- Test - lists.nanog.org

traffic from DE to DE goes via NL->UK->US->FR
by Andrius Kazimieras Kasparavičius 04 Aug '06

04 Aug '06

Hi, Just wondering if it is normal for traffic from DE to DE to flow through NL->UK->US->FR and so increase delay nearly 100 times? Traceroute here: http://pastebin.ca/115200 and there is only 4 AS, so ASPATH does not help a lot in finding such links with a horrifying optimisation. I believe there is much worse links, any software to detect this? Something like scanning one ip from larger IP blocks with icmp and comparing geotrajectoyi via geoip? thank you, AKK

5 4

Netgear wgt624 v3 (OT?)
by auser＠mind.net 04 Aug '06

04 Aug '06

Hi, Perhaps not the best place to ask but I thought I would ask here before possibly hitting Netgear (since you have to register) or BUGTRAQ. My Netgear wgt624 v3 allows for port triggering. When I do that, it doesn't seem to work. Port FORWARDING works fine. Port triggering appears completely broken in both their stable firmware and in their beta. Anyone else experience this with their Netgear?

2 1

text based netflow top ASN tool?
by matthew zeier 04 Aug '06

04 Aug '06

I recall using a text based netflow collector that would show me top destination ASNs. I recall it being really simple to get working too. But it's been some time since I used it and can't recall what it's called. Can someone give me a hint?

