- Test - lists.nanog.org

Re: NANOG Digest, Vol 5, Issue 33
by Paul Dowles 15 Jun '08

15 Jun '08

-----Original Message----- From: nanog-request(a)nanog.org Date: Sat, 14 Jun 2008 21:54:35 To: <nanog(a)nanog.org> Subject: NANOG Digest, Vol 5, Issue 33 Send NANOG mailing list submissions to nanog(a)nanog.org To subscribe or unsubscribe via the World Wide Web, visit http://mailman.nanog.org/mailman/listinfo/nanog or, via email, send a message with subject or body 'help' to nanog-request(a)nanog.org You can reach the person managing the list at nanog-owner(a)nanog.org When replying, please edit your Subject line so it is more specific than "Re: Contents of NANOG digest..." Today's Topics: 1. RE: [NANOG] Introducing latency for testing? (Frank Bulk - iNAME) 2. Re: .255 addresses still not usable after all these years? (Greg VILLAIN) 3. Re: DNS problems to RoadRunner - tcp vs udp (Scott McGrath) 4. Re: DNS problems to RoadRunner - tcp vs udp (Jeroen Massar) 5. Re: [NANOG] Introducing latency for testing? (Chris Marlatt) 6. Re: [NANOG] Introducing latency for testing? (Joel Jaeggli) 7. Re: DNS problems to RoadRunner - tcp vs udp (Scott McGrath) 8. Re: DNS problems to RoadRunner - tcp vs udp (Simon Leinen) 9. Re: DNS problems to RoadRunner - tcp vs udp (Jeroen Massar) ---------------------------------------------------------------------- Message: 1 Date: Sat, 14 Jun 2008 13:34:53 -0500 From: "Frank Bulk - iNAME" <frnkblk(a)iname.com> Subject: RE: [NANOG] Introducing latency for testing? To: "'Mike Lyon'" <mike.lyon(a)gmail.com>, "NANOG" <nanog(a)merit.edu> Message-ID: <!&!AAAAAAAAAAAuAAAAAAAAAKTyXRN5/+lGvU59a+P7CFMBAN6gY+ZG84BMpVQcAbDh1IQAAAATbSgAABAAAACMh0iCc5e/TLORNwsUDcWNAQAAAAA=(a)iname.com> Content-Type: text/plain; charset="us-ascii" It's not free, but at a recent trade show I did see what appeared to be an affordable unit from Apposite Technologies (apposite-tech.com) And there's always PacketStorm. Frank -----Original Message----- From: Mike Lyon [mailto:mike.lyon@gmail.com] Sent: Friday, May 02, 2008 3:13 PM To: NANOG Subject: [NANOG] Introducing latency for testing? So I want to mimic some latency in a test network for DB replication. I am wondering what other's have used for this? Obviously, the best way to would be to actually have one box across the US or across the globe to actually test against but what if you don't have that? Are there any GPL software router solutions that would allow you to tweak the latency in between the two test boxes? Thanks in advance. -Mike _______________________________________________ NANOG mailing list NANOG(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog ------------------------------ Message: 2 Date: Sat, 14 Jun 2008 20:33:21 +0200 From: Greg VILLAIN <nanog(a)grrrrreg.net> Subject: Re: .255 addresses still not usable after all these years? To: nanog(a)nanog.org Message-ID: <A2776BAD-491D-4F3D-9645-02EC7492E1FB(a)grrrrreg.net> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes On Jun 14, 2008, at 12:26 AM, Mike Lewinski wrote: > David Hubbard wrote: >> I remember back in the day of old hardware and operating >> systems we'd intentionally avoid using .255 IP addresses >> for anything even when the netmask on our side would have >> made it fine, so I just thought I'd try it out for kicks >> today. From two of four ISP's it worked fine, from Verizon >> FIOS and Road Runner commercial, it didn't. So I guess >> that old problem still lingers? > > The TCP/IP stack in Windows XP is broken in this regard, possibly in > Vista as well, though I've yet to have the displeasure of finding > out. I have a router with a .255 loopback IP on it. My Windows XP > hosts cannot SSH to it. The specific error that Putty throws is > "Network error: Cannot assign requested address". > > At least if I ever need to completely protect a device from access > by Windows users, I have a good option :) > > Mike From what I recall, Microsoft's stack was based on the only free one they could afford back in the Trumpet/Winsock days, namely BSD's. It is either dependent on how the stack is integrated, or it simply implies that BSD's stack is(was) also broken (I'd tend to doubt that). Also, Vista's stack was supposed to have been re-developed from scratch, never checked it. Greg VILLAIN ------------------------------ Message: 3 Date: Sat, 14 Jun 2008 16:40:10 -0400 From: Scott McGrath <mcgrath(a)fas.harvard.edu> Subject: Re: DNS problems to RoadRunner - tcp vs udp To: Randy Bush <randy(a)psg.com> Cc: nanog(a)merit.edu Message-ID: <48542CAA.5010503(a)fas.harvard.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Not to toss flammables onto the pyre. BUT there is a large difference from what the RFC's allow and common practice. In our shop TCP is blocked to all but authoratative secondaries as TCP is sinply too easy to DoS a DNS server with. We simply don't need a few thousand drones clogging the TCP connection table all trying to do zone transfers ( yes it happened and logs show drones are still trying ) For a long time there has been a effective practice of UDP == resolution requests TCP == zone transfers It would have been better if a separate port had been defined for zone transfers as that would obviate the need for a application layer gateway to allow TCP transfers so that zone transfers can be blocked and resolution requests allowed for now all TCP is blocked. Now just because someone has a bright idea they drag out a 20 y/o RFC and say SEE, SEE you must allow this because the RFC says so all the while ignoring the 20 years of operational discipline that RFC was written when the internet was like the quad at college everyone knew one and other and we were all working towards a common goal of interoperability and open systems , These days the net is more like a seedy waterfront after midnight where criminal gangs are waiting to ambush the unwary and consequently networks need to be operated from that standpoint. At the University networking level it is extremely difficult as we need to maintain a open network as much as possible but protect our infrastructure services so that they have 5 nines of availability back in the day a few small hosts would serve DNS nicely and we did not have people trying to take them down and/or infecting local hosts and attempting DHCP starvation attacks. And no we are not at the 5 nines level but we are working on it. - Scott Randy Bush wrote: >> If my server responded to TCP queries from anyone other than a secondary >> server, I would be VERY concerned. >> > > you may want to read the specs > > randy > ------------------------------ Message: 4 Date: Sat, 14 Jun 2008 22:47:47 +0200 From: Jeroen Massar <jeroen(a)unfix.org> Subject: Re: DNS problems to RoadRunner - tcp vs udp To: Scott McGrath <mcgrath(a)fas.harvard.edu> Cc: nanog(a)merit.edu Message-ID: <48542E73.9070109(a)spaghetti.zurich.ibm.com> Content-Type: text/plain; charset="iso-8859-1" Scott McGrath wrote: [..] > For a long time there has been a effective practice of > > UDP == resolution requests > TCP == zone transfers WRONG. TCP is there as a fallback when the answer of the question is too large. Zone transfer you can limit in your software. If you can't configure your dns servers properly then don't run DNS. Also note that botnets have much more effective ways of taking you out. And sometimes domains actually require TCP because there are too many records for a label eg http://stupid.domain.name/node/651 If you are thus blocking TCP for DNS resolution you suddenly where blocking google and thus for some people "The Internet". Also see: http://homepages.tesco.net/J.deBoynePollard/FGA/dns-edns0-and-firewalls.html (Which was the second hit for google(EDNS0) after a link to RFC2671) Greets, Jeroen -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 187 bytes Desc: OpenPGP digital signature Url : http://mailman.nanog.org/pipermail/nanog/attachments/20080614/8dc85bfe/atta… ------------------------------ Message: 5 Date: Sat, 14 Jun 2008 16:47:32 -0400 From: Chris Marlatt <cmarlatt(a)rxsec.com> Subject: Re: [NANOG] Introducing latency for testing? To: frnkblk(a)iname.com Cc: NANOG <nanog(a)merit.edu> Message-ID: <48542E64.3000704(a)rxsec.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Frank Bulk - iNAME wrote: > It's not free, but at a recent trade show I did see what appeared to be an > affordable unit from Apposite Technologies (apposite-tech.com) And there's > always PacketStorm. > > Frank > > -----Original Message----- > From: Mike Lyon [mailto:mike.lyon@gmail.com] > Sent: Friday, May 02, 2008 3:13 PM > To: NANOG > Subject: [NANOG] Introducing latency for testing? > > So I want to mimic some latency in a test network for DB replication. > I am wondering what other's have used for this? Obviously, the best > way to would be to actually have one box across the US or across the > globe to actually test against but what if you don't have that? Are > there any GPL software router solutions that would allow you to tweak > the latency in between the two test boxes? > > Thanks in advance. > > -Mike > > _______________________________________________ > NANOG mailing list > NANOG(a)nanog.org > http://mailman.nanog.org/mailman/listinfo/nanog > > IIRC ipfw can do this using dummynet and the delay directive. Regards, Chris ------------------------------ Message: 6 Date: Sat, 14 Jun 2008 14:08:25 -0700 From: Joel Jaeggli <joelja(a)bogus.com> Subject: Re: [NANOG] Introducing latency for testing? To: Chris Marlatt <cmarlatt(a)rxsec.com> Cc: NANOG <nanog(a)merit.edu> Message-ID: <48543349.7060400(a)bogus.