February 2017 - Test - lists.nanog.org

Fwd: Serious Cloudflare bug exposed a potpourri of secret customer data
by Rich Kulawiec 02 Mar '17

02 Mar '17

(h/t to Richard Forno) After you're done reading the Ars Technica article excerpted and linked below, you may also want to read: Cloudflare Reverse Proxies Are Dumping Uninitialized Memory https://news.ycombinator.com/item?id=13718752 and, as background: CloudFlare, We Have A Problem http://cryto.net/~joepie91/blog/2016/07/14/cloudflare-we-have-a-problem/ and then perhaps consider this comment from the Ycombinator thread: Where would you even start to address this? Everything you've been serving is potentially compromised, API keys, sessions, personal information, user passwords, the works. You've got no idea what has been leaked. Should you reset all your user passwords, cycle all or your keys, notify all your customers that there data may have been stolen? My second thought after relief was the realization that even as a consumer I'm affected by this, my password manager has > 100 entries what percentage of them are using CloudFlare? Should I change all my passwords? ---rsk ----- Forwarded message from Richard Forno <rforno(a)infowarrior.org> ----- > From: Richard Forno <rforno(a)infowarrior.org> > Date: Fri, 24 Feb 2017 07:30:21 -0500 > To: Infowarrior List <infowarrior(a)attrition.org> > Subject: [Infowarrior] - Serious Cloudflare bug exposed a potpourri of > secret customer data > > Serious Cloudflare bug exposed a potpourri of secret customer data > > Service used by 5.5 million websites may have leaked passwords and authentication tokens. > > Dan Goodin - 2/23/2017, 8:35 PM > > Cloudflare, a service that helps optimize the security and performance of > more than 5.5 million websites, warned customers today that a recently > fixed software bug exposed a range of sensitive information that could > have included passwords, and cookies and tokens used to authenticate > users. > > A combination of factors made the bug particularly severe. First, the > leakage may have been active since September 22, nearly five months > before it was discovered, although the greatest period of impact was > from February 13 and February 18. Second, some of the highly sensitive > data that was leaked was cached by Google and other search engines. The > result was that for the entire time the bug was active, hackers had > the ability to access the data in real-time, by making Web requests > to affected websites, and to access some of the leaked data later by > crafting queries on search engines. > > "The bug was serious because the leaked memory could contain private > information and because it had been cached by search engines," Cloudflare > CTO John Graham-Cumming wrote in a blog post published Thursday. "We > are disclosing this problem now as we are satisfied that search engine > caches have now been cleared of sensitive information. We have also > not discovered any evidence of malicious exploits of the bug or other > reports of its existence." > > The leakage was the result of a bug in an HTML parser chain Cloudflare > uses to modify Web pages as they pass through the service's edge > servers. The parser performs a variety of tasks, such as inserting Google > Analytics tags, converting HTTP links to the more secure HTTPS variety, > obfuscating email addresses, and excluding parts of a page from malicious > Web bots. When the parser was used in combination with three Cloudflare > features???e-mail obfuscation, server-side Cusexcludes, and Automatic > HTTPS Rewrites???it caused Cloudflare edge servers to leak pseudo random > memory contents into certain HTTP responses. > < - > > > https://arstechnica.com/security/2017/02/serious-cloudflare-bug-exposed-a-p… >

4 3

SHA1 collisions proven possisble
by Grant Ridder 02 Mar '17

02 Mar '17

Coworker passed this on to me. Looks like SHA1 hash collisions are now achievable in a reasonable time period https://shattered.io/ -Grant

25 51

Fwd: New I-D: SLAAC and DHCPv6 (Fwd: New Version Notification for draft-gont-v6ops-host-configuration-00.txt)
by Fernando Gont 28 Feb '17

