- Test - lists.nanog.org

Re: netflow in the core used for surveillance
by Avi Freedman 30 Aug '21

30 Aug '21

Hi, all. Re: last week's thread on the Vice article - I can only speak for Kentik, and *we* don't resell or give 3rd party access to NetFlow data from our hundreds of customers. And never have. But there is definitely interest out there. We do get approached about it periodically and always say no. Mostly by commercial vendors and not (at least directly) by governmental bodies. Of course, our *customers* could in theory share their data via API key, or by using our outbound streaming firehose. But I've never talked to a customer who wanted to share their flow data with a 3rd party. Usually by far the opposite. The closest thing to this that our customers do ask about is re: aggregate community views, which people could contribute to to help themselves and the community. While we don't do this now, if and when we do it: 1) won't be with raw data, 2) will be opt-in only, 3) will be designed with customers and have open methodology; and 4) will be likely with synthetic test, BGP, device metrics, and other non-flow data to start. Thanks, Avi

1 0

What is your preferred outage tracking service? (Hurricane Ida)
by Sean Donelan 30 Aug '21

30 Aug '21

Netblocks is reporting connectivity in New Orleans LA is at 72% of normal as Hurricane Ida makes landfall. https://twitter.com/netblocks/status/1432038858460442625 There are per-incident things, like the outages mailing list and downdetector.com. And some academic outage discovery projects such as RIPE, IODA, etc. The old outage dashboards seem to have been bought, merged and disappeared. What is your preferred long-term Internet outage tracking source?

