- Test - lists.nanog.org

IPv6 nameserver glue chez netsol
by William Waites 26 Jul '08

26 Jul '08

Hi all, Does anyone have a contact or a known administrative path to get AAAA NS glue added to domains registered with Network Solutions? Or is the only choice to move the domains in question to a different registrar? (Perhaps more appropriate for dns-operations, but as it is an operational question and my subscription request is awaiting moderator approval, I hope nobody will mind my posting it here) Cheers, -w

3 2

Weekly Routing Table Report
by Routing Analysis Role Account 25 Jul '08

25 Jul '08

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 26 Jul, 2008 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 263817 Prefixes after maximum aggregation: 129203 Deaggregation factor: 2.04 Unique aggregates announced to Internet: 128902 Total ASes present in the Internet Routing Table: 28747 Prefixes per ASN: 9.18 Origin-only ASes present in the Internet Routing Table: 25067 Origin ASes announcing only one prefix: 12114 Transit ASes present in the Internet Routing Table: 3680 Transit-only ASes present in the Internet Routing Table: 80 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 18 Max AS path prepend of ASN ( 3816) 15 Prefixes from unregistered ASNs in the Routing Table: 585 Unregistered ASNs in the Routing Table: 213 Number of 32-bit ASNs allocated by the RIRs: 51 Prefixes from 32-bit ASNs in the Routing Table: 8 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 779 Number of addresses announced to Internet: 1879804352 Equivalent to 112 /8s, 11 /16s and 137 /24s Percentage of available address space announced: 50.7 Percentage of allocated address space announced: 61.6 Percentage of available address space allocated: 82.3 Percentage of address space in use by end-sites: 72.8 Total number of prefixes smaller than registry allocations: 128837 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 60552 Total APNIC prefixes after maximum aggregation: 22662 APNIC Deaggregation factor: 2.67 Prefixes being announced from the APNIC address blocks: 57525 Unique aggregates announced from the APNIC address blocks: 25903 APNIC Region origin ASes present in the Internet Routing Table: 3307 APNIC Prefixes per ASN: 17.39 APNIC Region origin ASes announcing only one prefix: 877 APNIC Region transit ASes present in the Internet Routing Table: 519 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 368888864 Equivalent to 21 /8s, 252 /16s and 204 /24s Percentage of available APNIC address space announced: 78.5 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 121160 Total ARIN prefixes after maximum aggregation: 65083 ARIN Deaggregation factor: 1.86 Prefixes being announced from the ARIN address blocks: 90677 Unique aggregates announced from the ARIN address blocks: 34897 ARIN Region origin ASes present in the Internet Routing Table: 12311 ARIN Prefixes per ASN: 7.37 ARIN Region origin ASes announcing only one prefix: 4750 ARIN Region transit ASes present in the Internet Routing Table: 1154 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 15 Number of ARIN addresses announced to Internet: 353191456 Equivalent to 21 /8s, 13 /16s and 70 /24s Percentage of available ARIN address space announced: 72.