- Test - lists.nanog.org

Re: Cloudflare is down
by Steve 04 Mar '13

04 Mar '13

Known Juniper security issue . We found it during testing and discovered it is fixed in later code. I don't have the specifics in front of me right now or I'd share. This Email was sent from Steve's iPad Message: 5 Date: Sun, 3 Mar 2013 20:31:35 +0000 From: Vinod K <vinod408(a)hotmail.com> To: <nanog(a)nanog.org> Subject: RE: Cloudflare is down Message-ID: <BLU166-W19D22E1F37FCEAAC077DBB89F90(a)phx.gbl> Content-Type: text/plain; charset="iso-8859-1" I am not sure of bug... could be normal behavior for how JunOS CLI handle "extended" packet size. Will wait for Juniper comment on incident. Vinod > Date: Sun, 3 Mar 2013 20:02:05 +0000 > From: nick(a)foobar.org > To: arthur.wist(a)gmail.com > Subject: Re: Cloudflare is down > CC: nanog(a)nanog.org > > On 03/03/2013 10:46, Arthur Wist wrote: >> Apparently due to a routing issue... > > back up again: http://blog.cloudflare.com/todays-outage-post-mortem-82515 > > tl;dr: outage caused by flowspec filter tickling vendor bug. > > Nick

1 0

BGP Update Report
by cidr-report＠potaroo.net 01 Mar '13

01 Mar '13

BGP Update Report Interval: 11-Feb-13 -to- 18-Feb-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS9498 111602 4.7% 107.9 -- BBIL-AP BHARTI Airtel Ltd. 2 - AS24560 91379 3.8% 88.2 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services 3 - AS8402 49667 2.1% 27.5 -- CORBINA-AS OJSC "Vimpelcom" 4 - AS18207 45646 1.9% 131.9 -- YOU-INDIA-AP YOU Broadband & Cable India Ltd. 5 - AS3909 42966 1.8% 1227.6 -- QWEST-AS-3908 - Qwest Communications Company, LLC 6 - AS7029 36157 1.5% 18.3 -- WINDSTREAM - Windstream Communications Inc 7 - AS8151 30815 1.3% 23.8 -- Uninet S.A. de C.V. 8 - AS9829 28968 1.2% 34.8 -- BSNL-NIB National Internet Backbone 9 - AS45609 27674 1.2% 105.6 -- BHARTI-MOBILITY-AS-AP Bharti Airtel Ltd. AS for GPRS Service 10 - AS18002 24115 1.0% 114.8 -- WORLDPHONE-IN AS Number for Interdomain Routing 11 - AS32777 23335 1.0% 4667.0 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 12 - AS36998 21970 0.9% 18.1 -- SDN-MOBITEL 13 - AS2708 21659 0.9% 154.7 -- Universidad de Guanajuato 14 - AS45514 21014 0.9% 69.1 -- TELEMEDIA-SMB-AS-AP Bharti Airtel Ltd., TELEMEDIA Services, for SMB customers 15 - AS4 19416 0.8% 526.0 -- COMUNICALO DE MEXICO S.A. DE C.V 16 - AS45528 17023 0.7% 45.2 -- TDN Tikona Digital Networks Pvt Ltd. 17 - AS17974 16207 0.7% 7.0 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 18 - AS31148 15822 0.7% 20.6 -- FREENET-AS Freenet Ltd. 19 - AS17488 14556 0.6% 45.5 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 20 - AS57816 11755 0.5% 2938.8 -- SAMEN Samen Ertebat Asr Co. (P.J.S.) TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS32777 23335 1.0% 4667.0 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 2 - AS19406 4126 0.2% 4126.0 -- TWRS-MA - Towerstream I, Inc. 3 - AS40946 6077 0.2% 3038.5 -- PROCON - Sat Track 4 - AS6174 5879 0.2% 2939.5 -- SPRINTLINK8 - Sprint 5 - AS57816 11755 0.5% 2938.8 -- SAMEN Samen Ertebat Asr Co. (P.J.S.) 6 - AS14680 5943 0.2% 1981.0 -- REALE-6 - Auction.com 7 - AS36529 2746 0.1% 1373.0 -- AXXA-RACKCO - Rackco.com 8 - AS8657 1323 0.1% 1323.0 -- CPRM CPRM Autonomous System 9 - AS17293 3920 0.2% 1306.7 -- VTXC - VTX Communications 10 - AS3909 42966 1.8% 1227.6 -- QWEST-AS-3908 - Qwest Communications Company, LLC 11 - AS22140 5832 0.2% 972.0 -- T-MOBILE-AS22140 - T-Mobile USA, Inc. 12 - AS4 19416 0.8% 526.0 -- COMUNICALO DE MEXICO S.A. DE C.V 13 - AS40931 1660 0.1% 830.0 -- MOBITV - MobiTV, Inc 14 - AS12397 807 0.0% 807.0 -- OPTOCOM Optocom Ltd 15 - AS9950 4666 0.2% 777.7 -- PUBNETPLUS2-AS-KR DACOM 16 - AS37367 709 0.0% 709.0 -- CALLKEY 17 - AS57201 696 0.0% 696.0 -- EDF-AS Estonian Defence Forces 18 - AS4663 2758 0.1% 689.5 -- ELIMNET-AS ELIMNET, INC 19 - AS12413 686 0.0% 686.0 -- HANSHAKE-AS Handshake e.V. 20 - AS6197 686 0.0% 686.0 -- BATI-ATL - BellSouth Network Solutions, Inc TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 151.118.255.0/24 14290 0.6% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 2 - 151.118.254.0/24 14290 0.6% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 3 - 151.118.18.0/24 14259 0.6% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 4 - 37.9.248.0/21 11701 0.5% AS57816 -- SAMEN Samen Ertebat Asr Co. (P.J.S.) 5 - 202.41.70.0/24 9362 0.4% AS2697 -- ERX-ERNET-AS Education and Research Network 6 - 196.1.167.0/24 8133 0.3% AS11139 -- CWRIN CW BARBADOS 7 - 66.55.234.0/24 7838 0.3% AS7029 -- WINDSTREAM - Windstream Communications Inc 8 - 192.58.232.0/24 7645 0.3% AS6629 -- NOAA-AS - NOAA 9 - 208.92.131.0/24 6076 0.2% AS40946 -- PROCON - Sat Track 10 - 208.14.186.0/24 5803 0.2% AS22140 -- T-MOBILE-AS22140 - T-Mobile USA, Inc. 11 - 12.139.133.0/24 4793 0.2% AS14680 -- REALE-6 - Auction.com 12 - 194.63.9.0/24 4706 0.2% AS1273 -- CW Cable and Wireless Worldwide plc 13 - 8.12.92.0/22 4667 0.2% AS32777 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 14 - 66.78.242.0/23 4667 0.2% AS32777 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 15 - 67.110.75.0/24 4667 0.2% AS32777 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 16 - 65.172.212.0/22 4667 0.2% AS32777 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 17 - 97.65.228.0/22 4667 0.2% AS32777 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P. 18 - 58.184.229.0/24 4652 0.2% AS9950 -- PUBNETPLUS2-AS-KR DACOM 19 - 69.38.178.0/24 4126 0.2% AS19406 -- TWRS-MA - Towerstream I, Inc. 20 - 122.161.0.0/16 4028 0.2% AS24560 -- AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 01 Mar '13