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Chris Marlatt wrote: > Frank Bulk - iNAME wrote: >> It's not free, but at a recent trade show I did see what appeared to >> be an >> affordable unit from Apposite Technologies (apposite-tech.com) And >> there's >> always PacketStorm. >> >> Frank >> >> -----Original Message----- >> From: Mike Lyon [mailto:mike.lyon@gmail.com] Sent: Friday, May 02, >> 2008 3:13 PM >> To: NANOG >> Subject: [NANOG] Introducing latency for testing? >> >> So I want to mimic some latency in a test network for DB replication. >> I am wondering what other's have used for this? Obviously, the best >> way to would be to actually have one box across the US or across the >> globe to actually test against but what if you don't have that? > boxes across the globe have the property of being somewhat less deterministic than you'd like if you need repeatability. > IIRC ipfw can do this using dummynet and the delay directive. it will also do jitter and drop rate... to wit, it's exactly what is need here. there are analogous tools for iptables based platforms. ------------------------------ Message: 7 Date: Sat, 14 Jun 2008 17:18:38 -0400 From: Scott McGrath <mcgrath(a)fas.harvard.edu> Subject: Re: DNS problems to RoadRunner - tcp vs udp To: Jeroen Massar <jeroen(a)unfix.org> Cc: nanog(a)merit.edu Message-ID: <485435AE.8060609(a)fas.harvard.edu> Content-Type: text/plain; charset=ISO-8859-1; format=flowed There is no call for insults on this list - Rather thought this list was about techincal discussions affecting all of us and keeping DNS alive for the majority of our customers certainly qualifies. We/I am more than aware of the DNS mechanisms and WHY there are there trouble is NO DNS server can handle directed TCP attacks even the root servers crumbled under directed botnet activity and we have taken the decision to accept some collateral damage in order to keep services available. We are a well connected university network with multi-gigabit ingress and egress with 10G on Abilene so we try to protect the internet from attacks originating within our borders AND we really feel the full wrath of botnets as we do not have a relatively slow WAN link to buffer the effects. Yes - we are blocking TCP too many problems with drone armies and we started about a year ago when our DNS servers became unresponsive for no apparent reason. Investigation showed TCP flows of hundreds of megabits/sec and connection table overflows from tens of thousands of bots all trying to simultaneously do zone transfers and failing tried active denial systems and shunning with limited effectiveness. We are well aware of the host based mechanisms to control zone information, Trouble is with TCP if you can open the connection you can DoS so we don't allow the connection to be opened and this is enforced at the network level where we can drop at wire speed. Open to better ideas but if you look at the domain in my email address you will see we are a target for hostile activity just so someone can 'make their bones'. Also recall we have a comittment to openess so we would like to make TCP services available but until we have effective DNS DoS mitigation which can work with 10Gb links It's not going to happen. - Scott Jeroen Massar wrote: > Scott McGrath wrote: > [..] >> For a long time there has been a effective practice of >> >> UDP == resolution requests >> TCP == zone transfers > > WRONG. TCP is there as a fallback when the answer of the question is > too large. Zone transfer you can limit in your software. If you can't > configure your dns servers properly then don't run DNS. > Also note that botnets have much more effective ways of taking you out. > > And sometimes domains actually require TCP because there are too many > records for a label eg http://stupid.domain.name/node/651 > If you are thus blocking TCP for DNS resolution you suddenly where > blocking google and thus for some people "The Internet". > > Also see: > http://homepages.tesco.net/J.deBoynePollard/FGA/dns-edns0-and-firewalls.html > > > (Which was the second hit for google(EDNS0) after a link to RFC2671) > > Greets, > Jeroen > ------------------------------ Message: 8 Date: Sat, 14 Jun 2008 23:23:44 +0200 From: Simon Leinen <simon.leinen(a)switch.ch> Subject: Re: DNS problems to RoadRunner - tcp vs udp To: Jon.Kibler(a)aset.com Cc: nanog(a)merit.edu Message-ID: <aaod63g17j.fsf(a)switch.ch> Content-Type: text/plain; charset=us-ascii Jon Kibler writes: > Also, other than "That's what the RFCs call for," why use TCP for > data exchange instead of larger UDP packets? TCP is more robust for large (>Path MTU) data transfers, and less prone to spoofing. A few months ago I sent a message to SwiNOG (like NANOG only less North American and more Swiss) about this topic, trying to explain some of the tradeoffs: http://www.mail-archive.com/swinog@lists.swinog.ch/msg02612.html Mostly I think that people "approaching this from a security perspective only" often forget that by fencing in the(ir idea of the) current status quo, they often prevent beneficial evolution of protocols as well, contributing to the Internet's "ossification". -- Simon. ------------------------------ Message: 9 Date: Sat, 14 Jun 2008 23:54:49 +0200 From: Jeroen Massar <jeroen(a)unfix.org> Subject: Re: DNS problems to RoadRunner - tcp vs udp To: Scott McGrath <mcgrath(a)fas.harvard.edu> Cc: nanog(a)merit.edu Message-ID: <48543E29.70809(a)spaghetti.zurich.ibm.com> Content-Type: text/plain; charset="iso-8859-1" Scott McGrath wrote: > > There is no call for insults on this list Insults? Where? If you feel insulted by any of the comments made on this list by people, then you probably are indeed on the wrong list. But that is just me. > - Rather thought this list was > about techincal discussions affecting all of us and keeping DNS alive > for the majority of our customers certainly qualifies. [..blabber about DNS attacks over TCP..] If I where a botnet herder and I had to take out your site and I was going to pick TCP for some magical reason then I would not care about your DNS servers, I would just hit your webservers, hard. I mean just the 'index.html' (http://www.harvard.edu/) is 24Kb, that is excluding pictures and there is bound to be larger data there which you are going to send and the bots only have to say "ACK" to once in a while. Multiply that by say a small botnet of 1M hosts, each just requests that 24Kb file. You will have a million flows and won't have any way to rate limit that or control it. Your link was already full trying to send it back to the clients and next to that your server was probably not able to process it in the first place. Simple, effective, nothing you can do about it, except get way and way more hardware. If somebody wants to take you out, they will take you out. Just get one other box with 10GE (not too hard to do) or just get a million of them with a little bit of connectivity (which is quite easy apparently)... > We/I am more than aware of the DNS mechanisms and WHY there are there > trouble is NO DNS server can handle directed TCP attacks even the root > servers crumbled under directed botnet activity and we have taken the > decision to accept some collateral damage in order to keep services > available. "The root servers crumbled" wow, I must have missed somebody taking out all the 13 separate and then individually anycasted root servers. Which btw only do UDP as currently '.' is still small enough. $ dig @a.root-servers.net. . NS +tcp [..] ;; Query time: 95 msec ;; SERVER: 2001:503:ba3e::2:30#53(2001:503:ba3e::2:30) ;; WHEN: Sat Jun 14 23:45:52 2008 ;; MSG SIZE rcvd: 604 That is only 1 packet to 1 packet, still only 500 bytes. While your little webserver would generate 24kb for that same sequence. > We are a well connected university network with > multi-gigabit ingress and egress with 10G on Abilene so we try to > protect the internet from attacks originating within our borders AND we > really feel the full wrath of botnets as we do not have a relatively > slow WAN link to buffer the effects. The whole point generally of botnets is just the Denial of Service (DoS), if that is because your link is full or the upstreams link is full or because the service can't service clients anymore. But clearly, as you are blocking TCP-DNS you are DoSing yourself already, so the botherders win. Also note that Abilene internally might be 10G and in quite some places even 40G, but you still have to hand it off to the rest of the world and those will count as those 'slow WAN' links that you think everybody else on this planet is behind. (Hint: 10GE is kinda the minimum for most reasonably sized ISP's) > Yes - we are blocking TCP too many problems with drone armies and we > started about a year ago when our DNS servers became unresponsive for no > apparent reason. Investigation showed TCP flows of hundreds of > megabits/sec and connection table overflows from tens of thousands of > bots all trying to simultaneously do zone transfers and failing tried > active denial systems and shunning with limited effectiveness. How is a failed AXFR going to generate a lot of traffic, unless they are repeating themselves over and over and over again? Thus effectively just packeting you? Also, are you talking about Recursive or Authoritive DNS servers here? Where those bots on your network, or where they remote? > We are well aware of the host based mechanisms to control zone > information, Trouble is with TCP if you can open the connection you can > DoS so we don't allow the connection to be opened and this is enforced > at the network level where we can drop at wire speed. Do you mean that the hosts which do TCP are allowed to do transfers or not? As in the latter case they can't generate big answers, they just get 1 packet back and then end then FIN. Note also, that if they are simply trying to overload your hosts, UDP is much more effective in doing that already and you have that hole wide open apparently otherwise you wouldn't have DNS. > Open to better > ideas but if you look at the domain in my email address you will see we > are a target for hostile activity just so someone can 'make their bones'. It probably has nothing to do with the domain name, it more likely has something to do with certain services that are available or provided on your network. > Also recall we have a comittment to openess so we would like to make TCP > services available but until we have effective DNS DoS mitigation which > can work with 10Gb links It's not going to happen. You think that 10Gb is a 'fat link', amusing ;) There are various vendors, most likely also reading on this list, who can be more than helpful in providing you with all kinds of bad, but also a couple of good solutions to most networking issues that you are apparently having. But the biggest issue you seem to have is not knowing what the DoS kiddies want to take out and why they want to take it out. Greets, Jeroen PS: You do know that an "NS" record is not allowed to point to a CNAME I hope? (NS3.harvard.edu CNAME ns3.br.harvard.edu. RFC1912 2.4 ;) -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 187 bytes Desc: OpenPGP digital signature Url : http://mailman.nanog.org/pipermail/nanog/attachments/20080614/29473ad3/atta… ------------------------------ _______________________________________________ NANOG mailing list NANOG(a)nanog.org http://mailman.nanog.org/mailman/listinfo/nanog End of NANOG Digest, Vol 5, Issue 33 ************************************