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 173/8, 174/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 56776 Total RIPE prefixes after maximum aggregation: 34509 RIPE Deaggregation factor: 1.65 Prefixes being announced from the RIPE address blocks: 51972 Unique aggregates announced from the RIPE address blocks: 34924 RIPE Region origin ASes present in the Internet Routing Table: 11625 RIPE Prefixes per ASN: 4.47 RIPE Region origin ASes announcing only one prefix: 6092 RIPE Region transit ASes present in the Internet Routing Table: 1745 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 18 Number of RIPE addresses announced to Internet: 367204704 Equivalent to 21 /8s, 227 /16s and 25 /24s Percentage of available RIPE address space announced: 84.2 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-48127 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 20746 Total LACNIC prefixes after maximum aggregation: 5244 LACNIC Deaggregation factor: 3.96 Prefixes being announced from the LACNIC address blocks: 18960 Unique aggregates announced from the LACNIC address blocks: 10738 LACNIC Region origin ASes present in the Internet Routing Table: 971 LACNIC Prefixes per ASN: 19.53 LACNIC Region origin ASes announcing only one prefix: 318 LACNIC Region transit ASes present in the Internet Routing Table: 165 Average LACNIC Region AS path length visible: 4.1 Max LACNIC Region AS path length visible: 18 Number of LACNIC addresses announced to Internet: 53835776 Equivalent to 3 /8s, 53 /16s and 120 /24s Percentage of available LACNIC address space announced: 53.5 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 4001 Total AfriNIC prefixes after maximum aggregation: 1217 AfriNIC Deaggregation factor: 3.29 Prefixes being announced from the AfriNIC address blocks: 4304 Unique aggregates announced from the AfriNIC address blocks: 1861 AfriNIC Region origin ASes present in the Internet Routing Table: 242 AfriNIC Prefixes per ASN: 17.79 AfriNIC Region origin ASes announcing only one prefix: 77 AfriNIC Region transit ASes present in the Internet Routing Table: 47 Average AfriNIC Region AS path length visible: 3.9 Max AfriNIC Region AS path length visible: 14 Number of AfriNIC addresses announced to Internet: 12518400 Equivalent to 0 /8s, 191 /16s and 4 /24s Percentage of available AfriNIC address space announced: 37.3 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1677 342 177 Videsh Sanchar Nigam Ltd. Aut 17488 1236 85 99 Hathway IP Over Cable Interne 9583 1145 86 482 Sify Limited 4766 853 6390 347 Korea Telecom (KIX) 23577 830 35 702 Korea Telecom (ATM-MPLS) 4134 828 13603 337 CHINANET-BACKBONE 4780 711 351 63 Digital United Inc. 18101 710 167 33 Reliance Infocom Ltd Internet 9498 661 291 57 BHARTI BT INTERNET LTD. 4808 621 1120 138 CNCGROUP IP network: China169 Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3209 3359 213 bellsouth.net, inc. 209 2999 3859 623 Qwest 6298 1648 237 780 Cox Communicatons 4323 1486 1062 380 Time Warner Telecom 2386 1485 663 879 AT&T Data Communications Serv 7018 1412 5840 989 AT&T WorldNet Services 1785 1227 510 104 AppliedTheory Corporation 11492 1208 149 28 Cable One 20115 1118 1082 572 Charter Communications 18566 1045 296 10 Covad Communications Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 413 1792 371 TDC Tele Danmark 3301 332 1460 303 TeliaNet Sweden 3320 322 7047 270 Deutsche Telekom AG 8452 320 188 11 TEDATA 8866 317 77 21 Bulgarian Telecommunication C 5462 296 666 27 Telewest Broadband 8551 288 270 38 Bezeq International 3215 277 2758 90 France Telecom Transpac 680 274 2047 264 DFN-IP service G-WiN 6746 267 125 242 Dynamic Network Technologies, Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1384 2590 225 UniNet S.A. de C.V. 11830 612 299 9 Instituto Costarricense de El 22047 565 270 14 VTR PUNTO NET S.A. 7303 472 233 60 Telecom Argentina Stet-France 16814 426 27 10 NSS, S.A. 6471 415 85 48 ENTEL CHILE S.A. 11172 408 118 71 Servicios Alestra S.A de C.V 10620 407 107 56 TVCABLE BOGOTA 14117 375 23 9 Telefonica del Sur S.A. 20299 331 23 104 NEWCOM AMERICAS Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 478 61 25 LINKdotNET AS number 20858 398 34 3 EgyNet 3741 268 855 223 The Internet Solution 2018 209 197 