4 3

Weekly Routing Table Report
by cscora＠apnic.net 27 Aug '21

27 Aug '21

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 28 Aug, 2021 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 860552 Prefixes after maximum aggregation (per Origin AS): 325697 Deaggregation factor: 2.64 Unique aggregates announced (without unneeded subnets): 413582 Total ASes present in the Internet Routing Table: 71880 Prefixes per ASN: 11.97 Origin-only ASes present in the Internet Routing Table: 61776 Origin ASes announcing only one prefix: 25491 Transit ASes present in the Internet Routing Table: 10104 Transit-only ASes present in the Internet Routing Table: 331 Average AS path length visible in the Internet Routing Table: 4.3 Max AS path length visible: 37 Max AS path prepend of ASN (141827) 33 Prefixes from unregistered ASNs in the Routing Table: 1009 Number of instances of unregistered ASNs: 1014 Number of 32-bit ASNs allocated by the RIRs: 37049 Number of 32-bit ASNs visible in the Routing Table: 30796 Prefixes from 32-bit ASNs in the Routing Table: 142979 Number of bogon 32-bit ASNs visible in the Routing Table: 26 Special use prefixes present in the Routing Table: 1 Prefixes being announced from unallocated address space: 510 Number of addresses announced to Internet: 3037760640 Equivalent to 181 /8s, 16 /16s and 140 /24s Percentage of available address space announced: 82.1 Percentage of allocated address space announced: 82.1 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.5 Total number of prefixes smaller than registry allocations: 285737 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 231019 Total APNIC prefixes after maximum aggregation: 65949 APNIC Deaggregation factor: 3.50 Prefixes being announced from the APNIC address blocks: 226547 Unique aggregates announced from the APNIC address blocks: 90942 APNIC Region origin ASes present in the Internet Routing Table: 11889 APNIC Prefixes per ASN: 19.06 APNIC Region origin ASes announcing only one prefix: 3374 APNIC Region transit ASes present in the Internet Routing Table: 1676 Average APNIC Region AS path length visible: 4.5 Max APNIC Region AS path length visible: 37 Number of APNIC region 32-bit ASNs visible in the Routing Table: 7045 Number of APNIC addresses announced to Internet: 772854528 Equivalent to 46 /8s, 16 /16s and 211 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-147769 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 251710 Total ARIN prefixes after maximum aggregation: 115152 ARIN Deaggregation factor: 2.19 Prefixes being announced from the ARIN address blocks: 251301 Unique aggregates announced from the ARIN address blocks: 119679 ARIN Region origin ASes present in the Internet Routing Table: 18898 ARIN Prefixes per ASN: 13.30 ARIN Region origin ASes announcing only one prefix: 6875 ARIN Region transit ASes present in the Internet Routing Table: 1951 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 28 Number of ARIN region 32-bit ASNs visible in the Routing Table: 4086 Number of ARIN addresses announced to Internet: 1268211200 Equivalent to 75 /8s, 151 /16s and 94 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-401308 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 239034 Total RIPE prefixes after maximum aggregation: 112092 RIPE Deaggregation factor: 2.13 Prefixes being announced from the RIPE address blocks: 235555 Unique aggregates announced from the RIPE address blocks: 144580 RIPE Region origin ASes present in the Internet Routing Table: 28044 RIPE Prefixes per ASN: 8.40 RIPE Region origin ASes announcing only one prefix: 12059 RIPE Region transit ASes present in the Internet Routing Table: 3907 Average RIPE Region AS path length visible: 4.3 Max RIPE Region AS path length visible: 29 Number of RIPE region 32-bit ASNs visible in the Routing Table: 10369 Number of RIPE addresses announced to Internet: 711094656 Equivalent to 42 /8s, 98 /16s and 113 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-213403 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 111759 Total LACNIC prefixes after maximum aggregation: 26575 LACNIC Deaggregation factor: 4.21 Prefixes being announced from the LACNIC address blocks: 112716 Unique aggregates announced from the LACNIC address blocks: 47103 LACNIC Region origin ASes present in the Internet Routing Table: 10786 LACNIC Prefixes per ASN: 10.45 LACNIC