28 Feb '17

Folks, FYI: <https://www.ietf.org/internet-drafts/draft-gont-v6ops-host-configuration-00…> The document is being discussed in the v6ops wg of the IETF. Looks like IETF is not going to do anything about it. But check the corresponding thread at: <https://goo.gl/JZO031>, since you'll have at least a few #facepalm moments. Thanks, Fernando -------- Forwarded Message -------- Subject: New I-D: SLAAC and DHCPv6 (Fwd: New Version Notification for draft-gont-v6ops-host-configuration-00.txt) Date: Tue, 28 Feb 2017 05:13:25 -0300 From: Fernando Gont <fgont(a)si6networks.com> To: IPv6 Operations <v6ops(a)ietf.org> Folks, Based on a recent discussion regarding the problem of conveying DNS information in IPv6 networks, we have submitted this short I-D, in the hopes of getting the aforementioned problem solved. Your feedback will be appreciated. Thanks! Fernando (and co-autors) -------- Forwarded Message -------- Subject: New Version Notification for draft-gont-v6ops-host-configuration-00.txt Date: Mon, 27 Feb 2017 23:51:03 -0800 From: internet-drafts(a)ietf.org To: Fernando Gont <fgont(a)si6networks.com>, Gert Doering <gert(a)space.net>, Madelen Garcia Corbo <madelen.garcia16(a)gmail.com>, Madelen Corbo <madelen.garcia16(a)gmail.com>, Guillermo Gont <ggont(a)si6networks.com> A new version of I-D, draft-gont-v6ops-host-configuration-00.txt has been successfully submitted by Fernando Gont and posted to the IETF repository. Name: draft-gont-v6ops-host-configuration Revision: 00 Title: On the Dynamic/Automatic Configuration of IPv6 Hosts Document date: 2017-02-27 Group: Individual Submission Pages: 6 URL: https://www.ietf.org/internet-drafts/draft-gont-v6ops-host-configuration-00… Status: https://datatracker.ietf.org/doc/draft-gont-v6ops-host-configuration/ Htmlized: https://tools.ietf.org/html/draft-gont-v6ops-host-configuration-00 Abstract: IPv6 has two different mechanisms for dynamic/automatic host configuration: SLAAC and DHCPv6. These two mechanisms allow for the configuration of IPv6 addresses and a number of network parameters. While there is overlap in the parameters that can be configured via these two protocols, different implementations support only subsets of such parameters with either mechanism, or have no support for DHCPv6 at all. This document analyzes a problem that arises from this situation, and mandates that all host implementations support RFC 6105 (DNS options for SLAAC) and the stateless DHCPv6 functionality in RFC 3315. Please note that it may take a couple of minutes from the time of submission until the htmlized version and diff are available at tools.ietf.org. The IETF Secretariat

1 0

BGP IP prefix hijack detection times
by Nagarjun Govindraj 28 Feb '17

28 Feb '17

Hi Nanog, what are the detection times for BGP IP prefix hijack detection systems adopted by community members/operators (if any) ? Regards, Nagarjun

4 8

RE: Akamai Contact
by Shon Elliott 24 Feb '17

24 Feb '17

Thanks, Tim! ☺ E-mail sent. Kind Regards, Shon Elliott, KK6TOO Level 3 IP/Routing/Security Network Engineer [unwired-new-logo] (559) 476-9463 – Cell (559) 261-4444 x 129 – Office (559) 943-1025 – Direct selliott(a)getunwired.com<mailto:selliott@getunwired.com> www.getunwired.com<http://www.getunwired.com/> From: Tim April [mailto:timapril@gmail.com] Sent: Friday, February 24, 2017 12:19 PM To: Shon Elliott <selliott(a)getunwired.com> Cc: North American Network Operators' Group <nanog(a)nanog.org> Subject: Re: Akamai Contact Replied off-list --tim On Fri, Feb 24, 2017 at 3:13 PM, Shon Elliott <selliott(a)getunwired.com<mailto:selliott@getunwired.com>> wrote: Hi NANOG, Is there anyone that has any contact information for someone in Akamai's Abuse department or if anyone from Akamai is monitoring NANOG that could get in touch with me off-list, please? Thank you. Kind Regards, Shon Elliott, KK6TOO selliott(a)getunwired.com<mailto:selliott@getunwired.com><mailto:selliott@getunwired.com<mailto:selliott@getunwired.com>>

1 0

Akamai Contact
by Shon Elliott 24 Feb '17

24 Feb '17

Hi NANOG, Is there anyone that has any contact information for someone in Akamai's Abuse department or if anyone from Akamai is monitoring NANOG that could get in touch with me off-list, please? Thank you. Kind Regards, Shon Elliott, KK6TOO selliott(a)getunwired.com<mailto:selliott@getunwired.com>