131 Tertiary Education Network 6713 141 135 11 Itissalat Al-MAGHRIB 33783 135 10 12 EEPAD TISP TELECOM & INTERNET 5713 131 556 76 Telkom SA Ltd 5536 120 8 17 Internet Egypt Network 33776 115 6 7 Starcomms Nigeria Limited 29571 107 13 8 Ci Telecom Autonomous system Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 6389 3209 3359 213 bellsouth.net, inc. 209 2999 3859 623 Qwest 4755 1677 342 177 Videsh Sanchar Nigam Ltd. Aut 6298 1648 237 780 Cox Communicatons 4323 1486 1062 380 Time Warner Telecom 2386 1485 663 879 AT&T Data Communications Serv 7018 1412 5840 989 AT&T WorldNet Services 8151 1384 2590 225 UniNet S.A. de C.V. 17488 1236 85 99 Hathway IP Over Cable Interne 1785 1227 510 104 AppliedTheory Corporation Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 209 2999 2376 Qwest 4755 1677 1500 Videsh Sanchar Nigam Ltd. Aut 11492 1208 1180 Cable One 8151 1384 1159 UniNet S.A. de C.V. 17488 1236 1137 Hathway IP Over Cable Interne 1785 1227 1123 AppliedTheory Corporation 4323 1486 1106 Time Warner Telecom 18566 1045 1035 Covad Communications 22773 972 908 Cox Communications, Inc. 6298 1648 868 Cox Communicatons Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 701 UUNET Technologies, 22492 UNALLOCATED 12.2.46.0/24 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.20.55.0/24 6517 Yipes Communications 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.31.25.0/24 6517 Yipes Communications 27220 UNALLOCATED 12.35.204.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.48.244.0/23 7843 Adelphia Corp. 24.48.246.0/24 7843 Adelphia Corp. 24.51.159.0/24 7843 Adelphia Corp. 24.54.23.0/24 7843 Adelphia Corp. 24.54.224.0/19 20001 HoldCo LLC - Road Runner 24.75.160.0/19 7843 Adelphia Corp. 24.75.192.0/18 7843 Adelphia Corp. 24.142.40.0/21 7018 AT&T WorldNet Services 24.142.160.0/19 7018 AT&T WorldNet Services 24.246.0.0/17 7018 AT&T WorldNet Services Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:9 /10:16 /11:45 /12:145 /13:288 /14:519 /15:1044 /16:10020 /17:4337 /18:7532 /19:15887 /20:18548 /21:18162 /22:22735 /23:23709 /24:138084 /25:837 /26:1019 /27:767 /28:82 /29:7 /30:1 /31:0 /32:6 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 6389 2040 3209 bellsouth.net, inc. 209 1750 2999 Qwest 6298 1624 1648 Cox Communicatons 11492 1190 1208 Cable One 2386 1182 1485 AT&T Data Communications Serv 17488 1048 1236 Hathway IP Over Cable Interne 4755 1029 1677 Videsh Sanchar Nigam Ltd. Aut 18566 1026 1045 Covad Communications 6478 1006 1015 AT&T Worldnet Services 9583 1001 1145 Sify Limited Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:8 8:126 12:2107 13:2 15:22 16:3 17:5 18:13 20:35 24:1063 32:60 38:467 40:92 41:661 43:1 44:2 47:12 52:3 55:3 56:3 57:25 58:521 59:506 60:453 61:1011 62:1196 63:2042 64:3251 65:2391 66:3504 67:1227 68:744 69:2271 70:804 71:117 72:1965 73:5 74:1042 75:155 76:306 77:758 78:764 79:211 80:938 81:824 82:599 83:377 84:566 85:965 86:409 87:690 88:338 89:1323 90:15 91:1382 92:231 93:710 94:88 96:48 97:34 98:266 99:4 112:1 113:1 114:90 115:19 116:864 117:323 118:189 119:426 120:56 121:567 122:801 123:365 124:903 125:1177 128:361 129:198 130:134 131:410 132:66 133:9 134:186 135:33 136:224 137:92 138:146 139:93 140:494 141:99 142:408 143:332 144:393 145:51 146:366 147:156 148:517 149:196 150:125 151:180 152:143 153:136 154:10 155:252 156:175 157:290 158:187 159:237 160:279 161:118 162:215 163:155 164:518 165:452 166:319 167:331 168:621 169:139 170:426 171:32 172:10 188:1 189:297 190:2197 192:5797 193:4098 194:3229 195:2536 196:1025 198:3722 199:3279 200:5586 201:1463 202:7656 203:8052 204:3983 205:2128 206:2333 207:2753 208:3451 209:3515 210:2583 211:1073 212:1412 213:1583 214:164 215:49 216:4468 217:1208 218:342 219:423 220:1055 221:451 222:312 End of report

