March 2014 - Test - lists.nanog.org

valley free routing?
by William Herrin 07 Mar '14

07 Mar '14

Hi folks, Can anyone tell me about a situation in which a route which was not valley free was not a result of a misconfiguration or a bad actor? For those who don't recall the terminology, a network path is valley free if it crosses exactly zero or one free peering links when traveling between the two endpoints. Thanks, Bill Herrin -- William D. Herrin ................ herrin(a)dirtside.com bill(a)herrin.us 3005 Crane Dr. ...................... Web: <http://bill.herrin.us/> Falls Church, VA 22042-3004

9 15

Weekly Routing Table Report
by Routing Analysis Role Account 07 Mar '14

07 Mar '14

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 08 Mar, 2014 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 485175 Prefixes after maximum aggregation: 191734 Deaggregation factor: 2.53 Unique aggregates announced to Internet: 240090 Total ASes present in the Internet Routing Table: 46277 Prefixes per ASN: 10.48 Origin-only ASes present in the Internet Routing Table: 35607 Origin ASes announcing only one prefix: 16396 Transit ASes present in the Internet Routing Table: 6052 Transit-only ASes present in the Internet Routing Table: 168 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 53 Max AS path prepend of ASN ( 50404) 51 Prefixes from unregistered ASNs in the Routing Table: 1875 Unregistered ASNs in the Routing Table: 485 Number of 32-bit ASNs allocated by the RIRs: 6056 Number of 32-bit ASNs visible in the Routing Table: 4618 Prefixes from 32-bit ASNs in the Routing Table: 14855 Number of bogon 32-bit ASNs visible in the Routing Table: 6 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 443 Number of addresses announced to Internet: 2657868548 Equivalent to 158 /8s, 107 /16s and 219 /24s Percentage of available address space announced: 71.8 Percentage of allocated address space announced: 71.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 95.8 Total number of prefixes smaller than registry allocations: 168995 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 115350 Total APNIC prefixes after maximum aggregation: 34578 APNIC Deaggregation factor: 3.34 Prefixes being announced from the APNIC address blocks: 117967 Unique aggregates announced from the APNIC address blocks: 49596 APNIC Region origin ASes present in the Internet Routing Table: 4890 APNIC Prefixes per ASN: 24.12 APNIC Region origin ASes announcing only one prefix: 1225 APNIC Region transit ASes present in the Internet Routing Table: 861 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table: 855 Number of APNIC addresses announced to Internet: 730759040 Equivalent to 43 /8s, 142 /16s and 127 /24s Percentage of available APNIC address space announced: 85.4 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-63999, 131072-133631 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 166347 Total ARIN prefixes after maximum aggregation: 82770 ARIN Deaggregation factor: 2.01 Prefixes being announced from the ARIN address blocks: 167732 Unique aggregates announced from the ARIN address blocks: 78116 ARIN Region origin ASes present in the Internet Routing Table: 16170 ARIN Prefixes per ASN: 10.37 ARIN Region origin ASes announcing only one prefix: 6120 ARIN Region transit ASes present in the Internet Routing Table: 1667 Average ARIN Region AS path length visible: 4.0 Max ARIN Region AS path length visible: 21 Number of ARIN region 32-bit ASNs visible in the Routing Table: 71 Number of ARIN addresses announced to Internet: 1066741632 Equivalent to 63 /8s, 149 /16s and 47 /24s Percentage of available ARIN address space announced: 56.4 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 121984 Total RIPE prefixes after maximum aggregation: 61753 RIPE Deaggregation factor: 1.98 Prefixes being announced from the RIPE address blocks: 125946 Unique aggregates announced from the RIPE address blocks: 79923 RIPE Region origin ASes present in the Internet Routing Table: 17630 RIPE Prefixes per ASN: 7.14 RIPE Region origin ASes announcing only one prefix: 8298 RIPE Region transit ASes present in the Internet Routing Table: 2866 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 53 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2648 Number of RIPE addresses announced to Internet: 656662148 Equivalent to 39 /8s, 35 /16s and 222 /24s Percentage of available RIPE address space announced: 95.