01 Mar '13

This report has been generated at Tue Feb 19 16:13:14 2013 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 12-02-13 445341 254468 13-02-13 444932 254971 14-02-13 445625 254890 15-02-13 445440 255148 16-02-13 445491 255598 17-02-13 445709 255627 18-02-13 445529 256541 19-02-13 445862 256692 AS Summary 43455 Number of ASes in routing system 18036 Number of ASes announcing only one prefix 3063 Largest number of prefixes announced by an AS AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc. 116912864 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 19Feb13 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 445961 256729 189232 42.4% All ASes AS6389 3063 104 2959 96.6% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS28573 2387 88 2299 96.3% NET Servicos de Comunicao S.A. AS17974 2486 474 2012 80.9% TELKOMNET-AS2-AP PT Telekomunikasi Indonesia AS4766 2938 942 1996 67.9% KIXS-AS-KR Korea Telecom AS18566 2080 427 1653 79.5% COVAD - Covad Communications Co. AS10620 2319 670 1649 71.1% Telmex Colombia S.A. AS7303 1681 408 1273 75.7% Telecom Argentina S.A. AS4323 1606 401 1205 75.0% TWTC - tw telecom holdings, inc. AS4755 1688 579 1109 65.7% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS2118 1115 83 1032 92.6% RELCOM-AS OOO "NPO Relcom" AS7552 1161 180 981 84.5% VIETEL-AS-AP Vietel Corporation AS7029 2166 1198 968 44.7% WINDSTREAM - Windstream Communications Inc AS36998 1286 381 905 70.4% SDN-MOBITEL AS18101 1008 170 838 83.1% RELIANCE-COMMUNICATIONS-IN Reliance Communications Ltd.DAKC MUMBAI AS22773 1989 1162 827 41.6% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS7545 1834 1019 815 44.4% TPG-INTERNET-AP TPG Internet Pty Ltd AS1785 1959 1169 790 40.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS8151 1513 745 768 50.8% Uninet S.A. de C.V. AS4808 1114 355 759 68.1% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS18881 773 26 747 96.6% Global Village Telecom AS14754 942 207 735 78.0% Telgua AS13977 838 123 715 85.3% CTELCO - FAIRPOINT COMMUNICATIONS, INC. AS9808 737 51 686 93.1% CMNET-GD Guangdong Mobile Communication Co.Ltd. AS855 715 50 665 93.0% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. AS24560 1045 416 629 60.2% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS22561 1067 445 622 58.3% DIGITAL-TELEPORT - Digital Teleport Inc. AS17676 720 99 621 86.2% GIGAINFRA Softbank BB Corp. AS3356 1103 498 605 54.9% LEVEL3 Level 3 Communications AS3549 1046 444 602 57.6% GBLX Global Crossing Ltd. AS19262 998 404 594 59.5% VZGNI-TRANSIT - Verizon Online LLC Total 45377 13318 32059 70.7% Top 30 total Possible Bogus Routes 10.86.64.32/30 AS65530 -Private Use AS- 10.86.64.36/30 AS65530 -Private Use AS- 10.86.65.32/30 AS65530 -Private Use AS- 10.86.65.36/30 AS65530 -Private Use AS- 10.255.255.0/30 AS65530 -Private Use AS- 10.255.255.4/30 AS65530 -Private Use AS- 10.255.255.8/30 AS65530 -Private Use AS- 41.222.80.0/21 AS37110 moztel-as 62.12.96.0/19 AS38478 SUNNYVISION-AS-AP SunnyVision Limited 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV 64.185.224.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.225.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.226.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.227.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.228.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.229.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.230.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.231.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.232.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.233.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.234.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.235.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.236.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.237.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.238.0/24 AS27431 JTLNET - JTL Networks Inc. 64.185.239.0/24 AS27431 JTLNET - JTL Networks Inc. 64.187.208.0/24 AS174 COGENT Cogent/PSI 65.111.1.0/24 AS32258 SDNGLOBAL - SDN Global 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 66.251.128.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.133.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.134.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.136.0/21 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.140.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.141.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.142.0/24 AS33227 BLUEBRIDGE-NETWORKS - Blue Bridge Networks 66.251.143.0/24 AS3356 LEVEL3 Level 3 Communications 69.46.224.0/20 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.233.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.46.236.0/24 AS32592 HUNT-BROTHERS-OF-LOUISIANA-LLC - Hunt Brothers 69.165.92.0/24 AS20077 IPNETZONE-ASN - IPNetZone 71.19.134.0/23 AS3313 INET-AS BT Italia S.p.A. 72.35.224.0/22 AS30097 NUWAVE - NuWave 72.35.229.0/24 AS30188 TELEVERGENCE - Televergence Solutions Inc. 72.35.232.0/21 AS30097 NUWAVE - NuWave 72.44.16.0/20 AS15054 NORTHEAST-TEXAS-BROADBAND-LLC - Northeast Texas Broadband, LLC 74.91.48.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.49.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.50.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.51.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.52.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.53.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.54.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.55.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.56.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.57.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.58.