1 0

Re: Paul Vixie: Re: [dns-operations] DNS issue accidentally leaked?
by Nathan Ward 25 Jul '08

25 Jul '08

On 25/07/2008, at 6:45 AM, Scott Berkman wrote: > Is it just me or is the test page below down now? > > Or maybe some poisoned the NS record for dns-oarc.net and sent it to > nowhere to stop testing! (J/K since I can get to the rest of the page > fine). Hmm, cute. So uh, is this patch available for download over HTTPS with a key that was generated by the vendor and signed by well trusted root CAs on a boxes with OpenSSL versions not released by Debian? PATCH NOW PATCH NOW seems like a fantastic way to get nefarious code deployed in really, really interesting places. :-) -- Nathan Ward

2 1

BGP Update Report
by cidr-report＠potaroo.net 25 Jul '08

25 Jul '08

BGP Update Report Interval: 23-Jun-08 -to- 24-Jul-08 (32 days) Observation Point: BGP Peering with AS2.0 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS4538 209277 2.9% 41.8 -- ERX-CERNET-BKB China Education and Research Network Center 2 - AS9583 128490 1.8% 102.0 -- SIFY-AS-IN Sify Limited 3 - AS17488 89755 1.2% 67.8 -- HATHWAY-NET-AP Hathway IP Over Cable Internet 4 - AS5691 72923 1.0% 5609.5 -- MITRE-AS-5 - The MITRE Corporation 5 - AS8866 54412 0.8% 170.0 -- BTC-AS Bulgarian Telecommunication Company Plc. 6 - AS1803 53745 0.8% 42.6 -- ICMNET-5 - Sprint 7 - AS7738 51681 0.7% 167.8 -- Telecomunicacoes da Bahia S.A. 8 - AS10396 50605 0.7% 272.1 -- COQUI-NET - DATACOM CARIBE, INC. 9 - AS4766 47226 0.7% 35.9 -- KIXS-AS-KR Korea Telecom 10 - AS17974 43642 0.6% 59.5 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 11 - AS4788 41901 0.6% 19.6 -- TMNET-AS-AP TM Net, Internet Service Provider 12 - AS12455 39692 0.6% 583.7 -- JAMBONET 13 - AS8151 38201 0.5% 27.1 -- Uninet S.A. de C.V. 14 - AS306 37889 0.5% 220.3 -- DNIC - DoD Network Information Center 15 - AS9051 37763 0.5% 231.7 -- IDM Autonomous System 16 - AS702 32637 0.5% 59.1 -- AS702 Verizon Business EMEA - Commercial IP service provider in Europe 17 - AS18231 32313 0.5% 133.5 -- EXATT-AS-AP IOL NETCOM LTD 18 - AS9394 29087 0.4% 19.0 -- CRNET CHINA RAILWAY Internet(CRNET) 19 - AS5803 28826 0.4% 170.6 -- DDN-ASNBLK - DoD Network Information Center 20 - AS1790 27067 0.4% 229.4 -- Sprint US TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS30850 12519 0.2% 6259.5 -- DESMIE-AS Hellenic Trasmission System Operator S.A. 2 - AS5691 72923 1.0% 5609.5 -- MITRE-AS-5 - The MITRE Corporation 3 - AS27245 10820 0.1% 5410.0 -- HEIDRICK-CHICAGO - HEIDRICK 