- Test - lists.nanog.org

The Cidr Report
by cidr-report＠potaroo.net 29 Jan '10

29 Jan '10

This report has been generated at Fri Jan 29 21:11:29 2010 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 22-01-10 311605 190854 23-01-10 311842 190996 24-01-10 311898 190878 25-01-10 311978 191133 26-01-10 312175 191220 27-01-10 312280 191780 28-01-10 312419 191939 29-01-10 312562 192141 AS Summary 33460 Number of ASes in routing system 14256 Number of ASes announcing only one prefix 4389 Largest number of prefixes announced by an AS AS4323 : TWTC - tw telecom holdings, inc. 93061376 Largest address span announced by an AS (/32s) AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 29Jan10 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 313065 192126 120939 38.6% All ASes AS6389 4135 322 3813 92.2% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4323 4389 1744 2645 60.3% TWTC - tw telecom holdings, inc. AS4766 1859 486 1373 73.9% KIXS-AS-KR Korea Telecom AS1785 1851 694 1157 62.5% AS-PAETEC-NET - PaeTec Communications, Inc. AS22773 1125 71 1054 93.7% ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. AS17488 1273 283 990 77.8% HATHWAY-NET-AP Hathway IP Over Cable Internet AS8151 1569 662 907 57.8% Uninet S.A. de C.V. AS4755 1314 410 904 68.8% TATACOMM-AS TATA Communications formerly VSNL is Leading ISP AS10620 1010 162 848 84.0% TV Cable S.A. AS18101 1088 261 827 76.0% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS19262 1058 240 818 77.3% VZGNI-TRANSIT - Verizon Internet Services Inc. AS18566 1059 380 679 64.1% COVAD - Covad Communications Co. AS6478 1106 428 678 61.3% ATT-INTERNET3 - AT&T WorldNet Services AS8452 963 297 666 69.2% TEDATA TEDATA AS4808 835 224 611 73.2% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS4804 678 72 606 89.4% MPX-AS Microplex PTY LTD AS7303 672 108 564 83.9% Telecom Argentina S.A. AS7018 1587 1026 561 35.3% ATT-INTERNET4 - AT&T WorldNet Services AS3356 1210 657 553 45.7% LEVEL3 Level 3 Communications AS4134 1018 466 552 54.2% CHINANET-BACKBONE No.31,Jin-rong Street AS24560 839 295 544 64.8% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd., Telemedia Services AS17908 765 229 536 70.1% TCISL Tata Communications AS7545 944 437 507 53.7% TPG-INTERNET-AP TPG Internet Pty Ltd AS22047 565 70 495 87.6% VTR BANDA ANCHA S.A. AS5668 787 293 494 62.8% AS-5668 - CenturyTel Internet Holdings, Inc. AS11492 1141 666 475 41.6% CABLEONE - CABLE ONE, INC. AS9443 545 80 465 85.3% INTERNETPRIMUS-AS-AP Primus Telecommunications AS9299 665 216 449 67.5% IPG-AS-AP Philippine Long Distance Telephone Company AS4780 601 154 447 74.4% SEEDNET Digital United Inc. AS855 610 164 446 73.1% CANET-ASN-4 - Bell Aliant Regional Communications, Inc. Total 37261 11597 25664 68.9% Top 30 total Possible Bogus Routes 2.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 2.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 2.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 41.223.92.0/22 AS36936 CELTEL-GABON Celtel Gabon Internet Service 41.223.188.0/24 AS22351 INTELSAT Intelsat Global BGP Routing Policy 41.223.189.0/24 AS26452 BRING-AS - BringCom, Inc. 46.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 46.1.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 46.1.24.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 62.61.221.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 64.82.128.0/19 AS16617 COMMUNITYISP - CISP 64.82.160.0/19 AS16617 COMMUNITYISP - CISP 66.128.38.0/24 AS15246 Telecomunicaciones Satelitales TelesatS.A. 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.47.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 66.207.32.0/20 AS23011 66.230.240.0/20 AS27286 66.241.112.0/20 AS21547 REVNETS - Revolution Networks 66.245.176.0/20 AS19318 NJIIX-AS-1 - NEW JERSEY INTERNATIONAL INTERNET EXCHANGE LLC 69.6.80.0/24 AS13442 69.6.81.0/24 AS13442 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.224.0/19 AS19166 ACRONOC - ACRONOC INC 71.19.134.0/23 AS3313 INET-AS I.NET S.p.A. 71.19.160.0/23 AS4648 NZIX-2 Netgate 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 100.100.100.0/24 AS36992 ETISALAT-MISR 117.103.72.0/21 AS9942 COMINDICO-AP SOUL Converged Communications Australia 117.120.56.0/21 AS4755 TATACOMM-AS TATA Communications formerly VSNL is Leading ISP 121.46.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 121.50.168.0/21 AS9931 CAT-AP The Communication Authoity of Thailand, CAT 158.222.70.0/23 AS6137 SISNA - SISNA, Inc. 158.222.72.0/23 AS6137 SISNA - SISNA, Inc. 158.222.224.0/20 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.224.0/22 AS19864 O1COMM - O1 COMMUNICATIONS 158.222.229.0/24 AS19864 O1COMM - O1 COMMUNICATIONS 172.7.0.0/24 AS36992 ETISALAT-MISR 190.102.32.0/20 AS30058 FDCSERVERS - FDCservers.net 192.9.0.0/16 AS11479 BRM-SUN-AS - Sun Microsystems, Inc 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Axtel, S.A.B. de C. V. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.124.248.0/23 AS680 DFN-IP service G-WiN 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.129.127.0/24 AS6568 Ag para el Desarrollo de la Sociedad de la Inf en Bolivia - ADSIB 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 ORANGE-BUSINESS-SERVICES-CEEUR Orange Business Services (formerly Equant) AS for CEEUR 192.139.3.0/24 AS23184 PERSONA - PERSONA COMMUNICATIONS INC. 192.145.251.0/24 AS38091 HELLONET-AS-KR CJ-CABLENET 192.153.144.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.154.64.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 195.110.34.0/23 AS45753 NETSEC-HK Unit 1205-1207 195.110.34.0/24 AS45753 NETSEC-HK Unit 1205-1207 195.110.35.0/24 AS45753 NETSEC-HK Unit 1205-1207 196.2.224.0/22 AS24863 LINKdotNET-AS 196.6.108.0/24 AS5713 SAIX-NET 196.13.201.0/24 AS2018 TENET-1 196.13.202.0/24 AS2018 TENET-1 196.13.203.0/24 AS2018 TENET-1 196.13.204.0/24 AS2018 TENET-1 196.202.224.0/21 AS8818 TELE Greenland Autonomous System 198.1.2.0/24 AS4761 INDOSAT-INP-AP INDOSAT Internet Network Provider 198.23.26.0/24 AS33052 VZUNET - Verizon Data Services LLC 198.73.210.0/24 AS21570 ACI-1 - Accelerated Connections Inc. 198.97.72.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.96.0/19 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.97.240.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 198.135.236.0/24 AS4358 XNET - XNet Information Systems, Inc. 198.161.82.0/23 AS15290 ALLST-15290 - Allstream Corp. 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.161.92.0/24 AS6539 GT-BELL - Bell Canada 198.163.214.0/24 AS21804 ACCESS-SK - Access Communications Co-operative Limited 198.163.215.0/24 AS6327 SHAW - Shaw Communications Inc. 198.163.216.0/24 AS6327 SHAW - Shaw Communications Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 198.182.235.0/24 AS3356 LEVEL3 Level 3 Communications 199.10.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.16.32.0/19 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 199.26.183.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.114.128.0/18 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.130.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.131.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.132.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.136.0/24 AS27044 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.138.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.144.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.148.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.150.0/24 AS6045 DNIC-ASBLK-05800-06055 - DoD Network Information Center 199.114.152.0/24 AS27033 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.153.0/24 AS27034 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.156.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.114.160.0/24 AS1733 CENTAF-SWA - 754th Electronic Systems Group 199.121.0.0/16 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.0.0/18 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.16.0/20 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.123.80.0/21 AS27064 DNIC-ASBLK-27032-27159 - DoD Network Information Center 199.185.130.0/23 AS19662 UNISERVE-ONLINE - Uniserve On Line 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.202.216.0/21 AS577 BACOM - Bell Canada 199.233.92.0/24 AS26896 D102-ITC - Data 102, LLC 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 200.1.112.0/24 AS29754 GO2TEL GO2TEL.COM INC. 200.108.176.0/20 AS14551 UUNET-SA - MCI Communications Services, Inc. d/b/a Verizon Business 202.6.176.0/20 AS24316 202.9.55.0/24 AS2764 AAPT AAPT Limited 202.9.57.0/24 AS2764 AAPT AAPT Limited 202.58.113.0/24 AS19161 202.61.72.0/24 AS9425 CONCENTRIX-PH-AS-AP Concentrix Technologies, Inc 202.61.73.0/24 AS9425 CONCENTRIX-PH-AS-AP Concentrix Technologies, Inc 202.61.75.0/24 AS9927 PHILCOMNET-PH A Multihomed ISP Company 202.66.128.0/18 AS9584 GENESIS-AP Diyixian.com Limited 202.66.184.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.186.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.188.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.189.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.66.190.0/24 AS9584 GENESIS-AP Diyixian.com Limited 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.79.224.0/21 AS9519 VERTELNET Vertical Telecoms Pty Ltd 202.80.192.0/20 AS2706 PI-HK Pacnet Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.87.102.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.133.37.0/24 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 202.133.70.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.133.73.0/24 AS38616 WORLDCALL-AS-KHI Worldcall Telecom Limited 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.143.56.0/21 AS9942 COMINDICO-AP SOUL Converged Communications Australia 202.150.227.0/24 AS17727 NAPINFO-AS-AP PT. NAP Info Lintas Nusa 202.174.70.0/24 AS21175 WIS Wind International Services SA 202.174.125.0/24 AS9498 BBIL-AP BHARTI Airtel Ltd. 