August 2013 - Test - lists.nanog.org

morning giggle
by Randy Bush 18 Aug '13

18 Aug '13

for your morning, or whatever time of day it is to you, giggle From: "Jeffrey L. Roberts" <jeffrey.l.roberts(a)gmail.com> Subject: DNS Zone File Access Request To: Randy Bush < randy(a)psg.com> Date: Sat, 17 Aug 2013 21:56:02 -0400 Greetings, My name is Jeff and I hope you're having a great day. I am the CIO of the Trademark Police. We would like to know what forms we need to fill out to receive credentials to access your dns zone files. Please contact me at your earliest convenience at Jeffrey.L.Roberts(a)gmail.com, or feel free to call me at 1-305-815-1155 Thank you! - Jeffrey L. Roberts

5 4

Re: [Paper] B4: Experience with a Globally-Deployed Software Defined
by freedman＠freedman.net 18 Aug '13

18 Aug '13

> On Sat, Aug 17, 2013 at 2:32 PM, Avi Freedman <freedman(a)freedman.net> wrote: > > > No, people never use *flow controllers* for anything. > > > People have been doing SDN since before Google was around. > > OK, so it was horrible expect scripts but it worked. > > Not really. Note I am talking about flow controllers in my first point. (And I was trying to be funny to match Todd's tone, though I guess it's dangerous to try to copy the master) Re: flow controllers - The idea of centralized decision makers doing something (typically per flow) has been proposed, in my experience, by those with little operational experience or those with extraordinarily constrained topoligies, types of traffic, and usually external filtering to constrain the types of traffic one could face. Because... There have been no proposals that I have seen (or that those who are at the Major Vendors who follow it more closely tell me about when I ask a few times/year) to actually deal with the every-packet-is-a-flow problem we saw first with 7206VXRs and that remain a real possibility for Internet- connected networks. Distributing flow controllers and making them hierarchical doesn't seem to help in the architectures that I've seen proposed. So it seems to be of use only for very tiny networks or for very constrained and filtered or non Internet-connected topologies. I'd be interested to be shown otherwise. > Automatic reconfiguration of routers is not what a software-defined network is. > > It is one of the things (but not all of the things) that SDN provides. > > A software defined network is one where the forwarding behavior can be > completely defined > in software running outside of the devices that perform the forwarding. That said, I wince every time someone starts talking about (not suggesting you are here but many do) making the routing engineer or designer in a box that sits on the bottom or besides the network. Those who have experience and/or run larger infrastructure usually say words like "of course we have to worry about feedback loops" but many don't. I think innovation is great but I don't think there are that many shops that are better off writing their own control pane (centralized, distribtued, whatever) right now. It's worth remembering that Google is a software company. They are far ahead in software defined everything. > You can write expect scripts all day; but you cannot turn your basic switch > into a Load balancer or stateful firewall with one. > or decide in real time exactly which destination Ethernet ports a packet > coming in a certain port is going to touch, without having structured > VLANs and static MAC tables on the switches ahead of time. > > Changing device configurations with expect scripts is a limited tiny subset > of what SDN is. True, but the number of production environments that are going to be more stable or scalable by having people build their own control logic is pretty small in my experience. And being able to debug and reach out to a community of operators with a common set of experience of what to do, not to do, and how to debug is extraordinarily valuable for production networks. When I look at most of the non-Google big guys, SDN means pushing the vendors for better control plane instrumentation and ability to program (but more on the instrumentation side as where the gaps have been), and potentially to get some cross-provider way of doing the above. + having merchant silicon one can get/use for cheap, typically for more constrained topologies, doing pretty dumb switching and/or routing stuff. > -JH Where I see the delta a lot given the customer conversations I have is in the magic provisioning of cloud network infrastructures. New school SDN is that everything is a tunnel, magic software maps things, commercial providers doing this uniformly have to aggressively rate- limit their clients, and performance for content delivery is limited because the hypervisors must be briding and can't do PCI passthrough or SR/IOV. Old school SDN (not really that old school) is API-based provisioning of network devices with vendor support (let's say Juniper) to do filtering, VLANs, and shaping and tunnels where needed. It'll definitely be interesting to see where things go over the next few years. I know tens of companies who have run away from cloud providers with new(er) school SDN-ish infrastructures for the simplicity of just having some high performance dedicated machines/hypervisors with dead simple switching infrastructure. Anyway, innovation is great but I just see few companies with the understanding to go build their own control plane software to connect to the Internet with. And those vendors who do build it will get borged by one of the routing/switching vendors and things will become product features, differentiated by providers, most likely. (Though I hope not) Avi