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 196608-202239 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 54609 Total LACNIC prefixes after maximum aggregation: 9944 LACNIC Deaggregation factor: 5.49 Prefixes being announced from the LACNIC address blocks: 60505 Unique aggregates announced from the LACNIC address blocks: 27859 LACNIC Region origin ASes present in the Internet Routing Table: 2071 LACNIC Prefixes per ASN: 29.22 LACNIC Region origin ASes announcing only one prefix: 549 LACNIC Region transit ASes present in the Internet Routing Table: 425 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 32 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 1033 Number of LACNIC addresses announced to Internet: 151999104 Equivalent to 9 /8s, 15 /16s and 82 /24s Percentage of available LACNIC address space announced: 90.6 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 262144-263679 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 11913 Total AfriNIC prefixes after maximum aggregation: 2652 AfriNIC Deaggregation factor: 4.49 Prefixes being announced from the AfriNIC address blocks: 12582 Unique aggregates announced from the AfriNIC address blocks: 4226 AfriNIC Region origin ASes present in the Internet Routing Table: 705 AfriNIC Prefixes per ASN: 17.85 AfriNIC Region origin ASes announcing only one prefix: 204 AfriNIC Region transit ASes present in the Internet Routing Table: 152 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 28 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 11 Number of AfriNIC addresses announced to Internet: 51382784 Equivalent to 3 /8s, 16 /16s and 10 /24s Percentage of available AfriNIC address space announced: 51.0 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2983 11580 895 Korea Telecom 17974 2757 903 78 PT Telekomunikasi Indonesia 7545 2196 320 117 TPG Telecom Limited 4755 1834 396 196 TATA Communications formerly 9829 1594 1283 39 National Internet Backbone 9583 1307 102 534 Sify Limited 7552 1250 1082 13 Viettel Corporation 9498 1241 311 77 BHARTI Airtel Ltd. 4808 1181 2123 359 CNCGROUP IP network China169 24560 1111 384 176 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3020 3688 53 BellSouth.net Inc. 22773 2320 2938 140 Cox Communications Inc. 1785 2180 693 127 PaeTec Communications, Inc. 18566 2048 379 178 MegaPath Corporation 20115 1688 1673 576 Charter Communications 4323 1622 1089 412 tw telecom holdings, inc. 701 1491 11174 763 MCI Communications Services, 30036 1385 298 556 Mediacom Communications Corp 6983 1322 815 307 ITC^Deltacom 22561 1300 401 228 CenturyTel Internet Holdings, Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1690 544 16 OJSC "Vimpelcom" 34984 1472 264 248 TELLCOM ILETISIM HIZMETLERI A 20940 1286 497 967 Akamai International B.V. 13188 1048 100 28 TOV "Bank-Inform" 31148 1017 45 21 Freenet Ltd. 8551 891 370 41 Bezeq International-Ltd 6849 830 361 34 JSC "Ukrtelecom" 6830 775 2331 426 Liberty Global Operations B.V 12479 712 798 51 France Telecom Espana SA 35228 555 246 16 Telefonica UK Limited Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3539 1938 93 NET Serviços de Comunicação S 10620 2776 443 182 Telmex Colombia S.A. 18881 1916 972 21 Global Village Telecom 7303 1696 1169 219 Telecom Argentina S.A. 8151 1374 2883 415 Uninet S.A. de C.V. 6503 943 434 61 Axtel, S.A.B. de C.V. 11830 875 364 15 Instituto Costarricense de El 27947 853 113 48 Telconet S.A 7738 846 1626 39 Telemar Norte Leste S.A. 3816 783 316 126 COLOMBIA TELECOMUNICACIONES S Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1638 240 6 Sudanese Mobile Telephone (ZA 24863 922 376 28 Link Egypt (Link.NET) 6713 602 685 28 Office National des Postes et 8452 529 958 13 TE-AS 24835 299 144 9 Vodafone Data 36992 264 783 24 ETISALAT MISR 3741 248 921 209 Internet Solutions 15706 219 32 6 Sudatel (Sudan Telecom Co. Lt 29571 207 22 17 Cote d'Ivoire Telecom 29975 192 668 21 