4 - AS39105 4935 0.1% 4935.0 -- CLASS-AS SC Class Computers And Service SRL 5 - AS44656 4919 0.1% 4919.0 -- HOLOSFIND-ROMANIA HOLOSFIND SRL 6 - AS28361 4732 0.1% 4732.0 -- 7 - AS29910 4640 0.1% 4640.0 -- IACP - INTL. ASSN OF CHIEF OF POLICEI 8 - AS13620 22377 0.3% 4475.4 -- ASN-ELAN - Elan Communications, Inc. 9 - AS22678 3946 0.1% 3946.0 -- OSDE 10 - AS23082 19177 0.3% 3835.4 -- MPHI - Michigan Public Health Institute 11 - AS44194 3526 0.1% 3526.0 -- FREIFUNK-BERLIN-AS Freifunk Berlin 12 - AS27786 2623 0.0% 2623.0 -- SSA SISTEMAS S.A. 13 - AS32133 2381 0.0% 2381.0 -- JOHNSTONE-SUPPLY - Atwater Supply dba Johnstone Supply 14 - AS36988 6311 0.1% 2103.7 -- MILLICOM-SL 15 - AS30560 20321 0.3% 2032.1 -- GE-MS001 - General Electric Company 16 - AS38513 1999 0.0% 1999.0 -- LINTASARTA-AS-ID PT Aplikanusa Lintasarta 17 - AS25250 5996 0.1% 1998.7 -- GAMTEL-AS 18 - AS10571 3848 0.1% 1924.0 -- GEOACCESS-AS - GeoAccess 19 - AS36966 1740 0.0% 1740.0 -- Edgenet 20 - AS31065 12118 0.2% 1731.1 -- MCIT TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 192.12.120.0/24 72767 0.9% AS5691 -- MITRE-AS-5 - The MITRE Corporation 2 - 221.134.222.0/24 60891 0.8% AS9583 -- SIFY-AS-IN Sify Limited 3 - 83.228.71.0/24 42031 0.6% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 4 - 194.126.143.0/24 28311 0.4% AS9051 -- IDM Autonomous System 5 - 210.214.128.0/23 26278 0.3% AS9583 -- SIFY-AS-IN Sify Limited 6 - 221.128.192.0/18 25140 0.3% AS18231 -- EXATT-AS-AP IOL NETCOM LTD 7 - 210.214.144.0/24 17050 0.2% AS9583 -- SIFY-AS-IN Sify Limited 8 - 24.121.123.0/24 13701 0.2% AS25994 -- NPG-001 - NPG Cable, INC 9 - 195.47.233.0/24 12494 0.2% AS30850 -- DESMIE-AS Hellenic Trasmission System Operator S.A. 10 - 81.21.104.0/24 11265 0.1% AS31065 -- MCIT 11 - 203.63.26.0/24 11118 0.1% AS9747 -- EZINTERNET-AS-AP EZInternet Pty Ltd 12 - 63.84.91.0/24 10017 0.1% AS27245 -- HEIDRICK-CHICAGO - HEIDRICK 13 - 72.50.96.0/20 9739 0.1% AS10396 -- COQUI-NET - DATACOM CARIBE, INC. 14 - 196.42.48.0/20 9380 0.1% AS10396 -- COQUI-NET - DATACOM CARIBE, INC. 15 - 72.50.112.0/20 9259 0.1% AS10396 -- COQUI-NET - DATACOM CARIBE, INC. 16 - 216.255.56.0/21 8868 0.1% AS7106 -- OHIOBRIGHTNET - Com Net, Inc. 17 - 213.91.175.0/24 7610 0.1% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 18 - 199.244.140.0/24 7561 0.1% AS30560 -- GE-MS001 - General Electric Company 19 - 210.214.26.0/24 6973 0.1% AS9583 -- SIFY-AS-IN Sify Limited 20 - 203.101.87.0/24 6609 0.1% AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 25 Jul '08