2 1

Practical effects of DNSSEC deployment
by Steven Bellovin 17 Aug '13

17 Aug '13

There was an interesting paper at Usenix Security on the effects of deploying DNSSEC; see https://www.usenix.org/conference/usenixsecurity13/measuring-practical-impa… . The difference in geographical impact was quite striking. --Steve Bellovin, https://www.cs.columbia.edu/~smb

2 1

Google having issues?
by wingar＠team-metro.net 17 Aug '13

17 Aug '13

Hey guys, I’m hearing reports of Google services (Search, Youtube, Mail, etc) going down all over the place, providing extremely spotty service. Works fine for me right now, but a lot of people seem to be having problems all over the world. Any ideas what’s going on? Thanks! ~ Em

6 5

APC UPS Advice/Guidance for Canada 120/240
by Nick Khamis 17 Aug '13

17 Aug '13

Hello Everyone, We are in the market for a APC UPS, and had a few questions. We are not that familiar with APC, and was hoping for some clarity. Our power demands will be for a unit that will sustain 3 kW/4 kVA scalable to 8 kVA. Input: The first issue is that I see all the units default with 208v input (other inputs 240v). At my location we only have 120 or 240. Also, we do not want to use a transformer (240-120) as it adds another failure point that can be avoided... The unit we are looking is found here: http://www.apc.com/products/resource/include/techspec_index.cfm?base_sku=SY… Output: Hard Wire 4-wire (2PH + N +G)NEMA L14-30R[image: NEMA L14-30R]NEMA L5-20R[image: NEMA L5-20R] What? How do I plug our 120 PDU into this? STONITH: This will be for a cluster that will require stonith capability. Does anyone know if this unit supports that? Not so important as the previous two questions... Kind Regards, Nick.