1 0

Re: .255 addresses still not usable after all these years?
by Scott Weeks 15 Jun '08

15 Jun '08

I don't get it. As I mentioned about a year ago, when we last had this discussion, I have been handing out /23s to DHCP customers for years. No problems. .0 and .255 are not on WAN circuits or anything else, but zero problems for dynamically assigned customers. scott

1 0

[NANOG] Introducing latency for testing?
by Mike Lyon 15 Jun '08

15 Jun '08

So I want to mimic some latency in a test network for DB replication. I am wondering what other's have used for this? Obviously, the best way to would be to actually have one box across the US or across the globe to actually test against but what if you don't have that? Are there any GPL software router solutions that would allow you to tweak the latency in between the two test boxes? Thanks in advance. -Mike

10 11

.255 addresses still not usable after all these years?
by David Hubbard 14 Jun '08

14 Jun '08

I remember back in the day of old hardware and operating systems we'd intentionally avoid using .255 IP addresses for anything even when the netmask on our side would have made it fine, so I just thought I'd try it out for kicks today. From two of four ISP's it worked fine, from Verizon FIOS and Road Runner commercial, it didn't. So I guess that old problem still lingers? David

16 16

Weekly Routing Table Report
by Routing Analysis Role Account 13 Jun '08

13 Jun '08

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.apnic.net. If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 14 Jun, 2008 Report Website: http://thyme.apnic.net Detailed Analysis: http://thyme.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 259901 Prefixes after maximum aggregation: 128080 Deaggregation factor: 2.03 Unique aggregates announced to Internet: 126786 Total ASes present in the Internet Routing Table: 28442 Prefixes per ASN: 9.14 Origin-only ASes present in the Internet Routing Table: 24790 Origin ASes announcing only one prefix: 11978 Transit ASes present in the Internet Routing Table: 3652 Transit-only ASes present in the Internet Routing Table: 78 Average AS path length visible in the Internet Routing Table: 3.6 Max AS path length visible: 18 Max AS path prepend of ASN (43380) 13 Prefixes from unregistered ASNs in the Routing Table: 623 Unregistered ASNs in the Routing Table: 229 Number of 32-bit ASNs allocated by the RIRs: 48 Prefixes from 32-bit ASNs in the Routing Table: 8 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 780 Number of addresses announced to Internet: 1858706912 Equivalent to 110 /8s, 201 /16s and 157 /24s Percentage of available address space announced: 50.1 Percentage of allocated address space announced: 60.9 Percentage of available address space allocated: 82.3 Percentage of address space in use by end-sites: 72.2 Total number of prefixes smaller than registry allocations: 126226 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 59132 Total APNIC prefixes after maximum aggregation: 22129 APNIC Deaggregation factor: 2.67 Prefixes being announced from the APNIC address blocks: 56160 Unique aggregates announced from the APNIC address blocks: 25128 APNIC Region origin ASes present in the Internet Routing Table: 3275 APNIC Prefixes per ASN: 17.15 APNIC Region origin ASes announcing only one prefix: 869 APNIC Region transit ASes present in the Internet Routing Table: 508 Average APNIC Region AS path length visible: 3.5 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 352137632 Equivalent to 20 /8s, 253 /16s and 49 /24s Percentage of available APNIC address space announced: 75.0 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079 APNIC Address Blocks 58/8, 59/8, 60/8, 61/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 120109 Total ARIN prefixes after maximum aggregation: 65072 ARIN Deaggregation factor: 1.85 Prefixes being announced from the ARIN address blocks: 89906 Unique aggregates announced from the ARIN address blocks: 34679 ARIN Region origin ASes present in the Internet Routing Table: 12213 ARIN Prefixes per ASN: 7.36 ARIN Region origin ASes announcing only one prefix: 4736 ARIN Region transit ASes present in the Internet Routing Table: 1147 Average ARIN Region AS path length visible: 3.3 Max ARIN Region AS path length visible: 15 Number of ARIN addresses announced to Internet: 356411552 Equivalent to 21 /8s, 62 /16s and 104 /24s Percentage of available ARIN address space announced: 73.3 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 ARIN Address Blocks 24/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 173/8, 174/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 55926 Total RIPE prefixes after maximum aggregation: 34008 RIPE Deaggregation factor: 1.64 Prefixes being announced from the RIPE address blocks: 51103 Unique aggregates announced from the RIPE address blocks: 34277 RIPE Region origin ASes present in the Internet Routing Table: 11456 RIPE Prefixes per ASN: 4.46 RIPE Region origin ASes announcing only one prefix: 5988 RIPE Region transit ASes present in the Internet Routing Table: 1725 Average RIPE Region AS path length visible: 4.0 Max RIPE Region AS path length visible: 18 Number of RIPE addresses announced to Internet: 360988032 Equivalent to 21 /8s, 132 /16s and 61 /24s Percentage of available RIPE address space announced: 82.8 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-48127 RIPE Address Blocks 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 20218 Total LACNIC prefixes after maximum aggregation: 5155 LACNIC Deaggregation factor: 3.92 Prefixes being announced from the LACNIC address blocks: 18456 Unique aggregates announced from the LACNIC address blocks: 10363 LACNIC Region origin ASes present in the Internet Routing Table: 954 LACNIC Prefixes per ASN: 19.35 LACNIC Region origin ASes announcing only one prefix: 305 LACNIC Region transit ASes present in the Internet Routing Table: 160 Average LACNIC Region AS path length visible: 4.1 Max LACNIC Region AS path length visible: 15 Number of LACNIC addresses announced to Internet: 52287232 Equivalent to 3 /8s, 29 /16s and 215 /24s Percentage of available LACNIC address space announced: 51.9 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 186/8, 187/8, 189/8, 190/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 3895 Total AfriNIC prefixes after maximum aggregation: 1200 AfriNIC Deaggregation factor: 3.25 Prefixes being announced from the AfriNIC address blocks: 4168 Unique aggregates announced from the AfriNIC address blocks: 1875 AfriNIC Region origin ASes present in the Internet Routing Table: 243 AfriNIC Prefixes per ASN: 17.15 AfriNIC Region origin ASes announcing only one prefix: 80 AfriNIC Region transit ASes present in the Internet Routing Table: 47 Average AfriNIC Region AS path length visible: 3.9 Max AfriNIC Region AS path length visible: 14 Number of AfriNIC addresses announced to Internet: 12316160 Equivalent to 0 /8s, 187 /16s and 238 /24s Percentage of available AfriNIC address space announced: 36.7 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4755 1618 387 89 Videsh Sanchar Nigam Ltd. Aut 9498 1181 550 62 BHARTI BT INTERNET LTD. 17488 1120 78 76 Hathway IP Over Cable Interne 9583 1116 110 450 Sify Limited 4766 850 6006 343 Korea Telecom (KIX) 4134 824 12915 321 CHINANET-BACKBONE 23577 820 34 702 Korea Telecom (ATM-MPLS) 18101 693 167 36 Reliance Infocom Ltd Internet 9829 598 450 12 BSNL National Internet Backbo 1221 550 1919 423 Telstra Pty Ltd Complete listing at http://thyme.