1 0

Cellular enabled console server
by Ben Bartsch 24 Feb '17

24 Feb '17

NANOG - Are any of you running a console server to access your network equipment via a serial connection at a remote site? If so, what are you using and how much do you like it? I have a project where I need to stand up over 100 remote sites and would like a backdoor to the console just to be able to see what's going on with the equipment to hopefully avoid a truck roll for something simple like a hung device. I need 4 console ports and 1 RJ45 ethernet jack. My quick Google search landed me at BlackBox LES1204A-3G-R2, but I've never actually used such a device. This would be for use in the USA. Thank you in advance. -ben

15 14

Weekly Routing Table Report
by cscora＠apnic.net 24 Feb '17

24 Feb '17

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, MENOG, SAFNOG, SdNOG, BJNOG, CaribNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 25 Feb, 2017 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 637688 Prefixes after maximum aggregation (per Origin AS): 248290 Deaggregation factor: 2.57 Unique aggregates announced (without unneeded subnets): 307053 Total ASes present in the Internet Routing Table: 56336 Prefixes per ASN: 11.32 Origin-only ASes present in the Internet Routing Table: 48757 Origin ASes announcing only one prefix: 21715 Transit ASes present in the Internet Routing Table: 7579 Transit-only ASes present in the Internet Routing Table: 218 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 41 Max AS path prepend of ASN ( 55644) 36 Prefixes from unregistered ASNs in the Routing Table: 72 Numnber of instances of unregistered ASNs: 73 Number of 32-bit ASNs allocated by the RIRs: 17465 Number of 32-bit ASNs visible in the Routing Table: 13551 Prefixes from 32-bit ASNs in the Routing Table: 54921 Number of bogon 32-bit ASNs visible in the Routing Table: 48 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 401 Number of addresses announced to Internet: 2834795780 Equivalent to 168 /8s, 247 /16s and 141 /24s Percentage of available address space announced: 76.6 Percentage of allocated address space announced: 76.6 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 98.5 Total number of prefixes smaller than registry allocations: 213138 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 174301 Total APNIC prefixes after maximum aggregation: 49850 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 173626 Unique aggregates announced from the APNIC address blocks: 71559 APNIC Region origin ASes present in the Internet Routing Table: 7882 APNIC Prefixes per ASN: 22.03 APNIC Region origin ASes announcing only one prefix: 2212 APNIC Region transit ASes present in the Internet Routing Table: 1126 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 41 Number of APNIC region 32-bit ASNs visible in the Routing Table: 2717 Number of APNIC addresses announced to Internet: 760730500 Equivalent to 45 /8s, 87 /16s and 211 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-137529 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 193820 Total ARIN prefixes after maximum aggregation: 93061 ARIN Deaggregation factor: 2.08 Prefixes being announced from the ARIN address blocks: 196248 Unique aggregates announced from the ARIN address blocks: 90025 ARIN Region origin ASes present in the Internet Routing Table: 17810 ARIN Prefixes per ASN: 11.02 ARIN Region origin ASes announcing only one prefix: 6646 ARIN Region transit ASes present in the Internet Routing Table: 1773 Average ARIN Region AS path length visible: 3.8 Max ARIN Region AS path length visible: 23 Number of ARIN region 32-bit ASNs visible in the Routing Table: 1794 Number of ARIN addresses announced to Internet: 1105362080 Equivalent to 65 /8s, 226 /16s and 124 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-397212 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 170431 Total RIPE prefixes after maximum aggregation: 84028 RIPE Deaggregation factor: 2.03 Prefixes being announced from the RIPE address blocks: 165689 Unique aggregates announced from the RIPE address blocks: 100187 RIPE Region origin ASes present in the Internet Routing Table: 23741 RIPE Prefixes per ASN: 6.98 RIPE Region origin ASes announcing only one prefix: 10992 RIPE Region transit ASes present in the Internet Routing Table: 3368 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 5585 Number of RIPE addresses announced to Internet: 709973120 Equivalent