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.80.136.0/21 AS4759 EVOSERVE-AS-AP EvoServe is a content and online access Internet provider company 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.142.219.0/24 AS45149 203.189.96.0/20 AS17557 PKTELECOM-AS-PK Pakistan Telecommunication Company Limited 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.15.168.0/21 AS46753 TDAMERITRADETRUST - TD Ameritrade Trust 204.15.170.0/24 AS46753 TDAMERITRADETRUST - TD Ameritrade Trust 204.19.14.0/23 AS577 BACOM - Bell Canada 204.89.214.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.197.0.0/16 AS3356 LEVEL3 Level 3 Communications 204.209.114.0/24 AS13768 PEER1 - Peer 1 Network Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 205.189.134.0/24 AS11814 CYBERSURF - Cybersurf Inc. 205.210.145.0/24 AS11814 CYBERSURF - Cybersurf Inc. 206.108.96.0/19 AS577 BACOM - Bell Canada 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 207.174.0.0/16 AS13790 INTERNAP-BLK3 - Internap Network Services Corporation 207.174.131.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.132.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.152.0/23 AS26116 INDRA - Indra's Net Inc. 207.174.154.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.155.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.182.0/24 AS29831 FONENET - FONE NET, LLC 207.174.188.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.189.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.190.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.191.0/24 AS26116 INDRA - Indra's Net Inc. 207.174.200.0/24 AS22658 EARTHNET - Earthnet, Inc. 207.174.248.0/21 AS6653 PRIVATEI - privateI, LLC 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.66.152.0/24 AS18499 208.66.153.0/24 AS18499 208.66.154.0/24 AS18499 208.66.155.0/24 AS18499 208.66.156.0/24 AS18499 208.66.157.0/24 AS18499 208.66.158.0/24 AS18499 208.66.159.0/24 AS18499 208.73.4.0/22 AS27630 PREMIER - Premier Innovations, LLC 208.77.224.0/22 AS174 COGENT Cogent/PSI 208.77.229.0/24 AS174 COGENT Cogent/PSI 208.77.230.0/23 AS174 COGENT Cogent/PSI 208.78.164.0/24 AS16565 208.78.165.0/24 AS16565 208.78.167.0/24 AS16565 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.87.208.0/24 AS31997 209.87.209.0/24 AS31997 209.87.210.0/24 AS31997 209.87.211.0/24 AS31997 209.87.212.0/22 AS31997 209.87.216.0/24 AS31997 209.87.217.0/24 AS31997 209.87.218.0/24 AS31997 209.87.219.0/24 AS31997 209.87.220.0/24 AS31997 209.87.221.0/24 AS31997 209.87.222.0/23 AS31997 209.105.224.0/19 AS20074 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.177.160.0/24 AS18499 209.177.161.0/24 AS18499 209.177.162.0/24 AS18499 209.177.163.0/24 AS18499 209.177.164.0/24 AS18499 209.177.165.0/24 AS18499 209.177.166.0/24 AS18499 209.177.167.0/24 AS18499 209.177.168.0/24 AS18499 209.177.169.0/24 AS18499 209.177.170.0/24 AS18499 209.177.171.0/24 AS18499 209.177.172.0/24 AS18499 209.177.173.0/24 AS18499 209.177.174.0/24 AS18499 209.177.175.0/24 AS18499 209.213.0.0/20 AS33005 ELTOPIA - Eltopia.com, LLC 209.213.1.0/24 AS7849 CROCKERCOM - CROCKER COMMUNICATIONS 209.213.4.0/24 AS7849 CROCKERCOM - CROCKER COMMUNICATIONS 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 210.56.150.0/23 AS38138 INTECH-TRANSIT-BD InTech Online Limited, INTERNET SERVICE LIMITED 210.247.224.0/19 AS7496 WEBCENTRAL-AS WebCentral 216.21.192.0/20 AS14697 VDOTNET - VDot.Net 216.21.196.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.201.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.202.0/24 AS12251 INVISION - Invision.com, Inc. 216.21.206.0/23 AS12251 INVISION - Invision.com, Inc. 216.58.192.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.197.0/24 AS22702 X5SOLUTIONS - X5 Solutions, Inc. 216.58.200.0/24 AS18530 ISOMEDIA-1 - Isomedia Inc. 216.99.20.0/24 AS3356 LEVEL3 Level 3 Communications 216.144.240.0/23 AS11351 RR-NYSREGION-ASN-01 - Road Runner HoldCo LLC 216.144.243.0/24 AS11351 RR-NYSREGION-ASN-01 - Road Runner HoldCo LLC 216.144.244.0/22 AS11351 RR-NYSREGION-ASN-01 - Road Runner HoldCo LLC 216.163.144.0/20 AS35985 ONERINGNET-ATL-1 - One Ring Networks, Inc. 216.172.198.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.172.199.0/24 AS22773 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications Inc. 216.243.240.0/20 AS12182 INTERNAP-2BLK - Internap Network Services Corporation 216.250.112.0/20 AS7296 ALCHEMYNET - Alchemy Communications, Inc. 216.250.116.0/24 AS36066 UNI-MARKETING-ALLIANCE - Webhost4life.com 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 222.0.0.0/8 AS9484 MOBINET-AS-MN Mobicom Company. AS Mobinet Internet Service Provider Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: Level 3 DC issues?
by Robert.E.VanOrmer＠frb.gov 29 Jan '10