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 209 3009 3874 620 Qwest 6389 2355 3138 188 bellsouth.net, inc. 4323 1469 1045 378 Time Warner Telecom 2386 1453 660 875 AT&T Data Communications Serv 7018 1370 5810 980 AT&T WorldNet Services 11492 1228 148 12 Cable One 1785 1066 510 105 AppliedTheory Corporation 18566 1044 296 10 Covad Communications 20115 1040 1062 564 Charter Communications 7011 1034 289 569 Citizens Utilities Complete listing at http://thyme.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 3292 412 1772 371 TDC Tele Danmark 8452 347 188 7 TEDATA 3301 338 1460 308 TeliaNet Sweden 8866 319 77 21 Bulgarian Telecommunication C 3320 315 7045 265 Deutsche Telekom AG 3215 285 2742 89 France Telecom Transpac 8551 283 269 38 Bezeq International 5462 275 666 27 Telewest Broadband 680 274 2047 264 DFN-IP service G-WiN 9155 268 45 10 QualityNet AS number Complete listing at http://thyme.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 1245 2464 227 UniNet S.A. de C.V. 11830 603 299 9 Instituto Costarricense de El 22047 566 270 14 VTR PUNTO NET S.A. 7303 468 229 66 Telecom Argentina Stet-France 16814 426 27 10 NSS, S.A. 6471 413 85 46 ENTEL CHILE S.A. 11172 411 118 69 Servicios Alestra S.A de C.V 10620 392 100 71 TVCABLE BOGOTA 14117 375 23 9 Telefonica del Sur S.A. 20299 340 24 92 NEWCOM AMERICAS Complete listing at http://thyme.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 475 61 30 LINKdotNET AS number 3741 282 853 223 The Internet Solution 20858 220 34 3 EgyNet 2018 192 189 82 Tertiary Education Network 5713 163 558 99 Telkom SA Ltd 6713 143 135 11 Itissalat Al-MAGHRIB 33783 134 10 12 EEPAD TISP TELECOM & INTERNET 5536 121 8 16 Internet Egypt Network 29571 103 13 8 Ci Telecom Autonomous system 33776 100 6 3 Starcomms Nigeria Limited Complete listing at http://thyme.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 209 3009 3874 620 Qwest 6389 2355 3138 188 bellsouth.net, inc. 4755 1618 387 89 Videsh Sanchar Nigam Ltd. Aut 4323 1469 1045 378 Time Warner Telecom 2386 1453 660 875 AT&T Data Communications Serv 7018 1370 5810 980 AT&T WorldNet Services 8151 1245 2464 227 UniNet S.A. de C.V. 11492 1228 148 12 Cable One 9498 1181 550 62 BHARTI BT INTERNET LTD. 17488 1120 78 76 Hathway IP Over Cable Interne Complete listing at http://thyme.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 6389 2355 2167 bellsouth.net, inc. 4755 1618 1529 Videsh Sanchar Nigam Ltd. Aut 11492 1228 1216 Cable One 9498 1181 1119 BHARTI BT INTERNET LTD. 4323 1469 1091 Time Warner Telecom 17488 1120 1044 Hathway IP Over Cable Interne 18566 1044 1034 Covad Communications 8151 1245 1018 UniNet S.A. de C.V. 1785 1066 961 AppliedTheory Corporation 22773 957 895 Cox Communications, Inc. Complete listing at http://thyme.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 16927 UNALLOCATED 12.0.252.0/23 701 UUNET Technologies, 22492 UNALLOCATED 12.2.46.0/24 7018 AT&T WorldNet Servic 15132 UNALLOCATED 12.9.150.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.14.170.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.20.55.0/24 6517 Yipes Communications 13746 UNALLOCATED 12.24.56.0/24 7018 AT&T WorldNet Servic 32567 UNALLOCATED 12.25.107.0/24 7018 AT&T WorldNet Servic 13632 UNALLOCATED 12.31.25.0/24 6517 Yipes Communications 27220 UNALLOCATED 12.35.204.0/24 7018 AT&T WorldNet Servic 26973 UNALLOCATED 12.39.152.0/24 7018 AT&T WorldNet Servic Complete listing at http://thyme.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 24.51.159.0/24 7843 Adelphia Corp. 24.54.224.0/19 20001 HoldCo LLC - Road Runner 24.75.160.0/19 7843 Adelphia Corp. 24.75.192.0/18 7843 Adelphia Corp. 24.142.40.0/21 7018 AT&T WorldNet Services 24.142.160.0/19 7018 AT&T WorldNet Services 24.246.0.0/17 7018 AT&T WorldNet Services 24.246.128.0/18 7018 AT&T WorldNet Services 62.61.220.0/24 24974 Tachyon Europe BV - Wireless 63.140.213.0/24 22555 Universal Talkware Corporatio Complete listing at http://thyme.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:9 /10:16 /11:42 /12:142 /13:279 /14:514 /15:1028 /16:9958 /17:4337 /18:7359 /19:15676 /20:18305 /21:17924 /22:22319 /23:23253 /24:135965 /25:841 /26:1035 /27:782 /28:81 /29:10 /30:1 /31:0 /32:7 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 209 1764 3009 Qwest 6389 1452 2355 bellsouth.net, inc. 11492 1210 1228 Cable One 2386 1150 1453 AT&T Data Communications Serv 18566 1025 1044 Covad Communications 4755 973 1618 Videsh Sanchar Nigam Ltd. Aut 9583 971 1116 Sify Limited 6298 946 961 Cox Communicatons 6478 941 942 AT&T Worldnet Services 17488 932 1120 Hathway IP Over Cable Interne Complete listing at http://thyme.apnic.net/current/data/sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:9 8:114 12:2049 13:1 15:22 16:3 17:5 18:13 20:35 24:1075 25:1 32:61 33:3 38:440 40:92 41:645 43:1 44:2 47:12 52:3 55:4 56:3 57:23 58:458 59:475 60:443 61:991 62:1100 63:2030 64:3275 65:2419 66:3636 67:1211 68:695 69:2273 70:679 71:126 72:1815 73:5 74:1002 75:220 76:299 77:727 78:706 79:194 80:914 81:849 82:563 83:392 84:565 85:1011 86:422 87:694 88:313 89:1257 90:12 91:1267 92:186 93:574 94:16 96:34 97:23 98:200 99:3 100:1 111:1 112:1 113:1 114:34 116:695 117:326 118:143 119:460 120:59 121:525 122:781 123:346 124:850 125:1137 128:331 129:204 130:130 131:401 132:67 133:9 134:177 135:33 136:218 137:91 138:151 139:78 140:498 141:99 142:403 143:335 144:356 145:51 146:363 147:154 148:505 149:191 150:130 151:193 152:143 153:136 154:10 155:273 156:174 157:273 158:168 159:239 160:266 161:105 162:232 163:184 164:530 165:447 166:316 167:328 168:615 169:138 170:429 171:29 172:10 189:196 190:2103 192:5792 193:4094 194:3200 195:2488 196:1065 198:3740 199:3273 200:5541 201:1441 202:7631 203:7925 204:3986 205:2122 206:2412 207:2795 208:3365 209:3477 210:2520 211:1018 212:1399 213:1662 214:163 215:48 216:4426 217:1196 218:348 219:416 220:1083 221:469 222:308 End of report

