- Test - lists.nanog.org

fiber cut 19 May/PM -> 20 May/AM in Ashburn, VA (lawnmower?!)
by Robert E. Seastrom 21 May '04

21 May '04

Since none of the usual suspects have noted it, I'll give a cursory nod to an ILEC (Verizon) fiber cut that happened mid-afternoon yesterday in Ashburn, VA. About a thousand POTS customers were down (including several OOB dialups of which I am aware in the Equinix facility in Ashburn), as well as some T1 and faster loops to Equinix and elsewhere in the immediate area. Outage was likely off the radar because despite the big concentration of connectivity in the affected area, the natural cost disadvantage of the ILEC meant that few circuits of consequence were riding that fiber. Service was resumed after approximately 12 hours. RFO given was that the fiber cut was caused by a commercial lawnmower. Humorous comments left as an exercise to the reader. ---Rob

8 10

The Cidr Report
by cidr-report＠potaroo.net 21 May '04

21 May '04

This report has been generated at Fri May 21 21:43:31 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 14-05-04 134465 94321 15-05-04 134328 94291 16-05-04 134322 94277 17-05-04 134431 94339 18-05-04 134557 94505 19-05-04 134683 94655 20-05-04 134815 94861 21-05-04 134981 94840 AS Summary 17173 Number of ASes in routing system 6948 Number of ASes announcing only one prefix 1428 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 73561344 Largest address span announced by an AS (/32s) AS568 : DISOUN DISO-UNRRA Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 21May04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 135437 94890 40547 29.9% All ASes AS4134 751 153 598 79.6% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 725 200 525 72.4% TWTC Time Warner Telecom AS7029 570 53 517 90.7% AIS-43 Alltel Information Services, Inc. AS7018 1428 990 438 30.7% ATTW AT&T WorldNet Services AS6197 698 312 386 55.3% BNS-14 BellSouth Network Solutions, Inc AS7843 496 115 381 76.8% ADELPH-13 Adelphia Corp. AS9583 473 107 366 77.4% SATYAMNET-AS Satyam Infoway Ltd., AS701 1299 934 365 28.1% UU UUNET Technologies, Inc. AS22909 387 37 350 90.4% CMCS Comcast Cable Communications, Inc. AS6198 554 224 330 59.6% BNS-14 BellSouth Network Solutions, Inc AS22773 372 52 320 86.0% CXAB Cox Communications Inc. Atlanta AS27364 354 40 314 88.7% ARMC Armstrong Cable Services AS9929 336 33 303 90.2% CNCNET-CN China Netcom Corp. AS1239 943 644 299 31.7% SPRN Sprint AS17676 339 50 289 85.3% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS4355 381 99 282 74.0% ERSD EARTHLINK, INC AS6140 386 120 266 68.9% IMPSA ImpSat AS6478 304 48 256 84.2% ATTW AT&T WorldNet Services AS1221 855 617 238 27.8% ASN-TELSTRA Telstra Pty Ltd AS209 735 504 231 31.4% QWEST-4 Qwest AS25844 243 16 227 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS14654 230 5 225 97.8% WAYPOR-3 Wayport AS3356 898 682 216 24.1% LEVEL3 Level 3 Communications AS4766 474 263 211 44.5% KIX Korea Internet Exchange for "96 World Internet Exposition AS9443 358 155 203 56.7% INTERNETPRIMUS-AS-AP Primus Telecommunications AS2386 427 240 187 43.8% ADCS-1 AT&T Data Communications Services AS5668 380 194 186 48.9% CIH-12 CenturyTel Internet Holdings, Inc. AS19262 269 88 181 67.3% VGN-2 Verizon Global Networks AS6327 208 28 180 86.5% SHAWC-2 Shaw Communications Inc. AS6347 401 221 180 44.9% SAVV SAVVIS Communications Corporation Total 16274 7224 9050 55.6% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 60.254.0.0/20 AS23889 MAURITIUS-TELECOM-AS-AP MAURITIUS TELECOM 64.46.4.0/22 AS11711 TULARO TULAROSA COMMUNICATIONS 64.46.12.0/24 AS7850 IHIGHW iHighway.net, Inc. 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.46.34.0/24 AS3408 64.46.63.0/24 AS7850 IHIGHW iHighway.net, Inc. 66.114.0.0/19 AS16526 BIRCHT Birch Telecom, Inc. 69.6.224.0/19 AS32392 HOSTI-3 Hosting-Network GmbH 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 132.0.0.0/10 AS568 DISOUN DISO-UNRRA 137.0.0.0/13 AS568 DISOUN DISO-UNRRA 138.136.0.0/13 AS568 DISOUN DISO-UNRRA 158.0.0.0/13 AS568 DISOUN DISO-UNRRA 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 LANLINK Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.43.230.0/24 AS4738 SAARDNET-AS South Australian Academic Research and Development Network 192.44.0.0/19 AS702 AS702 MCI EMEA 192.81.182.0/24 AS719 LANLINK Elisa Oyj 192.81.183.0/24 AS719 LANLINK Elisa Oyj 192.81.184.0/24 AS719 LANLINK Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.136.71.0/24 AS719 LANLINK Elisa Oyj 192.136.79.0/24 AS719 LANLINK Elisa Oyj 192.153.144.0/21 AS568 DISOUN DISO-UNRRA 192.172.0.0/19 AS568 DISOUN DISO-UNRRA 192.188.208.0/20 AS568 DISOUN DISO-UNRRA 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS568 DISOUN DISO-UNRRA 198.97.80.0/20 AS568 DISOUN DISO-UNRRA 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.192.0/20 AS568 DISOUN DISO-UNRRA 198.97.240.0/20 AS568 DISOUN DISO-UNRRA 198.97.247.0/24 AS3475 DEPART-52 Department of the Navy 198.101.4.0/22 AS568 DISOUN DISO-UNRRA 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.161.165.0/24 AS852 AGTA Telus Advanced Communications 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS568 DISOUN DISO-UNRRA 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.84.0.0/16 AS701 UU UUNET Technologies, Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS568 DISOUN DISO-UNRRA 199.114.128.0/18 AS568 DISOUN DISO-UNRRA 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.136.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.144.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS568 DISOUN DISO-UNRRA 199.123.0.0/18 AS568 DISOUN DISO-UNRRA 199.123.16.0/20 AS568 DISOUN DISO-UNRRA 199.123.80.0/21 AS568 DISOUN DISO-UNRRA 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.197.8.0/22 AS21814 PARSON-18 Parsons Corp. 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 202.2.64.0/20 AS9729 IS-AP iAdvantage Limited 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.0.0/20 AS4658 NETFRONT-AS NETFRONT I.T. LIMITED (HONG KONG) 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.86.142.0/24 AS30362 HAWAI-1 Hawaii-Pacific Teleport 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.122.76.0/24 AS17553 TIMELESS-AP System Integration provider 202.123.96.0/20 AS9288 COMCEN-AS-AP Com-Cen Pty Ltd 202.133.3.0/24 AS9335 CIP-JAPAN-AS-AP ATT IPlus 202.155.243.0/24 AS4795 INDOSAT2-ID INDOSATNET-ASN 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.132.107.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.132.108.0/24 AS10236 FOXGOLD-NET-AU-AP FOXGOLD COMMUNICATIONS 203.201.64.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.65.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.66.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.67.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.68.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.70.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.71.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.72.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.73.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.74.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.75.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.76.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.77.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.78.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 203.201.79.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.69.144.0/22 AS5668 CIH-12 CenturyTel Internet Holdings, Inc. 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 205.159.72.0/24 AS1660 ANSCOM-5 ANS Communications 206.41.32.0/19 AS14824 NCC-105 NewSouth Communications Corp. 206.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL-33 Telesat International Ltd. 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 209.169.219.0/24 AS189 GNTY Genuity 209.169.223.0/24 AS189 GNTY Genuity 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.50.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.51.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.55.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.56.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.222.137.0/24 AS27429 TIL-33 Telesat International Ltd. 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 210.213.0.0/19 AS6453 GLOBEINTERNET Teleglobe America Inc. 216.18.224.0/21 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.224.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.18.228.0/22 AS11458 IMBRIS-1 IMBRIS, INC. 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.130.0/24 AS11937 TRXI TRX Inc. 216.145.132.0/24 AS11937 TRXI TRX Inc. 216.145.133.0/24 AS11937 TRXI TRX Inc. 216.145.134.0/24 AS11937 TRXI TRX Inc. 216.145.135.0/24 AS11937 TRXI TRX Inc. 216.145.152.0/24 AS10758 INWAVE INWave Internet, Inc 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/21 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org

