- Test - lists.nanog.org

Wifi Security
by Ross Hosman 22 Nov '05

22 Nov '05

So my question is pretty simple. You have all these major companies such as google/earthlink/sprint/etc. building wifi networks. Lets say I want to collect peoples information so I setup an AP with the same ssid as google's ap so people connect to it and I log all of their traffic. Most people won't check beyond the ssid to look at the mac address but even that could be spoofed. Is there anyway to verify a certain ap beyond mac/ssid, will there be in the future? How do these companies plan to mitigate this threat or are they just going to hope consumers are smart enough to figure it out? Ross Hosman Network/Systems Administrator E: rhosman(a)corp.hometel.com P: 618-644-2111 x 238 C: 314-898-3381 Y!: rosshosman

16 30

RE: Wifi Security
by matthew.ford＠bt.com 21 Nov '05

21 Nov '05

> * steve(a)telecomplete.co.uk (Stephen J. Wilcox) [Mon 21 Nov > 2005, 16:07 CET]: > >On Mon, 21 Nov 2005, Patrick W. Gilmore wrote: > >>Why would you even need to set up an AP? Why not just sit > and sniff > >>traffic? Gets you the _exact_ same information. > >man in the middle is easier if you are the gateway, no need > to steal arp > > It's *wireless*! You can just sit and sniff traffic, no need to play > ARP games to redirect traffic to you. *Active* attacks are facilitated by rogue APs and arp spoofing. Mat.

2 1

RE: a record?
by Church, Chuck 21 Nov '05

21 Nov '05

Isn't it just good security practice to limit telnet/SSH access to only a few choice hosts/subnets? I know I'd never allow the 0/0 net access to a signon screen, even if it is SSH. If you're on vacation and need to access something, call your NOC, and have them temporarily allow your dynamic address for SSH. When a hacker finds an open SSH host, they think two things - This host is important to someone, and that they need more doughnuts... Chuck -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu] On Behalf Of Frank Louwers Sent: Tuesday, November 15, 2005 3:03 AM To: nanog(a)nanog.org Subject: Re: a record? On Tue, Nov 15, 2005 at 12:01:00AM +0100, Peter Dambier wrote: > > Moving sshd from port 22 to port 137, 138 or 139. Nasty eh? don't do that! Lots of (access) isps around the world (esp here in Europe) block those ports (in and out), so if you ever need emergency access to your system from a network you don't know, you'll find yourself blocked. Kind Regards, Frank Louwers -- Openminds bvba www.openminds.be Tweebruggenstraat 16 - 9000 Gent - Belgium