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.59.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.60.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.61.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.62.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.91.63.0/24 AS30137 SEA-BROADBAND - Sea Broadband, LLC 74.115.124.0/23 AS46540 NARSASN - National Asset Recovery Services, Inc 81.4.0.0/18 AS38478 SUNNYVISION-AS-AP SunnyVision Limited 81.22.64.0/20 AS5511 OPENTRANSIT France Telecom S.A. 82.101.160.0/19 AS5511 OPENTRANSIT France Telecom S.A. 100.100.0.0/24 AS4847 CNIX-AP China Networks Inter-Exchange 102.2.88.0/22 AS38456 PACTEL-AS-AP Pacific Teleports. 103.5.152.0/22 AS4686 BEKKOAME BEKKOAME INTERNET INC. 103.11.148.0/24 AS58452 103.11.149.0/24 AS58452 110.34.44.0/22 AS12653 COMTONET KB Impuls Hellas S.A. 116.206.72.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.85.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 116.206.103.0/24 AS6461 MFNX MFN - Metromedia Fiber Network 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 142.54.0.0/19 AS23498 CDSI - Cogeco Data Services LP 172.102.0.0/22 AS4812 CHINANET-SH-AP China Telecom (Group) 172.116.0.0/24 AS7018 ATT-INTERNET4 - AT&T Services, Inc. 185.19.20.0/22 AS42610 NCNET-AS National Cable Networks 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.53.0.0/19 AS13878 Diveo do Brasil Telecomunicacoes Ltda 200.58.248.0/21 AS27849 202.8.106.0/24 AS9530 SHINSEGAE-AS SHINSEGAE I&C Co., Ltd. 202.58.113.0/24 AS19161 202.65.96.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.73.240.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.83.120.0/21 AS37972 202.83.124.0/24 AS37972 202.83.125.0/24 AS37972 202.83.126.0/24 AS37972 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.176.1.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.179.134.0/24 AS23966 LDN-AS-PK LINKdotNET Telecom Limited 203.23.1.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.24.38.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.30.127.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/23 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.86.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.32.87.0/24 AS18111 NETSPEED-AS-AP Netspeed Internet Communications 203.142.219.0/24 AS45149 204.9.116.0/22 AS30097 NUWAVE - NuWave 204.10.88.0/21 AS3356 LEVEL3 Level 3 Communications 204.10.92.0/23 AS30097 NUWAVE - NuWave 204.10.94.0/23 AS30097 NUWAVE - NuWave 204.10.112.0/21 AS27027 ANBELL ASN-ANBELL 204.11.112.0/22 AS14745 INTERNAP-BLOCK-4 - Internap Network Services Corporation 205.175.214.0/24 AS5583 ORANGE-BUSINESS-SERVICES-BENELUX France Telecom S.A. 205.211.160.0/24 AS30045 UHN-ASN - University Health Network 206.197.184.0/24 AS23304 DATOTEL-STL-AS - Datotel LLC, a NetLabs LLC Company 206.221.176.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.177.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.178.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.179.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.180.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.181.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.182.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.183.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.184.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.185.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.186.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.187.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.188.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.189.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.190.0/24 AS27431 JTLNET - JTL Networks Inc. 206.221.191.0/24 AS27431 JTLNET - JTL Networks Inc. 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 207.254.128.0/21 AS30689 FLOW-NET - FLOW 207.254.128.0/24 AS30689 FLOW-NET - FLOW 207.254.136.0/21 AS30689 FLOW-NET - FLOW 207.254.138.0/24 AS30689 FLOW-NET - FLOW 207.254.140.0/24 AS30689 FLOW-NET - FLOW 208.77.164.0/24 AS22659 208.77.165.0/24 AS22659 208.77.166.0/24 AS22659 208.77.167.0/24 AS22659 208.83.53.0/24 AS40569 YGOMI-AS - Ygomi LLC 208.89.32.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.33.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.34.0/24 AS27431 JTLNET - JTL Networks Inc. 208.89.35.0/24 AS27431 JTLNET - JTL Networks Inc. 208.91.72.0/24 AS21681 ANDOVER-TRADING - ANDOVER TRADING 208.91.73.0/24 AS17361 BRASS - Sungard Trading System (ASC) 208.91.76.0/23 AS21681 ANDOVER-TRADING - ANDOVER TRADING 209.148.64.0/19 AS13773 TELNETCOMM - Telnet Communications 209.177.64.0/20 AS6461 MFNX MFN - Metromedia Fiber Network 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.234.112.0/23 AS32252 209.234.114.0/23 AS32252 209.234.116.0/24 AS32252 209.234.117.0/24 AS32252 209.234.118.0/24 AS32252 209.234.119.0/24 AS32252 209.234.120.0/24 AS32252 209.234.121.0/24 AS32252 209.234.122.0/24 AS32252 213.150.204.0/24 AS29338 AFOL-AS Used by Africaonline Operations 216.12.163.0/24 AS26627 AS-PILOSOFT - Pilosoft, Inc. 216.146.0.0/19 AS11915 TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 216.152.24.0/22 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.227.142.0/23 AS46856 GLOBAL-HOST-AS - The Global Host Exchange 216.227.144.0/21 AS46856 GLOBAL-HOST-AS - The Global Host Exchange 216.234.128.0/22 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.132.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. 216.234.139.0/24 AS14545 ADR-DRIVING-RECORDS - AMERICAN DRIVING RECORDS, INC. Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)nanog.org eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 01 Mar '13

