January 2014 - Test - lists.nanog.org

Weekly Routing Table Report
by Routing Analysis Role Account 03 Jan '14

03 Jan '14

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 04 Jan, 2014 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 477051 Prefixes after maximum aggregation: 190299 Deaggregation factor: 2.51 Unique aggregates announced to Internet: 236730 Total ASes present in the Internet Routing Table: 45828 Prefixes per ASN: 10.41 Origin-only ASes present in the Internet Routing Table: 35488 Origin ASes announcing only one prefix: 16270 Transit ASes present in the Internet Routing Table: 5982 Transit-only ASes present in the Internet Routing Table: 177 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 53 Max AS path prepend of ASN ( 50404) 51 Prefixes from unregistered ASNs in the Routing Table: 2654 Unregistered ASNs in the Routing Table: 627 Number of 32-bit ASNs allocated by the RIRs: 5637 Number of 32-bit ASNs visible in the Routing Table: 4358 Prefixes from 32-bit ASNs in the Routing Table: 13805 Number of bogon 32-bit ASNs visible in the Routing Table: 1 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 1728 Number of addresses announced to Internet: 2661253372 Equivalent to 158 /8s, 159 /16s and 128 /24s Percentage of available address space announced: 71.9 Percentage of allocated address space announced: 71.9 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 95.4 Total number of prefixes smaller than registry allocations: 166280 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 113324 Total APNIC prefixes after maximum aggregation: 34178 APNIC Deaggregation factor: 3.32 Prefixes being announced from the APNIC address blocks: 115676 Unique aggregates announced from the APNIC address blocks: 48507 APNIC Region origin ASes present in the Internet Routing Table: 4870 APNIC Prefixes per ASN: 23.75 APNIC Region origin ASes announcing only one prefix: 1210 APNIC Region transit ASes present in the Internet Routing Table: 841 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 28 Number of APNIC region 32-bit ASNs visible in the Routing Table: 797 Number of APNIC addresses announced to Internet: 730192064 Equivalent to 43 /8s, 133 /16s and 216 /24s Percentage of available APNIC address space announced: 85.3 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-63999, 131072-133631 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 163539 Total ARIN prefixes after maximum aggregation: 81812 ARIN Deaggregation factor: 2.00 Prefixes being announced from the ARIN address blocks: 164167 Unique aggregates announced from the ARIN address blocks: 75856 ARIN Region origin ASes present in the Internet Routing Table: 15928 ARIN Prefixes per ASN: 10.31 ARIN Region origin ASes announcing only one prefix: 5986 ARIN Region transit ASes present in the Internet Routing Table: 1673 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 24 Number of ARIN region 32-bit ASNs visible in the Routing Table: 53 Number of ARIN addresses announced to Internet: 1074982272 Equivalent to 64 /8s, 18 /16s and 237 /24s Percentage of available ARIN address space announced: 56.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 120105 Total RIPE prefixes after maximum aggregation: 61366 RIPE Deaggregation factor: 1.96 Prefixes being announced from the RIPE address blocks: 123796 Unique aggregates announced from the RIPE address blocks: 79325 RIPE Region origin ASes present in the Internet Routing Table: 17586 RIPE Prefixes per ASN: 7.04 RIPE Region origin ASes announcing only one prefix: 8315 RIPE Region transit ASes present in the Internet Routing Table: 2840 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 53 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2550 Number of RIPE addresses announced to Internet: 654989700 Equivalent to 39 /8s, 10 /16s and 89 /24s Percentage of available RIPE address space announced: 95.2 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-200191 