1 0

BRAS Configuration backup and trace feature segment changes
by Joe Shen 13 Jun '08

13 Jun '08

hi, I'm looking for tools which could backup BRAS and router configuration automatically, while monitoring special configuration changes. RANCID seems to be able to backup whold configuration, but it seems it could not monitor special feature configuration segment changes ( e.g. changes on OSPF configuraion or drop code mapping configration). Is there any tools to do this ? thanks in advance. Joe Yahoo! Toolbar is now powered with Search Assist.Download it now! http://sg.toolbar.yahoo.com/

3 2

Re: [Outages] outages wiki? feedback please
by Jeff Shultz 13 Jun '08

13 Jun '08

Jay R. Ashworth wrote: > On Wed, Jun 11, 2008 at 09:50:24PM -0700, virendra rode // wrote: >> Wiki would serve well for documentation purposes such as operational, >> ISP related such as peer relationships, isp contacts, tools, etc., but >> nothing comes close to real-time outages (user feedback) via e-mail. > > Or, perhaps, an RSS feed from a user-maintained ticketing system. > > I've always wanted to build a public ticketing system, where you could, > for example, hang a ticket on a traffic signal that was out... > > Cheers, > -- jra I can think of a few people I know that would report every single traffic signal (and maybe a few stop signs) as out within 3 days. I'm sure they'd be imaginative in their use of names too. -- Jeff Shultz