29 Jan '10

Looks like it may be a BoA issue. I also see their AS number peering to AS 701 (Verizon Business / UUNet) with a dead traceroute to BoA. On Jan 29, 2010, at 2:22 PM, John Palmer (NANOG Acct) wrote: > Anyone see any connectivity issues with Level-3 in the DC area? This issue is causing big latency problems > that appeared to have taken out Bank of America's website. > >

1 0

Weekly Routing Table Report
by Routing Analysis Role Account 29 Jan '10

29 Jan '10

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 30 Jan, 2010 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 310401 Prefixes after maximum aggregation: 143857 Deaggregation factor: 2.16 Unique aggregates announced to Internet: 152150 Total ASes present in the Internet Routing Table: 33195 Prefixes per ASN: 9.35 Origin-only ASes present in the Internet Routing Table: 28813 Origin ASes announcing only one prefix: 14071 Transit ASes present in the Internet Routing Table: 4382 Transit-only ASes present in the Internet Routing Table: 110 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 23 Max AS path prepend of ASN ( 9503) 21 Prefixes from unregistered ASNs in the Routing Table: 803 Unregistered ASNs in the Routing Table: 130 Number of 32-bit ASNs allocated by the RIRs: 409 Prefixes from 32-bit ASNs in the Routing Table: 367 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 208 Number of addresses announced to Internet: 2182859712 Equivalent to 130 /8s, 27 /16s and 203 /24s Percentage of available address space announced: 58.9 Percentage of allocated address space announced: 66.1 Percentage of available address space allocated: 89.1 Percentage of address space in use by end-sites: 81.0 Total number of prefixes smaller than registry allocations: 149507 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 74994 Total APNIC prefixes after maximum aggregation: 25835 APNIC Deaggregation factor: 2.90 Prefixes being announced from the APNIC address blocks: 71687 Unique aggregates announced from the APNIC address blocks: 31510 APNIC Region origin ASes present in the Internet Routing Table: 3940 APNIC Prefixes per ASN: 18.19 APNIC Region origin ASes announcing only one prefix: 1084 APNIC Region transit ASes present in the Internet Routing Table: 623 Average APNIC Region AS path length visible: 3.6 Max APNIC Region AS path length visible: 23 Number of APNIC addresses announced to Internet: 490424864 Equivalent to 29 /8s, 59 /16s and 74 /24s Percentage of available APNIC address space announced: 76.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 55296-56319, 131072-132095 APNIC Address Blocks 1/8, 27/8, 43/8, 58/8, 59/8, 60/8, 61/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 129648 Total ARIN prefixes after maximum aggregation: 67654 ARIN Deaggregation factor: 1.92 Prefixes being announced from the ARIN address blocks: 103715 Unique aggregates announced from the ARIN address blocks: 39327 ARIN Region origin ASes present in the Internet Routing Table: 13468 ARIN Prefixes per ASN: 7.70 ARIN Region origin ASes announcing only one prefix: 5204 ARIN Region transit ASes present in the Internet Routing Table: 1331 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 22 Number of ARIN addresses announced to Internet: 738182688 Equivalent to 43 /8s, 255 /16s and 198 /24s Percentage of available ARIN address space announced: 64.7 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 393216-394239 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 45/8, 47/8, 48/8, 52/8, 54/8, 55/8, 56/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 108/8, 173/8, 174/8, 184/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 71527 Total RIPE prefixes after maximum aggregation: 41622 RIPE Deaggregation factor: 1.72 Prefixes being announced from the RIPE address blocks: 64555 Unique aggregates announced from the RIPE address blocks: 42965 RIPE Region origin ASes present in the Internet Routing Table: 14024 RIPE Prefixes per ASN: 4.60 RIPE Region origin ASes announcing only