8 14

Re: a record?
by Robert Bonomi 20 Nov '05

20 Nov '05

> From: "Patrick W. Gilmore" <patrick(a)ianai.net> > Subject: Re: a record? > Date: Sun, 20 Nov 2005 10:45:21 -0500 > > On Nov 20, 2005, at 6:17 AM, Elmar K. Bins wrote: > > >> Unfortunately, we now have decades of experience in cybersecurity > >> that > >> this isn't true. It appears to work for a while, but on the Internet > >> bears are always hungry and learn. There are people actively > >> scanning > >> for any open ports running any protocol, without a SPECIFIC > >> interest in > >> your computer. > > > > Funnily, I see many many more scanning attempts for the same port (or > > handful of ports) across entire networks than the other way around. > > > > And as stated before: If somebody scans 63023, he has interest in your > > site and is worth the effort of doing something about it. That's the > > whole point in changing the port. > > > > Changing the port is not making the system more secure, it only > > filters > > out passers-by. > > I'm going to repeat what Sean said, because you clearly didn't read > what he said: > > "There are people actively scanning for any open ports running any > protocol, without a SPECIFIC interest in your computer." > > Allow me to re-state again in slightly different language so you > understand this time: > > Changing your port may (will?) lower the number of automated scans > you see hitting your daemon, but it will _NOT_ eliminate them. You know, you and he are "having an agreement", in large part. He *expressly*disclaimed* any increase in security. that his approach *only* eliminated the casual 'passers-by'. > IOW: > Just because someone is probing for an SSH daemon on 65K ports > against your box does _NOT_ mean he has a specific interest in your box. A sweep across all ports on each box, for a specific protocol, is orders of magnitude slower than scanning only the (be it a single one or a handful) 'well known' ports for that service. A scan-all-ports search can only check 16 machines in the time a single-port scan can check _over_a_milliion_ machines. The scan-all-ports searcher is clearly more interested in finding an exploit on "one of a relatively small number of boxes" than he is in 'finding an exploitable box, "somewhere"'. He is concentrating his attack efforts on a _comparatively_small_ range of addresses, rather than on a broad-based 'opportunistic' search. And he has a 'reason' for doing that. It may well *NOT* be "because of who the boxes belong to", nor "what 'interesting' data can be found on them" -- it may simmply be that they're on a 'fat pipe' connection. or 'who knows what.' > If you honestly believe that just 'cause someone tried "ssh -p 63xxx > $YOUR.BOX" it means he is specifically targeting your box, well, that > is your prerogative. You are almost certain to be wrong at least > part of the time, though. The guy who does that _is_ "more worrisome" than the 'casual door knocker' on 'port 22'. Whether or not he's after me _in_particular_, I don't really care. He is mounting a 'more determined' attack against my resources, than the average clown. *AS*SUCH*, the 'wise man' takes faster, and more aggressive, defensive actions when this type shows his face. He is considerably more determined, and quite probably somewhat more skilfull, than the 'typical' doorknob rattler. This is true, whether or not he's deliberately going after _me_. <grin> Lastly, by setting things up such that you don't have to examine all the port 22 doorknob rattling to see if there's any thing 'more determined' going on -- that 'noise reduction' makes the serious attempts *much* more visible. "Security by obscurity" is _not_ a complete solution, in-and-of itself, no question. However, it _can_ be a big 'first step' to help in weeding out the 'casual' stuff from the more determined attempts.

1 0

Re: AOL Postmaster contact?
by Suresh Ramasubramanian 20 Nov '05

20 Nov '05

On 11/20/05, Mark Costlow <cheeks(a)swcp.com> wrote: > > Someone might look at the ticket Monday. Meanwhile, I've got thousands of > queued messages frrom users that are upset with ME because I can't get > their mail to AOL. > AOL's whitelist + feedback loop is not really a whitelist If the numbers theyre seeing on your servers get too high .. they'll start rate limiting you down by putting in anywhere upto 48 hour tempfailing of your IPs The last time this happened to us, it got very quickly resolved when we ran numbers on our scomp complaints from AOL to see what was going on. Turns out the reason was a lot of users with .forwards to AOL accounts, then reporting .forwarded email as spam. This email was also going out through our standard outbound mail relays, and the combination of our outbound spam levels (pretty low for an ISP our size) AND .forwarded email tipped the balance. So what we did was to set things up so that .forward traffic was routed out a separate IP. And we told AOL what that IP was and also told them that the only thing coming out of it would be .forward traffic. They took that into account I guess, because the haven't gone and 4xx'ed us since we set this up (and when they do 4xx it hurts - we're just over a third their size so there's a substantial amount of email traffic from our users to AOL ..) -- Suresh Ramasubramanian (ops.lists(a)gmail.com)

1 1

Cisco 7200 + NPE-G1 / 7301
by Ben Butler 18 Nov '05

18 Nov '05

Hi, Anyone got any comments about how good or otherwise the Cisco 7200 + NPE-G1 or 7301, both with 1GB of RAM, is as a eBGP router + L2TP terminator for DSL subs, in terms of scalability for bandwidth through put & the number of VPDN sessions it can terminate before it dies. Are the two solutions effectively the same box or are there more technical differences beyond the obvious number of slots. Without wanting to start one of those sorts of threads is it time to look at something else, i.e. Juniper, for cost / performance, or should I stick with the heard and what I know in Cisco. Kind Regards Ben Butler ++++++++++++++++++++++++++++++++++++++ C2 Internet Ltd Globe House The Gullet Nantwich Cheshire CW5 5RL W http://www.c2internet.net/ T +44-(0)845-658-0020 F +44-(0)845-658-0070 All quotes & services from C2 are bound by our standard terms and conditions which are available on our website at: http://www.c2internet.net/legal/main.htm#tandc