25 Jul '08

This report has been generated at Fri Jul 25 21:14:54 2008 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 18-07-08 274967 173068 19-07-08 275133 173121 20-07-08 275963 173053 21-07-08 275076 173194 22-07-08 275273 173538 23-07-08 275415 173711 24-07-08 275500 173908 25-07-08 275453 173742 AS Summary 28884 Number of ASes in routing system 12209 Number of ASes announcing only one prefix 4986 Largest number of prefixes announced by an AS AS4538 : ERX-CERNET-BKB China Education and Research Network Center 88350976 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 25Jul08 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 275468 173778 101690 36.9% All ASes AS4538 4986 883 4103 82.3% ERX-CERNET-BKB China Education and Research Network Center AS6389 3211 573 2638 82.2% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS209 3018 685 2333 77.3% ASN-QWEST - Qwest AS4755 1685 248 1437 85.3% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS18566 1045 40 1005 96.2% COVAD - Covad Communications Co. AS17488 1233 345 888 72.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS22773 972 84 888 91.4% CCINET-2 - Cox Communications Inc. AS4323 1485 668 817 55.0% TWTC - tw telecom holdings, inc. AS8151 1382 576 806 58.3% Uninet S.A. de C.V. AS19262 929 222 707 76.1% VZGNI-TRANSIT - Verizon Internet Services Inc. AS11492 1208 516 692 57.3% CABLEONE - CABLE ONE AS1785 1226 536 690 56.3% AS-PAETEC-NET - PaeTec Communications, Inc. AS6298 1648 1023 625 37.9% COX-PHX - Cox Communications Inc. AS2386 1488 894 594 39.9% INS-AS - AT&T Data Communications Services AS18101 710 152 558 78.6% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS6478 1015 473 542 53.4% ATT-INTERNET3 - AT&T WorldNet Services AS4766 879 396 483 54.9% KIXS-AS-KR Korea Telecom AS4808 621 169 452 72.8% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS855 590 148 442 74.9% CANET-ASN-4 - Bell Aliant AS17676 524 82 442 84.4% GIGAINFRA BB TECHNOLOGY Corp. AS22047 565 128 437 77.3% VTR BANDA ANCHA S.A. AS7018 1433 1006 427 29.8% ATT-INTERNET4 - AT&T WorldNet Services AS9443 517 92 425 82.2% INTERNETPRIMUS-AS-AP Primus Telecommunications AS4780 714 318 396 55.5% SEEDNET Digital United Inc. AS4134 828 434 394 47.6% CHINANET-BACKBONE No.31,Jin-rong Street AS6197 954 576 378 39.6% BATI-ATL - BellSouth Network Solutions, Inc AS4804 458 82 376 82.1% MPX-AS Microplex PTY LTD AS24560 533 160 373 70.0% AIRTELBROADBAND-AS-AP Bharti Airtel Ltd. AS3602 456 84 372 81.6% AS3602-RTI - Rogers Telecom Inc. AS4668 680 319 361 53.1% LGNET-AS-KR LG CNS Total 36993 11912 25081 67.8% Top 30 total Possible Bogus Routes 24.38.0.0/17 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.48.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.48.244.0/23 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.48.246.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.51.159.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.54.23.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.54.224.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 24.75.160.0/19 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.75.192.0/18 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.142.40.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.142.160.0/19 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.141.42.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.115.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS6453 GLOBEINTERNET TATA Communications 64.7.120.0/21 AS6453 GLOBEINTERNET TATA Communications 64.50.128.0/18 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.64.159.0/24 AS32004 BIG-ASN - Business Information Group, Inc. 64.144.0.0/15 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 65.36.8.0/24 AS5696 65.36.9.0/24 AS5696 65.36.33.0/24 AS5696 65.36.52.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.64.96.0/20 AS3790 RADIGRAFICA COSTARRICENSE 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 67.20.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.64.0.0/13 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.168.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.232.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 69.164.0.0/17 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 69.165.102.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 70.34.0.0/16 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 87.76.0.0/16 AS3301 TELIANET-SWEDEN TeliaNet Sweden 91.200.192.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.200.193.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.200.194.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 91.200.195.128/25 AS44045 DIGIEF-AS Didjief internation kulinari koncept LLC 93.187.232.0/21 AS34011 DOMAINFACTORY domainfactory GmbH 94.75.192.0/18 AS16265 LEASEWEB LEASEWEB AS 95.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 95.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 151.135.0.0/16 AS4768 CLIX-NZ TelstraClear Ltd 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 166.63.0.0/16 AS33775 NITEL-AS 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 188.0.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 188.0.0.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 188.0.0.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.47.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.67.0/24 AS21775 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.73.0/24 AS4765 WORLDNET-AS World Net & Services Co., Ltd. 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.200.114.0/23 AS31530 SERVERCREW-AS Servercrew LTD Autonomes System 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.201.98.0/24 AS29571 CITelecom-AS 196.216.132.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 196.216.134.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.156.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.176.228.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.176.232.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.112.97.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.217.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.48.58.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.48.60.0/24 AS4323 TWTC - tw telecom holdings, inc. 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.162.224.0/19 AS23464 ILCSNET - Interlink Computer Services 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.220.240.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.64/26 AS22335 MREN - Metropolitan Research and Education Network 206.220.240.128/25 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.160/30 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.220/32 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.241.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 207.98.192.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.209.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.223.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 CCINET-2 - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.38.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 208.38.192.0/21 AS14237 BEAMSPEED1 - Beamspeed 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.54.93.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.111.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.105.224.0/19 AS20074 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.172.199.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.176.22.0/24 AS20299 Newcom Limited 216.210.86.0/24 AS577 BACOM - Bell Canada 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Multiple DNS implementations vulnerable to cache poisoning
by Buhrmaster, Gary 25 Jul '08