3 3

BGP Update Report
by cidr-report＠potaroo.net 16 Aug '13

16 Aug '13

BGP Update Report Interval: 08-Aug-13 -to- 15-Aug-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS5800 49023 2.8% 215.0 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 2 - AS8402 32813 1.9% 20.9 -- CORBINA-AS OJSC "Vimpelcom" 3 - AS9829 29704 1.7% 35.4 -- BSNL-NIB National Internet Backbone 4 - AS27738 28447 1.6% 49.4 -- Ecuadortelecom S.A. 5 - AS7552 21849 1.3% 18.6 -- VIETEL-AS-AP Vietel Corporation 6 - AS9416 18573 1.1% 9286.5 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 7 - AS15003 17601 1.0% 33.9 -- NOBIS-TECH - Nobis Technology Group, LLC 8 - AS4775 15874 0.9% 345.1 -- GLOBE-TELECOM-AS Globe Telecoms 9 - AS18403 15147 0.9% 30.4 -- FPT-AS-AP The Corporation for Financing & Promoting Technology 10 - AS28573 14422 0.8% 8.0 -- NET Serviços de Comunicação S.A. 11 - AS2118 14252 0.8% 10.4 -- RELCOM-AS OOO "NPO Relcom" 12 - AS34969 11840 0.7% 1480.0 -- PASJONET-AS Pasjo.Net Sp, z o.o. 13 - AS45899 10004 0.6% 29.0 -- VNPT-AS-VN VNPT Corp 14 - AS48612 9975 0.6% 1425.0 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 15 - AS6325 9425 0.6% 428.4 -- ILLINOIS-CENTURY - Illinois Century Network 16 - AS9808 9183 0.5% 11.4 -- CMNET-GD Guangdong Mobile Communication Co.Ltd. 17 - AS6629 9081 0.5% 1816.2 -- NOAA-AS - NOAA 18 - AS14287 8886 0.5% 1481.0 -- TRIAD-TELECOM - Triad Telecom, Inc. 19 - AS9299 8514 0.5% 137.3 -- IPG-AS-AP Philippine Long Distance Telephone Company 20 - AS647 8229 0.5% 72.2 -- DNIC-ASBLK-00616-00665 - DoD Network Information Center TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9416 18573 1.1% 9286.5 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 2 - AS38654 6098 0.3% 6098.0 -- INES-NETWORK INES Corporation. 3 - AS1880 4706 0.3% 4706.0 -- STUPI Svensk Teleutveckling & Produktinnovation, STUPI AB 4 - AS19406 4669 0.3% 4669.0 -- TWRS-MA - Towerstream I, Inc. 5 - AS42334 3927 0.2% 3927.0 -- BBP-AS Broadband Plus s.a.l. 6 - AS6174 7111 0.4% 3555.5 -- SPRINTLINK8 - Sprint 7 - AS24772 6659 0.4% 3329.5 -- ASIP-AIE-AS Agrupacion de dervicios de internet y prensa AIE 8 - AS6629 9081 0.5% 1816.2 -- NOAA-AS - NOAA 9 - AS3 4902 0.3% 1779.0 -- CMED-AS Cmed Technology Ltd 10 - AS14287 8886 0.5% 1481.0 -- TRIAD-TELECOM - Triad Telecom, Inc. 11 - AS34969 11840 0.7% 1480.0 -- PASJONET-AS Pasjo.Net Sp, z o.o. 12 - AS48612 9975 0.6% 1425.0 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 13 - AS33648 3571 0.2% 1190.3 -- ELEPHANT - ColoFlorida / Elephant Outlook 14 - AS4434 6719 0.4% 1119.8 -- ERX-RADNET1-AS PT Rahajasa Media Internet 15 - AS37367 1056 0.1% 1056.0 -- CALLKEY 16 - AS33158 923 0.1% 923.0 -- DATA-SERVICES-INC - Data Services Incorporated 17 - AS19111 617 0.0% 617.0 -- NATURES-BOUN - NBTY, Inc. 18 - AS10704 5973 0.3% 597.3 -- Microlink Telecom (LNCC) 19 - AS4 5357 0.3% 871.0 -- INFOWAY COMERCIO DE INFORM E TELECOMUNICACOES LTDA 20 - AS20157 582 0.0% 582.0 -- AHL - American Heritage Life Insurance Company TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 92.246.207.0/24 9963 0.5% AS48612 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 2 - 203.118.232.0/21 9298 0.5% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 3 - 203.118.224.0/21 9275 0.5% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 4 - 207.63.128.0/18 9049 0.5% AS6325 -- ILLINOIS-CENTURY - Illinois Century Network 5 - 192.58.232.0/24 9022 0.5% AS6629 -- NOAA-AS - NOAA 6 - 112.203.192.0/19 8338 0.5% AS9299 -- IPG-AS-AP Philippine Long Distance Telephone Company 7 - 222.127.0.0/24 7785 0.4% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 8 - 120.28.62.0/24 7717 0.4% AS4775 -- GLOBE-TELECOM-AS Globe Telecoms 9 - 202.154.17.0/24 6714 0.4% AS4434 -- ERX-RADNET1-AS PT Rahajasa Media Internet 10 - 62.22.10.0/24 6657 0.4% AS24772 -- ASIP-AIE-AS Agrupacion de dervicios de internet y prensa AIE 11 - 150.39.0.0/16 6098 0.3% AS38654 -- INES-NETWORK INES Corporation. 12 - 115.170.128.0/17 5507 0.3% AS4847 -- CNIX-AP China Networks Inter-Exchange 13 - 204.29.132.0/23 4706 0.3% AS1880 -- STUPI Svensk Teleutveckling & Produktinnovation, STUPI AB 14 - 69.38.178.0/24 4669 0.2% AS19406 -- TWRS-MA - Towerstream I, Inc. 15 - 64.187.64.0/23 4444 0.2% AS16608 -- KENTEC - Kentec Communications, Inc. 16 - 148.208.137.0/24 4089 0.2% AS8151 -- Uninet S.A. de C.V. 17 - 62.84.76.0/24 3927 0.2% AS42334 -- BBP-AS Broadband Plus s.a.l. 18 - 208.16.110.0/24 3556 0.2% AS6174 -- SPRINTLINK8 - Sprint 19 - 206.105.75.0/24 3555 0.2% AS6174 -- SPRINTLINK8 - Sprint 20 - 64.187.64.0/24 3550 0.2% AS16608 -- KENTEC - Kentec Communications, Inc. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 16 Aug '13