5 4

westin, the serial
by Randy Bush 18 Nov '05

18 Nov '05

anyone at seattle westin have something that talks serial so i can deal with a freaked 2511 oob through its console? randy

3 3

Call for Presentations - NANOG 36, Feb. 2006
by Steve Feldman 18 Nov '05

18 Nov '05

The North American Network Operators' Group (NANOG) will hold its 36th meeting February 12-15, in Dallas, Texas. The meeting will be hosted by Yahoo. NANOG conferences provide a forum for information exchange among network operators, engineers, and researchers. Meetings are held three times each year, and include presentations, tutorial sessions, and BOFs. NANOG solicits presentations highlighting issues relating to technology already deployed or soon to be deployed in the Internet. Vendors are encouraged to work with operators to present deployment experiences with the vendor's products and interoperability. Suggested topics include: * Network Operations o Everyday life in the NOC o Present-day operational case studies o Exchange point technologies and implementation o Peering/colocation coordination issues o Content provider issues o Security attacks/mitigation, tools, and analysis o State of OAM tools for IP and MPLS networks o Network and data center redundancy * Deployment Experience o Alternative last-mile technologies (metro/rural, broadband, radio, optical, etc.) o VoIP deployment, peering and interconnect o Anycast o IPTV o Large-scale wireless o Fiber and Wavelength use by enterprises * Research, Policy, and New Technology o Approaches to securing the global routing system (e.g., s*BGP and/or other tools) o Inter-provider MPLS/QoS/PCE o RIR policy (e.g., implications of HD ratio) o Currently active standards organizations and their topic areas o IPv6 economics: why is deployment so slow? o Approaches to IPv6 scalability, e.g., SHIM6 If time permits, topics for short (10-20 minute) lightning talks will be solicited on-site. "Technologies to Watch" topics will be appropriate for this session. Researchers are invited to present short (10-minute) summaries of their work for operator feedback. Topics include routing, network performance, statistical measurement and analysis, and protocol development and implementation. Studies presented may be works in progress. Researchers from academia, government, and industry are encouraged to present. Proposals are also invited for tutorial sessions. Previous topics have included: * Troubleshooting BGP * Best Practices for Determining Traffic Matrices * Options for Blackhole and Discard Routing * BGP/MPLS Layer 3 VPNs How to Present Submit an abstract and draft slides for the presentation in email to nanog-support(a)nanog.org. See http://www.nanog.org/presentations.html for submission guidelines. We are also developing an online submission system, and hope to have it available by early December. Check the NANOG main page (http://www.nanog.org) for updates. The deadline for proposals is December 15, 2005. While the majority of speaking slots will be filled by December 15, a limited number of slots may be available after that date for topics that are exceptionally timely, important, or critical to the operations of the Internet. Submissions will be reviewed by the NANOG Program Committee, and presenters will be notified of acceptance by January 2. Final drafts of presentation slides are due by February 1, and final versions February 8. Steve Feldman Chair, NANOG Program Committee

