- Test - lists.nanog.org

Re: Vancouver IXP - VanTX - BCNet
by Randy Bush 23 Aug '13

23 Aug '13

> As you may know CIRA has been working with groups across Canada to > establish new IXPs. wow! i thought there were a lot of ixps, torix, vantx, ... are these open, neutral, ixps, a la six etc? or big players trying to save the internet from itself? would some of the *local* providers in the areas who actually use the cira ixen care to report on the experience? > When we started this work, we didn't know that Vancouver already had > an IXP in depth research, eh? > We and BCNet are planning a town hall style meeting in late September, > tentatively September 26, to talk about the IXP needs of the Vancouver > area. why are all my alarms going off? randy

20 35

Weekly Routing Table Report
by Routing Analysis Role Account 23 Aug '13

23 Aug '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 24 Aug, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 463793 Prefixes after maximum aggregation: 187304 Deaggregation factor: 2.48 Unique aggregates announced to Internet: 230444 Total ASes present in the Internet Routing Table: 44792 Prefixes per ASN: 10.35 Origin-only ASes present in the Internet Routing Table: 35028 Origin ASes announcing only one prefix: 16228 Transit ASes present in the Internet Routing Table: 5898 Transit-only ASes present in the Internet Routing Table: 174 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 29 Max AS path prepend of ASN ( 19037) 22 Prefixes from unregistered ASNs in the Routing Table: 4740 Unregistered ASNs in the Routing Table: 1572 Number of 32-bit ASNs allocated by the RIRs: 4971 Number of 32-bit ASNs visible in the Routing Table: 3866 Prefixes from 32-bit ASNs in the Routing Table: 11761 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 320 Number of addresses announced to Internet: 2636723020 Equivalent to 157 /8s, 41 /16s and 51 /24s Percentage of available address space announced: 71.2 Percentage of allocated address space announced: 71.2 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.9 Total number of prefixes smaller than registry allocations: 162609 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 109696 Total APNIC prefixes after maximum aggregation: 33394 APNIC Deaggregation factor: 3.28 Prefixes being announced from the APNIC address blocks: 111547 Unique aggregates announced from the APNIC address blocks: 46487 APNIC Region origin ASes present in the Internet Routing Table: 4868 APNIC Prefixes per ASN: 22.91 APNIC Region origin ASes announcing only one prefix: 1230 APNIC Region transit ASes present in the Internet Routing Table: 824 Average APNIC Region AS path length visible: 4.7 Max APNIC Region AS path length visible: 23 Number of APNIC region 32-bit ASNs visible in the Routing Table: 647 Number of APNIC addresses announced to Internet: 726650112 Equivalent to 43 /8s, 79 /16s and 205 /24s Percentage of available APNIC address space announced: 84.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 161354 Total ARIN prefixes after maximum aggregation: 80971 ARIN Deaggregation factor: 1.99 Prefixes being announced from the ARIN address blocks: 161884 Unique aggregates announced from the ARIN address blocks: 75042 ARIN Region origin ASes present in the Internet Routing Table: 15831 ARIN Prefixes per ASN: 10.23 ARIN Region origin ASes announcing only one prefix: 6007 ARIN Region transit ASes present in the Internet Routing Table: 1670 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 19 Number of ARIN addresses announced to Internet: 1070483456 Equivalent to 63 /8s, 206 /16s and 72 /24s Percentage of available ARIN address space announced: 56.