16 Aug '13

This report has been generated at Fri Aug 16 21:13:27 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 09-08-13 474589 270059 10-08-13 475137 269735 11-08-13 474298 269858 12-08-13 474715 269811 13-08-13 474587 269367 14-08-13 474622 269399 15-08-13 475163 269913 16-08-13 475291 269993 AS Summary 44881 Number of ASes in routing system 18477 Number of ASes announcing only one prefix 4235 Largest number of prefixes announced by an AS AS7029 : WINDSTREAM - Windstream Communications Inc 117395680 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 16Aug13 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 474901 269997 204904 43.1% All ASes AS6389 2978 65 2913 97.8% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS28573 3154 690 2464 78.1% NET Serviços de Comunicação S.A. AS17974 2654 434 2220 83.6% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS7029 4235 2069 2166 51.1% WINDSTREAM - Windstream Communications Inc AS4766 2922 933 1989 68.1% KIXS-AS-KR Korea Telecom AS22773 2006 247 1759 87.7% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS18566 2065 468 1597 77.3% COVAD - Covad Communications Co. AS4323 2992 1542 1450 48.5% TWTC - tw telecom holdings, inc. AS36998 1861 434 1427 76.7% SDN-MOBITEL AS10620 2668 1345 1323 49.6% Telmex Colombia S.A. AS7303 1730 453 1277 73.8% Telecom Argentina S.A. AS18881 1359 92 1267 93.2% Global Village Telecom AS4755 1778 592 1186 66.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS7552 1139 95 1044 91.7% VIETEL-AS-AP Vietel Corporation AS22561 1208 226 982 81.3% DIGITAL-TELEPORT - Digital Teleport Inc. AS2118 962 88 874 90.9% RELCOM-AS OOO "NPO Relcom" AS1785 2006 1157 849 42.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS11830 946 101 845 89.3% Instituto Costarricense de Electricidad y Telecom. AS7545 2060 1225 835 40.5% TPG-INTERNET-AP TPG Telecom Limited AS18101 985 177 808 82.0% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS4808 1153 389 764 66.3% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS33363 1761 1038 723 41.1% BHN-TAMPA - BRIGHT HOUSE NETWORKS, LLC AS701 1522 801 721 47.4% UUNET - MCI Communications Services, Inc. d/b/a Verizon Business AS13977 847 140 707 83.5% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS8151 1286 589 697 54.2% Uninet S.A. de C.V. AS15003 842 147 695 82.5% NOBIS-TECH - Nobis Technology Group, LLC AS6147 740 51 689 93.1% Telefonica del Peru S.A.A. AS855 735 55 680 92.5% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS6983 1152 484 668 58.0% ITCDELTA - ITC^Deltacom AS24560 1088 425 663 60.9% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services Total 52834 16552 36282 68.7% Top 30 total Possible Bogus Routes 23.92.64.0/24 AS54540 INCERO - Incero LLC 23.92.65.0/24 AS54540 INCERO - Incero LLC 23.92.66.0/24 AS54540 INCERO - Incero LLC 23.92.67.0/24 AS54540 INCERO - Incero LLC 23.92.68.0/24 AS54540 INCERO - Incero LLC 23.92.69.0/24 AS54540 INCERO - Incero LLC 23.92.70.0/24 AS54540 INCERO - Incero LLC 23.92.71.0/24 AS54540 INCERO - Incero LLC 23.92.72.0/24 AS54540 INCERO - Incero LLC 23.92.73.0/24 AS54540 INCERO - Incero LLC 23.92.74.0/24 AS54540 INCERO - Incero LLC 23.92.75.0/24 AS54540 INCERO - Incero LLC 23.92.76.0/24 AS54540 INCERO - Incero LLC 23.92.77.0/24 AS54540 INCERO - Incero LLC 23.92.78.0/24 AS54540 INCERO - Incero LLC 23.92.79.0/24 AS54540 INCERO - Incero LLC 27.54.116.0/22 AS55452 27.54.116.0/24 AS55452 27.54.119.0/24 AS55452 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.182.96.0/23 AS15830 TELECITY-LON TELECITYGROUP INTERNATIONAL LIMITED 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 65.75.216.0/23 AS10494 AAI - Accurate Automation, Inc. 65.75.217.0/24 AS10494 AAI - Accurate Automation, Inc. 