one prefix: 7284 RIPE Region transit ASes present in the Internet Routing Table: 2103 Average RIPE Region AS path length visible: 3.9 Max RIPE Region AS path length visible: 21 Number of RIPE addresses announced to Internet: 415078528 Equivalent to 24 /8s, 189 /16s and 152 /24s Percentage of available RIPE address space announced: 77.3 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 196608-197631 RIPE Address Blocks 2/8, 25/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 178/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 27325 Total LACNIC prefixes after maximum aggregation: 6555 LACNIC Deaggregation factor: 4.17 Prefixes being announced from the LACNIC address blocks: 25709 Unique aggregates announced from the LACNIC address blocks: 13809 LACNIC Region origin ASes present in the Internet Routing Table: 1235 LACNIC Prefixes per ASN: 20.82 LACNIC Region origin ASes announcing only one prefix: 404 LACNIC Region transit ASes present in the Internet Routing Table: 206 Average LACNIC Region AS path length visible: 4.0 Max LACNIC Region AS path length visible: 17 Number of LACNIC addresses announced to Internet: 70292480 Equivalent to 4 /8s, 48 /16s and 148 /24s Percentage of available LACNIC address space announced: 69.8 LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 262144-263167 plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 6318 Total AfriNIC prefixes after maximum aggregation: 1829 AfriNIC Deaggregation factor: 3.45 Prefixes being announced from the AfriNIC address blocks: 4703 Unique aggregates announced from the AfriNIC address blocks: 1396 AfriNIC Region origin ASes present in the Internet Routing Table: 338 AfriNIC Prefixes per ASN: 13.91 AfriNIC Region origin ASes announcing only one prefix: 95 AfriNIC Region transit ASes present in the Internet Routing Table: 75 Average AfriNIC Region AS path length visible: 3.8 Max AfriNIC Region AS path length visible: 16 Number of AfriNIC addresses announced to Internet: 14851840 Equivalent to 0 /8s, 226 /16s and 159 /24s Percentage of available AfriNIC address space announced: 44.3 AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4766 1859 7511 472 Korea Telecom (KIX) 4755 1314 305 136 TATA Communications formerly 17488 1273 131 138 Hathway IP Over Cable Interne 18101 1043 220 37 Reliance Infocom Ltd Internet 4134 1018 19609 399 CHINANET-BACKBONE 9583 983 71 489 Sify Limited 7545 924 198 98 TPG Internet Pty Ltd 17974 886 277 43 PT TELEKOMUNIKASI INDONESIA 24560 840 299 173 Bharti Airtel Ltd., Telemedia 4808 835 1583 212 CNCGROUP IP network: China169 Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4135 3875 317 bellsouth.net, inc. 4323 3794 1088 395 Time Warner Telecom 1785 1851 699 132 PaeTec Communications, Inc. 7018 1584 5777 1026 AT&T WorldNet Services 20115 1542 1490 671 Charter Communications 2386 1294 616 916 AT&T Data Communications Serv 3356 1211 10931 423 Level 3 Communications, LLC 11492 1141 222 14 Cable One 22773 1125 2600 66 Cox Communications, Inc. 6478 1106 240 254 AT&T Worldnet Services Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 35805 562 40 5 United Telecom of Georgia 3292 454 1904 396 TDC Tele Danmark 30890 447 100 207 Evolva Telecom 702 422 1821 336 UUNET - Commercial IP service 8551 397 353 37 Bezeq International 8866 376 110 24 Bulgarian Telecommunication C 3320 360 7069 309 Deutsche Telekom AG 3301 350 1412 311 TeliaNet Sweden 3215 345 3174 102 France Telecom Transpac 12479 321 576 5 Uni2 Autonomous System Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1565 2885 236 UniNet S.A. de C.V. 10620 1010 226 133 TVCABLE BOGOTA 28573 849 677 100 NET Servicos de Comunicao S.A 7303 672 356 99 Telecom Argentina Stet-France 22047 565 310 15 VTR PUNTO NET S.A. 11830 472 308 59 Instituto Costarricense de El 6503 446 163 185 AVANTEL, S.A. 11172 444 99 69 Servicios Alestra S.A de C.V 14117 439 29 12 Telefonica del Sur S.A. 3816 432 194 70 Empresa Nacional de Telecomun Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 8452 963 