- Test - lists.nanog.org

The Cidr Report
by CIDR Report 06 Oct '01

06 Oct '01

This is an auto-generated mail on Fri Oct 5 23:00:01 PDT 2001 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. NEW: Check http://www.employees.org/~tbates/cidr-report-region.html for the regional version of this report. NEW: Check http://www.employees.org/~tbates/autnums.html for a complete list of autonomous system number to name mappings as used by the CIDR-Report. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to GX Networks for giving me access to their routing tables once a day. Please send any comments about this report directly to CIDR Report <cidr-report(a)cisco.com>. ------------------------------------------------------------------------------ CIDR REPORT for 05Oct01 0) General Status Table History ------------- Date Prefixes 280901 104483 290901 104988 300901 104943 011001 105036 021001 105301 031001 104637 041001 104254 051001 104449 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 11739 Number of ASes announcing only one prefix: 6989 (3974 cidr, 3015 classful) Largest number of cidr routes: 844 announced by AS701 Largest number of classful routes: 1394 announced by AS701 1) Gains by aggregating at the origin AS level --- 05Oct01 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS1221 1258 958 300 23.8% Telstra Pty Ltd AS4151 302 170 132 43.7% USDA AS16473 201 76 125 62.2% Bell South AS577 307 187 120 39.1% Bell Advanced Communications Inc. AS13999 131 20 111 84.7% Mega Cable S.A. de C.V. AS4293 375 267 108 28.8% Cable & Wireless USA AS2048 215 116 99 46.0% State of Louisiana AS4755 208 131 77 37.0% Videsh Sanchar Nigam Ltd. Autonom AS1239 481 410 71 14.8% Sprint AS3464 163 95 68 41.7% Alabama SuperComputer Network AS12302 98 32 66 67.3% MobiFon S.A. AS11686 192 126 66 34.4% Education Networks of America AS6471 128 63 65 50.8% ENTEL CHILE S.A. AS4200 137 72 65 47.4% Apex Global Information Services, AS17557 124 65 59 47.6% Pakistan Telecom AS16758 63 6 57 90.5% IKON Office Solutions AS209 309 254 55 17.8% Qwest AS306 60 6 54 90.0% National Guard Bureau AS3908 291 238 53 18.2% Supernet, Inc. AS400 137 85 52 38.0% Headquarters Standard Systems Cen AS226 145 93 52 35.9% Los Nettos AS17561 113 62 51 45.1% Internet service provision to Wes AS1 537 486 51 9.5% BBN Planet AS637 106 58 48 45.3% Department of Navy AS4323 246 198 48 19.5% Time Warner Communications, Inc. AS1913 152 104 48 31.6% Defense Logistics Agency AS10620 68 21 47 69.1% TVCABLE BOGOTA AS15290 246 200 46 18.7% AT&T Canada IES AS376 120 76 44 36.7% Reseau Interordinateurs Scientiqu AS5416 51 9 42 82.4% BATELCO-BH For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

Summary: SNMPv3 implementations
by RJ Atkinson 06 Oct '01

06 Oct '01

I've received numerous requests for information on which network switch/router systems implement SNMPv3, though my own request was for information on operational deployments of SNMPv3 in networks. Folks interested in an *incomplete* list of implementations with SNMPv3 might want to look at: http://www.ibr.cs.tu-bs.de/ietf/snmpv3/#Implementations A number of network equipment vendors have shipped SNMPv3, but are NOT included from that list. So if SNMPv3 is something you are interested in, ask your vendors directly for more information. Of particular interest is the existence of at least one freely distributable implementation "NetSNMP" (formerly UC Davis SNMP). This works out of the box on most modern UNIX systems, meaning that one can use SNMPv3 on UNIX servers even if the OS vendor didn't include it directly. For more on that implementation, browse the above URL. Ran rja(a)inet.org

2 1

Re: slightly OT : versign complaint department
by beldridg＠best.com 06 Oct '01

06 Oct '01

hi all, an update to my post (i know, bad form). a friend or two has informed me of a few errors. i think, in general, most people don't understand the relationship between the "registry" and the different "registrars." i've asked this person if a FAQ is possible. here is the update: On Sat, 29 Sep 2001 beldridg(a)best.com wrote: > i've been trying to add a pgp key to the verisign/netsol database for > the past two weeks. i've sent four messages, opened three web help > requests, and spent three hours on the phone with their helpdesk. they > know less than their customers about their own procedures and web > documentation for adding keys for PGP guardian auth. i discovered the whole problem is with the verisign _registrar_ and not the _registry_ (i originally thought the registry owned the database of host and contact records and the pgp keyserver). the _registry_ does own the "canonical" host database, but the only way to make changes is through your _registar_. the _registrar_ is responsible for authenticating end users before updating the _registry_ database. after multiple e-mail support questions, 4 key ADD messages and 4 hours of phone calls, i never got another response from the verisign _registrar_. i finally tried adding a PGP key again and it worked. i guess i woke up the mice on the treadmills in the computers at the verisign _registrar_. i guess the only thing i can do is move my one remaining domain record away from the veri$ign _registrar_. of course, they won't refund the unused portion of my $35 even though their customer service is absolutely horrific (so much for a SLA). i recommend that everybody move their money away from the verisign _registrar_ and use any other one - i don't even care which one. :) - brett