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 118625 Total RIPE prefixes after maximum aggregation: 60768 RIPE Deaggregation factor: 1.95 Prefixes being announced from the RIPE address blocks: 122478 Unique aggregates announced from the RIPE address blocks: 79045 RIPE Region origin ASes present in the Internet Routing Table: 17370 RIPE Prefixes per ASN: 7.05 RIPE Region origin ASes announcing only one prefix: 8230 RIPE Region transit ASes present in the Internet Routing Table: 2811 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 28 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2386 Number of RIPE addresses announced to Internet: 657049124 Equivalent to 39 /8s, 41 /16s and 198 /24s Percentage of available RIPE address space announced: 95.5 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 50637 Total LACNIC prefixes after maximum aggregation: 9581 LACNIC Deaggregation factor: 5.29 Prefixes being announced from the LACNIC address blocks: 55338 Unique aggregates announced from the LACNIC address blocks: 25644 LACNIC Region origin ASes present in the Internet Routing Table: 2003 LACNIC Prefixes per ASN: 27.63 LACNIC Region origin ASes announcing only one prefix: 568 LACNIC Region transit ASes present in the Internet Routing Table: 367 Average LACNIC Region AS path length visible: 4.7 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 808 Number of LACNIC addresses announced to Internet: 135501864 Equivalent to 8 /8s, 19 /16s and 152 /24s Percentage of available LACNIC address space announced: 80.8 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 262144-263679 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 11632 Total AfriNIC prefixes after maximum aggregation: 2548 AfriNIC Deaggregation factor: 4.57 Prefixes being announced from the AfriNIC address blocks: 12226 Unique aggregates announced from the AfriNIC address blocks: 3928 AfriNIC Region origin ASes present in the Internet Routing Table: 651 AfriNIC Prefixes per ASN: 18.78 AfriNIC Region origin ASes announcing only one prefix: 193 AfriNIC Region transit ASes present in the Internet Routing Table: 135 Average AfriNIC Region AS path length visible: 4.8 Max AfriNIC Region AS path length visible: 24 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 6 Number of AfriNIC addresses announced to Internet: 46605824 Equivalent to 2 /8s, 199 /16s and 38 /24s Percentage of available AfriNIC address space announced: 46.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2922 11561 921 Korea Telecom (KIX) 17974 2656 871 92 PT TELEKOMUNIKASI INDONESIA 7545 2062 321 113 TPG Internet Pty Ltd 4755 1761 391 189 TATA Communications formerly 9829 1530 1221 45 BSNL National Internet Backbo 9583 1226 92 505 Sify Limited 9498 1174 309 70 BHARTI Airtel Ltd. 4808 1152 2126 335 CNCGROUP IP network: China169 7552 1139 1080 13 Vietel Corporation 24560 1089 394 160 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 2976 3689 62 bellsouth.net, inc. 18566 2065 382 184 Covad Communications 22773 2039 2933 123 Cox Communications, Inc. 1785 2006 679 125 PaeTec Communications, Inc. 20115 1674 1645 627 Charter Communications 4323 1621 1105 408 Time Warner Telecom 701 1522 11103 798 UUNET Technologies, Inc. 30036 1346 301 643 Mediacom Communications Corp 7018 1312 11293 829 AT&T WorldNet Services 11492 1223 218 361 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1585 544 16 Corbina telecom 34984 1306 244 223 BILISIM TELEKOM 31148 979 43 18 FreeNet ISP 20940 971 349 749 Akamai Technologies European 2118 962 97 13 EUnet/RELCOM Autonomous Syste 6830 898 2371 429 UPC Distribution Services 13188 845 99 71 Educational Network 8551 747 370 41 Bezeq International 12479 687 797 53 Uni2 Autonomous System 58113 541 55 339 LIR DATACENTER TELECOM SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3163 1682 108 NET Servicos de Comunicao S.A 10620 2673 425 219 TVCABLE BOGOTA 7303 1732 1157 222 Telecom Argentina Stet-France 18881 1454 844 20 Global Village Telecom 8151 1280 2767 390 UniNet S.A. de C.V. 11830 945 364 15 Instituto Costarricense de El 27947 837 94 91 Telconet S.A 6503 787 434 63 AVANTEL, S.A. 3816 721 302 83 Empresa Nacional de Telecomun 7738 698 1370 35 Telecomunicacoes da Bahia S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1861 112 5 MOBITEL 24863 871 274 30 LINKdotNET AS number 6713 543 633 