to 42 /8s, 81 /16s and 84 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-207259 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 82464 Total LACNIC prefixes after maximum aggregation: 17605 LACNIC Deaggregation factor: 4.68 Prefixes being announced from the LACNIC address blocks: 83647 Unique aggregates announced from the LACNIC address blocks: 38172 LACNIC Region origin ASes present in the Internet Routing Table: 5636 LACNIC Prefixes per ASN: 14.84 LACNIC Region origin ASes announcing only one prefix: 1539 LACNIC Region transit ASes present in the Internet Routing Table: 1033 Average LACNIC Region AS path length visible: 5.3 Max LACNIC Region AS path length visible: 36 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 3163 Number of LACNIC addresses announced to Internet: 171272288 Equivalent to 10 /8s, 53 /16s and 104 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-266652 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 16566 Total AfriNIC prefixes after maximum aggregation: 3688 AfriNIC Deaggregation factor: 4.49 Prefixes being announced from the AfriNIC address blocks: 18077 Unique aggregates announced from the AfriNIC address blocks: 6760 AfriNIC Region origin ASes present in the Internet Routing Table: 1023 AfriNIC Prefixes per ASN: 17.67 AfriNIC Region origin ASes announcing only one prefix: 326 AfriNIC Region transit ASes present in the Internet Routing Table: 197 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 22 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 292 Number of AfriNIC addresses announced to Internet: 87002112 Equivalent to 5 /8s, 47 /16s and 140 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5554 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3733 391 256 TPG-INTERNET-AP TPG Telecom Limited, AU 17974 2988 905 72 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2746 11133 744 KIXS-AS-KR Korea Telecom, KR 9829 2717 1501 541 BSNL-NIB National Internet Backbone, IN 9808 2288 8698 33 CMNET-GD Guangdong Mobile Communication 4755 2065 421 219 TATACOMM-AS TATA Communications formerl 45899 1883 1303 102 VNPT-AS-VN VNPT Corp, VN 4808 1650 1786 448 CHINA169-BJ China Unicom Beijing Provin 9583 1558 120 534 SIFY-AS-IN Sify Limited, IN Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 22773 3639 2968 150 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 6327 3308 1333 83 SHAW - Shaw Communications Inc., CA 18566 2189 405 109 MEGAPATH5-US - MegaPath Corporation, US 6389 2063 3671 39 BELLSOUTH-NET-BLK - BellSouth.net Inc., 20115 1972 2038 403 CHARTER-NET-HKY-NC - Charter Communicat 209 1726 5067 640 CENTURYLINK-US-LEGACY-QWEST - Qwest Com 16509 1705 3321 555 AMAZON-02 - Amazon.com, Inc., US 30036 1692 318 454 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 6983 1681 852 227 ITCDELTA - Earthlink, Inc., US 701 1582 10600 655 UUNET - MCI Communications Services, In Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 39891 3334 171 18 ALJAWWALSTC-AS , SA 20940 3027 1131 2142 AKAMAI-ASN1 , US 9121 2642 1691 18 TTNET , TR 34984 1990 327 381 TELLCOM-AS , TR 13188 1653 99 59 TRIOLAN , UA 8551 1604 377 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12479 1497 1033 50 UNI2-AS , ES 6849 1303 355 22 UKRTELNET , UA 9198 1274 352 24 KAZTELECOM-AS , KZ 12389 1268 1214 490 ROSTELECOM-AS , RU Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 10620 3527 543 208 Telmex Colombia S.A., CO 26615 3052 2330 44 Tim Celular S.A., BR 8151 2498 3378 544 Uninet S.A. de C.V., MX 11830 1798 368 66 Instituto Costarricense de Electricidad 6503 1569 437 53 Axtel, S.A.B. de C.V., MX 7303 1548 994 253 Telecom Argentina S.A., AR 6147 1265 377 27 Telefonica del Peru S.A.A., PE 28573 1074 2285 182 CLARO S.A., BR 3816 1004 480 183 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 11664 979 280 36 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1299 399 42 LINKdotNET-AS, EG 36903 717 360 125 MT-MPLS, MA 37611 695 67 6 Afrihost, ZA 36992 606 1373 25 ETISALAT-MISR, EG 24835 491 722 14 RAYA-AS, EG 8452 436 1474 16 TE-AS TE-AS, EG 37492 392 316 74 ORANGE-TN, TN 29571 368 36 10 CITelecom-AS, CI 15399 328 35 6 WANANCHI-KE, KE 2018 273 327 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 4538 5554 4190 74 ERX-CERNET-BKB China Education and Rese 7545 3733 391 256 TPG-INTERNET-AP TPG Telecom Limited, AU 22773 3639 2968 150 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3527 543 208 Telmex Colombia S.A., CO 39891 3334 171 18 