5 4

BGP Update Report
by cidr-report＠potaroo.net 04 Aug '06

04 Aug '06

BGP Update Report Interval: 21-Jul-06 -to- 03-Aug-06 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASN Upds % Upds/Pfx AS-Name 1 - AS7018 28472 2.7% 19.1 -- ATT-INTERNET4 - AT&T WorldNet Services 2 - AS2386 16975 1.6% 18.5 -- INS-AS - AT&T Data Communications Services 3 - AS6147 15962 1.5% 58.9 -- Telefonica del Peru S.A.A. 4 - AS16322 14615 1.4% 152.2 -- PARSONLINE PARSONLINE Autonomous System 5 - AS39308 12535 1.2% 783.4 -- ASK-AS Andishe Sabz Khazar Autonomous System 6 - AS12497 10732 1.0% 214.6 -- SANET-GE SANET NETWORK (AS) 7 - AS30890 10597 1.0% 50.9 -- EVOLVA Evolva Telecom 8 - AS17974 10013 1.0% 24.4 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 9 - AS3561 9537 0.9% 19.5 -- SAVVIS - Savvis 10 - AS15611 9382 0.9% 87.7 -- Iranian Research Organisation 11 - AS11492 8626 0.8% 15.3 -- CABLEONE - CABLE ONE 12 - AS6478 8623 0.8% 18.2 -- ATT-INTERNET3 - AT&T WorldNet Services 13 - AS2018 7589 0.7% 56.2 -- TENET-1 14 - AS22909 7465 0.7% 20.0 -- DNEO-OSP1 - Comcast Cable Communications, Inc. 15 - AS20115 7135 0.7% 13.3 -- CHARTER-NET-HKY-NC - Charter Communications 16 - AS721 6214 0.6% 8.5 -- DISA-ASNBLK - DoD Network Information Center 17 - AS3301 5708 0.6% 18.1 -- TELIANET-SWEDEN TeliaNet Sweden 18 - AS33783 5645 0.5% 53.3 -- EEPAD 19 - AS9121 5592 0.5% 34.1 -- TTNET TTnet Autonomous System 20 - AS22291 5349 0.5% 13.4 -- CHARTER-LA - Charter Communications TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASN Upds % Upds/Pfx AS-Name 1 - AS27407 938 0.1% 938.0 -- FRISCHS-INC - Frisch's Restaurants, Inc. 2 - AS14169 1872 0.2% 936.0 -- MEAD - MEAD CORPORATION 3 - AS39308 12535 1.2% 783.4 -- ASK-AS Andishe Sabz Khazar Autonomous System 4 - AS21027 639 0.1% 639.0 -- ASN-PARADORES PARADORES Autonomous System 5 - AS12845 475 0.1% 475.0 -- INFORNET AS InforNet Systems 6 - AS34378 456 0.0% 456.0 -- RUG-AS Razguliay-UKRROS Group 7 - AS3944 432 0.0% 432.0 -- PARTAN-LAB - Partan & Partan 8 - AS3043 1680 0.2% 420.0 -- AMPHIB-AS - Amphibian Media Corporation 9 - AS31458 1955 0.2% 391.0 -- SMARTTELECOM-AS Smart Telecom Autonomous System 10 - AS36385 383 0.0% 383.0 -- GOOGLE-IT - Google Incorporated 11 - AS35076 368 0.0% 368.0 -- NAME-SERVICE-AS Service-AS 12 - AS39441 360 0.0% 360.0 -- NAMIONET NamioNet Autonomous System 13 - AS7013 1376 0.1% 344.0 -- NETSELECT - Health Sciences Libraries Consortium 14 - AS15755 340 0.0% 340.0 -- ISPRO Autonomous System Izmir,TURKEY 15 - AS39074 328 0.0% 328.0 -- IR-SEPANTA-ISP Sepanta Communication Development Co. Ltd 16 - AS34666 635 0.1% 317.5 -- GLB1-AS "Global-Erty" JSC 17 - AS14410 1563 0.1% 312.6 -- DALTON - MCM, Inc., DBA: Internet@Dalton 18 - AS22683 901 0.1% 300.3 -- PHILIPS-INTERNET Koninklijke Philips Electronics N.V. (internet presence) 19 - AS36063 298 0.0% 298.0 -- ITSPEED-0001 - Arrownet, Inc. 20 - AS35288 273 0.0% 273.0 -- INTERDIGITAL-AS INTERDIGITAL TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 159.124.160.0/19 1806 0.2% AS14169 -- MEAD - MEAD CORPORATION 2 - 209.140.24.0/24 1677 0.1% AS3043 -- AMPHIB-AS - Amphibian Media Corporation 3 - 208.0.225.0/24 1425 0.1% AS11139 -- CWRIN CW BARBADOS 4 - 206.251.163.0/24 1409 0.1% AS4314 -- I-55-INTERNET-SERVICES-INC - I-55 INTERNET SERVICES 5 - 203.112.154.0/24 1194 0.1% AS17783 -- SRILRPG-AS SRIL RPG Autonomous System 6 - 89.144.128.0/21 1075 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 7 - 170.210.128.0/21 1042 0.1% AS4270 -- Red de Interconexion Universitaria 8 - 209.160.56.0/22 1020 0.1% AS14361 -- HOPONE-DCA - HopOne Internet Corporation 9 - 66.117.207.0/24 938 0.1% AS27407 -- FRISCHS-INC - Frisch's Restaurants, Inc. 10 - 89.144.134.0/24 936 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 11 - 89.144.129.0/24 933 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 12 - 89.144.130.0/24 932 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 13 - 89.144.132.0/24 932 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 14 - 89.144.128.0/24 932 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 15 - 89.144.133.0/24 932 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 16 - 89.144.131.0/24 932 0.1% AS39308 -- ASK-AS Andishe Sabz Khazar Autonomous System 17 - 208.28.80.0/21 801 0.1% AS7013 -- NETSELECT - Health Sciences Libraries Consortium 18 - 143.81.0.0/21 788 0.1% AS6034 -- DDN-ASNBLK - DoD Network Information Center 19 - 198.92.192.0/21 731 0.1% AS16559 -- REALCONNECT-01 - RealConnect, Inc 20 - 216.207.169.0/24 705 0.1% AS19888 -- ATECHNO - AUTOMATED INTERNET TECHNOLOGIES Details at http://bgpupdates.potaroo.net ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