6 6

BGP Update Report
by cidr-report＠potaroo.net 13 Jun '08

13 Jun '08

BGP Update Report Interval: 12-May-08 -to- 12-Jun-08 (32 days) Observation Point: BGP Peering with AS2.0 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS15169 301131 4.1% 2264.1 -- GOOGLE - Google Inc. 2 - AS4538 120238 1.6% 24.3 -- ERX-CERNET-BKB China Education and Research Network Center 3 - AS6140 107484 1.5% 117.1 -- IMPSAT-USA - ImpSat USA, Inc. 4 - AS5691 61721 0.8% 4747.8 -- MITRE-AS-5 - The MITRE Corporation 5 - AS9583 50288 0.7% 41.7 -- SIFY-AS-IN Sify Limited 6 - AS9198 47480 0.7% 102.5 -- KAZTELECOM-AS Kazakhtelecom Corporate Sales Administration 7 - AS8866 46639 0.6% 143.9 -- BTC-AS Bulgarian Telecommunication Company Plc. 8 - AS42787 46218 0.6% 15406.0 -- MMIP-AS MultiMedia IP Ltd. 9 - AS17974 46141 0.6% 83.9 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia 10 - AS18231 32261 0.4% 140.3 -- EXATT-AS-AP IOL NETCOM LTD 11 - AS31003 32003 0.4% 4571.9 -- IRON-MOUNTAIN-UK-AS Iron Mountain UK Ltd 12 - AS23966 31340 0.4% 92.4 -- DANCOM-AS-AP LINKdotNET Pakistan 13 - AS9498 31247 0.4% 24.9 -- BBIL-AP BHARTI BT INTERNET LTD. 14 - AS8151 30791 0.4% 24.5 -- Uninet S.A. de C.V. 15 - AS14522 30762 0.4% 161.1 -- Satnet 16 - AS6471 29100 0.4% 69.3 -- ENTEL CHILE S.A. 17 - AS6568 27112 0.4% 222.2 -- Ag para el Desarrollo de la Sociedad de la Inf en Bolivia - ADSIB 18 - AS2386 27064 0.4% 18.3 -- INS-AS - AT&T Data Communications Services 19 - AS15611 26901 0.4% 277.3 -- Iranian Research Organization for Science & Technology 20 - AS702 25577 0.3% 46.8 -- AS702 Verizon Business EMEA - Commercial IP service provider in Europe TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS17834 19963 0.3% 19963.0 -- KYOBOAUTO-AS-KR Kyobo Auto Insurance CO.,LTD 2 - AS42787 46218 0.6% 15406.0 -- MMIP-AS MultiMedia IP Ltd. 3 - AS26829 12652 0.2% 12652.0 -- YKK-USA - YKK USA,INC 4 - AS29910 5176 0.1% 5176.0 -- IACP - INTL. ASSN OF CHIEF OF POLICEI 5 - AS5691 61721 0.8% 4747.8 -- MITRE-AS-5 - The MITRE Corporation 6 - AS31003 32003 0.4% 4571.9 -- IRON-MOUNTAIN-UK-AS Iron Mountain UK Ltd 7 - AS30929 3730 0.1% 3730.0 -- HUTCB Hidrotechnical Faculty - Technical University 8 - AS23082 17974 0.2% 3594.8 -- MPHI - Michigan Public Health Institute 9 - AS39105 3487 0.1% 3487.0 -- CLASS-AS SC Class Computers And Service SRL 10 - AS30287 3343 0.1% 3343.0 -- ALON-USA - ALON USA, LP 11 - AS9988 6591 0.1% 3295.5 -- MPT-AP Myanma Post and Telecommunication 12 - AS38513 3263 0.0% 3263.0 -- LINTASARTA-AS-ID PT Aplikanusa Lintasarta 13 - AS10551 5045 0.1% 2522.5 -- RAPID-CITY-REGIONAL - Rapid City Regional Hospital 14 - AS25250 7425 0.1% 2475.0 -- GAMTEL-AS 15 - AS44730 2289 0.0% 2289.0 -- ALFAGOMMA Alfa Gomma s.p.a. 16 - AS15169 301131 4.1% 2264.1 -- GOOGLE - Google Inc. 17 - AS38069 19663 0.3% 2184.8 -- WARIDTEL-BD-AS-AP Warid Telecom 18 - AS35324 2169 0.0% 2169.0 -- ECH-WILL-AS E.C.H. Will 19 - AS28646 2121 0.0% 2121.0 -- Confederacao Interestadual das Cooperativas Ligadas ao Sicredi 20 - AS47212 23281 0.3% 2116.5 -- UGD-AS University "Goce Delcev" TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 192.12.120.0/24 61365 0.8% AS5691 -- MITRE-AS-5 - The MITRE Corporation 2 - 193.33.184.0/23 46192 0.6% AS42787 -- MMIP-AS MultiMedia IP Ltd. 3 - 213.91.175.0/24 29515 0.4% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 4 - 193.239.114.0/24 27382 0.3% AS31003 -- IRON-MOUNTAIN-UK-AS Iron Mountain UK Ltd 5 - 221.128.192.0/18 27376 0.3% AS18231 -- EXATT-AS-AP IOL NETCOM LTD 6 - 84.23.102.0/24 22223 0.3% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) AS34400 -- ASN-ETTIHADETISALAT Etihad Etisalat 7 - 210.92.148.0/24 19963 0.3% AS17834 -- KYOBOAUTO-AS-KR Kyobo Auto Insurance CO.,LTD 8 - 221.135.230.0/23 17866 0.2% AS9583 -- SIFY-AS-IN Sify Limited 9 - 125.23.208.0/20 14147 0.2% AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. 10 - 12.108.254.0/24 12652 0.2% AS26829 -- YKK-USA - YKK USA,INC 11 - 203.63.26.0/24 12471 0.2% AS9747 -- EZINTERNET-AS-AP EZInternet Pty Ltd 12 - 83.228.71.0/24 6920 0.1% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc. 13 - 193.142.125.0/24 6897 0.1% AS15169 -- GOOGLE - Google Inc. AS41264 -- GOOGLE-CORPNET Google Ireland Limited 14 - 203.81.64.0/19 6583 0.1% AS9988 -- MPT-AP Myanma Post and Telecommunication 15 - 149.117.166.0/24 6277 0.1% AS701 -- UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 16 - 203.101.87.0/24 6261 0.1% AS9498 -- BBIL-AP BHARTI BT INTERNET LTD. 17 - 203.188.220.0/24 6154 0.1% AS9519 -- VERTELNET Vertical Telecoms Pty Ltd 18 - 210.214.88.0/23 6109 0.1% AS9583 -- SIFY-AS-IN Sify Limited 19 - 64.201.128.0/20 6034 0.1% AS11915 -- TELWEST-NETWORK-SVCS-STATIC - TEL WEST COMMUNICATIONS LLC 20 - 208.83.117.0/24 5948 0.1% AS23082 -- MPHI - Michigan Public Health Institute Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