ALJAWWALSTC-AS , SA 6327 3308 1333 83 SHAW - Shaw Communications Inc., CA 26615 3052 2330 44 Tim Celular S.A., BR 20940 3027 1131 2142 AKAMAI-ASN1 , US 17974 2988 905 72 TELKOMNET-AS2-AP PT Telekomunikasi Indo 4766 2746 11133 744 KIXS-AS-KR Korea Telecom, KR Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 22773 3639 3489 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 7545 3733 3477 TPG-INTERNET-AP TPG Telecom Limited, AU 10620 3527 3319 Telmex Colombia S.A., CO 39891 3334 3316 ALJAWWALSTC-AS , SA 6327 3308 3225 SHAW - Shaw Communications Inc., CA 26615 3052 3008 Tim Celular S.A., BR 17974 2988 2916 TELKOMNET-AS2-AP PT Telekomunikasi Indonesia, I 9121 2642 2624 TTNET , TR 9808 2288 2255 CMNET-GD Guangdong Mobile Communication Co.Ltd. 9829 2717 2176 BSNL-NIB National Internet Backbone, IN Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65001 PRIVATE 5.143.176.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65602 UNALLOCATED 8.225.192.0/24 30372 SUNESYS2 - Sunesys, LLC, US 65001 PRIVATE 31.172.192.0/20 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.192.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.200.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.208.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65001 PRIVATE 31.172.216.0/21 15468 KLGELECS-AS 38, Teatralnaya st 65000 PRIVATE 31.219.177.0/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65000 PRIVATE 31.219.177.128/25 8966 ETISALAT-AS P.O. Box 1150, Dub 65555 UNALLOCATED 37.142.172.0/24 21450 MIRS-AS , IL Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 41.73.16.0/24 37004 Suburban-Broadband-AS, NG 41.73.17.0/24 37004 Suburban-Broadband-AS, NG 41.73.18.0/24 37004 Suburban-Broadband-AS, NG 41.73.19.0/24 37004 Suburban-Broadband-AS, NG 41.73.20.0/24 37004 Suburban-Broadband-AS, NG 41.73.21.0/24 37004 Suburban-Broadband-AS, NG 41.73.22.0/24 37004 Suburban-Broadband-AS, NG 41.73.23.0/24 37004 Suburban-Broadband-AS, NG 41.76.232.0/21 203496 AB-TELECOM , RU Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:36 /11:103 /12:277 /13:537 /14:1046 /15:1797 /16:13188 /17:7772 /18:13181 /19:24802 /20:38268 /21:41054 /22:74525 /23:63021 /24:356688 /25:558 /26:415 /27:294 /28:34 /29:18 /30:18 /31:1 /32:26 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6327 3104 3308 SHAW - Shaw Communications Inc., CA 39891 2896 3334 ALJAWWALSTC-AS , SA 22773 2833 3639 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 26615 2568 3052 Tim Celular S.A., BR 18566 2082 2189 MEGAPATH5-US - MegaPath Corporation, US 9121 1854 2642 TTNET , TR 30036 1503 1692 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi 10620 1451 3527 Telmex Colombia S.A., CO 13188 1377 1653 TRIOLAN , UA 6389 1372 2063 BELLSOUTH-NET-BLK - BellSouth.net Inc., US Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1584 2:837 4:25 5:2460 6:34 8:1051 12:1811 13:83 14:1778 15:22 16:2 17:107 18:128 19:1 20:54 23:2017 24:1857 25:2 27:2375 31:1870 32:89 33:4 34:1 35:19 36:359 37:2541 38:1307 39:43 40:99 41:2862 42:451 43:1926 44:63 45:2371 46:2623 47:111 49:1215 50:950 51:18 52:746 54:357 55:6 56:4 57:41 58:1616 59:990 60:389 61:1938 62:1504 63:1924 64:4568 65:2177 66:4446 67:2228 68:1189 69:3321 70:1302 71:571 72:2137 74:2615 75:400 76:411 77:1444 78:1686 79:1281 80:1359 81:1404 82:980 83:724 84:860 85:1767 86:482 87:1133 88:802 89:2050 90:209 91:6132 92:995 93:2378 94:2367 95:2829 96:561 97:357 98:938 99:83 100:153 101:1239 103:13756 104:2760 105:156 106:481 107:1554 108:794 109:2601 110:1288 111:1685 112:1153 113:1322 114:1035 115:1734 116:1766 117:1656 118:2039 119:1571 120:936 121:1093 122:2327 123:2040 124:1537 125:1811 128:706 129:620 130:412 131:1361 132:517 133:190 134:530 135:214 136:506 137:412 138:1853 139:500 140:367 141:526 142:731 143:881 144:761 145:167 146:1028 147:657 148:1368 149:572 150:691 151:946 152:725 153:313 154:759 155:972 156:552 157:600 158:446 159:1423 160:567 161:736 162:2474 163:530 164:787 165:1156 166:375 167:1256 168:2528 169:742 170:2842 171:278 172:947 173:1833 174:800 175:727 176:1778 177:4299 178:2469 179:1620 180:2173 181:2012 182:2215 183:1042 184:832 185:8866 186:3180 187:2650 188:2379 189:1824 190:8111 191:1915 192:9292 193:5761 194:4629 195:3836 196:1943 197:1298 198:5571 199:5836 200:7415 201:4112 202:10188 203:9877 204:4453 205:2772 206:2989 207:3137 208:3984 209:3940 210:3919 211:2115 212:2847 213:2482 214:863 215:64 216:5859 217:2006 218:834 219:615 220:1695 221:896 222:723 223:1150 End of report