01 Mar '13

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 02 Mar, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 444878 Prefixes after maximum aggregation: 182918 Deaggregation factor: 2.43 Unique aggregates announced to Internet: 218369 Total ASes present in the Internet Routing Table: 43457 Prefixes per ASN: 10.24 Origin-only ASes present in the Internet Routing Table: 34242 Origin ASes announcing only one prefix: 15961 Transit ASes present in the Internet Routing Table: 5781 Transit-only ASes present in the Internet Routing Table: 138 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 30 Max AS path prepend of ASN ( 28730) 25 Prefixes from unregistered ASNs in the Routing Table: 368 Unregistered ASNs in the Routing Table: 135 Number of 32-bit ASNs allocated by the RIRs: 3798 Number of 32-bit ASNs visible in the Routing Table: 3434 Prefixes from 32-bit ASNs in the Routing Table: 9541 Special use prefixes present in the Routing Table: 17 Prefixes being announced from unallocated address space: 189 Number of addresses announced to Internet: 2619399116 Equivalent to 156 /8s, 32 /16s and 219 /24s Percentage of available address space announced: 70.8 Percentage of allocated address space announced: 70.8 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.3 Total number of prefixes smaller than registry allocations: 157249 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 106846 Total APNIC prefixes after maximum aggregation: 33105 APNIC Deaggregation factor: 3.23 Prefixes being announced from the APNIC address blocks: 107946 Unique aggregates announced from the APNIC address blocks: 44071 APNIC Region origin ASes present in the Internet Routing Table: 4814 APNIC Prefixes per ASN: 22.42 APNIC Region origin ASes announcing only one prefix: 1233 APNIC Region transit ASes present in the Internet Routing Table: 816 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 23 Number of APNIC region 32-bit ASNs visible in the Routing Table: 444 Number of APNIC addresses announced to Internet: 719060672 Equivalent to 42 /8s, 219 /16s and 254 /24s Percentage of available APNIC address space announced: 84.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 156262 Total ARIN prefixes after maximum aggregation: 79028 ARIN Deaggregation factor: 1.98 Prefixes being announced from the ARIN address blocks: 156968 Unique aggregates announced from the ARIN address blocks: 71372 ARIN Region origin ASes present in the Internet Routing Table: 15506 ARIN Prefixes per ASN: 10.12 ARIN Region origin ASes announcing only one prefix: 5863 ARIN Region transit ASes present in the Internet Routing Table: 1616 Average ARIN Region AS path length visible: 4.1 Max ARIN Region AS path length visible: 27 Number of ARIN region 32-bit ASNs visible in the Routing Table: 18 Number of ARIN addresses announced to Internet: 1076685952 Equivalent to 64 /8s, 44 /16s and 236 /24s Percentage of available ARIN address space announced: 57.0 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 114097 Total RIPE prefixes after maximum aggregation: 59042 RIPE Deaggregation factor: 1.93 Prefixes being announced from the RIPE address blocks: 117377 Unique aggregates announced from the RIPE address blocks: 75202 RIPE Region origin ASes present in the Internet Routing Table: 17091 RIPE Prefixes per ASN: 6.87 RIPE Region origin ASes announcing only one prefix: 8148 RIPE Region transit ASes present in the Internet Routing Table: 2779 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 30 Number of RIPE region 32-bit ASNs visible in the Routing Table: 2221 Number of RIPE addresses announced to Internet: 653859172 Equivalent to 38 /8s, 249 /16s and 25 /24s Percentage of available RIPE address space announced: 95.1 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 196608-199679 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 47375 Total LACNIC prefixes after maximum aggregation: 9238 LACNIC Deaggregation factor: 5.13 Prefixes being announced from the LACNIC address blocks: 51180 Unique aggregates announced from the LACNIC address blocks: 23762 LACNIC Region origin ASes present in the Internet Routing Table: 1843 LACNIC Prefixes per ASN: 27.77 LACNIC Region origin ASes announcing only one prefix: 537 LACNIC Region transit ASes present in the Internet Routing Table: 349 Average LACNIC Region AS path length visible: 4.9 Max LACNIC Region AS path length visible: 27 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 744 Number of LACNIC addresses announced to Internet: 124216104 Equivalent to 7 /8s, 103 /16s and 99 /24s Percentage of available LACNIC address space announced: 74.0 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 10628 Total AfriNIC prefixes after maximum aggregation: 2454 AfriNIC Deaggregation factor: 4.33 Prefixes being announced from the AfriNIC address blocks: 11218 Unique aggregates announced from the AfriNIC address blocks: 3792 AfriNIC Region origin ASes present in the Internet Routing Table: 601 AfriNIC Prefixes per ASN: 18.67 AfriNIC Region origin ASes announcing only one prefix: 180 AfriNIC Region transit ASes present in the Internet Routing Table: 128 Average AfriNIC Region AS path length visible: 4.7 Max AfriNIC Region AS path length visible: 25 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 7 Number of AfriNIC addresses announced to Internet: 45241088 Equivalent to 2 /8s, 178 /16s and 83 /24s Percentage of available AfriNIC address space announced: 44.9 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 2930 11558 923 Korea Telecom (KIX) 17974 2500 840 86 PT TELEKOMUNIKASI INDONESIA 7545 1828 301 89 TPG Internet Pty Ltd 4755 1696 382 190 TATA Communications formerly 9829 1426 1140 43 BSNL National Internet Backbo 9583 1215 91 502 Sify Limited 7552 1161 1070 12 Vietel Corporation 4808 1117 2058 322 CNCGROUP IP network: China169 9498 1066 310 75 BHARTI Airtel Ltd. 24560 1047 385 161 Bharti Airtel Ltd., Telemedia Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3051 3695 96 bellsouth.net, inc. 7029 2148 1265 210 Windstream Communications Inc 18566 2080 382 185 Covad Communications 22773 1986 2929 124 Cox Communications, Inc. 1785 1957 677 123 PaeTec Communications, Inc. 