26 Itissalat Al-MAGHRIB 8452 437 956 9 TEDATA 24835 291 80 8 RAYA Telecom - Egypt 3741 258 921 217 The Internet Solution 15706 221 32 6 Sudatel Internet Exchange Aut 29571 220 17 12 Ci Telecom Autonomous system 36992 220 501 29 Etisalat MISR 12258 193 28 71 Vodacom Internet Company Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 3163 1682 108 NET Servicos de Comunicao S.A 6389 2976 3689 62 bellsouth.net, inc. 4766 2922 11561 921 Korea Telecom (KIX) 10620 2673 425 219 TVCABLE BOGOTA 17974 2656 871 92 PT TELEKOMUNIKASI INDONESIA 18566 2065 382 184 Covad Communications 7545 2062 321 113 TPG Internet Pty Ltd 22773 2039 2933 123 Cox Communications, Inc. 1785 2006 679 125 PaeTec Communications, Inc. 36998 1861 112 5 MOBITEL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2976 2914 bellsouth.net, inc. 17974 2656 2564 PT TELEKOMUNIKASI INDONESIA 10620 2673 2454 TVCABLE BOGOTA 4766 2922 2001 Korea Telecom (KIX) 7545 2062 1949 TPG Internet Pty Ltd 22773 2039 1916 Cox Communications, Inc. 18566 2065 1881 Covad Communications 1785 2006 1881 PaeTec Communications, Inc. 36998 1861 1856 MOBITEL 4755 1761 1572 TATA Communications formerly Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks 30621 UNALLOCATED 12.151.74.0/23 7018 AT&T WorldNet Servic Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 100.100.0.0/24 4847 China Networks Inter-Exchange Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 23.90.128.0/18 27418 OUTOFWALL INC. 23.91.0.0/19 40676 Psychz Networks 23.91.32.0/19 36315 Servpac Inc. 23.92.16.0/21 8001 Net Access Corporation 23.92.24.0/22 6939 Hurricane Electric 23.92.48.0/20 62471 SupremeBytes, LLC 23.92.64.0/24 54540 Incero LLC 23.92.65.0/24 54540 Incero LLC 23.92.66.0/24 54540 Incero LLC 23.92.67.0/24 54540 Incero LLC Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:11 /10:30 /11:93 /12:250 /13:480 /14:906 /15:1616 /16:12745 /17:6658 /18:11054 /19:22680 /20:32290 /21:34899 /22:48966 /23:42842 /24:245731 /25:877 /26:1012 /27:481 /28:44 /29:75 /30:18 /31:0 /32:19 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2016 2065 Covad Communications 36998 1826 1861 MOBITEL 6389 1711 2976 bellsouth.net, inc. 22773 1328 2039 Cox Communications, Inc. 8402 1321 1585 Corbina telecom 30036 1209 1346 Mediacom Communications Corp 11492 1184 1223 Cable One 1785 1079 2006 PaeTec Communications, Inc. 6983 1023 1151 ITC^Deltacom 10620 991 2673 TVCABLE BOGOTA Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:800 2:718 3:3 4:19 5:913 6:17 8:600 12:1894 13:2 14:872 15:11 16:3 17:11 18:19 20:18 23:360 24:1739 27:1551 31:1410 32:45 33:2 34:5 36:70 37:1826 38:901 39:2 40:180 41:3252 42:243 44:9 46:1981 47:3 49:661 50:842 52:12 54:37 55:6 57:26 58:1169 59:616 60:332 61:1400 62:1176 63:1999 64:4550 65:2247 66:4199 67:2078 68:1092 69:3305 70:864 71:495 72:2009 74:2540 75:325 76:306 77:1159 78:1115 79:623 80:1308 81:1021 82:647 83:584 84:571 85:1219 86:482 87:1051 88:539 89:1821 90:158 91:5581 92:641 93:1661 94:2022 95:1550 96:587 97:347 98:1038 99:44 100:29 101:597 103:3181 105:519 106:138 107:210 108:498 109:1883 110:946 111:1104 112:568 113:792 114:729 115:1029 116:964 117:806 118:1120 119:1289 120:367 121:740 122:1864 123:1247 124:1373 125:1348 128:607 129:223 130:310 131:671 132:346 133:160 134:279 135:67 136:267 137:268 138:347 139:189 140:200 141:322 142:548 143:389 144:499 145:95 146:531 147:481 148:673 149:350 150:151 151:560 152:416 153:194 154:30 155:483 156:272 157:406 158:282 159:748 160:352 161:457 162:595 163:221 164:628 165:568 166:255 167:603 168:1030 169:126 170:1074 171:191 172:25 173:1583 174:515 175:496 176:1190 177:2182 178:1903 179:102 180:1525 181:648 182:1226 183:441 184:664 185:769 186:2459 187:1407 188:1893 189:1283 190:6891 192:6946 193:5541 194:4605 195:3603 196:1333 197:1009 198:4612 199:5426 200:5981 201:2571 202:8890 203:8821 204:4530 205:2604 206:2834 207:2914 208:3997 209:3640 210:2913 211:1557 212:2262 213:2034 214:924 215:100 216:5309 217:1653 218:619 219:304 220:1277 221:553 222:324 223:504 End of report