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 53686 Total LACNIC prefixes after maximum aggregation: 10068 LACNIC Deaggregation factor: 5.33 Prefixes being announced from the LACNIC address blocks: 59163 Unique aggregates announced from the LACNIC address blocks: 27528 LACNIC Region origin ASes present in the Internet Routing Table: 2059 LACNIC Prefixes per ASN: 28.73 LACNIC Region origin ASes announcing only one prefix: 552 LACNIC Region transit ASes present in the Internet Routing Table: 404 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 35 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 950 Number of LACNIC addresses announced to Internet: 147393336 Equivalent to 8 /8s, 201 /16s and 11 /24s Percentage of available LACNIC address space announced: 87.9 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 262144-263679 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 11799 Total AfriNIC prefixes after maximum aggregation: 2616 AfriNIC Deaggregation factor: 4.51 Prefixes being announced from the AfriNIC address blocks: 12521 Unique aggregates announced from the AfriNIC address blocks: 4190 AfriNIC Region origin ASes present in the Internet Routing Table: 698 AfriNIC Prefixes per ASN: 17.94 AfriNIC Region origin ASes announcing only one prefix: 207 AfriNIC Region transit ASes present in the Internet Routing Table: 143 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 8 Number of AfriNIC addresses announced to Internet: 48539392 Equivalent to 2 /8s, 228 /16s and 167 /24s Percentage of available AfriNIC address space announced: 48.2 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2945 11558 952 Korea Telecom 17974 2731 902 88 PT Telekomunikasi Indonesia 7545 2121 319 112 TPG Telecom Limited 4755 1812 392 191 TATA Communications formerly 9829 1563 1255 41 National Internet Backbone 9583 1295 101 537 Sify Limited 9498 1235 309 71 BHARTI Airtel Ltd. 7552 1226 1080 13 Viettel Corporation 4808 1141 2120 348 CNCGROUP IP network China169 24560 1098 382 167 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3029 3688 53 BellSouth.net Inc. 22773 2319 2939 138 Cox Communications Inc. 1785 2146 686 131 PaeTec Communications, Inc. 18566 2050 379 178 MegaPath Corporation 20115 1682 1665 593 Charter Communications 4323 1627 1081 411 tw telecom holdings, inc. 701 1506 11144 778 MCI Communications Services, 30036 1376 310 572 Mediacom Communications Corp 7018 1307 17746 847 AT&T Services, Inc. 6983 1294 756 580 ITC^Deltacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1841 544 16 OJSC "Vimpelcom" 34984 1361 243 227 TELLCOM ILETISIM HIZMETLERI A 20940 1207 455 907 Akamai International B.V. 31148 1012 45 20 Freenet Ltd. 13188 922 100 26 TOV "Bank-Inform" 6849 857 361 35 JSC "Ukrtelecom" 8551 856 370 38 Bezeq International-Ltd 6830 770 2327 423 Liberty Global Operations B.V 12479 685 798 53 France Telecom Espana SA 35228 551 246 16 Telefonica UK Limited Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3438 1839 91 NET Serviços de Comunicação S 10620 2691 435 209 Telmex Colombia S.A. 18881 1790 908 20 Global Village Telecom 7303 1743 1163 230 Telecom Argentina S.A. 8151 1371 2857 429 Uninet S.A. de C.V. 11830 868 364 15 Instituto Costarricense de El 27947 858 93 89 Telconet S.A 7738 813 1562 37 Telemar Norte Leste S.A. 6503 792 434 60 Axtel, S.A.B. de C.V. 6147 780 373 27 Telefonica del Peru S.A.A. Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1857 112 5 Sudanese Mobile Telephone (ZA 24863 893 338 26 Link Egypt (Link.NET) 6713 600 653 27 Office National des Postes et 8452 450 956 9 TE-AS 24835 299 144 9 Vodafone Data 3741 247 921 209 Internet Solutions 29571 240 21 14 Cote d'Ivoire Telecom 36992 226 505 27 ETISALAT MISR 15706 219 32 6 Sudatel (Sudan Telecom Co. Lt 29975 192 668 21 Vodacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3438 1839 91 NET Serviços de Comunicação S 6389 3029 3688 53 BellSouth.net Inc. 4766 2945 11558 952 Korea Telecom 17974 2731 902 88 PT Telekomunikasi Indonesia 