20115 1695 1611 620 Charter Communications 4323 1611 1140 401 Time Warner Telecom 30036 1343 288 682 Mediacom Communications Corp 7018 1302 10553 854 AT&T WorldNet Services 11492 1208 221 335 Cable One Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8402 1858 544 16 Corbina telecom 2118 1116 97 13 EUnet/RELCOM Autonomous Syste 34984 1065 232 204 BILISIM TELEKOM 13188 841 99 22 Educational Network 12479 831 783 68 Uni2 Autonomous System 31148 766 39 17 FreeNet ISP 20940 759 257 602 Akamai Technologies European 8551 715 370 43 Bezeq International 6830 713 2313 434 UPC Distribution Services 34744 675 186 28 SC GVM SISTEM 2003 SRL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 28573 2387 1330 84 NET Servicos de Comunicao S.A 10620 2340 402 232 TVCABLE BOGOTA 7303 1681 1147 207 Telecom Argentina Stet-France 6503 1393 435 68 AVANTEL, S.A. 8151 1376 2805 407 UniNet S.A. de C.V. 14754 940 127 75 Telgua S. A. 18881 799 716 18 Global Village Telecom 27947 785 86 101 Telconet S.A 3816 688 306 85 Empresa Nacional de Telecomun 7738 650 1306 35 Telecomunicacoes da Bahia S.A Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 36998 1286 80 4 MOBITEL 24863 865 274 34 LINKdotNET AS number 6713 535 615 23 Itissalat Al-MAGHRIB 8452 530 958 13 TEDATA 24835 342 80 8 RAYA Telecom - Egypt 3741 262 906 220 The Internet Solution 12258 193 28 67 Vodacom Internet Company 15706 191 32 6 Sudatel Internet Exchange Aut 29975 191 667 21 Vodacom 16637 186 696 90 MTN Network Solutions Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3051 3695 96 bellsouth.net, inc. 4766 2930 11558 923 Korea Telecom (KIX) 17974 2500 840 86 PT TELEKOMUNIKASI INDONESIA 28573 2387 1330 84 NET Servicos de Comunicao S.A 10620 2340 402 232 TVCABLE BOGOTA 7029 2148 1265 210 Windstream Communications Inc 18566 2080 382 185 Covad Communications 22773 1986 2929 124 Cox Communications, Inc. 1785 1957 677 123 PaeTec Communications, Inc. 8402 1858 544 16 Corbina telecom Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 17974 2500 2414 PT TELEKOMUNIKASI INDONESIA 28573 2387 2303 NET Servicos de Comunicao S.A 10620 2340 2108 TVCABLE BOGOTA 4766 2930 2007 Korea Telecom (KIX) 7029 2148 1938 Windstream Communications Inc 18566 2080 1895 Covad Communications 22773 1986 1862 Cox Communications, Inc. 8402 1858 1842 Corbina telecom 1785 1957 1834 PaeTec Communications, Inc. 7545 1828 1739 TPG Internet Pty Ltd Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 65119 PRIVATE 8.36.67.0/24 6352 E*Trade Group 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 30031 UNALLOCATED 12.27.122.0/24 7018 AT&T WorldNet Servic 13317 UNALLOCATED 12.44.10.0/24 7018 AT&T WorldNet Servic 23502 UNALLOCATED 12.44.44.0/24 7018 AT&T WorldNet Servic 17300 UNALLOCATED 12.45.103.0/24 209 Qwest 17300 UNALLOCATED 12.45.110.0/24 701 UUNET Technologies, 16476 UNALLOCATED 12.46.27.0/24 7018 AT&T WorldNet Servic 14764 UNALLOCATED 12.108.237.0/24 7018 AT&T WorldNet Servic 33649 UNALLOCATED 12.111.112.0/24 19029 New Edge Networks Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 128.0.0.0/24 2876 Jump Management SRL 128.0.16.0/21 43568 RIPE Network Coordination Cen 128.0.24.0/21 41794 Altline LLC 128.0.60.0/23 57417 INTERNET TASMANIA SRL 128.0.62.0/23 57417 INTERNET TASMANIA SRL 128.0.72.0/21 23456 32-bit ASN transition 128.0.80.0/20 52041 Timer LTD 128.0.96.0/21 12886 LEWTelNet GmbH 128.0.104.0/23 51848 FOP Gabidullina Ludmila Nikol 128.0.106.0/24 23456 32-bit ASN transition Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 41.222.80.0/21 37110 Moztel LDA 62.12.96.0/19 38478 SunnyVision Limited 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 62.61.221.0/24 24974 Tachyon Europe BV - Wireless 64.185.224.0/24 27431 JTL Networks Inc. 64.185.225.0/24 27431 JTL Networks Inc. 64.185.226.0/24 27431 JTL Networks Inc. 64.185.227.0/24 27431 JTL Networks Inc. 64.185.228.0/24 27431 JTL Networks Inc. 64.185.229.0/24 27431 JTL Networks Inc. Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:17 /9:13 /10:29 /11:88 /12:247 /13:483 /14:869 /15:1564 /16:12632 /17:6623 /18:10909 /19:21729 /20:31372 /21:33459 /22:45969 /23:41343 /24:233225 /25:1387 /26:1765 /27:859 /28:183 /29:75 /30:17 /31:0 /32:21 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 2030 2080 Covad Communications 6389 1752 3051 bellsouth.net, inc. 8402 1587 1858 Corbina telecom 7029 1555 2148 Windstream Communications Inc 22773 1302 1986 Cox Communications, Inc. 36998 1280 1286 MOBITEL 30036 1230 1343 Mediacom Communications Corp 11492 1170 1208 Cable One 1785 1038 1957 PaeTec Communications, Inc. 7011 956 1205 Citizens Utilities Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:716 2:778 3:3 4:13 5:764 6:3 8:504 12:1932 13:3 14:746 15:11 16:3 17:8 20:24 23:241 24:1799 27:1455 31:1141 32:54 33:2 34:5 36:11 37:1306 38:857 39:2 40:153 41:2708 42:177 44:3 46:1767 47:1 49:609 50:663 52:12 54:28 55:10 57:28 58:1079 59:559 60:278 61:1339 62:1036 63:2033 64:4306 65:2168 66:4248 67:2050 68:1126 69:3263 70:861 71:525 72:1902 74:2548 75:413 76:295 77:1089 78:1051 79:572 80:1241 81:974 82:608 83:549 84:560 85:1160 86:478 87:945 88:371 89:1749 90:262 91:5421 92:603 93:1743 94:2088 95:1569 96:499 97:335 98:1035 99:40 100:30 101:308 103:2226 105:517 106:131 107:207 108:511 109:1796 110:851 111:1030 112:492 113:741 114:683 115:921 116:881 117:798 118:981 119:1275 120:376 121:705 122:1740 123:1190 124:1317 125:1315 128:536 129:205 130:318 131:639 132:329 133:143 134:253 135:62 136:221 137:234 138:342 139:168 140:213 141:316 142:523 143:376 144:481 145:88 146:519 147:349 148:712 149:353 150:152 151:409 152:401 153:191 154:29 155:374 156:243 157:391 158:260 159:711 160:336 161:420 162:369 163:208 164:578 165:447 166:416 167:572 168:1008 169:130 170:1025 171:165 172:4 173:1577 174:580 175:424 176:1127 177:1707 178:1743 179:1 180:1370 181:256 182:1192 183:331 184:645 185:266 186:2316 187:1309 188:1924 189:1534 190:6616 192:6373 193:5658 194:4500 195:3492 196:1311 197:925 198:4166 199:5234 200:6064 201:2223 202:8926 203:8755 204:4498 205:2556 206:2790 207:2787 208:4068 209:3523 210:2898 211:1563 212:1977 213:1923 214:906 215:95 216:5212 217:1582 218:606 219:327 220:1266 221:549 222:332 223:470 End of report