The Cidr Report
by cidr-report＠potaroo.net 04 Aug '06

04 Aug '06

This report has been generated at Fri Aug 4 21:45:06 2006 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 28-07-06 190511 124720 29-07-06 191252 125273 30-07-06 191227 125187 31-07-06 191250 125054 01-08-06 191211 125131 02-08-06 191418 125298 03-08-06 191672 125399 04-08-06 191781 125349 AS Summary 22707 Number of ASes in routing system 9502 Number of ASes announcing only one prefix 1485 Largest number of prefixes announced by an AS AS7018 : ATT-INTERNET4 - AT&T WorldNet Services 91475200 Largest address span announced by an AS (/32s) AS721 : DISA-ASNBLK - DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 04Aug06 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 191918 125338 66580 34.7% All ASes AS4134 1260 263 997 79.1% CHINANET-BACKBONE No.31,Jin-rong Street AS4755 961 74 887 92.3% VSNL-AS Videsh Sanchar Nigam Ltd. Autonomous System AS18566 952 139 813 85.4% COVAD - Covad Communications Co. AS721 1010 317 693 68.6% DISA-ASNBLK - DoD Network Information Center AS4323 960 277 683 71.1% TWTC - Time Warner Telecom, Inc. AS22773 679 48 631 92.9% CCINET-2 - Suddenlink Communications AS9498 763 179 584 76.5% BBIL-AP BHARTI BT INTERNET LTD. AS6197 1020 486 534 52.4% BATI-ATL - BellSouth Network Solutions, Inc AS7018 1485 962 523 35.2% ATT-INTERNET4 - AT&T WorldNet Services AS19916 563 65 498 88.5% ASTRUM-0001 - OLM LLC AS19262 683 187 496 72.6% VZGNI-TRANSIT - Verizon Internet Services Inc. AS855 567 88 479 84.5% CANET-ASN-4 - Aliant Telecom AS17488 520 54 466 89.6% HATHWAY-NET-AP Hathway IP Over Cable Internet AS11492 722 282 440 60.9% CABLEONE - CABLE ONE AS3602 523 105 418 79.9% AS3602-RTI - Rogers Telecom Inc. AS18101 433 27 406 93.8% RIL-IDC Reliance Infocom Ltd Internet Data Centre, AS15270 447 56 391 87.5% AS-PAETEC-NET - PaeTec.net -a division of PaeTecCommunications, Inc. AS17676 490 110 380 77.6% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS812 416 42 374 89.9% ROGERS-CABLE - Rogers Cable Inc. AS4766 667 306 361 54.1% KIXS-AS-KR Korea Telecom AS6198 600 244 356 59.3% BATI-MIA - BellSouth Network Solutions, Inc AS4812 415 61 354 85.3% CHINANET-SH-AP China Telecom (Group) AS22047 433 87 346 79.9% VTR BANDA ANCHA S.A. AS6467 392 47 345 88.0% ESPIRECOMM - Xspedius Communications Co. AS16852 360 51 309 85.8% FOCAL-CHICAGO - Focal Data Communications of Illinois AS8151 786 495 291 37.0% Uninet S.A. de C.V. AS16814 329 44 285 86.6% NSS S.A. AS5668 539 264 275 51.0% AS-5668 - CenturyTel Internet Holdings, Inc. AS9583 942 669 273 29.0% SIFY-AS-IN Sify Limited AS19115 362 93 269 74.3% CHARTER-LEBANON - Charter Communications Total 20279 6122 14157 69.8% Top 30 total Possible Bogus Routes 24.246.0.0/17 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 24.246.128.0/18 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 61.4.64.0/20 AS9929 CNCNET-CN China Netcom Corp. 61.8.64.0/20 AS4800 IDOLA-INDOSAT-AP Internet Service Provider 64.17.32.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.33.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 64.17.37.0/24 AS13488 CBWU-13488 - Continental Broadband Florida, Inc DBA WebUnited 66.11.32.0/20 AS6261 VISINET - Visionary Systems, Inc. 66.37.96.0/20 AS3764 IA-HOU-AS - Internet America, Inc. 66.96.0.0/20 AS3770 WORLDPATH-AS - WorldPath Internet Services 66.117.8.0/24 AS174 COGENT Cogent/PSI 66.163.96.0/20 AS25767 WAVEFORM - Waveform Technology, LLC 66.235.158.0/23 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 69.39.193.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.195.0/24 AS25973 MZIMA - Mzima Networks, Inc. 69.39.196.0/24 AS25973 MZIMA - Mzima Networks, Inc. 71.7.0.0/17 AS30160 IOWA-TELECOM - Iowa Telecom 87.76.0.0/16 AS39525 SPRITELINK SpriteLink Autonomous System 91.192.0.0/16 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.192.0.0/24 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 91.255.248.0/21 AS12654 RIPE-NCC-RIS-AS RIPE NCC RIS Project. 124.41.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 125.213.0.0/16 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 131.64.0.0/12 AS721 DISA-ASNBLK - DoD Network Information Center 132.0.0.0/10 AS721 DISA-ASNBLK - DoD Network Information Center 137.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 138.136.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 139.56.0.