1 0

RE: Power Failure
by Pendergrass, Greg 21 May '04

21 May '04

I'm in Telecity at 8/9 Harbour exchange and I lost 2 BGP sessions to Abovenet at about 10:50 BDT. I've been told there is a power failure there but I'm not sure if my problem is related. Greg Pendergrass ----------------------------------- Network and Security Manager Vodafone Global Services Limited -----Original Message----- From: Tom Daly [mailto:tom@dyndns.org] Sent: 21 May 2004 12:08 To: nanog(a)merit.edu Subject: Power Failure Anyone aware of or have details about a power failure within 8&9 Harbour Exchange, London, UK? Seems that some Telcos in this facility are having problems. -- Thomas J. Daly tom(a)dyndns.org Chief Infrastructure Officer Dynamic Network Services, Inc. http://www.dyndns.org/ Vodafone Group Services Limited Registered Office: Vodafone House, The Connection, Newbury, Berkshire RG14 2FN Registered in England No. 3802001 This e-mail is for the addressee(s) only. If you are not an addressee, you must not distribute, disclose, copy, use or rely on this e-mail or its contents, and you must immediately notify the sender and delete this e-mail and all copies from your system. Any unauthorised use may be unlawful. The information contained in this e-mail is confidential and may also be legally privileged.