1 0

Level3 IP contact
by Daniel Corbe 23 Aug '13

23 Aug '13

If anyone from Level3 here that might be able to help me solve a transit issue out of east Africa, please contact me off-list.

1 0

Accessing RIS Routing Information Via RIPEstat
by Vesna Manojlovic 23 Aug '13

23 Aug '13

Dear colleagues, (apologies for cross-posting) RIPE NCC's Routing Information Service (RIS) has been collecting global BGP routing information for 12 years now. During this period, many different interfaces to analyse and visualise accumulated data have been developed. In line with our long-term goals to provide more consolidated services, we will be integrating the RIS interface's tools and services into RIPEstat. More information about this is detailed in a new RIPE Labs article: https://labs.ripe.net/Members/fatemah_mafi/improved-routing-information-ava… We invite NANOG community to comment on these upcoming changes via the MAT Working Group Mailing List: https://www.ripe.net/ripe/groups/wg/mat Please submit any urgent requests for additional features via email to stat(a)ripe.net by 20 September 2013 so that we can implement these along with the planned migration of tools and features. Any feedback received after this date will be considered feature requests, and added to the RIPEstat Roadmap: http://roadmap.ripe.net/ripe-stat/ We look forward to your feedback. Regards, Vesna -- Vesna Manojlovic BECHA(a)ripe.net Senior Community Builder @Ms_Measurements for Measurements Tools RIPE NCC http://ripe.net

1 0

[Q] What is your favorite Network Tools Live CD / USB, which you could have running in remote offices?
by Stefan 23 Aug '13

23 Aug '13

I've been toying with Live distros (CD, then USB) for many years, in support of security toolsets, to which I kept adding my own stuff, or customizing existing components. I am now trying to "build" a network toolset LiveCD/USB, but this time with a completely different purpose: I would like to put it in the hands of all remote offices we have on our network, and use it to have local systems boot out of it, and help us then run troubleshooting tools, from the central office, by SSH/X-ing into the remote live system (e.g. iperf, hping3, httping, tcping, mtr, tcpdump, voip tools, some "thin" clients/apps, synthetic transactions scripted to run at diff time intervals, and report back to us the "health" seen form the remotes, etc.). Has anybody used a "base" network tools Live CD/USB that they would recommend, having used as "basis" for such a "network probe" functionality? NOTE: I assume *nix based (Linux or BSD flavors), not Windows ... TIA, ***Stefan