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.64.0/19 AS14956 BROADVISION-ASN - Broadvision Inc. 139.56.72.0/23 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 151.135.0.0/16 AS4763 TELSTRANZ-AS TelstraClear Ltd 158.0.0.0/13 AS721 DISA-ASNBLK - DoD Network Information Center 163.142.0.0/16 AS2500 JPNIC-ASBLOCK-AP JPNIC 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.40.105.0/24 AS12582 TSF-DATANET-NGD-AS TSF MPLS VPN Services 192.69.107.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.108.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.69.177.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.70.164.0/24 AS25689 NRCNET-AS - National Research Council of Canada 192.81.183.0/24 AS719 ELISA-AS Elisa Oyj 192.81.184.0/24 AS719 ELISA-AS Elisa Oyj 192.88.99.0/24 AS8767 MNET-AS M"net AS 192.96.36.0/24 AS5713 SAIX-NET 192.96.37.0/24 AS10474 NETACTIVE 192.96.135.0/24 AS2018 TENET-1 192.96.136.0/23 AS2018 TENET-1 192.96.140.0/24 AS2018 TENET-1 192.96.143.0/24 AS2018 TENET-1 192.96.145.0/24 AS2018 TENET-1 192.96.177.0/24 AS6083 POSIX-AFRICA 192.96.250.0/24 AS2018 TENET-1 192.107.104.0/24 AS6458 Telgua 192.122.212.0/24 AS209 ASN-QWEST - Qwest 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS10282 EQUANT-CEEUR EQUANT AS for Central and Eastern Europe region 192.153.144.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 192.172.0.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 192.188.208.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 193.36.1.0/24 AS8220 COLT COLT Telecommunications 193.37.69.0/24 AS2856 BT-UK-AS BTnet UK Regional network 193.110.77.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.78.0/24 AS3356 LEVEL3 Level 3 Communications 193.110.79.0/24 AS3356 LEVEL3 Level 3 Communications 194.31.227.0/24 AS21461 TRANSFAIRNET Transfair-net GmbH Krefeld 194.59.176.0/20 AS1273 CW Cable & Wireless 194.156.206.0/24 AS4589 EASYNET Easynet Group Plc 194.246.72.0/23 AS8893 ARTFILES-AS Artfiles New Media GmbH 195.35.104.0/24 AS12445 SPIDERNET-AS Selene s.p.a. 196.6.108.0/24 AS5713 SAIX-NET 196.6.175.0/24 AS3741 IS 196.6.176.0/23 AS3741 IS 196.6.183.0/24 AS3741 IS 196.6.196.0/24 AS3741 IS 196.6.199.0/24 AS3741 IS 196.6.208.0/24 AS3741 IS 196.6.211.0/24 AS3741 IS 196.6.212.0/23 AS3741 IS 196.6.212.0/24 AS3741 IS 196.6.222.0/23 AS3741 IS 196.6.237.0/24 AS3741 IS 196.10.119.0/24 AS2018 TENET-1 196.10.122.0/23 AS2018 TENET-1 196.10.136.0/22 AS3741 IS 196.10.140.0/22 AS3741 IS 196.10.231.0/24 AS3741 IS 196.10.251.0/24 AS2018 TENET-1 196.10.252.0/23 AS2018 TENET-1 196.10.254.0/24 AS2018 TENET-1 196.11.0.0/20 AS3741 IS 196.11.40.0/21 AS3741 IS 196.11.135.0/24 AS3741 IS 196.11.188.0/23 AS3741 IS 196.11.190.0/24 AS3741 IS 196.11.251.0/24 AS3741 IS 196.13.101.0/24 AS2018 TENET-1 196.13.102.0/23 AS2018 TENET-1 196.13.104.0/24 AS2018 TENET-1 196.13.108.0/24 AS3741 IS 196.13.116.0/22 AS2018 TENET-1 196.13.121.0/24 AS2018 TENET-1 196.13.125.0/24 AS2018 TENET-1 196.13.126.0/24 AS2018 TENET-1 196.13.127.0/24 AS3741 IS 196.13.128.0/22 AS3741 IS 196.13.144.0/22 AS2905 TICSA-ASN 196.13.152.0/21 AS2905 TICSA-ASN 196.13.160.0/24 AS2905 TICSA-ASN 196.13.169.0/24 AS2018 TENET-1 196.13.174.0/23 AS2018 TENET-1 196.13.176.0/21 AS2018 TENET-1 196.13.188.0/22 AS2018 TENET-1 196.13.192.0/22 AS2018 TENET-1 196.13.196.0/24 AS2018 TENET-1 196.13.252.0/22 AS2018 TENET-1 196.98.17.0/24 AS1257 TELE2 AB 198.18.1.0/24 AS3301 TELIANET-SWEDEN TeliaNet Sweden 198.23.26.0/24 AS4390 BELLATLANTIC-COM - Bell Atlantic, Inc. 198.54.82.0/24 AS2018 TENET-1 198.54.92.0/24 AS2018 TENET-1 198.54.222.0/24 AS2018 TENET-1 198.54.249.0/24 AS2018 TENET-1 198.54.250.0/24 AS2018 TENET-1 198.54.251.0/24 AS2018 TENET-1 198.97.72.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.80.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.96.0/19 AS721 DISA-ASNBLK - DoD Network Information Center 198.97.240.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 198.101.4.0/22 AS721 DISA-ASNBLK - DoD Network Information Center 198.136.32.0/20 AS19329 MCNET - Martin County Board of County Commissioners 198.161.87.0/24 AS6539 GT-BELL - Bell Canada 198.163.155.0/24 AS684 MTSAL-ASN - MTS Allstream Inc. 198.167.0.0/16 AS7456 INTERHOP - Interhop Network SERVICES Inc. 198.168.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASKTEL - SaskTel 198.199.198.0/24 AS13671 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 199.9.128.0/17 AS668 ASN-ASNET-NET-AS - Defense Research and Engineering Network 199.10.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.60.0.0/20 AS271 BCNET-AS - University of British Columbia 199.114.0.