10620 2691 435 209 Telmex Colombia S.A. 22773 2319 2939 138 Cox Communications Inc. 1785 2146 686 131 PaeTec Communications, Inc. 7545 2121 319 112 TPG Telecom Limited 18566 2050 379 178 MegaPath Corporation 36998 1857 112 5 Sudanese Mobile Telephone (ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 3029 2976 BellSouth.net Inc. 17974 2731 2643 PT Telekomunikasi Indonesia 10620 2691 2482 Telmex Colombia S.A. 22773 2319 2181 Cox Communications Inc. 1785 2146 2015 PaeTec Communications, Inc. 7545 2121 2009 TPG Telecom Limited 4766 2945 1993 Korea Telecom 18566 2050 1872 MegaPath Corporation 36998 1857 1852 Sudanese Mobile Telephone (ZA 8402 1841 1825 OJSC "Vimpelcom" Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.192.0/23 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.196.0/22 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.200.0/23 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.202.0/23 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 2828 XO Communications 62828 UNALLOCATED 8.21.130.0/24 4323 tw telecom holdings, 62850 UNALLOCATED 8.25.147.0/24 46887 Lightower Fiber Netw 20260 UNALLOCATED 8.25.160.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.161.0/24 3356 Level 3 Communicatio Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.90.128.0/18 27418 OUTOFWALL INC. 23.91.0.0/19 40676 Psychz Networks 23.91.14.0/24 40676 Psychz Networks 23.91.32.0/19 36315 Servpac Inc. 23.91.80.0/20 21560 Netstream Communications, LLC 23.91.96.0/20 37958 Beijing Blue I.T Technologies 23.91.112.0/21 32475 SingleHop 23.91.120.0/21 36351 SoftLayer Technologies Inc. 23.91.160.0/19 36493 FIBERNETICS CORPORATION 23.91.160.0/22 36493 FIBERNETICS CORPORATION Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:11 /10:31 /11:92 /12:254 /13:473 /14:937 /15:1636 /16:12856 /17:6785 /18:11435 /19:23329 /20:33183 /21:35757 /22:50722 /23:44179 /24:253010 /25:798 /26:953 /27:433 /28:47 /29:71 /30:28 /31:0 /32:15 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2005 2050 MegaPath Corporation 36998 1822 1857 Sudanese Mobile Telephone (ZA 6389 1699 3029 BellSouth.net Inc. 22773 1563 2319 Cox Communications Inc. 8402 1530 1841 OJSC "Vimpelcom" 30036 1217 1376 Mediacom Communications Corp 1785 1163 2146 PaeTec Communications, Inc. 11492 1152 1189 CABLE ONE, INC. 6983 1036 1294 ITC^Deltacom 22561 977 1252 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:935 2:843 3:3 4:16 5:840 6:21 8:638 12:1872 13:3 14:898 15:9 16:3 17:20 18:24 20:36 23:653 24:1752 27:1691 31:1514 32:44 33:2 34:5 36:111 37:1944 38:917 39:5 40:182 41:3329 42:246 44:14 46:2116 47:10 49:707 50:857 52:12 54:44 55:3 56:4 57:26 58:1141 59:590 60:369 61:1501 62:1202 63:1966 64:4375 65:2334 66:4133 67:2096 68:1084 69:3307 70:907 71:510 72:2023 74:2584 75:321 76:304 77:1146 78:1028 79:682 80:1283 81:1084 82:645 83:737 84:649 85:1215 86:400 87:1012 88:523 89:1581 90:152 91:5719 92:636 93:1614 94:2112 95:1466 96:531 97:351 98:1081 99:41 100:33 101:701 103:3890 105:534 106:142 107:348 108:548 109:2036 110:978 111:1140 112:602 113:814 114:767 115:1052 116:1015 117:833 118:1222 119:1292 120:325 121:774 122:1884 123:1290 124:1398 125:1456 128:654 129:236 130:356 131:665 132:341 133:159 134:320 135:73 136:277 137:271 138:354 139:174 140:202 141:353 142:551 143:405 144:499 145:92 146:566 147:428 148:789 149:361 150:152 151:481 152:410 153:208 154:50 155:526 156:316 157:418 158:287 159:809 160:360 161:465 162:976 163:232 164:663 165:586 166:281 167:639 168:1037 169:123 170:1162 171:185 172:12 173:1692 174:670 175:551 176:1361 177:2596 178:1924 179:345 180:1604 181:931 182:1424 183:479 184:633 185:1179 186:2790 187:1463 188:1957 189:1283 190:7318 191:16 192:7048 193:5431 194:4025 195:3404 196:1346 197:1063 198:4815 199:5527 200:6057 201:2557 202:9008 203:8926 204:4537 205:2638 206:2909 207:2820 208:3955 209:3708 210:3080 211:1630 212:2170 213:1952 214:869 215:83 216:5448 217:1723 218:608 219:323 220:1271 221:587 222:349 223:565 End of report