445 9 TEDATA 24863 719 144 39 LINKdotNET AS number 36992 475 87 245 Etisalat MISR 3741 274 857 234 The Internet Solution 2018 190 197 109 Tertiary Education Network 6713 177 167 12 Itissalat Al-MAGHRIB 29571 167 19 9 Ci Telecom Autonomous system 29975 134 506 15 Vodacom 33776 123 7 11 Starcomms Nigeria Limited 5536 117 8 3 Internet Egypt Network Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 4135 3875 317 bellsouth.net, inc. 4323 3794 1088 395 Time Warner Telecom 4766 1859 7511 472 Korea Telecom (KIX) 1785 1851 699 132 PaeTec Communications, Inc. 7018 1584 5777 1026 AT&T WorldNet Services 8151 1565 2885 236 UniNet S.A. de C.V. 20115 1542 1490 671 Charter Communications 4755 1314 305 136 TATA Communications formerly 2386 1294 616 916 AT&T Data Communications Serv 17488 1273 131 138 Hathway IP Over Cable Interne Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 3794 3399 Time Warner Telecom 1785 1851 1719 PaeTec Communications, Inc. 4766 1859 1387 Korea Telecom (KIX) 8151 1565 1329 UniNet S.A. de C.V. 4755 1314 1178 TATA Communications formerly 17488 1273 1135 Hathway IP Over Cable Interne 11492 1141 1127 Cable One 22773 1125 1059 Cox Communications, Inc. 18566 1059 1049 Covad Communications 18101 1043 1006 Reliance Infocom Ltd Internet Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.154.0/23 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.155.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.159.0/24 7018 AT&T WorldNet Servic 25639 UNALLOCATED 12.41.169.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 2.0.0.0/16 12654 RIPE NCC RIS Project 2.1.0.0/21 12654 RIPE NCC RIS Project 2.1.24.0/24 12654 RIPE NCC RIS Project 41.223.92.0/22 36936 >>UNKNOWN<< 41.223.188.0/24 22351 Intelsat 41.223.189.0/24 26452 Local Communications Networks 46.0.0.0/16 12654 RIPE NCC RIS Project 46.1.0.0/21 12654 RIPE NCC RIS Project 46.1.24.0/24 12654 RIPE NCC RIS Project 62.61.220.0/24 24974 Tachyon Europe BV - Wireless Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:21 /9:10 /10:25 /11:66 /12:185 /13:385 /14:659 /15:1246 /16:10883 /17:5108 /18:8696 /19:17880 /20:21774 /21:21830 /22:28190 /23:28191 /24:162323 /25:935 /26:1169 /27:586 /28:215 /29:9 /30:7 /31:0 /32:8 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2693 4135 bellsouth.net, inc. 4323 2362 3794 Time Warner Telecom 4766 1477 1859 Korea Telecom (KIX) 1785 1316 1851 PaeTec Communications, Inc. 11492 1061 1141 Cable One 17488 1052 1273 Hathway IP Over Cable Interne 18566 1040 1059 Covad Communications 7018 953 1584 AT&T WorldNet Services 18101 922 1043 Reliance Infocom Ltd Internet 10620 915 1010 TVCABLE BOGOTA Complete listing at http://thyme.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:2 2:1 4:13 8:234 12:2002 13:10 15:22 16:3 17:8 20:39 24:1302 27:1 32:49 38:646 40:99 41:1865 44:3 46:1 47:26 52:6 55:2 56:2 57:23 58:640 59:639 60:389 61:1099 62:1010 63:2034 64:3789 65:2364 66:4096 67:1800 68:1035 69:2841 70:689 71:236 72:1879 73:2 74:2086 75:242 76:351 77:823 78:577 79:411 80:958 81:782 82:457 83:439 84:636 85:1004 86:381 87:695 88:418 89:1537 90:65 91:2701 92:420 93:1172 94:1376 95:796 96:208 97:296 98:534 99:23 100:1 109:266 110:285 111:423 112:219 113:221 114:348 115:514 116:1036 117:609 118:372 119:805 120:144 121:828 122:1380 123:833 124:1075 125:1284 128:197 129:203 130:138 131:477 132:82 133:16 134:195 135:41 136:224 137:172 138:237 139:90 140:460 141:132 142:377 143:339 144:389 145:51 146:406 147:183 148:563 149:196 150:146 151:171 152:248 153:165 154:2 155:269 156:179 157:331 158:97 159:354 160:305 161:176 162:274 163:187 164:305 165:454 166:502 167:389 168:759 169:157 170:571 171:48 172:2 173:455 174:525 175:31 178:2 180:298 183:215 184:3 186:269 187:231 188:1288 189:634 190:3497 192:5720 193:4440 194:3346 195:2787 196:1170 198:3558 199:3396 200:5306 201:1466 202:8094 203:8324 204:4003 205:2178 206:2416 207:3043 208:3924 209:3421 210:2536 211:1170 212:1658 213:1640 214:253 215:62 216:4438 217:1498 218:483 219:448 220:1129 221:469 222:308 End of report