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.128.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.130.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.132.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.134.0/24 AS3541 ITSDN-U4 - DISA/UNRRA 199.114.136.0/24 AS27044 DDN-ASNBLK1 - DoD Network Information Center 199.114.138.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.140.0/24 AS3544 ITSDN-U7 - DISA/UNRRA 199.114.142.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.144.0/24 AS27064 DDN-ASNBLK1 - DoD Network Information Center 199.114.148.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.150.0/24 AS721 DISA-ASNBLK - DoD Network Information Center 199.114.152.0/24 AS27033 DDN-ASNBLK1 - DoD Network Information Center 199.114.153.0/24 AS27034 DDN-ASNBLK1 - DoD Network Information Center 199.114.154.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.114.160.0/24 AS1733 CENTAF-SWA - AF DDN PMO 199.121.0.0/16 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.0.0/18 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.16.0/20 AS721 DISA-ASNBLK - DoD Network Information Center 199.123.80.0/21 AS721 DISA-ASNBLK - DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST-AS - IQuest Internet 199.202.0.0/16 AS701 ALTERNET-AS - UUNET Technologies, Inc. 199.246.116.0/24 AS813 UUNET-AS1 - UUNET Technologies, Inc. 199.249.233.0/24 AS1239 SPRINTLINK - Sprint 199.249.234.0/24 AS1239 SPRINTLINK - Sprint 199.249.235.0/24 AS174 COGENT Cogent/PSI 202.9.64.0/19 AS9290 TPN-AS-AP Smart Global Network (M) Sdn Bhd 202.9.224.0/19 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.224.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.225.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.226.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.227.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.228.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.230.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.232.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.233.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.236.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.237.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.238.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.240.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.241.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.242.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.243.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.251.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.9.252.0/24 AS7584 TCR-AS-AP TCR Holdings Limted. 202.58.113.0/24 AS19161 INNOCOM-TELECOM - INNOCOM TELECOM 202.86.252.0/22 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.253.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.254.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.86.255.0/24 AS9304 HUTCHISON-AS-AP Hutchison Global Communications 202.90.33.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.40.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.41.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.42.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.43.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.90.44.0/24 AS9830 SWIFTONLINE-AS-AP SWIFT ONLINE BORDER AS 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.94.65.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.70.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.94.74.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.75.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.77.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.83.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.85.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.87.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.94.95.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 202.124.192.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.193.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.194.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.195.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.196.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.197.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.198.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.199.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.124.200.0/22 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.204.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.205.