1 0

Power Failure
by Tom Daly 21 May '04

21 May '04

Anyone aware of or have details about a power failure within 8&9 Harbour Exchange, London, UK? Seems that some Telcos in this facility are having problems. -- Thomas J. Daly tom(a)dyndns.org Chief Infrastructure Officer Dynamic Network Services, Inc. http://www.dyndns.org/

1 0

Re: ntp config tech note
by sthaug＠nethelp.no 21 May '04

21 May '04

> you ask do folk run ntpd on every server. And the answer is, yes, on all Unix servers. Have done so for many years. Running ntpdate from cron was always regarded as a poor substitute. > i wonder if folk run ntpd on every router. i did and do. Yup. Or sntp if that's the only thing available. Steinar Haug, Nethelp consulting, sthaug(a)nethelp.no

1 0

handling ddos attacks
by Mark Kent 21 May '04

21 May '04

I've been trying to find out what the current BCP is for handling ddos attacks. Mostly what I find is material about how to be a good net.citizen (we already are), how to tune a kernel to better withstand a syn flood, router stuff you can do to protect hosts behind it, how to track the attack back to the source, how to determine the nature of the traffic, etc. But I don't care about most of that. I care that a gazillion pps are crushing our border routers (7206/npe-g1). Other than getting bigger routers, is it still the case that the best we can do is identify the target IP (with netflow, for example) and have upstreams blackhole it? Thanks, -mark

13 13

OT: NANOG 31 and Kaboom
by Michael Sinatra 21 May '04

21 May '04

For those of you getting to SF a bit early (before Saturday night), there is a local SF radio station that sponsors a big block-party-type event on the waterfront on Saturday afternoon, and they have a huge fireworks show after dark (about 9pm PDT). If you're into pyrotechnics, the fireworks tend to be quite good, and you should be able to see them anywhere on the bayfront (The Embarcadero) south of the Bay Bridge, all the way down to the SBC Ballpark. It's called the Kaboom! and the actual location of the party is a Piers 30-32, just off the Embarcadero. If you don't like pyrotechnics, and/or the noise bothers you, you may want to stay away from the bayfront on Saturday night between 9-10 PM local time. michael

1 0

RE: Filtering network content (rev.)
by Eastgard, Tom 21 May '04

21 May '04

Is content filtering something ISPs are looking at or already doing? I'm assuming this question would mostly apply to European, Asian, or Middle Eastern Internet access services... te

3 2

RE: ntp config tech note
by Hannigan, Martin 21 May '04

21 May '04

That's NTPv4 isn't it? I also prefer to use three peers vs. two. Always an odd number, greater than 1. Assumptions can't be made about the mathematics behind time, but in a reference model, odd numbers are better. [Not to be confused with network timing, although the same clocks are used to provide sources for "time" over different layer 1/2/3 protocols ] -M -----Original Message----- From: owner-nanog(a)merit.edu [mailto:owner-nanog@merit.edu]On Behalf Of Tony Li Sent: Thursday, May 20, 2004 4:07 PM To: Randy Bush Cc: nanog(a)nanog.org Subject: Re: ntp config tech note One minor (operational! -- gasp) addition: More modern copies of ntpd have a '-g' option that will allow the clock to jump once at boot time. Tony On May 20, 2004, at 12:27 PM, Randy Bush wrote: > > sorry to take you away from discussing spam with an actual > tech note, but twice this morning i have hit incidents where > much needed ntp clients were blown. so, as i was gonna have > to write it up, i figured i would bore you all with it. > > --- > > ntp config hint > 2004.05.20 > > ntpd will not work if your clock is off my a few minutes. > it just sits there forever with its finger in its ear. so, > > at boot, before you start ntpd, use ntpdate to whack your > system's time from a friendly low-numbered strat chimer. > > do not background ntpdate with -b, because, if it is slow to > complete, ntpd can't get the port when you try to start it > next in the boot sequence. > > if ntpdate takes a minute and thus adds to your boot time, > then something is wrong anyway; fix it. > > in case your dns resolver is slow, servers are in trouble, > etc. have an entry for your ntpdate chimer in /etc/hosts. > yes, i too hate /etc/hosts; but i have been bitten without > this hack; named is even more fragile than ntpd. > > once ntpdate has run, then and only then, start your ntpd. > and read all the usual advice on configuration, selection > and solicitation of chimers with which to peer, ... > > and then, if having accurate time on this host is critical, > cron a script which runs `ntpq -c peers` and pipes it to a > hack which looks to be sure that one of the chimers has a > splat in front of it. run this script hourly, and scream > bloody hell via email if it finds problems. > > --- > > now back to your regular spam discussion. /* > > yes, spam is an important issue. but, if your local > organization, this mailing list, ... gets swamped with > discussions of spam, then the spammers have won. > > you have to compartmentalize it, in your organization and > in the general net culture. that's why there are > separate mailing lists for spam, ddos, and other net crap > with which we have to deal. > > that's why we have more than one mailing list in the > world, to compartmentalize so we can focus. > > */ > > randy >

3 2

OT: Telemerc Contact
by jm 21 May '04

21 May '04

Attempting to contact anyone formerly associated with this venture.

1 0