1 0

Strange Cisco 6503 problem
by Dean Belev 29 Jan '10

29 Jan '10

Hi all, I experienced a strange problem with one of our Cisco 6503 routers - right after the terminal PC connected to the router via console is rebooted the router reboots itself. Even when there is no Eth connection to the PC the situations is the same - reboot follows. I tried to check the messages the router sends: *: %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 31 seconds [1/0] :: No EOBC input, dump debuginfo, interval 10, times 3 : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 60 seconds [1/0] : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 90 seconds [1/0] : %FIB-3-FIBDISABLE: Fatal error, slot/cpu 1/0: IPC Failure: timeout : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 120 seconds [1/0] : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 150 seconds [1/0]* All the possible reasons according to Cisco that may caused that case will be checked soon because the router is in operational mode although some of them looks strange: /*CPU_MONITOR-3-TIMED_OUT or CPU_MONITOR-6-NOT_HEARD Problem The switch reports these error messages: CPU_MONITOR-3-TIMED_OUT: CPU monitor messages have failed, resetting system CPU_MONITOR-6-NOT_HEARD: CPU monitor messages have not been heard for [dec] seconds Description These messages indicate that CPU monitor messages have not been heard for a significant amount of time. A time-out most probably occurs, which resets the system. [dec] is the number of seconds. The problem possibly occurs because of these reasons: * Badly seated line card or module * Bad ASIC or bad backplane * Software bugs * Parity error * High traffic in the Ethernet out of band channel (EOBC) channel The EOBC channel is a half duplex channel that services many other functions, which includes Simple Network Management Protocol (SNMP) traffic and packets that are destined to the switch. If the EOBC channel is full of messages because of a storm of SNMP traffic, then the channel is subjected to collisions. When this happens, EOBC is possibly not able to carry IPC messages. This makes the switch display the error message. Workaround Reseat the line card or module. If a maintenance window can be scheduled, reset the switch in order to clear any transient issues. ######################################### Error Message %ERR_DET-5-ERR_DET_NO_EOBC_INPUT: No EOBC input, dump debuginfo, interval %u, times %u Explanation No Ethernet Out-of-Band Channel (EOBC) input was received. Debugging information will be dumped. Recommended Action No action is required.*/ I'm curious if some of you faced such a problem - reboot of the router caused by the console connection. Here is some brief info about the router: *Supervisor:* Mod Ports Card Type Model --- ----- -------------------------------------- ------------------ ----------- 1 9 Supervisor Engine 32 8GE (Active) WS-SUP32-GE-3B *Processor:* cisco WS-C6503-E (R7000) processor *IOS:* IOS (tm) s3223_rp Software (s3223_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(18)SXF8, RELEASE SOFTWARE (fc2) Thank you in advance for all your replays. Best~

6 5

Re: DDoS mitigation recommendations
by Jeffrey Lyon 29 Jan '10

29 Jan '10

IntruGuard is highly customizable both from the GUI and CLI with the engineer's assistance. Its the highest performance, reasonably priced box that we've tried so far. Jeff On Jan 28, 2010 7:02 AM, "Tom Sands" <tsands(a)rackspace.com> wrote: > -----Original Message----- > From: David Freedman [mailto:david.freedman@uk.clara.net] Sent: Tues... We've already done an initial trial with the Arbor device, and it does work well. Our biggest sticking point with it is that it lacks the granular level of visibility and control that we've been used to and often needed to tweak profiles. Basically, it does what it's supposed to well, but you really can't tell what that is, and if it's not catching all of a DDoS you have little insight as to what's being missed or control to correct it. Thank you, Tom Sands Chief Network Engineer Rackspace Confidentiality Notice: This e-mail message (including any attached or embedded documents) is intend...

5 5

DDoS mitigation recommendations
by Tom Sands 29 Jan '10

29 Jan '10

With Guard appliance and 65xx module being EoL'd, and Cisco's desire to exist the DDoS mitigation market, I'd like to get some recommendations of what other products people are having good success with. We are looking for something that can support 3Gbps - 10Gbps, multi-tenancy, seamless integration, and many of the basic features you'd see on the Guard. Thank you, -- -------------------------------------------------------------------------------- Tom Sands Chief Network Engineer Rackspace Hosting -------------------------------------------------------------------------------- Confidentiality Notice: This e-mail message (including any attached or embedded documents) is intended for the exclusive and confidential use of the individual or entity to which this message is addressed, and unless otherwise expressly indicated, is confidential and privileged information of Rackspace. Any dissemination, distribution or copying of the enclosed material is prohibited. If you receive this transmission in error, please notify us immediately by e-mail at abuse(a)rackspace.com, and delete the original message. Your cooperation is appreciated.

5 5

Rogers wireless outbound mailservers have no reverse (SORBS please help?)
by Ken Chase 28 Jan '10

28 Jan '10

Can I get a rogers engineer who not only cares but has power to crush problems to respond to this please? Opening tickets with RNS seems to just get a null responce, "we'll look at it" with a hint of disbelief a customer ticket could uncover a large network-wide issue. It's an old problem that was temporarily fixed for a while, but is now back. Jan 28 06:46:00 cust1 postfix/smtpd[416]: NOQUEUE: reject: RCPT from unknown[74.198.8.2]: 450 4.7.1 Client host rejected: cannot find your reverse hostname, [74.198.8.2]; from=<sandy(a)customer.com> to=<tracy(a)customer.com> proto=ESMTP helo=<to5email1.gprs.rogers.com> $ host 74.198.8.2 8.8.8.8 Using domain server: Name: 8.8.8.8 Host 2.8.198.74.in-addr.arpa. not found: 3(NXDOMAIN) Maybe we can get them registered on SORBS. The irony would be very tasty. Maybe then they'll start caring. (Too much to hope for?) Solution right now is to get all of my customers to tell their employees to not trust outgoing rogers mailservers to get their mail out, and find alternates. I'm not the only one who filters by lack of reverse. I'm also trying to figure out the Rogers angle here. Ideas? /kc -- Ken Chase - ken(a)heavycomputing.ca - +1 416 897 6284 - Toronto CANADA Heavy Computing - Clued bandwidth, colocation and managed linux VPS @151 Front St. W.