1 0

Good transit provider @Hutchison Cavendish Centre
by Luan Nguyen 01 Mar '13

01 Mar '13

Hi Folks, Any recommendation for a 1 Gig Transit provider at Hutchison Cavendish Centre? Has to be able to black hole DDOS attack using BGP communities. Preferable: Tier 1 provider with US present (IAD would be best) HK NSP mailing list doesn't exist anymore? Thanks. Regards, -lmn

2 2

10 Mbit/s problem in your network
by Constantine A. Murenin 27 Feb '13

27 Feb '13

Dear NANOG@, In light of the recent discussion titled, "The 100 Gbit/s problem in your network", I'd like to point out that smaller operators and end-sites are currently very busy having and ignoring the 10 Mbit/s problem in their networks. Hotels in major metro areas, for example. Some have great connectivity (e.g. through high-capacity microwave links), and always have a latency of between 5ms and 15ms to the nearest internet exchange, and YouTube and Netflix just work, always, and nearly flawlessly, and in full HD. Others think that load-balancing 150+ rooms with Fast Ethernet and WiFi in every room, plus a couple of conference/meeting rooms (e.g. potentially more than a single /24 worth of all sorts of devices) on a couple of independent T1 and ADSL links is an acceptable practice. Yes, a T1 and an ADSL, with some kind of Layer 3 / 4 balancing! This is at a time when it would not be uncommon to travel with an Apple TV or a Roku. And then not only even YouTube and cbs.com don't work, but an average latency of above 500ms is not unusual in the evenings, and ssh is practically unusable. (Or sometimes they do the balancing wrong, and the ssh connections simply break every minute due to the broken balancer.) And this happens even with boutique hotels like the Joie de Vivre brand in the Silicon Valley (Wild Palms on El Camino Real in Sunnyvale has an absolutely horrible bandwidth even when it's half empty), or with brand-new properties like Hyatt Place in the hometown of a rather famous ILEC that has the whole town glassed up with fiber-optics (the place is less than 2 years old, and Google Maps still shows it as being constructed, yet independent T1 and ADSL links from two distinct ILECs is the only connectivity they have!). How should end-users deal with such broadband incompetence; why do local carriers allow businesses to abuse their connections and their own customers in such ways; why do the sub-contracted internet support companies design and support such broken-by-design setups? When you are staying at a 3* hotel, should you have no expectations that you'll be getting at least a 3Mbps pipe and at least an under 100ms average latency, and won't be getting a balancer that would be breaking up your ssh sessions? Best regards, Constantine.

23 41

BGP RIB Collection
by chip 27 Feb '13

27 Feb '13

Hello all, I have an application that needs to gather BGP RIB data from the routers that connect to all of our upstream providers. Basically I need to know all the routes available from a particular provider. Currently I'm gathering this data via SNMP. While this works it has its draw backs, it takes approximately 20 minutes per view, its nowhere near real-time, and I'm unable to gather information for IPv6. SNMP, however, is faster than screen scraping. All of the XML based access methods seem to take about the same time as well. I've been watching, with keen interest, the i2rs ietf workings, but the project is still in its infancy. BMP seems to be a good solution but I've not found a working client implementation yet. I see that you can actually configure this on some Juniper gear but I can't seem to locate a client to ingest the data the router produces. The BGP Add Paths implementation seems to be the best choice at the moment and exabgp has a working implementation. Are there any other technologies or methods of accessing this data that I've missed or that you've found useful? Thanks! --chip -- Just my $.02, your mileage may vary, batteries not included, etc....

