 /27:864 /28:182 /29:78 /30:18 /31:0 /32:20 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2030 2080 Covad Communications 6389 1743 3033 bellsouth.net, inc. 7029 1614 2216 Windstream Communications Inc 8402 1547 1832 Corbina telecom 22773 1304 1993 Cox Communications, Inc. 36998 1280 1286 MOBITEL 30036 1203 1320 Mediacom Communications Corp 11492 1172 1210 Cable One 1785 1043 1967 PaeTec Communications, Inc. 7011 942 1187 Citizens Utilities Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:728 2:777 3:3 4:13 5:834 6:3 8:511 12:1936 13:3 14:764 15:11 16:3 17:8 20:19 23:246 24:1802 27:1470 31:1176 32:44 33:2 34:5 36:43 37:1447 38:857 39:2 40:159 41:2657 42:183 44:6 46:1743 47:2 49:614 50:668 52:12 54:28 55:11 57:27 58:1104 59:600 60:304 61:1449 62:1017 63:2038 64:4290 65:2175 66:4282 67:2055 68:1118 69:3268 70:871 71:527 72:1898 74:2548 75:401 76:293 77:1084 78:1017 79:577 80:1229 81:973 82:613 83:557 84:563 85:1149 86:466 87:946 88:380 89:1767 90:262 91:5450 92:602 93:1702 94:1858 95:1552 96:499 97:336 98:1051 99:41 100:29 101:312 103:2312 105:517 106:133 107:207 108:517 109:1815 110:856 111:1040 112:499 113:764 114:684 115:1011 116:867 117:808 118:1007 119:1258 120:378 121:825 122:1740 123:1191 124:1323 125:1316 128:555 129:221 130:320 131:652 132:332 133:143 134:257 135:60 136:221 137:242 138:343 139:181 140:199 141:320 142:535 143:368 144:485 145:90 146:522 147:364 148:701 149:357 150:158 151:476 152:415 153:194 154:34 155:384 156:251 157:392 158:268 159:709 160:334 161:423 162:376 163:203 164:579 165:452 166:376 167:574 168:1018 169:131 170:1020 171:169 172:5 173:1580 174:583 175:431 176:1143 177:1826 178:1974 179:1 180:1380 181:292 182:1224 183:350 184:660 185:303 186:2359 187:1235 188:1906 189:1401 190:6632 192:6421 193:5677 194:4512 195:3464 196:1260 197:871 198:4244 199:5266 200:6034 201:2371 202:8903 203:8772 204:4488 205:2552 206:2785 207:2825 208:4057 209:3536 210:2916 211:1566 212:2007 213:1959 214:916 215:95 216:5194 217:1565 218:604 219:350 220:1269 221:547 222:318 223:492 End of report

1 0

Symantec contact
by Carlos M. Martinez 22 Mar '13

22 Mar '13

Hello all, I'm looking for a PoC in Symantec who could help me with an issue in this report: http://www.symantec.com/threatreport/topic.jsp?id=nam&aid=nam_malicious_act… I've already tried to contact the emails listed on the website, multiple times, to no avail. Contact me on private. regards, ~Carlos

1 0

Fwd: Class E addresses in the wild
by Buz Dale 22 Mar '13

22 Mar '13

Is anyone else seeing a lot of Class E address space (240.0.0.0/4) at their borders? Has this space been reinstated in some as yet unknown to me RFC? Thanks, Buz -- Buz Dale buzdale(a)gmail.com GMT -5 -- -- Buz Dale buzdale(a)gmail.com GMT -5 --

6 7

VPLS PE Redundancy with Supervisor Engine 2T
by Sander Steffann 22 Mar '13

22 Mar '13

Hi, We're trying to implement VPLS PE Redundancy with Supervisor Engine 2T (VSS) as described in http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_pape… and constantly failing. It seems so simple: set up a VSS, use LACP or PAgP port-channels to the distribution switches and do VPLS on the VSS. It just doesn't seem to work. Using WS-X6908-10G-2TXL line cards already gives less problems than with WS-X6704-10GE line cards, but still it fails to work very often. I sometimes wonder if I am going mad or if this setup has never actually been tested... So: has anybody ever set up a network like this, or am I really beta testing for Cisco now? Cheers, Sander Steffann