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.205.224.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.19.0.0/19 AS16526 BIRCH-TELECOM - Birch Telecom, Inc. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS30097 NUWAVE - NuWave 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 80.68.144.0/20 AS33982 82.103.0.0/18 AS30901 91.197.36.0/22 AS43359 91.199.90.0/24 AS44330 91.205.188.0/22 AS47983 91.207.200.0/23 AS48523 91.209.93.0/24 AS48523 91.209.163.0/24 AS48445 91.212.54.0/24 AS21409 IKOULA Ikoula Net SAS 93.190.8.0/24 AS47254 93.190.9.0/24 AS47254 93.190.10.0/24 AS47254 96.45.48.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.49.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.50.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.51.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.52.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.53.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.54.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.55.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.56.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.57.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.58.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.59.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.60.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.61.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.62.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 96.45.63.0/24 AS33475 RSN-1 - RockSolid Network, Inc. 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 103.9.107.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.12.0.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.13.0.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.14.0.0/24 AS38442 VODAFONEFIJI-AS-FJ Vodafone Fiji Limited 103.224.163.0/24 AS13251 ASIAN-AS-AP Asian Broadcasting Network (M) Sdn Bhd 103.224.188.0/23 AS13251 ASIAN-AS-AP Asian Broadcasting Network (M) Sdn Bhd 109.71.156.0/23 AS21246 IPKO-AS Ipko Telecommunications LLC 109.71.158.0/24 AS21246 IPKO-AS Ipko Telecommunications LLC 109.71.159.0/24 AS21246 IPKO-AS Ipko Telecommunications LLC 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 164.40.184.0/24 AS19821 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.111.111.0/24 AS8039 CCC-ASN-1 - Cinergy Communications 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 174.138.144.0/20 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 190.3.160.0/21 AS27975 SYNAPSIS COLOMBIA LTDA 190.15.72.0/21 AS15146 CABLEBAHAMAS - Cable Bahamas 190.124.252.0/22 AS7303 Telecom Argentina S.A. 193.33.66.0/23 AS39874 193.33.112.0/23 AS8586 OBSL-AS TalkTalk Communications Limited 193.34.108.0/22 AS41984 193.109.15.0/24 AS12690 MKSNET-AS MKS Autonomous System 193.109.224.0/24 AS47427 193.111.125.0/24 AS44581 SE-ALLTELE AllTele Allmanna Svenska Telefonaktiebolaget 193.111.155.0/24 AS44581 SE-ALLTELE AllTele Allmanna Svenska Telefonaktiebolaget 193.164.152.0/24 AS3356 LEVEL3 Level 3 Communications 194.50.82.0/24 AS16276 OVH OVH Systems 194.79.48.0/22 AS39117 194.117.250.0/23 AS41412 MIVITEC-AS MIVITEC GmbH 194.126.219.0/24 AS34545 194.169.237.0/24 AS12968 CDP Netia SA 195.28.7.0/24 AS8717 SPECTRUMNET MOBILTEL EAD 195.216.234.0/24 AS31309 NMV-AS New Media Ventures