7 7

Fwd: Re: NYT covers China cyberthreat
by jjanusze＠wd-tek.com 27 Feb '13

27 Feb '13

Defense in Depth has been paid lipservice for too long, and now we are witnessing the outcome. > ---------- Original Message ---------- > From: Adele Thompson <paigeadele(a)gmail.com> > To: Kyle Creyts <kyle.creyts(a)gmail.com> > Cc: Derek Noggle <dnoggle(a)gmail.com>, nanog(a)nanog.org > Date: February 27, 2013 at 1:24 AM > Subject: Re: NYT covers China cyberthreat > > On Tue, Feb 26, 2013 at 8:39 AM, Kyle Creyts <kyle.creyts(a)gmail.com> wrote: > > > I think it is safe to say that finding a foothold inside of the United > > States from which to perform/proxy an attack is not the hardest thing > > in the world. I don't understand why everyone expects that major > > corporations and diligent operators blocking certain countries' > > prefixes will help. That being said, you make a solid point to which > > people should absolutely listen: applying an understanding of your > > business-needs-network-traffic baseline to your firewall rules and > > heuristic network detections (in a more precise fashion than just "IPs > > from country $x") is a SOLID tactic that yields huge security > > benefits. Nobody who cares about security should really be able to > > argue with it (plenty of those who care don't will hate it, though), > > and makes life _awful_ for any attackers. > > > > On Tue, Feb 26, 2013 at 3:43 AM, Rich Kulawiec <rsk(a)gsp.org> wrote: > > > On Thu, Feb 21, 2013 at 11:47:44AM -0600, Naslund, Steve wrote: > > > > > > [a number of very good points ] > > > > > > Geoblocking, like passive OS fingerprinting (another technique that > > > reduces attack surface as measured along one axis but can be defeated > > > by a reasonably clueful attacker), doesn't really solve problems, per se. > > > If you have a web app that's vulnerable to SQL injection attacks, then > > > it's still just as hackable -- all the attacker has to do is try from > > > somewhere else, from something else. > > > > > > But... > > > > > > 1. It raises the bar. And it cuts down on the noise, which is one of the > > > security meta-problems we face: our logs capture so much cruft, so many > > > instances of attacks and abuse and mistakes and misconfigurations and > > > malfunctions, that we struggle to understand what they're trying to tell > > > us. That problem is so bad that there's an entire subindustry built > > > around the task of trying to reduce what's in the logs to something > > > that a human brain can process in finite time. Mountains of time > > > and wads of cash have been spent on the thorny problems that arise > > > when we try to figure out what to pay attention to and what to ignore... > > > and we still screw it up. Often. > > > > > > So even if the *only* effect of doing so is to shrink the size of > > > the logs: that's a win. (And used judiciously, it can be a HUGE win, > > > as in "several orders of magnitude".) So if your security guy is > > > as busy as you say...maybe this would be a good idea. > > > > > > And let me note in passing that by raising the bar, it ensures that > > > you're faced with a somewhat higher class of attacker. It's one > > > thing to be hacked by a competent, diligent adversary who wields > > > their tools with rapier-like precision; it's another to be owned > > > by a script kiddie who has no idea what they're doing and doesn't > > > even read the language your assets are using. That's just embarassing. > > > > > > 2. Outbound blocks work too, y'know. Does anybody in your marketing > > > department need to reach Elbonia? If not, then why are you allowing > > > packets from that group's desktops to go there? Because either > > > (a) it's someone doing something they shouldn't or (b) it's something > > doing > > > something it shouldn't, as in a bot trying to phone home or a data > > > exfiltration attack or something else unpleasant. So if there's > > > no business need for that group to exchange packets with Elbonia > > > or any of 82 other countries, why *aren't* you blocking that? > > > > > > 3. Yes, this can turn into a moderate-sized matrix of inbound and > > > outbound rules. That's why make(1) and similar tools are your friends, > > > because they'll let you manage this without needing to resort to scotch > > > by 9:30 AM. And yes, sometimes things will break (because something's > > > changed) -- but the brokeness is the best kind of brokeness: obvious, > > > deterministic, repeatable, fixable. > > > > > > It's not hard. But it does require that you actually know what your > > > own systems are doing and why. > > > > > > 4. "We were hacked from China" is wearing awfully damn thin as the > > > feeble whining excuse of people who should have bidirectionally > > firewalled > > > out China from their corporate infrastructure (note: not necessarily > > > their public-facing servers) years ago. And "our data was exfiltrated > > > to Elbonia" is getting thin as an excuse too: if you do not have an > > > organizational need to allow outbound network traffic to Elbonia, then > > > why the hell are you letting so much as a single packet go there? > > > > > > Like I said: at least make them work for it. A little. Instead of > > > doing profoundly idiotic things like the NYTimes (e.g., "infrastructure > > > reachable from the planet", "using M$ software", "actually believing that > > > anti-virus software will work despite a quarter-century of uninterrupted > > > failure", etc.). That's not making them work for it: that's inviting > > > them in, rolling out the red carpet, and handing them celebratory > > champagne. > > > > > > ---rsk > > > > > > > > > > > -- > > Kyle Creyts > > > > Information Assurance Professional > > BSidesDetroit Organizer > > > > > > I've been doing some thinking about the internet tonight and came across > this e-mail by which I am intrigued. Currently we suffer from DDoS downtime > on Rackspace (granted it's a very small amount of time, its a hit to our > only single point of failure for which I am currently trying to solve by > obtaining a /24 and an anycast address as a means of mitigation and > providing a highly available HTTP cluster of load balancers. I can't help > but wonder if the cost (both in ipv4 resources and cash) outweighs the > worth of an environment that is sanctioned from the globe. While cloud > hosting has proven to be a scalable solution for our needs, we currently > are only serving US-based organizations as far as I know. Even so, the > desire to grow beyond that isn't far fetched when adding networks that are > still segregated from access outside of a country becomes more available > (kinda like vlans.) > > > > > Germany, Russia, and Spain. > > > > "IN vain is the net spread in the sight of anybird," especially if the > > bird be as keen-eyed asPrince Bismarck. The Carlist attempts to > > irritateGermany > > into intervention —whether by > > > > firing on her gunboats, or, as report says,attempting to take prisoners > > the German andAustrian representatives to Madrid in the courseof their > > railway journey, or by any other means—have been, and will be, failures. > > Prince Bismarck knows as well as anybody that nothingwould give so > > effectual a spur to the Carlistcause as a German intervention against it, > > andwe may therefore well believe his organ when ittells us that nothing > > so wild as the project oflanding German troops in Spain was ever > > contemplated > > by him. Prince Bismarck was wiseenough, even during the war with France, > > whenthe German power was already in possession,and was on the spot, to > > avoid anythinglike taking a part between the differentpolitical factions > > into which France was divided.Is