1 1

GeoDNS
by kg9020 22 Mar '13

22 Mar '13

Hello Have you tried https://github.com/blblack/gdnsd you can view usage at http://www.youtube.com/watch?v=WF75IGx9svM art On Mar 21, 2013, at 7:00 AM, nanog-request(a)nanog.org wrote: > Send NANOG mailing list submissions to > nanog(a)nanog.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://mailman.nanog.org/mailman/listinfo/nanog > or, via email, send a message with subject or body 'help' to > nanog-request(a)nanog.org > > You can reach the person managing the list at > nanog-owner(a)nanog.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of NANOG digest..." > > > Today's Topics: > > 1. Re: Why are there no GeoDNS solutions anywhere in sight? > (Constantine A. Murenin) > 2. Re: routing table go boom (Randy Bush) > 3. 2012 internet census (Randy Bush) > 4. Re: Why are there no GeoDNS solutions anywhere in sight? > (Simon Lyall) > 5. Re: Why are there no GeoDNS solutions anywhere in sight? > (bmanning(a)vacation.karoshi.com) > 6. Cisco password implementation trubs: weakened strength? > (jamie rishaw) > 7. Re: Cisco password implementation trubs: weakened strength? > (Nick Hilliard) > 8. Re: Cisco password implementation trubs: weakened strength? > (Jimmy Hess) > 9. Re: Why are there no GeoDNS solutions anywhere in sight? > (Masataka Ohta) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 21 Mar 2013 00:23:02 -0700 > From: "Constantine A. Murenin" <mureninc(a)gmail.com> > To: Masataka Ohta <mohta(a)necom830.hpcl.titech.ac.jp> > Cc: nanog(a)nanog.org > Subject: Re: Why are there no GeoDNS solutions anywhere in sight? > Message-ID: > <CAPKkNb4g++KaXmJ9Y5N-0J2Dt+P7Yn_xMvxcr7viThh4rf6rMQ(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > On 20 March 2013 21:29, Masataka Ohta <mohta(a)necom830.hpcl.titech.ac.jp> wrote: >> Constantine A. Murenin wrote: >> >>> Why even stop there: all modern browsers usually know the exact >>> location of the user, often with street-level accuracy. >> >> If you think mobile, they don't, especially because "often" is >> not at all "enough times". > > Are you suggesting that geolocation is inaccurate enough to misplace > Europe with Asia? > >>> Why is there no way to do any of this? >> >> Because it is impractical to assume an IP address can be mapped >> uniquely to a geolocation. > > Why is it impractical? If I have a server in Germany and in Quebec, > why would it be impractical to have the logic in place such that > European visitors would be contacting the server in Germany, and > visitors from US/Canada -- the one in Quebec? > > C. > > > > ------------------------------ > > Message: 2 > Date: Thu, 21 Mar 2013 09:23:08 +0200 > From: Randy Bush <randy(a)psg.com> > To: Jared Mauch <jared(a)puck.nether.net> > Cc: nanog(a)nanog.org > Subject: Re: routing table go boom > Message-ID: <m2sj3pb4ir.wl%randy(a)psg.com> > Content-Type: text/plain; charset=US-ASCII > >> I certainly think there's a lot that can be done at middle-layers, eg: tunnels >> to a few different providers. I can be on a Comcast CM and ATT DSL link and >> establish a link to a tunnel destination in Chicago that is low-latency for me >> and the bits will all flow that way. >> >> The last mile loop problem though? > > sweden and japan, among others, have some experiences (good and > mediocre) in this area > > randy > > > > ------------------------------ > > Message: 3 > Date: Thu, 21 Mar 2013 10:24:51 +0200 > From: Randy Bush <randy(a)psg.com> > To: North American Network Operators' Group <nanog(a)nanog.org> > Subject: 2012 internet census > Message-ID: <m2ppytb1nw.wl%randy(a)psg.com> > Content-Type: text/plain; charset=US-ASCII > > nice piece of work > > http://internetcensus2012.bitbucket.org/paper.html > > as cristel says, better coverage than atlas and no need for user > credits! :) > > randy > > > > ------------------------------ > > Message: 4 > Date: Thu, 21 Mar 2013 21:26:46 +1300 (NZDT) > From: Simon Lyall <simon(a)darkmere.gen.nz> > To: nanog(a)nanog.org > Subject: Re: Why are