BVBA 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.58.248.0/21 AS27849 201.71.16.0/20 AS28638 EMTEC EMPRESA DE TECNOLOGIA EMPREENDIMENTOS DE COM 201.77.96.0/20 AS28639 Daniela Ropke da Rosa 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.142.219.0/24 AS45149 203.191.48.0/20 AS24175 VINAREN-AS-AP VietNam Research and Education Network 203.191.56.0/21 AS38042 INCOMNET-MONGOLIA-AS-AP Incomnet LLC, Mongolia, VSAT and Wireless service 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.10.112.0/21 AS27027 ANBELL ASN-ANBELL 204.11.112.0/22 AS14745 INTERNAP-BLOCK-4 - Internap Network Services Corporation 204.15.208.0/22 AS13706 COMPLETEWEBNET - CompleteWeb.Net LLC 204.187.11.0/24 AS51113 ELEKTA-AS Elekta 205.211.160.0/24 AS30045 UHN-ASN - University Health Network 206.81.112.0/20 AS32618 ADKNO-KC - Adknowledge, Inc. 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 208.68.244.0/22 AS17140 208.68.244.0/23 AS17140 208.68.246.0/23 AS17140 208.76.20.0/24 AS31812 208.76.21.0/24 AS31812 208.77.164.0/24 AS22659 208.77.165.0/24 AS22659 208.77.166.0/24 AS22659 208.77.167.0/24 AS22659 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.85.116.0/23 AS25956 ALPHEUS - Alpheus Data Services, L.L.C. 208.85.212.0/22 AS32618 ADKNO-KC - Adknowledge, Inc. 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 208.90.64.0/22 AS16415 PRCNET-DOM - Precision Response Corporation 208.91.72.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.73.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.76.0/23 AS21681 ANDOVER-TRADING - ANDOVER TRADING 209.160.81.0/24 AS36184 209.160.83.0/24 AS36184 209.160.84.0/24 AS36184 209.160.86.0/24 AS36184 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.209.51.0/24 AS18687 MPOWER-2 - MPOWER COMMUNICATIONS CORP. 209.209.64.0/20 AS46851 IPARADIGMS - iParadigms, LLC 209.212.63.0/24 AS16467 ASN-NEXTWEB-R1 - Nextweb, Inc 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.234.112.0/23 AS32252 209.234.114.0/23 AS32252 209.234.116.0/24 AS32252 209.234.117.0/24 AS32252 209.234.118.0/24 AS32252 209.234.119.0/24 AS32252 209.234.120.0/24 AS32252 209.234.121.0/24 AS32252 209.234.122.0/24 AS32252 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.163.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.127.192.0/24 AS22166 216.127.193.0/24 AS22166 216.127.194.0/24 AS22166 216.127.195.0/24 AS22166 216.127.196.0/24 AS22166 216.127.196.64/26 AS22166 216.127.197.0/24 AS22166 216.127.198.0/24 AS22166 216.127.199.0/24 AS22166 216.127.200.0/24 AS22166 216.127.201.0/24 AS22166 216.127.202.0/24 AS22166 216.127.203.0/24 AS22166 216.127.204.0/24 AS22166 216.127.205.0/24 AS22166 216.127.206.0/24 AS22166 216.127.207.0/24 AS22166 216.127.208.0/24 AS22166 216.127.209.0/24 AS22166 216.127.210.0/24 AS22166 216.127.211.0/24 AS22166 216.127.212.0/24 AS22166 216.127.213.0/24 AS22166 216.127.214.0/24 AS22166 216.127.215.0/24 AS22166 216.127.216.0/24 AS22166 216.127.217.0/24 AS22166 216.127.218.0/24 AS22166 216.127.219.0/24 AS22166 216.127.220.0/24 AS22166 216.127.221.0/24 AS22166 216.127.222.0/24 AS22166 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.151.192.0/21 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 216.151.200.0/21 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.170.96.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.101.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.104.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.170.105.0/24 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