1 0

[NANOG-announce] NANOG 70 CFP Open
by L Sean Kennedy 24 Feb '17

24 Feb '17

NANOG Community, The NANOG Program Committee is excited to announce that we are now accepting proposals for all sessions at NANOG 70 in Bellevue, WA, June 5-7 2017. Below is a summary of key details from the Call For Presentations <https://www.nanog.org/meetings/nanog70/callforpresentations> on the NANOG website. We look forward to seeing you in Bellevue in June! Sincerely, L Sean Kennedy NANOG PC NANOG 70 Call for Presentations The North American Network Operators' Group (NANOG) will hold its 70th conference in Bellevue, Washington. The conference takes place on June 5-7, 2017. The NANOG Program Committee seeks proposals for presentations, panels, tutorials, and track sessions for the NANOG 70 program. We welcome suggestions of speakers or topic ideas. Presentations may cover current technologies already deployed or soon-to-be deployed in the Internet. Vendors are welcome to submit talks which cover relevant technologies and capabilities, but presentations must not be promotional or discuss proprietary solutions. NANOG 70 submissions can be entered on the NANOG Program Committee Tool. <https://pc.nanog.org/> How To Submit The primary speaker, moderator, or author should submit a presentation proposal and an abstract on the Program Committee Tool <https://pc.nanog.org/>. - Select “Propose Talk” from the *Talks* menu - Select the NANOG 70 meeting in the *Meeting* menu - Select the appropriate *Session* the talk will be presented in (General Session 30-45 minutes, Tutorial 90-120 minutes, Track 90-120 minutes) - Provide the information requested below Upload draft slides as soon as possible so the Program Committee can understand the intended structure and level of detail covered by the talk. Draft slides are not required for a proposal to be initiated, but they are usually expected before the Program Committee can definitively accept a submission. The following information should be included in the proposal: - Author's name(s) - Professional or educational affiliation - A preferred contact email address - A preferred phone number for contact - Submission category (General Session, Panel, Tutorial, or Track) - Presentation title - Abstract - Slides in PowerPoint (preferred) or PDF format - Comments as desired including URL to materials or previous talk Timeline for submission and proposal review - Submitter enters abstract (and draft slides if possible) in Program Committee Tool <https://pc.nanog.org/>. - Any time following Call for Presentations and prior to CFP deadline for slide submission - PC performs initial review and assigns a “Shepherd” to help develop the submission. - Within 2 weeks - Submitter develops draft slides of talk - Please submit initial draft slides early - Panel and Track submissions should provide topic list and intended/confirmed participants - PC reviews slides and continues to work with Submitter as needed to develop topic - Draft presentation slides should be submitted prior to published deadline for slides - PC accepts or declines submission - Agenda assembled and posted - Submitter notified If you think you have an interesting topic but want feedback or suggestions for developing an idea into a presentation, please email the Program Committee, and a representative of the Program Committee will respond. Otherwise, submit your talk, keynote, track, or panel proposal to the Program Committee Tool <https://pc.nanog.org/> without delay! We look forward to reviewing your submission. Key Dates For NANOG 70 Event/Deadline Date Registration for NANOG 70 Opens Friday, 02/24/2017 Agenda Outline for NANOG 70 Posted Friday, 02/24/2017 CFP Deadline: Presentation Slides Due Monday, 03/27/2017 CFP Topic List and NANOG Highlights Page Tuesday, 04/04/2017 Speaker FINAL presentation Slides to PC Tool <https://pc.nanog.org/> Monday, 5/29/2017 Lightning Talk Submissions Open (Abstracts Only) Sunday, 6/4/2017 On-site Registration Sunday, 6/4/2017 Some general advice is available with our “Guidelines for Presenting at a NANOG Meeting <https://www.nanog.org/meetings/presentation/guidelines>”, "Present at a NANOG" <https://www.nanog.org/meetings/presentation> and “Tips on Giving a Talk <https://www.nanog.org/meetings/presentation/tips>”. The NANOG Program Committee seeks proposals for presentations, panels, tutorial sessions, and tracks in all areas of network operations, such as: - Network Connectivity, Interconnection, and Architecture - Network Management and Configuration including Automation - Network Performance, Measurement, and Telemetry - Data Center and Physical Plant including Cooling and Power Efficiency - Network Research - Internet Governance - Routing and Switching Protocols - Network Data and Control Plane Security - Optical and Transmission Technologies - Wireless Networks - DNS, Transport, and Applications - Network Operations and Engineering Professional Experiences Submissions are welcomed by and for network operators of all sizes. Presentations about difficult problems (and interesting solutions) that you encounter in the course of your job are encouraged. The NANOG registration fee is waived for: - General Session presentations: the conference registration fee will be waived for a maximum of one speaker. - General Session panels: conference registration fees will be waived for one panel moderator and all panelists. - Tracks: conference registration fees will be waived for one moderator. - Tutorials: conference registration fees will be waived for one instructor. _______________________________________________ NANOG-announce mailing list NANOG-announce(a)mailman.nanog.org http://mailman.nanog.org/mailman/listinfo/nanog-announce