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.206.0/24 AS15412 FLAG-AS Flag Telecom Global Internet AS 202.124.207.0/24 AS17557 PKTELECOM-AS-AP Pakistan Telecom 202.131.64.0/19 AS9381 NEWTT-IP-AP Wharf T&T Ltd. 202.137.224.0/24 AS9942 COMINDICO-AP COMindico Australia 202.148.32.0/20 AS17495 GATEWAY-AP BROADBAND WIRELESSS INTERNET SERVICE PROVIDER 202.160.146.0/24 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.160.152.0/22 AS10113 DATAFAST-AP DATAFAST TELECOMMUNICATIONS LTD 202.160.158.0/23 AS9837 POWERTEL-AP Powertel Ltd 202.164.100.0/24 AS18101 RIL-IDC Reliance Infocom Ltd Internet Data Centre, 202.169.97.0/24 AS4802 ASN-IINET iiNet Limited 202.169.98.0/24 AS7545 TPG-INTERNET-AP TPG Internet Pty Ltd 202.169.102.0/24 AS13700 CAPITAL-NETWORKS - Capital Networks Pty Ltd 202.182.128.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.129.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.130.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.131.0/24 AS9519 BRAENET Braenet Pty Ltd 202.182.132.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.133.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.134.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.135.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.136.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.140.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.144.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.145.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.146.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.147.0/24 AS9837 POWERTEL-AP Powertel Ltd 202.182.157.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.158.0/24 AS9627 TCR-AP TCR Holdings Ltd 202.182.159.0/24 AS9519 BRAENET Braenet Pty Ltd 203.13.171.0/24 AS1221 ASN-TELSTRA Telstra Pty Ltd 203.62.0.0/17 AS7575 AARNET-AS-AP Australian Academic and Reasearch Network (AARNet) 203.78.48.0/20 AS9299 IPG-AS-AP Philippine Long Distance Telephone Company 203.89.139.0/24 AS17911 BRAINPK-AS-AP Brain Telecommunication Ltd. 203.99.142.0/24 AS9826 ILINK-HK-AP iLink.net Ltd 203.111.192.0/20 AS7473 SINGTEL-AS-AP Singapore Telecom 204.48.58.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.60.0/24 AS4323 TWTC - Time Warner Telecom, Inc. 204.48.118.0/23 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.48.119.0/24 AS29912 CITIZENS-PROPERTY-INSURANCE-CORPORATION - Citizens Property Insurance Corporation 204.153.104.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.153.106.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.153.107.0/24 AS10913 INTERNAP-BLK - Internap Network Services 204.154.125.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLABS-ASN - TELLABS Operations, Inc. 205.150.0.0/15 AS701 ALTERNET-AS - UUNET Technologies, Inc. 206.128.104.0/21 AS11709 VIC - VIRTUAL INTERACTIVE CENTER 206.167.57.0/24 AS376 RISQ-AS - Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 206.191.96.0/19 AS15290 ALLST-15290 - Allstream Corp. Corporation Allstream 207.231.96.0/19 AS11194 NUNETPA - NuNet Inc 209.159.128.0/19 AS209 ASN-QWEST - Qwest 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.234.0.0/18 AS3845 STATE-NET - CS&W, Inc. 216.71.224.0/20 AS23527 COTELLIGENCE - Cotelligence, Inc. 216.201.72.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.73.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.74.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.75.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.76.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.77.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.78.0/24 AS14709 Telefonica Moviles Panama S.A. 216.201.79.0/24 AS14709 Telefonica Moviles Panama S.A. 216.228.224.0/20 AS13674 VRIS-AS-BLOCK-13661-13675 - Verizon Internet Services Inc. 216.240.240.0/20 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 216.240.242.0/24 AS7018 ATT-INTERNET4 - AT&T WorldNet Services 221.121.128.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.129.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.130.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.131.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.132.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.133.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.157.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.158.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd 221.121.159.0/24 AS9723 ISEEK-AS-AP ISEEK Ltd Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org ausnog(a)ausnog.net