there no GeoDNS solutions anywhere in sight? > Message-ID: > <alpine.DEB.2.00.1303212112110.28564(a)green.darkmere.gen.nz> > Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed > > On Thu, 21 Mar 2013, Constantine A. Murenin wrote: >> Why is it impractical? If I have a server in Germany and in Quebec, >> why would it be impractical to have the logic in place such that >> European visitors would be contacting the server in Germany, and >> visitors from US/Canada -- the one in Quebec? > > But what if the server in Quebec is a little VPS on a 10Mb/s link while > the one in Germany is a rack of servers on a 10Gb/s link? > > What if I just want the server in Quebec to serve people from Canada and > the one in Germany serves the rest of the world? > > What if it is 4am in Quebec but 9am in Germany? (it is right now) > > What if I have half a dozen pops worldwide? > > What if I have 20? 200? 2000? > > What is closer to a user in New Zealand, A Pop in Japan, Singapore or LA? > > The main thing with GSLB is: > > The little guys don't need it, > The medium sized sites outsource, > The big guys roll their own. > > Personally I outsource and it works very well. > > -- > Simon Lyall | Very Busy | Web: http://www.darkmere.gen.nz/ > "To stay awake all night adds a day to your life" - Stilgar | eMT. > > > > > ------------------------------ > > Message: 5 > Date: Thu, 21 Mar 2013 08:41:40 +0000 > From: bmanning(a)vacation.karoshi.com > To: "Constantine A. Murenin" <mureninc(a)gmail.com> > Cc: nanog(a)nanog.org > Subject: Re: Why are there no GeoDNS solutions anywhere in sight? > Message-ID: <20130321084140.GB432(a)vacation.karoshi.com.> > Content-Type: text/plain; charset=us-ascii > > On Thu, Mar 21, 2013 at 12:23:02AM -0700, Constantine A. Murenin wrote: >> On 20 March 2013 21:29, Masataka Ohta <mohta(a)necom830.hpcl.titech.ac.jp> wrote: >>> Constantine A. Murenin wrote: >>> >>>> Why even stop there: all modern browsers usually know the exact >>>> location of the user, often with street-level accuracy. >>> >>> If you think mobile, they don't, especially because "often" is >>> not at all "enough times". >> >> Are you suggesting that geolocation is inaccurate enough to misplace >> Europe with Asia? > > > last month, while in western australia, geoloc pegged me in utah. > this morning, geoloc pegged me in Kansas, while resident in Maryland. > > >>>> Why is there no way to do any of this? >>> >>> Because it is impractical to assume an IP address can be mapped >>> uniquely to a geolocation. >> >> Why is it impractical? If I have a server in Germany and in Quebec, >> why would it be impractical to have the logic in place such that >> European visitors would be contacting the server in Germany, and >> visitors from US/Canada -- the one in Quebec? >> >> C. > > secure dynamic update works. waht is TWC's incentive to allow clients to update > tjheir reverse DNS delegations, esp when clients are leaving them for T-Mobile? > > > your sugesting the cretion and deployment of something that already exists > in the LOC RR. Your rational is that LOC isn't used. If thats the case, > why would your proposal be any more successful? > > /bill > > > > ------------------------------ > > Message: 6 > Date: Thu, 21 Mar 2013 05:10:36 -0500 > From: jamie rishaw <j(a)arpa.com> > To: NANOG <nanog(a)nanog.org> > Subject: Cisco password implementation trubs: weakened strength? > Message-ID: > <CABL6YZQFf9_e9va0J15kdz1np-Jv-jeZ1Vi9LPnNewGKwMzDNg(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > warning: I'm tired and this email is terse. > warning: for huge nerds only. > disclaimer: although I've worked with actual rocket scientists(hi Roger), > I'm. not one myself..nor am I a crypto mathnerd > > apparently, Cisco is changing its password schemas. > > old: pbkdf2 by 1k, salted > vs > New: (type 4) unsalted sha256 > .. > discuss.? > > there is a cert and Cisco sa on this.. but I'm wondering if anyone has any > opinions, yea or nay.? > > -j. > > > ------------------------------ > > Message: 7 > Date: Thu, 21 Mar 2013 10:57:02 +0000 > From: Nick Hilliard <nick(a)foobar.org> > To: nanog(a)nanog.org > Subject: Re: Cisco password implementation trubs: weakened strength? > Message-ID: <514AE77E.10705(a)foobar.org> > Content-Type: text/plain; charset=ISO-8859-1 > > On 21/03/2013 10:10, jamie rishaw wrote: >> apparently, Cisco is changing its password schemas. >> >> old: pbkdf2 by 1k, salted >> vs >> New: (type 4) unsalted sha256 >> .. >> discuss.? > > security advisory: > >> http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-… > > which states: > >> Because of the issues discussed in this Security Response, Cisco is >> taking the following actions for future Cisco IOS and Cisco IOS XE >> releases: >> >> Type 4 passwords will be deprecated: Future Cisco IOS and Cisco IOS XE >> releases will not generate Type 4 passwords. However, to maintain >> backward compatibility, existing Type 4 passwords will be parsed and >> accepted. Customers will need to manually remove the existing Type 4 >> passwords from their configuration. > > Kudos to Cisco - this was the right thing to do. > > Nick > > > > > ------------------------------ > > Message: 8 > Date: Thu, 21 Mar 2013 06:22:52 -0500 > From: Jimmy Hess <mysidia(a)gmail.com> > To: jamie rishaw <j(a)arpa.com> > Cc: NANOG <nanog(a)nanog.org> > Subject: Re: Cisco password implementation trubs: weakened strength? > Message-ID: > <CAAAwwbVxUHr4v4O3_qqJHbXDTTaY0D0juMCNNbYOVGdzZS6ciA(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > On 3/21/13, jamie rishaw <j(a)arpa.com> wrote: >> New: (type 4) unsalted sha256 > > Good for them; DES Crypt and MD5 crypt are dead... however, I hope > they have misspoken then... because that move would make no > sense... moving to simple unsalted SHA256 as the new hash type would > definitely increase the performance of potential password cracking > attempts against passwords stored at rest, instead of addressing the > massive increase in cheap computing power (which will necessitate all > software vendors who are concerned about stored password security, > stop using older crypt algorithms yesterday). > > In other words; they would be moving to a weaker hashing algorithm if > selecting unsalted SHA -- more hashes per second of SHA256 could be > computed per second on equivalent GPU than hashes per second of MD5 > Crypt. > > PBKDF2 at 10k rounds is stronger than MD5 crypt (more time required > for a password cracker); Bcrypt stronger than PBKDF2 with appropriate > work factor selected (more time _and_ larger amounts of memory space > required thwarting GPUs); etc. > > > Also, on what platform have they already used anything stronger than Unix crypt? > > As far as I knew, Cisco were always using; 'type 7' password blobs > vigenere based symmetric encryption with a factory-defined key, type > 6 symmetric encrypted storage (with des/aes key obscured from view), > or type 5 basic unix crypt or Poul-Henning Kamp's MD5 crypt algorithm > used in FreeBSD. > > >> I'm. not one myself..nor am I a crypto mathnerd >> apparently, Cisco is changing its password schemas. >> old: pbkdf2 by 1k, salted >> vs >> New: (type 4) unsalted sha256 >> .. >> discuss.? >> >> there is a cert and Cisco sa on this.. but I'm wondering if anyone has any >> opinions, yea or nay.? > > -- > -JH > > > > ------------------------------ > > Message: 9 > Date: Thu, 21 Mar 2013 20:36:36 +0900 > From: Masataka Ohta <mohta(a)necom830.hpcl.titech.ac.jp> > To: "Constantine A. Murenin" <mureninc(a)gmail.com> > Cc: nanog(a)nanog.org > Subject: Re: Why are there no GeoDNS solutions anywhere in sight? > Message-ID: <514AF0C4.7000200(a)necom830.hpcl.titech.ac.jp> > Content-Type: text/plain; charset=ISO-2022-JP > > Constantine A. Murenin wrote: > >> Are you suggesting that geolocation is inaccurate enough to misplace >> Europe with Asia? > > Yes, of course. > > Think mobile. > > Masataka Ohta > > > > End of NANOG Digest, Vol 62, Issue 67 > *************************************

2 1