Vodacom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3539 1938 93 NET Serviços de Comunicação S 6389 3020 3688 53 BellSouth.net Inc. 4766 2983 11580 895 Korea Telecom 10620 2776 443 182 Telmex Colombia S.A. 17974 2757 903 78 PT Telekomunikasi Indonesia 22773 2320 2938 140 Cox Communications Inc. 7545 2196 320 117 TPG Telecom Limited 1785 2180 693 127 PaeTec Communications, Inc. 18566 2048 379 178 MegaPath Corporation 18881 1916 972 21 Global Village Telecom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 3020 2967 BellSouth.net Inc. 17974 2757 2679 PT Telekomunikasi Indonesia 10620 2776 2594 Telmex Colombia S.A. 22773 2320 2180 Cox Communications Inc. 4766 2983 2088 Korea Telecom 7545 2196 2079 TPG Telecom Limited 1785 2180 2053 PaeTec Communications, Inc. 18881 1916 1895 Global Village Telecom 18566 2048 1870 MegaPath Corporation 8402 1690 1674 OJSC "Vimpelcom" Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 30662 UNALLOCATED 8.2.129.0/24 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.192.0/23 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.196.0/22 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.200.0/23 3356 Level 3 Communicatio 14728 UNALLOCATED 8.8.202.0/23 3356 Level 3 Communicatio 53506 UNALLOCATED 8.17.102.0/23 2828 XO Communications 20260 UNALLOCATED 8.25.160.0/24 3356 Level 3 Communicatio 20260 UNALLOCATED 8.25.161.0/24 3356 Level 3 Communicatio 46473 UNALLOCATED 8.27.122.0/24 12180 Internap Network Ser 46473 UNALLOCATED 8.27.124.0/24 12180 Internap Network Ser Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 >>UNKNOWN<< 41.73.1.0/24 37004 >>UNKNOWN<< 41.73.2.0/24 37004 >>UNKNOWN<< 41.73.10.0/24 37004 >>UNKNOWN<< 41.73.11.0/24 37004 >>UNKNOWN<< 41.73.12.0/24 37004 >>UNKNOWN<< 41.73.13.0/24 37004 >>UNKNOWN<< 41.73.14.0/24 37004 >>UNKNOWN<< 41.73.15.0/24 37004 >>UNKNOWN<< 41.73.16.0/24 37004 >>UNKNOWN<< Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:12 /10:30 /11:90 /12:255 /13:474 /14:953 /15:1652 /16:12863 /17:6749 /18:11504 /19:23775 /20:33619 /21:36378 /22:51935 /23:45220 /24:257403 /25:795 /26:942 /27:434 /28:12 /29:18 /30:7 /31:1 /32:38 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2003 2048 MegaPath Corporation 6389 1696 3020 BellSouth.net Inc. 36998 1599 1638 Sudanese Mobile Telephone (ZA 22773 1560 2320 Cox Communications Inc. 8402 1371 1690 OJSC "Vimpelcom" 30036 1223 1385 Mediacom Communications Corp 11492 1174 1221 CABLE ONE, INC. 1785 1166 2180 PaeTec Communications, Inc. 6983 1040 1322 ITC^Deltacom 34984 999 1472 TELLCOM ILETISIM HIZMETLERI A Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:988 2:760 3:3 4:16 5:910 6:19 8:658 12:1858 13:4 14:961 15:9 16:3 17:27 18:21 20:35 23:762 24:1722 27:1766 31:1526 32:44 33:2 34:5 36:118 37:1803 38:927 39:4 40:193 41:3091 42:247 44:18 46:2146 47:15 49:673 50:919 52:12 54:45 55:8 57:26 58:1168 59:596 60:380 61:1524 62:1258 63:1981 64:4353 65:2249 66:4204 67:2066 68:1030 69:3303 70:839 71:471 72:1956 74:2668 75:312 76:394 77:1199 78:989 79:681 80:1298 81:1124 82:665 83:743 84:746 85:1287 86:417 87:1071 88:522 89:1727 90:151 91:5751 92:659 93:1689 94:2030 95:1498 96:535 97:352 98:1069 99:41 100:50 101:791 103:4386 105:534 106:166 107:546 108:547 109:2007 110:997 111:1254 112:634 113:825 114:873 115:1118 116:1039 117:873 118:1322 119:1293 120:365 121:791 122:1920 123:1263 124:1457 125:1452 128:639 129:242 130:360 131:661 132:357 133:157 134:319 135:74 136:248 137:301 138:349 139:159 140:212 141:362 142:559 143:429 144:497 145:97 146:596 147:459 148:792 149:342 150:161 151:580 152:420 153:204 154:93 155:461 156:334 157:368 158:224 159:863 160:353 161:478 162:1218 163:221 164:689 165:612 166:281 167:600 168:1026 169:123 170:1224 171:195 172:20 173:1627 174:680 175:603 176:1469 177:2810 178:1967 179:562 180:1640 181:976 182:1461 183:491 184:698 185:1367 186:2743 187:1455 188:1872 189:1300 190:7438 191:107 192:7146 193:5447 194:4014 195:3348 196:1347 197:1112 198:4959 199:5594 200:6048 201:2687 202:8968 203:8888 204:4659 205:2666 206:2946 207:2902 208:3972 209:3726 210:3072 211:1698 212:2216 213:2019 214:895 215:84 216:5510 217:1688 218:565 219:321 220:1296 221:595 222:342 223:605 End of report