How big is the Internet? - Results
by Sean Donelan 16 Aug '13

16 Aug '13

Thanks for all the comments. Through the entire thread on-line and off-line only one person contributed an estimate Patrick Gilmore said: All that said: My back-of-the-envelope math says the Internet is order of 1 exabyte/day, as defined by my own rules on what counts as "the Internet"[*]. I could easily be wrong, but you asked. [*] I count Company-to-Company traffic. This is _mostly_ inter-AS traffic, but on-net nodes (e.g. Akamai, Google, NF) -> Provider _do_ count. Things like Google -> Google over Google backbone do not count. Things like as701 -> as702 would count, but not as701 -> as701, even if the traffic is between two single-homed customers. It is a weird definition, but that's how I define it. (Although I may be biased, since counting only inter-AS traffic leaves off $SOME_PERCENTAGE of the traffic from my company.) Since there weren't any other estimates to choose between, looks like I'll go with Gilmore's number. Gilmore's estimate was signifcantly lower than Cisco's VNI.

2 1

How big is the Internet?
by Sean Donelan 16 Aug '13

16 Aug '13

Researchers have complained for years about the lack of good statistics about the internet for a couple fo decades, since the end of NSFNET statistics. What are the current estimates about the size of the Internet, all IP networks including managed IP and private IP, and all telecommunications including analog voice, video, sensor data, etc? CAIDA, ITU, Telegeography and some vendors like Cisco have released forecasts and estimates. There are occasional pieces of information stated by companies in their investor documents (SEC 10-K, etc).

37 60

Re: WaPo writes about vulnerabilities in Supermicro IPMIs
by Anthony Bonkoski 16 Aug '13