1 0

RE: mitigating botnet C&Cs has become useless
by Fergie 04 Aug '06

04 Aug '06

I really didn't intend for this discussion to run down a rat-hole like this, but there it is. If you're going to pass-the-buck on this to (OS flaws) or that (stupid user tricks), then there are bigger problem than I thought. Regardless of existing flaws, user idiosyncracies, etc., we still have to mitigate _all_ emerging threats. Period. Your customers, and mine, expect nothing less. If you think that it's not worth your time, then continue to ignore it, but at least leave the rest of us to deal with the carnage without being a nayayer poo-poo'ing efforts to the contrary. - ferg -- "Bora Akyol" <bora(a)broadcom.com> wrote: I see you are an optimist. As much as I like to build more technology, in this case neither more technology, nor more manpower devoted to service providers and networking is going to fix this problem. There is a real good analogy to this going on in Santa Clara county (SF Bay Area) where West Nile virus is a real threat. Initially the county tried to spray and in general kill the mosquitos. Well, it turns out that this did not work, they got more. Then, they started doing aerial surveys of the area and going to every single water body that seemed to contain stagnant water. And they made it impractical for mosquitos to breed. Then they sprayed, and now it turns out that the mosquitos are slowly disappearing. Coming back to our topic at hand, first you have to get rid of the buggy code/OS that is running out there. At the same time, you put in the law enforcement (must be able to span across countries) controls to punish the people that get caught. Then, I think you can kill off what's left. Just throwing more network engineers and more gear will not get you where you want to go IMHO. It would make quite a few companies a lot of money though. > -----Original Message----- > From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On > Behalf Of Fergie > Sent: Thursday, August 03, 2006 3:54 PM > To: Bora Akyol > Cc: nanog(a)merit.edu > Subject: RE: mitigating botnet C&Cs has become useless > > > I've got news for you. > > To impact the miscreant's bottom-line, then it will take: > > A) Technology, and; > B) Manpower > > It will also take: > > C) Better cooperative efforts. > > - ferg > > > > -- "Bora Akyol" <bora(a)broadcom.com> wrote: > > IMHO, > > This is not a problem we can solve by adding: > > a) technology (other than completely dumping the OS(s) that make this > possible) > b) manpower > > I think it can be solved by reducing the margins in the > miscreant business line or ideally having it have negative margins. > > > I would suggest more specific attention by service providers > > specifically, and everyone in general, perhaps with more "abuse > > services" -related tracks at meetings like NANOG. :-) > > > > Or something along those lines... > <snip> > > I think better to focus on the economics of the business as > part of the abuse track. > > > -- > "Fergie", a.k.a. Paul Ferguson > Engineering Architecture for the Internet > fergdawg(at)netzero.net ferg's tech blog: > http://fergdawg.blogspot.com/ > > >