1 0

re: What's up at AOL?
by Nick Olsen 02 Jan '14

02 Jan '14

We're seeing mail backup toward AOL as well. All coming back Service Unavailable. Postmaster(a)aol.com has not responded to our inquiry yet. Nick Olsen Network Operations (855) FLSPEED x106 ---------------------------------------- From: "Barry Shein" <bzs(a)world.std.com> Sent: Thursday, January 02, 2014 12:46 PM To: nanog(a)nanog.org Subject: What's up at AOL? They've been accepting email only occasionally for a few days now. We're on FBL, check reputation is good/green. Sometimes we get DYN:T2 (according to AOL that's their code for it's our, AOL's, problem), sometimes just various forms of try later, Service not available, deferred, etc. typically after the DATA is sent so MAIL FROM and RCPT TO are ok or no error. I did get one response from postmaster(a)aol.com which said it was all fixed yesterday which it was for several hours and today thousands of msgs backed up for them again. I am just asking if anyone knows what's going on even in general terms. That is, should we stop fussing with this (everyone's hosed w/ AOL this week?) or is it just us? -- -Barry Shein The World | bzs(a)TheWorld.com | http://www.TheWorld.com Purveyors to the Trade | Voice: 800-THE-WRLD | Dial-Up: US, PR, Canada Software Tool & Die | Public Access Internet | SINCE 1989 *oo*

2 1

What's up at AOL?
by Barry Shein 02 Jan '14

02 Jan '14

They've been accepting email only occasionally for a few days now. We're on FBL, check reputation is good/green. Sometimes we get DYN:T2 (according to AOL that's their code for it's our, AOL's, problem), sometimes just various forms of try later, Service not available, deferred, etc. typically after the DATA is sent so MAIL FROM and RCPT TO are ok or no error. I did get one response from postmaster(a)aol.com which said it was all fixed yesterday which it was for several hours and today thousands of msgs backed up for them again. I am just asking if anyone knows what's going on even in general terms. That is, should we stop fussing with this (everyone's hosed w/ AOL this week?) or is it just us? -- -Barry Shein The World | bzs(a)TheWorld.com | http://www.TheWorld.com Purveyors to the Trade | Voice: 800-THE-WRLD | Dial-Up: US, PR, Canada Software Tool & Die | Public Access Internet | SINCE 1989 *oo*

5 4

Mikrotik Cloud Core Router and BGP real life experiences?
by Martin Hotze 02 Jan '14

02 Jan '14

Hi, looking at the specs of Mikrotik Cloud Core Routers it seems to be to good to be true [1] having so much bang for the bucks. So virtually all smaller ISPs would drop their CISCO gear for Mikrotik Routerboards. We are using a handful of Mikrotik boxes, but on a much lower network level (splitting networks; low end router behind ADSL modem, ...). We're happy with them. So I am asking for real life experience and not lab values with Mikrotik Cloud Core Routers and BGP. How good can they handle full tables and a bunch of peering sessions? How good does the box react when adding filters (during attacks)? Reloading the table? etc. etc. I am looking for _real_ _life_ values compared to a CISCO NPE-G2. Please tell me/us from your first hand experience. Thanks! greetings, Martin [1] If something sounds too good to be true, it probably is.