it reasonable to suppose that, after > > keeping socarefully out of the net with which his feet werealmost in > > contact in France, he would allow himself to be entangled in it in Spain > > ? The realdanger on the Franco-Spanish frontier is not ofa German > > intervention in Spain, but of jealousiesgrowing up between Germany and > > France sokeen as to render a renewal of the war all butinevitable. No > > doubt that would suit PrinceBismarck's book much better than a barren > > intervention in Spain. No doubt his agents are notparticularly delicate > > in their modes of insistingthat France shall cut off all supplies from > > theCarlist > > forces, and in indirectly reminding Frenchmen of the difference beween > > their position now,when they are kept to their internationalduties > > towards Spain by the watchful eye ofGermany, and their position four > > yearsago, > > when they made the mere suggestion of aGerman candidate for the throne of > > Spain aground of affront, and ultimately a cause of war.We do not suppose > > that Prince Bismarck wishesfor another big war, and all the new odium > > itwould > > bring on the victor, but if it must come,no doubt he would like it to > > come soon. It wasa good notion of his to pose as the protector ofthe > > regency of Marshal Serrano in Spain, and sowin an ally south of the > > Pyrenees, as well assouth of the Alps. But in spite of his no doubtsincere > > wish to see Ultramontanism defeated inthe defeat of Don Carlos, it is > > pretty certainthat his Spanish policy is studied much morewith a view to > > crippling France, than with aview to crippling Rome.There is indeed > > something encouraging in theclear evidence afforded, both by Prince > > Bismarck's > > and by Prince GortschakofTs policyin regard to Spain—though these > > policies aredifferent -that even the least teachable of thegreat European > > Powers have learned the lessonthat interventions for the purpose of > > settling theinternal disputes of any great nation are thesilliest of > > mistakes. Germany has recognised,and has probably persuaded various other > > greatPowers to recognise, the Government of Madrid,while Russia declines > > to recognise it; but evenRussia carefully explains that her reason for > > holding back is not any wish to strengthen the hopes ofthe Carlist > > insurrection, but rather on even greaterdelicacy than that shown by the > > other Powersfor the free choice of the Spanish nation, and areluctance > > therefore to enter into formal relations with a Government which, since > > GeneralPavin's coup Witat, has had no sanctionfrom the will of the > > people. Nodoubt one may fairly smile at the reasongiven, when it comes > > from the Ministerof Russia. No doubt it is quite natural to suspect that > > other motives mingle with the refusal—the dislike to follow implicitly > > German lead—the uueasiuess lest the example of Spain shouldbe eventually > > pleaded for Republican institutions;but even though it be so, the fact > > remains thatRussia offers an almost pedantically constitutional reason > > for refusing to acknowledge as yetthe Government of Marshal Serrano, and > > wishesto be understood as setting an example of evengreater delicacy and > > greater deference to thewishes of the Spanish nation than either > > GreatBritain > > or France. No doubt Russia Las pushedthe doctrine to an extreme, if she > > has allowedher deference to the wishes of the Spanishpeople to prevent > > her from recognising a Government the continuance of which she would thinka > > great safeguard to the peace of Europe. Inpoint of fact, Russia, in all > > probability, holds nosuch opinion. The Greek Church is too wellestablished > > and too popular in Russia to makeit a matter of any account to her > > whether thenew Government of Spain be Ultramontane orotherwise, while it > > can never be a matter ofabsolute indifference to the Czar of Russiawhether > > another European people throws offthe monarchy or not. If Don Carlos were > > tosucceed, at least the Republican current ofevents would be reversed for > > a time. Butwhether the success of Marshal Serrano willmean a Republican > > or a Throne for Spain is amatter extremely doubtful. On the otherhand, to > > neither Germany, nor England, norItaly can it fail to be a matter of some > > interestwhether or not a new stimulus or a new checkis to be applied to > > Ultramontane zeaL And asregards France, the Government of MarshalMacMahon > > has a very difficult problem to solve.Doubtless the Extreme Right, and > > with theExtreme Right the whole Sacerdotal party,would prefer to see Don > > Carlos succeed, sincesuch a success would be a new ground of hopefor > > Henri V. and the white flag. But thenMarshal MacMahon has been obliged to > > quarrelwith the Extreme Right, who make light of hisSepteunate, and > > affect to treat him as a merelocum tenena for the coming king. Hence it > > isessential > > for him to secure a certain amount ofmoderate Liberal support, and the > > regency ofMarshal Serrano is so very homogeneous a kindof power to his > > own—namely, a mere excuse fordelay—that he can hardly fail to feel a > > certainsympathy with its position. Add to this theextreme desirability of > > conceding to Germanyall that can be conceded while the fears of quarreland > > the occasions of quarrel are still so numerous,and we do not doubt that a > > very wise decision hasbeen taken, even in the interest of the Government > > itself, in recognising the de facto Government of Madrid. On the whole, > > we regard itas a very satisfactory evidence of the progressmade in > > mastering elementary Constitutionalideas, eveu by the most despotic > > Powers, thatall the great Powers alike repudiate intervention > > Fix this > > text<http://trove.nla.gov.au/ndp/del/captchaForm?target=ocr&t=1361946009073> > > in Spain, and use even their fair privilege ofgiving a sort of moral > > support to that one ofthe rival Governments which they think be3tcalculated > > to maintain the peace of Europe, withgreat reserve and moderation. The > > day of HolyAlliances to mould the internal institutions ofrefractory > > countries is now, at last, probablypast, aud with these, the day of some > > of themoot mischievous European combinations whichthe world has ever > > seen.— Spectator. > > > > It is learned that the arrest of Count YonAmiin was effected without the > > knowledge of theEmperor. The musing documents hare beengiven to the > > Ultraniontanes by Deputy Windernorst. > >

1 0

Re: NYT covers China cyberthreat
by Scott Weeks 27 Feb '13

27 Feb '13

--- Valdis.Kletnieks(a)vt.edu wrote: The scary part is that so many things got hacked by a bunch of people who made the totally noob mistake of launching all their attacks from the same place.... ------------------------------------------------ This all seems to be noobie stuff. There's nothing technically cool to see here. All they do is spear phishing and, once the link is clicked, put in a backdoor that uses commonly available tools. As I suspected earlier it's M$ against M$ only. The downside is nontechnical folks in positions of power often have sensitive data on their computers, only know M$ and don't have the knowledge to don't click on that "bank" email. Technically, it was 74 pages of yawn. Don't waste your time unless you're interested in how they found out where the attack was originating from and how they tied it to the .cn gov't. scott

8 8

ethernet in Socal
by Tri Tran 27 Feb '13

27 Feb '13

I'm evaluating between cBeyond, Cox, and Megapath. Anyone have experience with their ethernet over copper or fiber products? How are their reliability, service, and performance? Regards, Tri Tran

1 0