25 Jul '08

Multiple DNS implementations vulnerable to cache poisoning: http://www.kb.cert.org/vuls/id/800113 (A widely coordinated vendor announcement. As always, check with your vendor(s) for patch status.) Gary

33 53

Re: Exploit for DNS Cache Poisoning - RELEASED
by Paul Ferguson 25 Jul '08

25 Jul '08

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -- "Robert D. Scott" <robert(a)ufl.edu> wrote: >Now, there is an exploit for it. > >http://www.caughq.org/exploits/CAU-EX-2008-0002.txt Now also (mirrored) here: http://www.milw0rm.com/exploits/6122 ...and probably a slew of other places, too. ;-) - - ferg -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFIh9qmq1pz9mNUZTMRAuXEAJ0cmn10Rz4Z0RG5LfseroFFvLbUmgCgipoV rLDjjPCo+7w7+aV8udRK7fc= =n1cC -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

3 3

[OT] 2008 Infrastructure Security Survey
by Danny McPherson 25 Jul '08

25 Jul '08

Folks, The 2008 Infrastructure Security Survey is up and available for input. You can register to complete the survey at this URL: <https://www.tcb.net/survey/index.php?sid=19672&lang=en> I've added many questions this time from past participants of the survey, this should be evidenced throughout. Thanks to all those that reviewed and provided questions explicitly for this edition. The survey response window will be ~2 weeks. We hope to make the results available by the end of September at the latest. Also, please recall that NO personally (or organizationally) identifiable information will be shared in any manner. The 2007 edition of the survey is available here: <http://www.tcb.net/wisp07.pdf> Or on the Arbor web site (reg required): <http://www.arbornetworks.com/report> Thanks in advance for your participation! -danny

1 0

Issues with testing tests (DNS randomization checks)
by Sean Donelan 25 Jul '08

25 Jul '08

There are several threads about various DNS testing tools sometimes reporting ISPs have or have not "patched/changed" their DNS servers. This particular thread collects several of the issues in regards to the Comcast DNS servers, but the same issues with the testing sites is applicable to anyone testing other DNS servers. http://www.dslreports.com/forum/r20839639-DNS-Comcast-and-the-DNS-Server-fl…

1 0

2nd Exploit for DNS Cache Poisoning - RELEASED
by Tuc at T-B-O-H.NET 24 Jul '08

24 Jul '08

Hi, Not sure if anyone has seen yet, but there is a 2nd exploit being circulated. I just picked it up on metasploits SVN trunk.... The first was called "baliwicked_host", and the description was : This exploit attacks a fairly ubiquitous flaw in DNS implementations which Dan Kaminsky found and disclosed ~Jul 2008. This exploit caches a single malicious host entry into the target nameserver by sending random hostname queries to the target DNS server coupled with spoofed replies to those queries from the authoritative nameservers for that domain. Eventually, a guessed ID will match, the spoofed packet will get accepted, and due to the additional hostname entry being within bailiwick constraints of the original request the malicious host entry will get cached. The new one is called "baliwicked_domain" and its described as : This exploit attacks a fairly ubiquitous flaw in DNS implementations which Dan Kaminsky found and disclosed ~Jul 2008. This exploit replaces the target domains nameserver entries in a vulnerable DNS cache server. This attack works by sending random hostname queries to the target DNS server coupled with spoofed replies to those queries from the authoritative nameservers for that domain. Eventually, a guessed ID will match, the spoofed packet will get accepted, and the nameserver entries for the target domain will be replaced by the server specified in the NEWDNS option of this exploit. Tuc/TBOH

2 1