Region origin ASes announcing only one prefix: 2654 LACNIC Region transit ASes present in the Internet Routing Table: 2099 Average LACNIC Region AS path length visible: 4.8 Max LACNIC Region AS path length visible: 29 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 8439 Number of LACNIC addresses announced to Internet: 176646144 Equivalent to 10 /8s, 135 /16s and 104 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-272796 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 26020 Total AfriNIC prefixes after maximum aggregation: 5183 AfriNIC Deaggregation factor: 5.02 Prefixes being announced from the AfriNIC address blocks: 33923 Unique aggregates announced from the AfriNIC address blocks: 10826 AfriNIC Region origin ASes present in the Internet Routing Table: 1524 AfriNIC Prefixes per ASN: 22.26 AfriNIC Region origin ASes announcing only one prefix: 529 AfriNIC Region transit ASes present in the Internet Routing Table: 305 Average AfriNIC Region AS path length visible: 5.1 Max AfriNIC Region AS path length visible: 32 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 857 Number of AfriNIC addresses announced to Internet: 108622592 Equivalent to 6 /8s, 121 /16s and 115 /24s AfriNIC AS Blocks 36864-37887, 327680-329727 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 9808 7923 9000 57 CMNET-GD Guangdong Mobile Communication 7545 5816 785 675 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4707 4192 74 ERX-CERNET-BKB China Education and Rese 7552 3608 1330 20 VIETEL-AS-AP Viettel Group, VN 7713 3535 1023 56 TELKOMNET-AS-AP PT Telekomunikasi Indon 45899 2802 1897 56 VNPT-AS-VN VNPT Corp, VN 4766 2497 11121 584 KIXS-AS-KR Korea Telecom, KR 9498 2360 502 238 BBIL-AP BHARTI Airtel Ltd., IN 45090 2129 1198 75 CNNIC-TENCENT-NET-AP Shenzhen Tencent C 4755 2116 437 194 TATACOMM-AS TATA Communications formerl Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 16509 5483 9667 2436 AMAZON-02, US 11492 4687 310 757 CABLEONE, US 22773 3981 3031 273 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3975 264 32 VIASAT-SP-BACKBONE, US 16625 3581 1853 2490 AKAMAI-AS, US 6327 3364 1313 62 SHAW, CA 30036 2581 374 197 MEDIACOM-ENTERPRISE-BUSINESS, US 209 2516 5029 452 CENTURYLINK-US-LEGACY-QWEST, US 5972 2290 486 814 DNIC-ASBLK-05800-06055, US 20115 2244 3048 506 CHARTER-20115, US Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 6785 1726 143 UNI2-AS, ES 20940 3760 3348 219 AKAMAI-ASN1, NL 39891 3267 187 22 ALJAWWALSTC-AS, SA 8551 2926 378 39 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 12389 2905 2278 894 ROSTELECOM-AS, RU 9009 2483 260 1328 M247, GB 34984 2219 357 595 TELLCOM-AS, TR 61317 1763 265 971 ASDETUK www.heficed.com, GB 58224 1627 889 570 TCI, IR 13188 1610 100 27 TRIOLAN, UA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8856 3461 583 Uninet S.A. de C.V., MX 10620 3411 523 671 Telmex Colombia S.A., CO 11830 2500 369 62 Instituto Costarricense de Electricidad 13999 1822 415 474 Mega Cable, S.A. de C.V., MX 6503 1509 359 477 Axtel, S.A.B. de C.V., MX 28573 1457 2311 235 CLARO S.A., BR 3816 1240 652 152 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 26615 1105 2351 134 TIM SA, BR 6147 1087 369 22 Telefonica del Peru S.A.A., PE 11664 982 194 437 Techtel LMDS Comunicaciones Interactiva Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1638 393 22 LINKdotNET-AS, EG 24835 1464 503 31 RAYA-AS, EG 36992 1310 1489 267 ETISALAT-MISR, EG 36903 1183 537 110 MT-MPLS, MA 29571 757 68 11 ORANGE-COTE-IVOIRE, CI 6713 613 1863 34 IAM-AS, MA 36935 583 522 40 Vodafone-, EG 15399 500 49 28 WANANCHI-, KE 37342 469 32 1 MOVITEL, MZ 2018 337 319 74 TENET-1, ZA Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 8856 3461 583 Uninet S.A. de C.V., MX 9808 7923 9000 57 CMNET-GD Guangdong Mobile Communication 12479 6785 1726 143 UNI2-AS, ES 7545 5816 785 675 TPG-INTERNET-AP TPG Telecom Limited, AU 16509 5483 9667 2436 AMAZON-02, US 4538 4707 4192 74 ERX-CERNET-BKB China Education and Rese 11492 4687 310 757 CABLEONE, US 22773 3981 3031 273 ASN-CXA-ALL-CCI-22773-RDC, US 7155 3975 264 32 VIASAT-SP-BACKBONE, US 20940 3760 3348 219 AKAMAI-ASN1, NL Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggregation summary ----------------------------------------- ASN No of nets Net Savings Description 9808 7923 7866 CMNET-GD Guangdong Mobile Communication Co.Ltd. 12479 6785 6642 UNI2-AS, ES 