16 Aug '13

There's a few misconceptions I'd like to address, plus add some backstory. The Washington Post article is intentionally void of details. It is intended as a non-technical article. You can find the actual technical paper here: https://www.usenix.org/conference/woot13/illuminating-security-issues-surro… Cipher-0 is an awful, yet well-known issue that comes directly from the Intel spec, and thus affects a large set of implementations. Here's an excellent write-up: http://fish2.com/ipmi/cipherzero.html The iDRAC testurls vuln. was a result of the firmware being shipped with a developer debugging webpage that could be used as a backdoor. Recent work shows that some password hashes can be recovered and cracked. In this latest development, we reverse engineered a SuperMicro/ATEN firmware binary and discovered security gross negligence. We discovered the very worst vuln: client-side only input checking, shell-injection, and trivial buffer-overflows in many CGI programs including the user/pass fields of the login page. Further, the device has almost no modern buffer-overflow defenses (DEP, ASLR, and Stack Carries). We show that it is *easy* to exploit these flaws and gain a root shell. This is especially nasty because the system operator is not give access to a Unix shell on the BMC, thus a remote attacker can gain more capabilities on the BMC than even the administrator. In short, the previous work should certainly be enough to make any sys admin fear exposing IPMI to a public IP. However, the problem is much worse than we previously thought. This particular implementation shows a complete disregard for even the most basic security practices. -Anthony On Aug 16, 2013 10:19 AM, "Alain Hebert" <ahebert(a)pubnix.net> wrote: Hi, I find it odd that this is suddenly news... There is plenty of security updates for iBMC/iDrac/etc from IBM/HP/Dell/etc over the years. But: You can use ipmitool, rootkit/exploit some Linux box and upload your own firmware in that iBMC/iDrac/etc... for example the BMC firmware for a Dell C1100 leave plenty of space to inject your own shell in it. And Voila! access to the management network =D. BTW I got ipmitool working even on VMWare 5.1 :( Counter: We (PCIDSS hat) always check for those management interfaces and "proposed" to move those interfaces into they own VLANs+Subnets. Meaning: PCI DMZ Zone has its own DMZ iBMC VLAN/Subnet/FW Rules, PCI DB Zone has its own iBMC VLAN/Subnet/FW Rules, etc. It is a few more VLAN/Subnets... but modern Firewall can handle this easy. PS: "proposed" as in not giving them a choice =D ----- Alain Hebert ahebert(a)pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443 On 08/16/13 00:22, Kyle Creyts wrote: > just so we're all clear, SuperMicro wasn't the only one... > > link: http://pastebin.com/syXHLuC5 > > 1. CVE-2013-4782 CVSS Base Score = 10.0 > 2. The SuperMicro BMC implementation allows remote attackers to > bypass authentication and execute arbitrary IPMI commands by using > cipher suite 0 (aka cipher zero) and an arbitrary password. > 3. > 4. CVE-2013-4783 CVSS Base Score = 10.0 > 5. The Dell iDRAC 6 BMC implementation allows remote attackers to > bypass authentication and execute arbitrary IPMI commands by using > cipher suite 0 (aka cipher zero) and an arbitrary password. > 6. > 7. CVE-2013-4784 CVSS Base Score = 10.0 > 8. The HP Integrated Lights-Out (iLO) BMC implementation allows > remote attackers to bypass authentication and execute arbitrary IPMI > commands by using cipher suite 0 (aka cipher zero) and an arbitrary > password. > 9. > 10. CVE-2013-4785 CVSS Base Score = 10.0 > 11. iDRAC 6 firmware 1.7, and possibly other versions, allows remote > attackers to modify the CLP interface for arbitrary users and possibly > have other impact via a request to an unspecified form that is > accessible from testurls.html. > 12. > 13. CVE-2013-4786 CVSS Base Score = 7.8 > 14. The IPMI 2.0 specification supports RMCP+ Authenticated > Key-Exchange Protocol (RAKP) authentication, which allows remote > attackers to obtain password hashes and conduct offline password > guessing attacks by obtaining the HMAC from a RAKP message 2 responses > from a BMC. > > > References: > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4782 > => http://fish2.com/ipmi/cipherzero.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4783 > => http://fish2.com/ipmi/cipherzero.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4784 > => http://fish2.com/ipmi/cipherzero.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4785 > => http://fish2.com/ipmi/dell/secret.html > > http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-4786 > => http://fish2.com/ipmi/remote-pw-cracking.html > > On Thu, Aug 15, 2013 at 6:00 PM, Jay Ashworth <jra(a)baylink.com> wrote: >> Presumably, everyone else's are very religious as well. >> >> Is anyone here stupid enough not to put the management interfaces behind >> a firewall/VPN? >> >> http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/14/researchers-fi… >> >> And should I be nervous that Usenix pointed me *there* for the story, >> rather than a tech press outlet? >> >> Cheers, >> -- jra >> -- >> Jay R. Ashworth Baylink jra(a)baylink.com >> Designer The Things I Think RFC 2100 >> Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII >> St Petersburg FL USA #natog +1 727 647 1274 >> > >

1 0