1 0

Fwd: [menog] APRICOT2014 Archives
by staticsafe 07 Mar '14

07 Mar '14

---------- Forwarded message ---------- From: Miwa Fujii <miwa(a)apnic.net> Date: Fri, Mar 7, 2014 at 2:36 AM Subject: [menog] APRICOT2014 Archives To: "menog(a)menog.org" <menog(a)menog.org> Hi MENOG members, APRICOT2014 is over now and archived materials are available in: https://2014.apricot.net/program As usual, there were lots of interesting sessions. Here is some sessions to look into as examples of great archives - these are sessions on CGN, managing IPv4 address exhaustion, IPv6 in mobile networs: APNIC Plenary: Anatomy of CGN ============================= Geoff (APNIC), Shin Miyakawa (NTT), Sunny Yeung (Telstra) and Alastair Johnson (Alcatel-Lucent) discussed on CGN. http://www.youtube.com/watch?v=IF7AnAFYrzc https://2014.apricot.net/program#session/66283 IPv6 in Mobile Networks Tutorial bu Sunny Young (Telstra) ========================================================= https://2014.apricot.net/program#session/66936 464XLAT: Breaking Free of IPv4 Tutorial by Cameron Byrne (T-Mobile USA) ======================================================================= https://2014.apricot.net/program#session/66932 Short video clips ================= Shin Miyakawa (NTT COM): CGNs and IPv6 http://www.youtube.com/watch?v=J3YD8KG8HaQ Cameron Byrne (T-Mobile USA): T-Mobile's positive experience in deploying IPv6 for its network http://www.youtube.com/watch?v=8yW3cSIm8Bg Sunny Yeung (Australia Telstra): The importance of IPv6 to Telstra's future http://www.youtube.com/watch?v=oStlNQm8je0 Alastair Johnson (Alcatel-Lucent): His thoughts on the trends of network operators around the transition from IPv4 to IPv6 in Asia-Pacific http://www.youtube.com/watch?v=mzp8fWp_srQ&list=PLSnVjSuzLJcyFNlG3JSBTnC76S 25HOLj8 Geoff Huston (APNIC): A brief history of CGNs and the implications for the future of IPv4 and IPv6 http://www.youtube.com/watch?v=H2awlfgM02w&list=PLSnVjSuzLJcyFNlG3JSBTnC76S 25HOLj8 Hope you find something useful for your day to day operations. Cheers, Miwa ----------------------------------------- Miwa Fujii Senior Advisor, Internet Development, APNIC www.apnic.net www.apnic.net/ipv6 TEL: +61 7 3858 3100 ----------------------------------------- -- staticsafe