2 1

IPv6 security ops panel and PGP key signing
by John Kristoff 28 Jan '10

28 Jan '10

Hi folks, I'm helping Barry Greene out with the ISP sec BoF this year and at least one of the items planned for that session is an IPv6 security operations panel/audience discussion. If the ISP sec BoF and IPv6 operations, particularly related to security, is of interest to you, I'd be interested in hearing about it off list. I'm also very interested in a couple more people volunteering to join the panel and help lead the discussion. You don't have to have all the answers, questions are OK too. I'll take any of those in advance so your's truly to can better perform the moderator role. Additionally, there is probably going to be at least a small handful of PGP key signing geeks wanting to exchange signatures during the meeting. I believe the PC will have something official scheduled, but you can exchange sigs at anytime. Usually there is a sticker on the badge (usually red if I recall) which marks someone as a PGP geek. If nothing else, for those that have never participated its a decent way to meet some new people face to face and see how well their ID photo came out. Add your "public" key to the keyring here: <http://biglumber.com/x/web?keyring=4670> John

1 0

Keeping up with New European IXP participants
by Serge Radovcic 28 Jan '10

28 Jan '10

The Euro-IX ASN database now has more than 5.100 entries in it of which almost 3.000 are unique ASNs. In an effort to make it a little easier for those peering or looking to peer at European IXPs to keep up the latest IXP participant additions, we have created a page that lists the latest entries to the Euro-IX database. This page also displays all ASNs that peer at more than 9 IXPs across Europe. Hope you find it useful. https://www.euro-ix.net/newasns.php Regards, Serge Oh BTW we also have a RSS feed of this page available

1 0

Strange Cisco 6503 problem
by Dean Belev 28 Jan '10

28 Jan '10

Hi all, We experienced a strange problem with one of our Cisco 6503 routers - right after the terminal PC connected to the router via console is rebooted the router reboots itself. Even when there is no Eth connection to the PC the situations is the same - reboot follows. I tried to check the messages the router sends: *: %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 31 seconds [1/0] :: No EOBC input, dump debuginfo, interval 10, times 3 : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 60 seconds [1/0] : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 90 seconds [1/0] : %FIB-3-FIBDISABLE: Fatal error, slot/cpu 1/0: IPC Failure: timeout : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 120 seconds [1/0] : %CPU_MONITOR-6-NOT_HEARD: CPU_MONITOR messages have not been heard for 150 seconds [1/0]* All the possible reasons according to Cisco that may caused that case will be checked soon because the router is in operational mode although some of them looks strange: /*CPU_MONITOR-3-TIMED_OUT or CPU_MONITOR-6-NOT_HEARD Problem The switch reports these error messages: CPU_MONITOR-3-TIMED_OUT: CPU monitor messages have failed, resetting system CPU_MONITOR-6-NOT_HEARD: CPU monitor messages have not been heard for [dec] seconds Description These messages indicate that CPU monitor messages have not been heard for a significant amount of time. A time-out most probably occurs, which resets the system. [dec] is the number of seconds. The problem possibly occurs because of these reasons: * Badly seated line card or module * Bad ASIC or bad backplane * Software bugs * Parity error * High traffic in the Ethernet out of band channel (EOBC) channel The EOBC channel is a half duplex channel that services many other functions, which includes Simple Network Management Protocol (SNMP) traffic and packets that are destined to the switch. If the EOBC channel is full of messages because of a storm of SNMP traffic, then the channel is subjected to collisions. When this happens, EOBC is possibly not able to carry IPC messages. This makes the switch display the error message. Workaround Reseat the line card or module. If a maintenance window can be scheduled, reset the switch in order to clear any transient issues. ######################################### Error Message %ERR_DET-5-ERR_DET_NO_EOBC_INPUT: No EOBC input, dump debuginfo, interval %u, times %u Explanation No Ethernet Out-of-Band Channel (EOBC) input was received. Debugging information will be dumped. Recommended Action No action is required.*/ I'm curious if some of you faced such a problem - reboot of the router caused by the console connection. Here is some brief info about the router: *Supervisor:* Mod Ports Card Type Model --- ----- -------------------------------------- ------------------ ----------- 1 9 Supervisor Engine 32 8GE (Active) WS-SUP32-GE-3B *Processor:* cisco WS-C6503-E (R7000) processor *IOS:* IOS (tm) s3223_rp Software (s3223_rp-ADVENTERPRISEK9_WAN-M), Version 12.2(18)SXF8, RELEASE SOFTWARE (fc2) Thank you in advance for all your replays. Best~

1 0