7545 5816 5141 TPG-INTERNET-AP TPG Telecom Limited, AU 4538 4707 4633 ERX-CERNET-BKB China Education and Research Net 7155 3975 3943 VIASAT-SP-BACKBONE, US 11492 4687 3930 CABLEONE, US 22773 3981 3708 ASN-CXA-ALL-CCI-22773-RDC, US 7552 3608 3588 VIETEL-AS-AP Viettel Group, VN 20940 3760 3541 AKAMAI-ASN1, NL 7713 3535 3479 TELKOMNET-AS-AP PT Telekomunikasi Indonesia, ID Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Net Originated Transit AS Transit AS Name 62828 UNALLOCATED 8.21.130.0/24 3356 LEVEL3, US 393266 UNALLOCATED 8.23.52.0/24 46887 LIGHTOWER, US 18604 UNALLOCATED 8.25.204.0/24 3356 LEVEL3, US 394936 UNALLOCATED 8.33.224.0/24 174 COGENT-174, US 54338 UNALLOCATED 8.33.241.0/24 6461 ZAYO-6461, US 23061 UNALLOCATED 8.39.119.0/24 3356 LEVEL3, US 1782 UNALLOCATED 8.42.19.0/24 46887 LIGHTOWER, US 395438 UNALLOCATED 8.42.206.0/24 3356 LEVEL3, US 40544 UNALLOCATED 12.0.33.0/24 6461 ZAYO-6461, US 15132 UNALLOCATED 12.9.150.0/24 1239 SPRINTLINK, US Complete listing at http://thyme.rand.apnic.net/current/data-badAS Prefixes from private and non-routed address space (Global) ----------------------------------------------------------- Prefix Origin AS Description 192.88.99.0/24 6939 HURRICANE, US Complete listing at http://thyme.rand.apnic.net/current/data-dsua Advertised Unallocated Addresses -------------------------------- Unassigned Network ASN Information AS Name 23.141.0.0/24 Origin: 395350 UNASSIGNED 23.141.0.0/24 Transit: 11426 TWC-11426-CAROLINAS, US 23.177.96.0/24 Origin: 397300 UNASSIGNED 23.177.96.0/24 Transit: 33387 NOCIX, US 27.100.7.0/24 Origin: 56096 UNASSIGNED 27.100.7.0/24 Transit: 45455 TH-2S1N-AP Two S One N Co Ltd, Internet 27.126.156.0/22 Origin: 55827 UNASSIGNED 27.126.156.0/22 Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala 27.126.156.0/23 Origin: 55827 UNASSIGNED 27.126.156.0/23 Transit: 9930 TTNET-MY TIME dotCom Berhad No. 14, Jala Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:16 /9:13 /10:41 /11:101 /12:303 /13:589 /14:1195 /15:2004 /16:13421 /17:8204 /18:13966 /19:25393 /20:42461 /21:50826 /22:107094 /23:91803 /24:501675 /25:1447 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 5719 6785 UNI2-AS, ES 11492 3654 4687 CABLEONE, US 6327 3175 3364 SHAW, CA 8151 3168 8856 Uninet S.A. de C.V., MX 7155 3063 3975 VIASAT-SP-BACKBONE, US 22773 2981 3981 ASN-CXA-ALL-CCI-22773-RDC, US 39891 2803 3267 ALJAWWALSTC-AS, SA 8551 2392 2926 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 30036 2233 2581 MEDIACOM-ENTERPRISE-BUSINESS, US 11830 1933 2500 Instituto Costarricense de Electricidad y Telec Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1909 2:1101 3:142 4:20 5:3577 6:84 7:5 8:1540 9:1 11:164 12:1747 13:387 14:2281 15:99 16:21 17:343 18:105 20:124 21:4 22:188 23:5007 24:2458 25:2 27:2505 29:19 31:2347 32:113 34:1 35:47 36:1718 37:3798 38:2202 39:640 40:165 41:3816 42:966 43:2075 44:281 45:15421 46:3665 47:349 48:7 49:1623 50:1817 51:97 52:1280 54:251 55:740 56:4 57:53 58:1732 59:1201 60:932 61:2295 62:2312 63:1956 64:5366 65:2363 66:4985 67:2875 68:1168 69:4124 70:1362 71:676 72:3152 74:2621 75:1500 76:699 77:2045 78:1668 79:2258 80:1865 81:1544 82:1364 83:1148 84:1293 85:2746 86:711 87:1805 88:969 89:3015 90:511 91:7388 92:1801 93:2550 94:3126 95:3484 96:1303 97:350 98:979 99:961 100:76 101:1048 102:1620 103:26811 104:3989 105:437 106:812 107:2280 108:728 109:3874 110:2032 111:3145 112:1935 113:1422 114:1467 115:1912 116:1892 117:2375 118:2328 119:1888 120:1510 121:1064 122:2520 123:2161 124:1600 125:2066 128:1340 129:1365 130:868 131:2020 132:758 133:363 134:1794 135:301 136:778 137:854 138:2380 139:1184 140:751 141:1207 142:1204 143:1342 144:1268 145:322 146:1492 147:1413 148:2163 149:1497 150:821 151:1082 152:1649 153:428 154:3007 155:1323 156:1680 157:1222 158:969 159:2010 160:2344 161:1238 162:3387 163:1097 164:1555 165:1414 166:595 167:1783 168:3638 169:701 170:4363 171:808 172:2718 173:2908 174:1018 175:1100 176:3215 177:4445 178:2973 179:1873 180:2263 181:2625 182:3217 183:2019 184:2417 185:18735 186:4225 187:3160 188:3314 189:2908 190:8721 191:1350 192:10706 193:8297 194:6748 195:4854 196:2898 197:2125 198:6007 199:5975 200:7369 201:5232 202:10571 203:10067 204:4597 205:3381 206:3740 207:3342 208:4021 209:4704 210:4184 211:2344 212:3748 213:3446 214:1166 215:60 216:6328 217:2581 218:1213 219:679 220:1953 221:963 222:856 223:2034 End of report