16 26

Catalyst IOS refresher site?
by Jay Ashworth 02 Jan '14

02 Jan '14

It's been a bit too long since I was near the high end, so I grabbed a 4507 from my local surplus vendor; dual PS, dual supe, Gig Fiber (large transceivers, alas, not GBIC), and 3 48port RJ45 POE cards. For $60. I love surplus. Is there a good Catalyst-IOS tutorial on line I can buzz through, to refresh my memory on where everything is? Cheers, -- jra -- Make Election Day a federal holiday: http://wh.gov/lBm94 100k sigs by 12/14 Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://baylink.pitas.com 2000 Land Rover DII St Petersburg FL USA #natog +1 727 647 1274

3 4

Re: NSA able to compromise Cisco, Juniper, Huawei switches
by Clay Kossmeyer 02 Jan '14

02 Jan '14

Hi Folks - Clay Kossmeyer here from the Cisco PSIRT. We've published the following document in response to the original (Dec. 29) Der Spiegel article: http://tools.cisco.com/security/center/content/CiscoSecurityResponse/cisco-… and are investing the claims in the Dec. 30 Der Spiegel article referencing 'persistent implants' for the PIX and ASA product lines under case number PSIRT-1384943056. Any vulnerabilities we discover will be disclosed via our standard vulnerability handling process documented here: http://www.cisco.com/web/about/security/psirt/security_vulnerability_policy… I'm not currently subscribed to NANOG, so if you have a reply you'd like me to see, please copy me directly. Regards, Clay ----- Found some interesting news on one of the Australia news websites. http://www.scmagazine.com.au/News/368527,nsa-able-to-compromise-cisco-junip… Regards, Steven.

13 24

NSA able to compromise Cisco, Juniper, Huawei switches
by sten rulz 01 Jan '14

01 Jan '14

Found some interesting news on one of the Australia news websites. http://www.scmagazine.com.au/News/368527,nsa-able-to-compromise-cisco-junip… Regards, Steven.

36 75

Re: NSA able to compromise Cisco, Juniper, Huawei switches
by Brandon Butterworth 01 Jan '14

01 Jan '14

> If legal, consider risk to NSA. Official product ran inside company to add > requested feature, hundred of people aware of it. Seems both expensive to > order such feature and almost guaranteed to be exposed by some of the > employees. > > Alternative method is to presume all software is insecure, hire 1 expert whose > day job is to search for vulnerabilities in IOS. Much cheaper, insignificant > risk. > > Which method would you use? I'd also look at having people work in the factory in china designing test or at (/own) the QA/test equipment manufacturer as when they connect the product jtag to test you can give a little extra. Both smaller groups of people and nobody knows what they do anyway but they do get legit access to the product perhaps with low level details handed on a plate. > If this is as widespread as claimed, and if we'll gain knowledge how to see if > you are affected, there are potentially repercussions on geopolitical scale, > as I'm sure many on these lists would go public and share information if > they'd find being targeted. Would they leave them out there gathering data for as long as possible or remove the evidence as soon as people start looking (then put some back later once the fuss has died down)? brandon

1 0

First! [?]
by jamie rishaw 01 Jan '14

01 Jan '14

Happy New Year to all, and to all a good lawful interception.

6 5

Re: Juniper SSL VPN
by Hank Nussbacher 01 Jan '14

01 Jan '14

At 20:55 31/12/2013 -0500, Christopher Morrow wrote: >Had no clue? Didn't they build it? > > > > From what I understood from the tech note, they had no clue this would > > happen on the 31st of December :) Perhaps it is a left over somehow from their Netscreen purchase (April 2004)? -Hank

2 1