3 2

Routing issues with cox?
by David Hubbard 04 Aug '06

04 Aug '06

Anyone know of something going on with Cox currently? We've had a number of customers report they can't get to us (AS 33260) from Cox (AS 22773). We've tried forcing traffic out different providers of ours and it usually seems to die with Level 3 in DFW, Time Warner Telecom in DFW, Cogent in Atlanta, AT&T in Atlanta, etc. On the Cox side, going on traceroute info from customers, it looks like they might force their outbound on Cogent because everything from them seems to come through that peer even though we prepend that one heavily. Thanks, David

2 1

Report on "Analysis and Recommendations on the Exhaustion of IPv4 Address Space"
by Izumi Okutani 04 Aug '06

04 Aug '06

# Apologies for the duplicates # Dear Colleagues Report on "Analysis and Recommendations on the Exhaustion of IPv4 Address Space" JPNIC has published a report titled "Analysis and Recommendations on the Exhaustion of IPv4 Address Space". The original Japanese version of the report was published on 3 April 2006. It was compiled by JPNIC's "Expert Research Team on Number Resources Utilization" which consists of nine engineers and researchers from the Internet Operations area. It reviews some of the recent studies on the lifetime of IPv4 address, provides analysis on impacts of the exhaustion, and offers recommendations on measures to be taken by all stakeholders. JPNIC with the expert team will keep track of trends concerning IPv4 address exhaustion and revise the report as need arises, in order to provide more precise analysis for further discussions. The translated report is available at: "Analysis and Recommendations on the Exhaustion of IPv4 Address Space" http://www.nic.ad.jp/en/research/IPv4exhaustion_trans-pub.pdf If you have any questions or feedbacks about the report, please email us at <ipv4exh-comment(a)nic.ad.jp> Best Regards, JPNIC IP Department ====================================================== Japan Network Information Center (JPNIC) 6F 2-3-4 Uchikanda, Chiyoda-ku, Tokyo 101-0047 JAPAN TEL: +81-3-5297-2311 FAX: +81-3-5297-2312 =======================================================

1 0

RE: mitigating botnet C&Cs has become useless
by Fergie 03 Aug '06

03 Aug '06

I've got news for you. To impact the miscreant's bottom-line, then it will take: A) Technology, and; B) Manpower It will also take: C) Better cooperative efforts. - ferg -- "Bora Akyol" <bora(a)broadcom.com> wrote: IMHO, This is not a problem we can solve by adding: a) technology (other than completely dumping the OS(s) that make this possible) b) manpower I think it can be solved by reducing the margins in the miscreant business line or ideally having it have negative margins. > I would suggest more specific attention by service providers > specifically, and everyone in general, perhaps with more > "abuse services" -related tracks at meetings like NANOG. :-) > > Or something along those lines... <snip> I think better to focus on the economics of the business as part of the abuse track. -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1

Re: mitigating botnet C&Cs has become useless
by Fergie 03 Aug '06

03 Aug '06

-- Danny McPherson <danny(a)tcb.net> wrote: [good stuff elided] >I agree that the root of the problem is the miscreants perpetrating >these crimes, and they need to be prosecuted, but the responsibility >falls far wider than the SPs. > >I also accept the references provided by Paul and others, but what's >the near-term alternative? > >-danny > I would suggest more specific attention by service providers specifically, and everyone in general, perhaps with more "abuse services" -related tracks at meetings like NANOG. :-) Or something along those lines... I think the problem(s) have ballooned to the point where everyone is feeling a bit overwhelmed in getting the cooperation needed to take down botnet C&C's, phishing hosts, and other nefarious "services" -- some which try to hide using DNS RR "fast-flux", etc. The whole business of getting cooperation in this area needs much improvement. - ferg -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawg(at)netzero.net ferg's tech blog: http://fergdawg.blogspot.com/

2 1