1 0

Software for network modelling / documentation / GIS
by Israel G. Lugo 24 Feb '17

24 Feb '17

Hello, Does anyone have any recommendations for software to do network modelling / documentation / GIS, for a campus network? Mid-scale, a few campuses with the largest being around 25 buildings. Free/open source would be excellent, but commercial is also an option. This is a live network, with very little documentation. At the very least, I would like to document things. Ideally, though, if I were designing the software, I would like to have an intelligent model of the network from L1 to L3, serving not only for documentation but also to validate existing configuration and creating new work orders. Something like this: * conduit o has vertices (locations on the campus plant) o has a cross-section area o has links * link o has 1 port on each end o has media types (OS2, OM3, ...) o may have a cross-section area (when inside a conduit) * node o can be a switch, a router, a patch panel, an access point, a phone o has ports * circuit o can be a VLAN, or a VPN, etc o spans multiple links / nodes / circuits o has 1 port on each end (logical port, circuit endpoint) * port o has physical characteristics (E2000, SC, LC, ST, 8P8C, logical endpoint ...) o may have other properties (link speed, PoE) User Bob requests activation of the network socket D-78 in his office on building A, floor 5, room 29. An operator will use the software to connect port D-78 on the corresponding patch panel to an available port on a switch, and specify the desired VLAN (circuit). The software knows where the VLAN exists and will provide instructions on how to propagate it, taking into account redundant links. It will also provide instructions for the physical part: take one 2m patch, connect panel port D-78 to switch 2 port 17. Remember to bring the keyring because that cabinet opens with a non-standard key. If the cable guy goes on site and sees that switch 2 port 17 is already used, he will flag an inconsistency and request another port. Periodically, the software will go crawl the active equipments via SNMP or somesuch and detect existing state (port VLAN assignments, port state, link speeds, switch capacity, LLDP neighbors). If it finds any inconsistency with the configured model, it will alert an operator. Of course, all that is an ideal case. I would be happy if I can just use this for static documentation: on building A, network socket D-78 connects to switch 2 port 17, and is on VLAN 30. Does anyone know of something similar to this exist in commodity software, outside of custom solutions developed for a specific network? Anything between "purely for static documentation", and "this autodetects your cables, configures your switches and sends a robot to connect everything". Thank you and best regards, Israel G. Lugo

7 11