1 0

BCP38, DNS Reflection and IPv6
by Alain Hebert 07 Mar '14

07 Mar '14

A few observations for this Friday. ------ We where finally able to register our NS IPv6 with NetSol and I just noticed IPv6 DNS Reflection Attempts (*) starting a few days after. * By attempts, they could also be probes from projects, but they need to be pretty aggressive to end up listed here. Examples with logs: Toward HE Tunnels 2001:470:6d:5b8::12 1138 queries: . IN ANY +ED (<HoneyPot IPv6>) Toward RackSpace 2001:4801:7821:77:7c1b:4e53:ff10:4961 2191 queries: . IN ANY +ED (<HoneyPot IPv6>) There is also 2 more to HE Tunnels and 1 to OVH, but we only archive a few GB of query logs. Having none of the volume, I wonder how bad would it be to ACL a source IPv6 (/56 to /32) on most CPE, local & regional distribution routers. ----- On another note, the same honeypot was receiving a constant stream of 1Mbps in reflection DNS queries, from the 22th at 13h EST until the 28th at 5h30m EST. My guess is that the CC renew transaction didn't pass or the CC finally returned as stolen. ----- This morning doc.gov is very popular on the pot, about 10k bytes worth of DNSSEC KEY and SIG. And they're just doing from 25 to 50 queries then stopping for 10s to a minute. I have a good idea why. -- ----- Alain Hebert ahebert(a)pubnix.net PubNIX Inc. 50 boul. St-Charles P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443

1 0

DNS Resolving issues. So for related just to Cox. But could be larger.
by Mark Keymer 07 Mar '14

07 Mar '14

Hi Everyone, So I have a client who moved a domain specifically periodforgood.com to a new VPS with our company. DNS has been updated and the TTL time is 4 hours so things should all be updated but something might still be wrong. Looking for help / confirmation that things look good. And better yet if someone from Cox and take a look. Our client uses Cox for there home internet and sometimes the domain resolves and sometimes it does not. We found they have the following IP's in Cox's network that are being used to resolve domains. 68.105.28.11 68.105.28.12 68.105.29.12 After doing many nslookups via a remote session to there computer we found that the top 2 IP's never resolve the periodforgood.com domain and we found that the third one will about 20%-40% of the time resolve it. We have gone to several DNS testing tools and all seems to be in order. If you dig or nslookup directly to the DNS servers that are used for the domain it seems to always respond. I admit I might just be overlooking something myself and will feel dumb once someone points it out to me. But if you can point it out to me that would be great! Also note that it looks like those DNS resolvers are blocked from outside lookups which is good. So maybe someone with some eyeballs inside or otherwise can help out? Sincerely, -- Mark Keymer CFO/COO Vivio Technologies

5 9

BGP attributes through IGP
by Bryan Ashley 07 Mar '14

07 Mar '14

Greetings all - first time caller long time listener. I came across a scenario the other day which got my wheels turning a bit and wanted to reach out and see how others are handling this besides what I would think to be the obvious. Scenario: R1->R2->R3->R4 R1->R2 eBGP R2->R3 OSPF R3->R4 eBGP Essentially what I want to do is be able to carry BGP attributes through OSPF so that remote end sees the full AS-PATH, ORIGIN, etc. The easy answer here is iBGP across OSPF however the wrinkle is this can't be done. Its a long story and one in which we are currently fighting however suffice it to say for the moment this option is out. My searches have come up a little short however I found a couple references to using automatic-tag and as-path tag to carry this through. I cant seem to find any Junos reference information on this so wanted to reach out to the ether and see if others have faced this situation before or have any other recommendations on solutions. Responses on or off list is much appreciated.