8 10

SNMP DDoS: the vulnerability you might not know you have
by bottiger 22 Aug '13

22 Aug '13

Before you skim past this email because you already read the Prolexic report on it or some other article on the internet, there are 2 disturbing properties that I haven't found anywhere else online. 1) After sending abuse emails to many networks, we received many angry replies that they monitored their traffic for days without seeing anything (even as we were being attacked) and that their IPs were spoofed and would block us for spamming them. What we discovered was that their firewalls/routers/gateways coming from vendors like Cisco and SonicWall apparently didn't record SNMP traffic going in or out of themselves. We confirmed this multiple times by running a query to an IP that was claimed to be clean and watching the response come 10-60 seconds later because the device was being so heavily abused. 2) SNMP reflection offers the largest amplification factor by far, even surpassing DNS, Chargen, or NTP by a wide margin. I have tested a 68 byte query and received responses of up to 30,000 to 60,000 bytes. The trick is to use GetBulkRequest to start enumerating from the first OID and setting max repetitions to a large number. This is contrary to the other articles online which suggest a much smaller amplification factor with other queries. This protocol is also prevalent in many devices ranging from routers to printers. To solve this problem you should block SNMP traffic coming from outside your network and whitelist outside IPs that require it.

17 34

Reminder about upcoming .gov algorithm roll
by Wessels, Duane 22 Aug '13

22 Aug '13

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 This notice is a reminder that an algorithm roll for the .gov zone will take place in the upcoming weeks. The .gov zone is currently signed with algorithm 7 (RSASHA1-NSEC3-SHA1) and will be changed to use algorithm 8 (RSA/SHA-256). The schedule for the algorithm roll is as follows: August 29th: The .gov zone will begin publishing algorithm 8 RRSIGs. September 3rd: The .gov zone will begin publishing algorithm 8 DNSKEYs. September 10th (estimated): The algorithm 8 DS records will replace the algorithm 7 DS records in the root zone. September 17th: The .gov zone will cease publishing algorithm 7 DNSKEYs. September 19th: The .gov zone will cease publishing algorithm 7 RRISGs. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (Darwin) Comment: GPGTools - http://gpgtools.org iQEcBAEBAgAGBQJSFno+AAoJEGyZpGmowJiN8ZMIAJ3oewRsTKYpCSSQmdPC6hX3 uQC4Ih3PVyO3SiguVj9Y39/PL/0FPDeq7J5KDoQjcSod4kxZEJngjyg9SpB6kbcn ciqjKM6JAvSIjKz9nH7YIOpoOJoRGae/GwdcLHhpFqEgJ1LO60k8Bmh3VF9J3hk0 chdKs3f4Nbn9TeNv46qURO/ZSRTP2Wwvm+xGmuu6Djtrn+9Rbix4q44J+nZb021j hIrzJAXEbYwzZCw0dtKlhWXwEu2Pe1TKCWF1dg8d1j+EVmaVypB2uKWxjtEPIdtQ RVngz5OirKXUK51naA6cSTjLcGesgPGoxGGi75xdYtYsB/ou0FADiZcO4gYexuk= =Gq2g -----END PGP SIGNATURE-----

1 0

10G standalone switch to access in data center, cheap
by Piotr 22 Aug '13

22 Aug '13

Hello, I looking some 10G switches, 24-48 ports, it will be work in DC in access. Something cheaper ( for port) than extreme 670 ? Do You know something ? thanks greets, Peter

4 4

RE: 10G standalone switch to access in data center, cheap
by Phil Bedard 22 Aug '13

22 Aug '13

Quanta is pretty cheap, basically a bare bones reference design. Mellanox as well. Juniper EX4550. Any other features you are looking for? From: Piotr Sent: 8/22/2013 10:59 To: nanog(a)nanog.org Subject: 10G standalone switch to access in data center, cheap Hello, I looking some 10G switches, 24-48 ports, it will be work in DC in access. Something cheaper ( for port) than extreme 670 ? Do You know something ? thanks greets, Peter

2 1

Re: Problems with routing to a couple of IPs
by Dylan Humphreys 22 Aug '13

22 Aug '13

Hit send too early then! :D

1 0