1 0

"Virtual" multi-homing providers
by Ng Pheng Siong 05 Oct '01

05 Oct '01

Hello, I'm looking at deploying "POPs" at several IDCs across the globe. Each POP will contain several servers. (At most ten.) I would like each POP to use the same set of IP addresses; connections to these IP addresses will get to the nearest POP by virtue of routing. IOW, I think I'm wanting to have all my POPs belong to one AS, as if said AS multi-homes to each POP/IDC, except that the multi-homing is virtual, because I don't have links from my "enterprise network" to these IDCs. (Well, I don't expect to have much of an enterprise network. ;-) Are there providers of such? Will I be able to get a globally routable IP block for my AS? Or is my best bet to pick one provider which has global presence? (Which such global providers are there? Do people like Exodus or Digital Island count?) TIA for your input. Cheers. -- Ng Pheng Siong <ngps(a)post1.com> * http://www.post1.com/home/ngps

3 2

Seeking clueful salesrep for UUnet/MCI and C&W
by JC Dill 05 Oct '01

05 Oct '01

Thanks for all the VERY helpful replies to my query about the backbone that sucks the least. As a followup, I've been asked to locate clueful sales reps for UUnet, MCI, and C&W. Sales people (and others) from those named organizations are given explicit permission to reply to me directly, and techies are encouraged to contact me with the contact info of any sales rep they trust. I already have contacts for AT&T and Genuity, but still need C&W and UUnet/MCI. This is for a company headquartered near Silicon Valley that needs connectivity at 12 US locations plus London and Tokyo.

1 0

Global Switch?
by Tim 05 Oct '01

05 Oct '01

Hi folks, Anyone familiar with Global Switch? They appear to have recently acquired the assets of colo.com - and possibly other facilities as well. I'm trying to decide whether to keep my assets at colo.com/Global Switch or to transfer elsewhere. Thanks, Tim

1 0

RE: staffing guidelines
by Murphy, Brennan 05 Oct '01

05 Oct '01

How many more did you ned for config and support? Suppose too that your network was global, covering EMEA, APAC and North America. I am interested more in how many *engineers* are needed on 200, 500, 2000 device networks, where "device" means routers, switches and any servers that support the routers/switches such as HP Openview, Sniffers or ACS servers, ...Firewalls, etc. Anybody dare to take the number of devices on their network and divide by the number of network support staff you have? Shouldnt there be a paper from Gartner or Giga on this topic? Can anyone reference one? -----Original Message----- From: Dave O'Shea [mailto:doshea@telentente.com] Sent: Thursday, October 04, 2001 4:24 PM To: Irwin Lazar; nanog(a)merit.edu Subject: RE: staffing guidelines I'm sure it varies greatly based on the type of work that's being done, but my experience with another company led me to think that one set of eyes could handle up to about 200-300 devices, purely for monitoring and outage management. Configuration and support was another matter. (When I say devices I mean routers, servers, and manageable switches) To get at a 24x7 figure, I generally multiplied by about 4 or 5 (taking into account shifts, vacations, weekends, etc.) So, for about, say, 1,000 manageable devices, I would expect to need about 16-20 people. The curve improves significantly as you grow and get to use more sophisticated problem isolation methods and tools. -----Original Message----- From: Irwin Lazar Sent: Thu 2001-10-04 14:26 To: 'nanog(a)merit.edu' Cc: Subject: staffing guidelines Is anyone aware of guidelines for IT staffing that are freely available on the web? In particular, I'm looking for guidelines as to the number of staff required to support "N" amount of routers, servers, users, etc. Any links are appreciated. Thanks in advance, Irwin

2 1

Cisco 12400 / Engine 3
by Deron J. Ringen 05 Oct '01

05 Oct '01

Greeting, Has anyone done testing with the Cisco 12400 and/or the engine 3 line cards? If so are you willing to share your experiences off-line? Thanks, Deron Ringen

1 0

traffic classification mechanisms
by Robert Pezick 05 Oct '01

05 Oct '01

This query is part of a marketing survey on the utility of today's QoS features. All input would be appreciated. The question addresses the real-world utility of the basic edge traffic aggregation/QoS mechanisms that vendors provide these days, in particular if and how often operators actually use them. A common function in today's edge equipment is the classification of packets based on layer 2, layer 3, and layer 4 packet header fields. In particular, classification based on - layer 2: MAC addresses, ethertype, etc - layer 3: source IP, dest IP, ToS, protocol - layer 4: TCP/UDP source/destination port The edge equipment will generally classify traffic into flows based on these characteristics and then perform some policing and/or marking functions on that stream. 1) Do you use these facilities? rarely, somewhat, often? 2) Are there particular classification methods out of the standard list that you use more often then others? Any help is appreciated. Thanks. - Rob

1 0

Re: staffing guidelines
by Gregory Hicks 04 Oct '01

04 Oct '01

> From: Irwin Lazar <ILazar(a)tbg.com> > Date: Thu, 4 Oct 2001 13:26:47 -0600 > > Is anyone aware of guidelines for IT staffing that are freely available on > the web? In particular, I'm looking for guidelines as to the number of > staff required to support "N" amount of routers, servers, users, etc. Any > links are appreciated. I have not seen any 'guidelines', but I have always figured (roughly) on 100-150x/IT staffer... (100-150 users/routers/machines/whatever...) Much more than that and people start getting overworked... For a time, I was responsible for 400+ users and 800+ machines and was a bit over-worked... I 'negotiated' for ("I either get some help, or I'm looking for a different employer.") and got two assistants to assist with the workload... The staffing level really depends on the level of support desired/agreed upon, users expectations, machine types, et al... Regards, Gregory Hicks --------------------------------------------------------------------- Gregory Hicks | Principal Systems Engineer Cadence Design Systems | Direct: 408.576.3609 555 River Oaks Pkwy M/S 6B1 | Fax: 408.894.3479 San Jose, CA 95134 | Internet: ghicks(a)cadence.com You know you have achieved perfection in design, not when you have nothing more to add, but when you have nothing more to take away.

1 0