1 0

Amazon Contact?
by Chris Cappuccio 26 Aug '21

26 Aug '21

Looking to see if I can get someone at Amazon to help. Amazon Video is starting to think our CGN exit range is a VPN service (It isn't) Chris

4 3

Tools and procedure for Network testing
by Joe Yabuki 26 Aug '21

26 Aug '21

Hi all, I just wanted to know how you do your network testing when validating a new design/technology in your Network, especially to ensure that it will meet your SLA requirements for example that a voice call will not be dropped in case of a network element failure ? Do you test with IXIA, multiping, launch somes VM using ping with -i option, Windows ping by setting the timeout interval, or may be directly from the Network device (routers...), Many thanks, Joe

5 7

netflow in the core used for surveillance
by Randy Bush 26 Aug '21

26 Aug '21

https://www.vice.com/en/article/jg84yy/data-brokers-netflow-data-team-cymru used to get dissidents, activists, and journos killed at&t, comcast, ... zayo, please tell us you do not do this. randy

13 13

Network Documentation Application Recommendations
by JoeSox 25 Aug '21

25 Aug '21

Hello, I first learned of NETDOT by Oregon State from this list but I have lost the prebuilt VM image I had on file and looks like the source code out on github doesn't compile anymore. So I liked how NETDOT was 1) Free 2) Created Topology image on the fly 3) Connected to network devices via SNMP to get version and interface details. Any NETDOT replacement recommendations? I have an https://www.networksecuritytoolkit.org box but not sure if any of the builtin apps can do it yet, I don't remember seeing one in the build but I may be missing it. -- Thank You, Joe

1 0

Amazon Prime Video IP reputation
by Eric C. Miller 25 Aug '21

25 Aug '21

Does anybody know which IP reputation service Amazon uses for Prime video? Within the last couple of hours several of our CGNAT publics are showing up as VPN or proxy when someone tries to watch Amazon video. Any help would be appreciated! Thank you! Eric

6 8

Tropical Storm Henri communications status report
by Sean Donelan 23 Aug '21

23 Aug '21

No PSAPs are reported as being affected. 0.5% of the cell sites out of service. Cell sites affected Connecticut Massachustts New York Rhode Island 3,785 6,698 2,025 1,005 Cable and wireline systems affected (subscriber count) Connecticut Massachusetts New York Rhode Island 7,648 1,321 4,573 13,167 No AM/FM or TV stations reported out of service.

1 0

Newbie Questions: How-to monitor/control unauthorized uses of our IPs and DNS zones?
by Pirawat WATANAPONGSE 23 Aug '21

23 Aug '21

Dear Gurus, Background Information Part: We rent an IP Address Block and a DNS zone. [We have to pay the annual fees, so they are renting, yes? :-) ] We run our own DNS authoritative server, with DNSsec on. We register our IP block on both IRR and ROA, and monitor them both for ‘poisoning records’. Authority over DNS records, ROAs, and BGP table are with us, but authority over the Web Servers are (naturally) not. Question Part: 1. How (or where) can I monitor/control such that no one can ‘map’ my IP addresses to external FQDNs [hijacking my IPs] without me knowing about it? 1.1. My understanding is that, as long as I control the authoritative (DNSsec)server and people out there validate the DNS responses, hijacking my IPs outright for use somewhere else is (theoretically) impossible, yes? [leaving out Route Hijacking for now] 2. But, web admins can still essentially ‘rent out’ part or whole of my websites by hosting 'forreign' pages/codes and allowing in ‘external redirection’ from outside (to use my hardware! my IPs!) anyway, yes? 3. How (or where) can I monitor/control such that no one can ‘map’ FQDNs from within my DNS zone to external IP addresses [hijacking my hostnames] without me knowing about it? 3.1. My understanding is that, web admins can write all sorts of ‘redirect’ in such a way that parts or even my whole websites can be ‘hosted’ on external IPs/hardware, yes? 4. Does that mean I need a big Web Application Firewall (WAF) or something worse to monitor/control those above scenarios? The thing is, no one should be able to use organization resources [IPs, FQDNs, and Web Services, for a start] for his/her own purpose without asking permission. Thanks in advance for any pointers, -- Pirawat.

10 11