1 0

Weekly Routing Table Report
by Routing Table Analysis 18 Nov '05

18 Nov '05

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 19 Nov, 2005 Analysis Summary ---------------- BGP routing table entries examined: 175261 Prefixes after maximum aggregation: 98860 Unique aggregates announced to Internet: 84806 Total ASes present in the Internet Routing Table: 20928 Origin-only ASes present in the Internet Routing Table: 18220 Origin ASes announcing only one prefix: 8614 Transit ASes present in the Internet Routing Table: 2708 Transit-only ASes present in the Internet Routing Table: 74 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 21 Prefixes from unregistered ASNs in the Routing Table: 2 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 12 Number of addresses announced to Internet: 1462078080 Equivalent to 87 /8s, 37 /16s and 138 /24s Percentage of available address space announced: 39.4 Percentage of allocated address space announced: 59.4 Percentage of available address space allocated: 66.4 Total number of prefixes smaller than registry allocations: 84115 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 36623 Total APNIC prefixes after maximum aggregation: 15833 Prefixes being announced from the APNIC address blocks: 34396 Unique aggregates announced from the APNIC address blocks: 16829 APNIC Region origin ASes present in the Internet Routing Table: 2404 APNIC Region origin ASes announcing only one prefix: 699 APNIC Region transit ASes present in the Internet Routing Table: 366 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 17 Number of APNIC addresses announced to Internet: 206407616 Equivalent to 12 /8s, 77 /16s and 135 /24s Percentage of available APNIC address space announced: 76.6 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911 APNIC Address Blocks 58/7, 60/7, 124/7, 126/8, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 92846 Total ARIN prefixes after maximum aggregation: 55846 Prefixes being announced from the ARIN address blocks: 72314 Unique aggregates announced from the ARIN address blocks: 27466 ARIN Region origin ASes present in the Internet Routing Table: 10355 ARIN Region origin ASes announcing only one prefix: 3835 ARIN Region transit ASes present in the Internet Routing Table: 968 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 17 Number of ARIN addresses announced to Internet: 276171520 Equivalent to 16 /8s, 118 /16s and 11 /24s Percentage of available ARIN address space announced: 68.6 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/6, 74/7, 76/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 34088 Total RIPE prefixes after maximum aggregation: 23049 Prefixes being announced from the RIPE address blocks: 31082 Unique aggregates announced from the RIPE address blocks: 20835 RIPE Region origin ASes present in the Internet Routing Table: 7304 RIPE Region origin ASes announcing only one prefix: 3827 RIPE Region transit ASes present in the Internet Routing Table: 1194 Average RIPE Region AS path length visible: 5.0 Max RIPE Region AS path length visible: 20 Number of RIPE addresses announced to Internet: 224086528 Equivalent to 13 /8s, 91 /16s and 74 /24s Percentage of available RIPE address space announced: 66.8 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 RIPE Address Blocks 62/8, 80/5, 88/6, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 9905 Total LACNIC prefixes after maximum aggregation: 3282 Prefixes being announced from the LACNIC address blocks: 8203 Unique aggregates announced from the LACNIC address blocks: 4769 LACNIC Region origin ASes present in the Internet Routing Table: 649 LACNIC Region origin ASes announcing only one prefix: 210 LACNIC Region transit ASes present in the Internet Routing Table: 120 Average LACNIC Region AS path length visible: 5.2 Max LACNIC Region AS path length visible: 21 Number of LACNIC addresses announced to Internet: 22832128 Equivalent to 1 /8s, 92 /16s and 100 /24s Percentage of available LACNIC address space announced: 34.0 LACNIC AS Blocks 26592-26623, 27648-28671, plus ERX transfers LACNIC Address Blocks 189/8, 190/8, 200/7 AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 1792 Total AfriNIC prefixes after maximum aggregation: 850 Prefixes being announced from the AfriNIC address blocks: 1147 Unique aggregates announced from the AfriNIC address blocks: 833 AfriNIC Region origin ASes present in the Internet Routing Table: 142 AfriNIC Region origin ASes announcing only one prefix: 43 AfriNIC Region transit ASes present in the Internet Routing Table: 18 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 12 Number of AfriNIC addresses announced to Internet: 2834432 Equivalent to 0 /8s, 43 /16s and 64 /24s Percentage of available AfriNIC address space announced: 8.4 AfriNIC AS Blocks 36864-37887 & ERX transfers AfriNIC Address Blocks 41/8, 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 1026 6348 216 CHINANET-BACKBONE 9583 828 77 12 Sify Limited 4755 752 259 68 Videsh Sanchar Nigam Ltd. Aut 1221 739 1342 513 Telstra Pty Ltd 4766 634 3927 285 Korea Telecom (KIX) 7545 514 108 71 TPG Internet Pty Ltd 17676 470 6819 100 Softbank BB Corp. 9498 394 215 62 BHARTI BT INTERNET LTD. 9443 392 87 78 Primus Telecommunications 17488 366 22 10 Hathway IP Over Cable Interne 2907 340 1764 317 SINET Japan 4802 335 73 153 Wantree Development 17557 333 25 161 Pakistan Telecom 7474 332 258 228 SingTel Optus Pty Ltd 9929 326 216 46 China Netcom Corp. 18302 308 142 169 SK Global co., Ltd 9837 276 79 177 Powertel Ltd 17974 272 65 16 PT TELEKOMUNIKASI INDONESIA 18101 269 68 19 Reliance Infocom Ltd Internet 9800 257 410 67 CHINA UNICOM ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1480 6317 960 AT&T WorldNet Services 4323 1193 706 233 Time Warner Telecom 174 1081 5847 1000 Cogent Communications 721 1070 21938 308 DLA Systems Automation Center 701 986 8136 830 UUNET Technologies, Inc. 6197 962 407 496 BellSouth Network Solutions, 2386 927 545 693 AT&T Data Communications Serv 18566 877 240 7 Covad Communications 1239 848 2801 598 Sprint 209 656 3621 519 Qwest 20115 651 530 343 Charter Communications 11492 616 81 10 Cable One 852 573 1093 381 Telus Advanced Communications 19916 563 49 54 OLM LLC 19262 559 1578 139 Verizon Global Networks 855 558 247 65 Canadian Research Network 22773 557 1468 25 Cox Communications, Inc. 3602 542 126 103 Sprint Canada, Inc. 3356 520 10634 405 Level 3 Communications, LLC 6478 495 1427 276 AT&T Worldnet Services RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 611 1960 480 UUNET - Commercial IP service 3301 303 1085 289 TeliaNet Sweden 3320 285 3230 240 Deutsche Telekom AG 8220 269 475 264 COLT Telecommunications 680 244 2040 239 DFN-IP service G-WiN 8708 233 274 219 Romania Data Systems S.A. 3246 230 477 223 Song Networks 6746 202 51 173 Dynamic Network Technologies, 1257 194 712 171 SWIPnet Swedish IP Network 3269 182 1829 68 TELECOM ITALIA 5515 182 840 128 Sonera Solution Autonomous Sy 786 174 1795 174 The JANET IP Service 5400 162 317 135 BT Ignite European Backbone 6830 161 669 33 UPC Distribution Services 3300 159 185 94 AUCS Communications Services 24863 151 37 6 LINKdotNET AS number 12479 150 322 5 Uni2 Autonomous System 25186 148 211 104 France Telecom Transpac's Tra 3215 147 1269 78 France Telecom Transpac 3352 140 1420 33 Ibernet, Internet Access Netw LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 392 707 168 UniNet S.A. de C.V. 16814 295 18 7 NSS, S.A. 11172 280 88 67 Servicios Alestra S.A de C.V 11664 221 22 29 Keytech SA 19632 196 14 5 Metropolis Intercom S.A. 14117 184 11 6 Telefonica del Sur S.A. 22047 171 128 7 VTR PUNTO NET S.A. 6147 161 118 21 Telefonica Del Peru 7303 152 72 19 Telecom Argentina Stet-France 13999 134 52 9 Mega Cable S.A. de C.V. 11556 129 64 2 Cable-Wireless Panama 19169 128 8 20 Telconet 10481 121 48 8 Prima S.A. 6505 120 89 85 Global One Communicaoes Ltda 6503 113 148 74 AVANTEL, S.A. 18822 112 7 13 TELEFONICA MANQUEHUE 21826 112 14 18 INTERCABLE 5639 111 12 9 Telecommunications Services o 14522 107 12 8 SatNet S.A. 11311 99 8 10 Sinectis S.A. AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 269 708 228 The Internet Solution 8452 139 36 8 TEDATA 5536 122 8 16 Internet Egypt Network 2018 116 298 103 Tertiary Education Network 2905 