5 6

fiber optics patchcords - supplier nearby Atlanta,GA
by Jiri Prochazka 06 Mar '14

06 Mar '14

Hello list, we're deploying a new rack/technology in Atlanta,GA and we are out of reserves of optical patchcords. We need to get another few pieces (combinations of most used connectors like LC/SC/E2000 and lenghts). Could you please point me to some eshop in the US, where we can get them? Ideally with possibility to pay over PayPal and delivery time to Atlanta,GA in two working days. Normally, we would ship them from Europe, but we do not want to risk the delay which could be caused by customs. Thank you! Jiri Prochazka

4 4

Network anomaly survey - evaluation and results
by Jan Rejchrt 06 Mar '14

06 Mar '14

Dear network experts, few months ago we conducted a survey regarding network anomalies. We'd like to provide you with our findings that you can find at RIPE Labs page: https://labs.ripe.net/Members/jan_rejchrt/network-anomaly-detection-2013-su… I'd like to thank all the participants. Best regards, Jan Rejchrt On behalf of CSIRT-MU -- Mgr. Jan Rejchrt rejchrt(a)ics.muni.cz Security Department, CSIRT-MU group http://csirt.muni.cz Institute of Computer Science, Masaryk University, Brno, Czech Republic PGP Key ID: 0x9B5724C8

1 0

Fwd: [ PRIVACY Forum ] Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping
by Jay Ashworth 06 Mar '14

06 Mar '14

Oh hell. Is this the *same* bug that just broke in Apple code last week? Cheers, -- jra ----- Forwarded Message ----- > From: "PRIVACY Forum mailing list" <privacy(a)vortex.com> > To: privacy-list(a)vortex.com > Sent: Tuesday, March 4, 2014 3:17:43 PM > Subject: [ PRIVACY Forum ] Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping > Critical crypto bug leaves Linux, hundreds of apps open to > eavesdropping > > http://j.mp/1jPcVOr (Ars Technica) > > "Hundreds of open source packages, including the Red Hat, Ubuntu, and > Debian distributions of Linux, are susceptible to attacks that > circumvent the most widely used technology to prevent eavesdropping on > the Internet, thanks to an extremely critical vulnerability in a > widely used cryptographic code library. The bug in the GnuTLS library > makes it trivial for attackers to bypass secure sockets layer (SSL) > and Transport Layer Security (TLS) protections available on websites > that depend on the open source package. Initial estimates included in > Internet discussions such as this one indicate that more than 200 > different operating systems or applications rely on GnuTLS to > implement crucial SSL and TLS operations, but it wouldn't be > surprising if the actual number is much higher. Web applications, > e-mail programs, and other code that use the library are vulnerable to > exploits that allow attackers monitoring connections to silently > decode encrypted traffic passing between end users and servers. The > bug is the result of commands in a section of the GnuTLS code that > verify the authenticity of TLS certificates, which are often known > simply as X509 certificates." > > - - - > > --Lauren-- > Lauren Weinstein (lauren(a)vortex.com) http://www.vortex.com/lauren > Co-Founder: People For Internet Responsibility: > http://www.pfir.org/pfir-info > Founder: > - Network Neutrality Squad: http://www.nnsquad.org > - PRIVACY Forum: http://www.vortex.com/privacy-info > Member: ACM Committee on Computers and Public Policy > Lauren's Blog: http://lauren.vortex.com > Google+: http://google.com/+LaurenWeinstein > Twitter: http://twitter.com/laurenweinstein > Tel: +1 (818) 225-2800 / Skype: vortex.com > _______________________________________________ > privacy mailing list > http://lists.vortex.com/mailman/listinfo/privacy -- Jay R. Ashworth Baylink jra(a)baylink.com Designer The Things I Think RFC 2100 Ashworth & Associates http://www.bcp38.info 2000 Land Rover DII St Petersburg FL USA BCP38: Ask For It By Name! +1 727 647 1274

6 9

Any CenturyLink IPv6 engineers/tech people around?
by Brielle Bruns 05 Mar '14

05 Mar '14

Hello all, Don't suppose there's any CenturyLink engineers/tech people on this list that can look into a problem with their IPv6 6rd service? Got multiple customers on CenturyLink (including myself), with IPv6 through their 6rd service since native isn't available yet. IPv6 assignments from one customer can't talk to IPv6 assignments on another CL customer. Seems to be in the 6rd server end doing it, as I can set up a direct tunnel between customers and it passes IPv6 traffic normally. I can provide more details and some tests if needed from my end. Thanks! -- Brielle Bruns The Summit Open Source Development Group http://www.sosdg.org / http://www.ahbl.org

1 1