The Cidr Report
by cidr-report＠potaroo.net 13 Jun '08

13 Jun '08

This report has been generated at Fri Jun 13 21:14:59 2008 AEST. The report analyses the BGP Routing Table of AS2.0 router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org for a current version of this report. Recent Table History Date Prefixes CIDR Agg 06-06-08 267006 166019 07-06-08 267476 166188 08-06-08 267317 166689 09-06-08 267436 167035 10-06-08 267350 168058 11-06-08 270376 168607 12-06-08 271136 169355 13-06-08 271485 169850 AS Summary 28610 Number of ASes in routing system 12063 Number of ASes announcing only one prefix 4945 Largest number of prefixes announced by an AS AS4538 : ERX-CERNET-BKB China Education and Research Network Center 88352000 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 13Jun08 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 271906 169919 101987 37.5% All ASes AS4538 4945 876 4069 82.3% ERX-CERNET-BKB China Education and Research Network Center AS209 3025 667 2358 78.0% ASN-QWEST - Qwest AS6389 2355 546 1809 76.8% BELLSOUTH-NET-BLK - BellSouth.net Inc. AS4755 1645 271 1374 83.5% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS9498 1182 71 1111 94.0% BBIL-AP BHARTI BT INTERNET LTD. AS18566 1044 41 1003 96.1% COVAD - Covad Communications Co. AS4323 1466 581 885 60.4% TWTC - Time Warner Telecom, Inc. AS22773 957 89 868 90.7% CCINET-2 - Cox Communications Inc. AS11492 1228 480 748 60.9% CABLEONE - CABLE ONE AS17488 1120 381 739 66.0% HATHWAY-NET-AP Hathway IP Over Cable Internet AS8151 1245 537 708 56.9% Uninet S.A. de C.V. AS19262 913 250 663 72.6% VZGNI-TRANSIT - Verizon Internet Services Inc. AS1785 1070 411 659 61.6% AS-PAETEC-NET - PaeTec Communications, Inc. AS18101 692 115 577 83.4% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS2386 1457 894 563 38.6% INS-AS - AT&T Data Communications Services AS6478 947 402 545 57.6% ATT-INTERNET3 - AT&T WorldNet Services AS4766 878 392 486 55.4% KIXS-AS-KR Korea Telecom AS855 602 124 478 79.4% CANET-ASN-4 - Bell Aliant AS17676 525 80 445 84.8% GIGAINFRA BB TECHNOLOGY Corp. AS19916 640 216 424 66.2% ASTRUM-0001 - OLM LLC AS4134 825 410 415 50.3% CHINANET-BACKBONE No.31,Jin-rong Street AS7029 586 175 411 70.1% WINDSTREAM - Windstream Communications Inc AS22047 566 159 407 71.9% VTR BANDA ANCHA S.A. AS4668 677 273 404 59.7% LGNET-AS-KR LG CNS AS6197 950 547 403 42.4% BATI-ATL - BellSouth Network Solutions, Inc AS9443 483 85 398 82.4% INTERNETPRIMUS-AS-AP Primus Telecommunications AS7018 1396 1001 395 28.3% ATT-INTERNET4 - AT&T WorldNet Services AS3602 456 79 377 82.7% AS3602-RTI - Rogers Telecom Inc. AS4808 525 154 371 70.7% CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network AS7011 1056 685 371 35.1% FRONTIER-AND-CITIZENS - Frontier Communications of America, Inc. Total 35456 10992 24464 69.0% Top 30 total Possible Bogus Routes 24.38.0.0/17 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.48.0.0/13 AS19548 ADELPHIA-AS2 - Road Runner HoldCo LLC 24.50.123.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.51.159.0/24 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.54.224.0/19 AS20001 ROADRUNNER-WEST - Road Runner HoldCo LLC 24.75.160.0/19 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.75.192.0/18 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 24.142.40.0/21 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.142.160.0/19 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 62.61.220.0/24 AS24974 TACHYON-EU Tachyon Europe BV - Wireless Broadband via Satellite 63.140.213.0/24 AS22555 UTC - Universal Talkware Corporation 63.141.42.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.115.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 63.143.251.0/24 AS22555 UTC - Universal Talkware Corporation 63.248.0.0/16 AS3356 LEVEL3 Level 3 Communications 64.7.112.0/21 AS6453 GLOBEINTERNET TATA Communications 64.7.120.0/21 AS6453 GLOBEINTERNET TATA Communications 64.50.128.0/18 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.64.159.0/24 AS32004 BIG-ASN - Business Information Group, Inc. 64.144.0.0/15 AS4565 MEGAPATH2-US - MegaPath Networks Inc. 64.188.0.0/16 AS3356 LEVEL3 Level 3 Communications 65.36.8.0/24 AS5696 65.36.9.0/24 AS5696 65.36.33.0/24 AS5696 65.36.52.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.11.40.0/21 AS6261 VISINET - Visionary Systems, Inc. 66.54.91.0/24 AS30506 BLACKSUN-1 - Blacksun Technologies LLC 66.55.160.0/19 AS29994 66.64.96.0/20 AS3790 RADIGRAFICA COSTARRICENSE 66.180.239.0/24 AS35888 VIGNETTE - VIGNETTE CORPORATION 66.199.32.0/20 AS10397 WISP-AS - Wispnet, LLC 66.206.32.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.33.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.34.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.35.0/24 AS17787 PSEB-AS-PK Pakistan Software Export Board 66.206.40.0/22 AS174 COGENT Cogent/PSI 66.206.44.0/23 AS174 COGENT Cogent/PSI 66.206.47.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 66.207.32.0/20 AS23011 66.219.192.0/18 AS5048 FIBER - FIBERNET Corp. 67.20.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 67.200.0.0/17 AS6517 RELIANCEGLOBALCOM - Reliance Globalcom Services, Inc 68.64.0.0/13 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.168.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 68.232.0.0/14 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 69.71.192.0/20 AS13818 PHX-INTL-TELEPORT - Phoenix International Teleport 69.80.0.0/17 AS3043 AMPHIB-AS - Amphibian Media Corporation 69.164.0.0/17 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 70.34.0.0/16 AS7843 ADELPHIA-AS - Road Runner HoldCo LLC 80.88.0.0/21 AS33774 DJAWEB 80.88.8.0/22 AS33774 DJAWEB 80.88.10.0/24 AS33774 DJAWEB 80.88.11.0/24 AS33774 DJAWEB 80.88.12.0/24 AS33779 wataniya-telecom-as 91.0.0.0/8 AS47287 STARDOLL Stardoll AB 91.204.112.0/22 AS41129 LOOPBACK-AS Loopback Systems AS 93.191.120.0/21 AS39342 MEDIATRAFFIC Mediatraffic Oy as-number 95.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 95.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS project 100.100.100.0/24 AS19228 ENTEL CHILE S.A. 111.111.111.0/24 AS19228 ENTEL CHILE S.A. 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 151.135.0.0/16 AS4768 CLIX-NZ TelstraClear Ltd 159.3.211.0/24 AS2687 ASATTCA AT&T Global Network Services - AP 163.142.0.0/16 AS2500 WIDE-BB WIDE Project 166.63.0.0/16 AS33775 NITEL-AS 172.7.0.0/24 AS28175 172.10.1.0/30 AS18305 POSNET POSDATA Co.,Ltd 192.9.200.0/24 AS3602 AS3602-RTI - Rogers Telecom Inc. 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.64.85.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.107.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.108.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.69.177.0/24 AS1759 TSF-IP-CORE TeliaSonera Finland IP Network 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.141.0/24 AS5713 SAIX-NET 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.101.45.0/24 AS2905 TICSA-ASN 192.101.46.0/24 AS6503 Avantel, S.A. 192.101.47.0/24 AS6503 Avantel, S.A. 192.101.64.0/21 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.67.0/24 AS21775 192.101.70.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.71.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 192.101.72.0/24 AS702 AS702 Verizon Business EMEA - Commercial IP service provider in Europe 192.101.73.0/24 AS4765 WORLDNET-AS World Net & Services Co., Ltd. 192.101.74.0/24 AS1239 SPRINTLINK - Sprint 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.131.233.0/24 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.154.32.0/19 AS81 NCREN - MCNC 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.200.114.0/23 AS31530 SERVERCREW-AS Servercrew LTD Autonomes System 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.43.149.0/24 AS8540 HAPPYNET-AS HAPPYnet Dienstleistungs GmbH 196.6.108.0/24 AS5713 SAIX-NET 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.201.98.0/24 AS29571 CITelecom-AS 196.216.132.