78 211 71 The Internetworking Company o 6713 70 71 10 Itissalat Al-MAGHRIB 20928 60 16 2 Noor Advanced Technologies AS 24835 59 34 6 RAYA Telecom - Egypt 15475 57 84 4 Nile Online 5713 38 151 34 Telkom SA Ltd 12455 34 6 3 Jambonet Autonomous system 15706 31 8 3 Sudatel Internet Exchange Aut 33774 31 3 22 AS Number for Telecom Algeria 8524 24 1 4 AUCEGYPT Autonomous System 16637 23 10 21 Johnnic e-Ventures 10798 22 1 13 Standard Bank of South Africa 21280 21 4 4 Swift Global Kenya Ltd.Is an 23889 21 5 9 MAURITIUS TELECOM 12258 17 3 11 Vodacom Internet Company 15808 17 2 2 Communication Solutions Ltd i Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 4323 1193 960 Time Warner Telecom 18566 877 870 Covad Communications 9583 828 816 Sify Limited 4134 1026 810 CHINANET-BACKBONE 721 1070 762 DLA Systems Automation Center 4755 752 684 Videsh Sanchar Nigam Ltd. Aut 11492 616 606 Cable One 22773 557 532 Cox Communications, Inc. 19916 563 509 OLM LLC 855 558 493 Canadian Research Network 6197 962 466 BellSouth Network Solutions, 5668 476 450 CenturyTel Internet Holdings, 7545 514 443 TPG Internet Pty Ltd 3602 542 439 Sprint Canada, Inc. 19262 559 420 Verizon Global Networks 17676 470 370 Softbank BB Corp. 6467 404 357 E.Spire Communications, Inc. 17488 366 356 Hathway IP Over Cable Interne 4766 634 349 Korea Telecom (KIX) 812 367 337 Rogers WAVE List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 65003 PRIVATE 57.250.244.0/24 13879 SITA-EQUANT 24413 UNALLOCATED 202.46.32.0/19 17623 China Netcom Corp. Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.43.230.0/24 7575 Australian Academic and Rease 192.44.0.0/24 5501 Fraunhofer Gesellschaft 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.72.0.0/18 4780 Digital United Inc. 192.72.0.0/16 4780 Digital United Inc. 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.172.0.0/19 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:18 /9:5 /10:8 /11:17 /12:81 /13:187 /14:340 /15:666 /16:8597 /17:2880 /18:4871 /19:11026 /20:12142 /21:10194 /22:13440 /23:14626 /24:95225 /25:345 /26:292 /27:194 /28:26 /29:12 /30:36 /31:3 /32:30 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 861 877 Covad Communications 6197 784 962 BellSouth Network Solutions, 7018 729 1480 AT&T WorldNet Services 9583 650 828 Sify Limited 2386 643 927 AT&T Data Communications Serv 11492 608 616 Cable One 4323 570 1193 Time Warner Telecom 19916 557 563 OLM LLC 4766 440 634 Korea Telecom (KIX) 855 430 558 Canadian Research Network 7011 399 461 Citizens Utilities 702 391 611 UUNET - Commercial IP service 5668 376 476 CenturyTel Internet Holdings, 1239 365 848 Sprint 6198 354 492 BellSouth Network Solutions, 6517 323 349 Yipes Communications, Inc. 15270 316 343 PaeTec.net -a division of Pae 13609 298 340 Choice One Communications Inc 18302 292 308 SK Global co., Ltd 701 286 986 UUNET Technologies, Inc. Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:3 8:36 12:1622 13:1 15:11 16:3 17:3 18:3 20:42 24:672 30:2 32:64 38:180 40:54 44:3 47:3 52:4 55:1 56:3 57:35 58:98 59:90 60:145 61:795 62:783 63:1900 64:2938 65:2129 66:2892 67:638 68:682 69:1320 70:231 71:34 72:460 80:678 81:595 82:495 83:286 84:307 85:367 86:185 87:93 125:64 128:166 129:169 130:97 131:300 132:35 133:1 134:151 135:45 136:168 137:70 138:173 139:71 140:437 141:146 142:399 143:144 144:220 145:34 146:302 147:132 148:270 149:195 150:108 151:72 152:111 153:93 154:5 155:154 156:84 157:119 158:145 159:179 160:85 161:77 162:240 163:145 164:190 165:184 166:146 167:246 168:459 169:144 170:313 171:12 192:5743 193:3352 194:2434 195:1623 196:711 198:3930 199:3258 200:4295 201:442 202:6245 203:6594 204:3833 205:2052 206:2442 207:2918 208:2031 209:3461 210:1770 211:846 212:1212 213:1364 214:309 215:41 216:3846 217:1165 218:217 219:128 220:537 221:313 222:127 End of report

1 0

RE: Cisco 7200 + NPE-G1 / 7301
by Neil J. McRae 18 Nov '05

18 Nov '05

> Anything new from cisco I recommend to avoid > for atleast a year so that you aren't an alpha tester. Or any vendor actually :-) Neil. -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.362 / Virus Database: 267.13.3/174 - Release Date: 17/11/2005

1 0