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 196.216.134.0/24 AS9207 TAIDE-KE-NAIROBI Taide - Kenya POP 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.144.96.0/20 AS12185 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 198.169.0.0/16 AS803 SASKTEL - Saskatchewan Telecommunications 198.180.198.0/24 AS23715 SEOUL-INTGW-GXS-AP Global Exchange Services 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.131.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DoD Network Information Center 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DoD Network Information Center 199.114.142.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.148.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS6045 DDN-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.156.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 199.246.116.0/24 AS813 UUNET-CANADA - MCI Communications Services, Inc. d/b/a Verizon Business 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.73.144.0/20 AS4788 TMNET-AS-AP TM Net, Internet Service Provider 202.80.192.0/20 AS2706 HKSUPER-HK-AP Pacific Internet (Hong Kong) Limited 202.86.252.0/22 AS4748 RESOLINK-AS-AP Resources Link Network Limited 202.86.252.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.94.1.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.207.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 202.136.254.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.136.255.0/24 AS4808 CHINA169-BJ CNCGROUP IP network China169 Beijing Province Network 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.176.228.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.176.232.0/24 AS17988 SINOSAT-AS-AP SINOSAT (HONG KONG) LIMITED 202.181.32.0/24 AS4645 ASN-HKNET-AP HKNet Co. Ltd 203.12.45.0/24 AS4854 NETSPACE-AS-AP Netspace Online Systems 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 203.112.97.0/24 AS9942 COMINDICO-AP SOUL Converged Communications Australia 203.112.111.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.113.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.114.0/24 AS4802 ASN-IINET iiNet Limited 203.112.116.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.117.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.118.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.119.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.120.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.121.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.112.127.0/24 AS7474 OPTUSCOM-AS01-AU SingTel Optus Pty Ltd 203.128.128.0/19 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 203.128.128.0/24 AS23849 CNNIC-NET263-AP Beijing Capital-online science development Co.,Ltd. 203.152.136.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.138.0/23 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.142.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.152.143.0/24 AS23649 NEWSKIES-AS-AP New Skies Satellites, Hong Kong Teleport 203.160.110.0/23 AS7643 VNN-AS-AP Vietnam Posts and Telecommunications (VNPT) 204.9.216.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.9.217.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.9.218.0/23 AS6389 BELLSOUTH-NET-BLK - BellSouth.net Inc. 204.13.140.0/22 AS7270 NET2PHONE - Net2Phone Corp. 204.16.120.0/23 AS12077 204.16.122.0/23 AS12077 204.19.14.0/23 AS577 BACOM - Bell Canada 204.29.196.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.29.197.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 206.162.224.0/19 AS23464 ILCSNET - Interlink Computer Services 206.180.240.0/20 AS12083 KNOLOGY-NET - Knology Holdings 206.220.240.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.64/26 AS22335 MREN - Metropolitan Research and Education Network 206.220.240.128/25 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.160/30 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.240.220/32 AS10764 STARTAP - National Center for Supercomputing Applications 206.220.241.0/24 AS10764 STARTAP - National Center for Supercomputing Applications 207.98.192.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.209.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.98.223.0/24 AS701 UUNET - MCI Communications Services, Inc. d/b/a Verizon Business 207.191.128.0/19 AS10887 BPSI-AS - BPSI Internet Services 207.204.168.0/24 AS15150 BELLTECH-AS - BELLWETHER TECHNOLOGY CORPORATION 207.204.222.0/24 AS22773 CCINET-2 - Cox Communications Inc. 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc. 208.38.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 208.38.192.0/21 AS14237 BEAMSPEED1 - Beamspeed 208.38.202.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.203.0/24 AS14237 BEAMSPEED1 - Beamspeed 208.38.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 209.54.93.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.111.0/24 AS22773 CCINET-2 - Cox Communications Inc. 209.54.123.0/24 AS6062 NETPLEX - NETPLEX 209.54.240.0/21 AS10887 BPSI-AS - BPSI Internet Services 209.105.224.0/19 AS20074 209.140.90.0/24 AS14461 NTSL - NET SOLUTIONS 209.140.224.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.234.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.235.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.236.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.237.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.238.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.140.239.0/24 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.16.0/21 AS10573 WEBNEXUS - WebNexus Communications Inc. 209.141.48.0/22 AS14461 NTSL - NET SOLUTIONS 209.145.192.0/18 AS3043 AMPHIB-AS - Amphibian Media Corporation 209.145.204.0/22 AS14237 BEAMSPEED1 - Beamspeed 210.5.128.0/20 AS4837 CHINA169-BACKBONE CNCGROUP China169 Backbone 213.150.192.0/21 AS29571 CITelecom-AS 213.150.200.0/22 AS29571 CITelecom-AS 213.150.201.0/24 AS29338 AFOL-AS Used by Africaonline Operations 213.150.202.0/24 AS41042 SKYVISION SkyVision Network Services 213.172.144.0/22 AS17175 NSS-UK New Skies Satellites UK AS 216.37.114.0/23 AS3549 GBLX Global Crossing Ltd. 216.37.120.0/23 AS13377 216.59.0.0/17 AS3356 LEVEL3 Level 3 Communications 216.99.16.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.99.20.0/24 AS6395 LVLT-6395 - Level 3 Communications, Inc. 216.162.96.0/19 AS7393 CYBERCON - CYBERCON, INC. 216.172.198.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.172.199.0/24 AS22773 CCINET-2 - Cox Communications Inc. 216.210.86.0/24 AS577 BACOM - Bell Canada 216.235.96.0/19 AS13645 BROADBANDONE - BroadbandONE, Inc. 216.240.240.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.241.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.251.207.0/24 AS1239 SPRINTLINK - Sprint 217.78.71.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.72.0/24 AS12491 IPPLANET-AS IPPlanet 217.78.73.0/24 AS12491 IPPLANET-AS IPPlanet Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

Re: Best utilizing fat long pipes and large file transfer
by Randy Bush 13 Jun '08

13 Jun '08

Karl Auerbach wrote: > Randy Bush wrote: >> and for those of us who are addicted to simple rsync, or whatever over >> ssh, you should be aware of the really bad openssh windowing issue. > I was not aware of this. Do you have a pointer to a description? see the work by rapier and stevens at psc <http://www.psc.edu/networking/projects/hpn-ssh/> this is why rsync starts off at a blazing pace and then takes a serious dive. randuy

1 0