- Test - lists.nanog.org

Weekly Routing Table Report
by cscora＠apnic.net 12 Jul '19

12 Jul '19

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, SANOG, PacNOG, SAFNOG TZNOG, MENOG, BJNOG, SDNOG, CMNOG, LACNOG and the RIPE Routing WG. Daily listings are sent to bgp-stats(a)lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith <pfsinoz(a)gmail.com>. Routing Table Report 04:00 +10GMT Sat 13 Jul, 2019 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary ---------------- BGP routing table entries examined: 761180 Prefixes after maximum aggregation (per Origin AS): 293683 Deaggregation factor: 2.59 Unique aggregates announced (without unneeded subnets): 366839 Total ASes present in the Internet Routing Table: 64866 Prefixes per ASN: 11.73 Origin-only ASes present in the Internet Routing Table: 55778 Origin ASes announcing only one prefix: 23989 Transit ASes present in the Internet Routing Table: 9088 Transit-only ASes present in the Internet Routing Table: 273 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 42 Max AS path prepend of ASN ( 22394) 37 Prefixes from unregistered ASNs in the Routing Table: 25 Number of instances of unregistered ASNs: 26 Number of 32-bit ASNs allocated by the RIRs: 27802 Number of 32-bit ASNs visible in the Routing Table: 22729 Prefixes from 32-bit ASNs in the Routing Table: 102887 Number of bogon 32-bit ASNs visible in the Routing Table: 16 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 240 Number of addresses announced to Internet: 2839111680 Equivalent to 169 /8s, 57 /16s and 104 /24s Percentage of available address space announced: 76.7 Percentage of allocated address space announced: 76.7 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 99.3 Total number of prefixes smaller than registry allocations: 253134 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 205697 Total APNIC prefixes after maximum aggregation: 61433 APNIC Deaggregation factor: 3.35 Prefixes being announced from the APNIC address blocks: 201225 Unique aggregates announced from the APNIC address blocks: 84136 APNIC Region origin ASes present in the Internet Routing Table: 9904 APNIC Prefixes per ASN: 20.32 APNIC Region origin ASes announcing only one prefix: 2770 APNIC Region transit ASes present in the Internet Routing Table: 1482 Average APNIC Region AS path length visible: 4.6 Max APNIC Region AS path length visible: 26 Number of APNIC region 32-bit ASNs visible in the Routing Table: 4904 Number of APNIC addresses announced to Internet: 771115264 Equivalent to 45 /8s, 246 /16s and 73 /24s APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 63488-64098, 64297-64395, 131072-141625 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 226145 Total ARIN prefixes after maximum aggregation: 105748 ARIN Deaggregation factor: 2.14 Prefixes being announced from the ARIN address blocks: 225278 Unique aggregates announced from the ARIN address blocks: 107103 ARIN Region origin ASes present in the Internet Routing Table: 18523 ARIN Prefixes per ASN: 12.16 ARIN Region origin ASes announcing only one prefix: 6879 ARIN Region transit ASes present in the Internet Routing Table: 1908 Average ARIN Region AS path length visible: 3.9 Max ARIN Region AS path length visible: 42 Number of ARIN region 32-bit ASNs visible in the Routing Table: 2799 Number of ARIN addresses announced to Internet: 1067629184 Equivalent to 63 /8s, 162 /16s and 186 /24s ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 (pre-ERX allocations) 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647, 29696-30719, 31744-33791 35840-36863, 39936-40959, 46080-47103 53248-55295, 62464-63487, 64198-64296, 393216-399260 ARIN Address Blocks 3/8, 4/8, 6/8, 7/8, 8/8, 9/8, 11/8, 12/8, 13/8, 15/8, 16/8, 17/8, 18/8, 19/8, 20/8, 21/8, 22/8, 23/8, 24/8, 26/8, 28/8, 29/8, 30/8, 32/8, 33/8, 34/8, 35/8, 38/8, 40/8, 44/8, 47/8, 48/8, 50/8, 52/8, 53/8, 54/8, 55/8, 56/8, 57/8, 63/8, 64/8, 65/8, 66/8, 67/8, 68/8, 69/8, 70/8, 71/8, 72/8, 73/8, 74/8, 75/8, 76/8, 96/8, 97/8, 98/8, 99/8, 100/8, 104/8, 107/8, 108/8, 128/8, 129/8, 130/8, 131/8, 132/8, 134/8, 135/8, 136/8, 137/8, 138/8, 139/8, 140/8, 142/8, 143/8, 144/8, 146/8, 147/8, 148/8, 149/8, 152/8, 155/8, 156/8, 157/8, 158/8, 159/8, 160/8, 161/8, 162/8, 164/8, 165/8, 166/8, 167/8, 168/8, 169/8, 170/8, 172/8, 173/8, 174/8, 184/8, 192/8, 198/8, 199/8, 204/8, 205/8, 206/8, 207/8, 208/8, 209/8, 214/8, 215/8, 216/8, RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 210213 Total RIPE prefixes after maximum aggregation: 99783 RIPE Deaggregation factor: 2.11 Prefixes being announced from the RIPE address blocks: 206369 Unique aggregates announced from the RIPE address blocks: 123042 RIPE Region origin ASes present in the Internet Routing Table: 26224 RIPE Prefixes per ASN: 7.87 RIPE Region origin ASes announcing only one prefix: 11597 RIPE Region transit ASes present in the Internet Routing Table: 3740 Average RIPE Region AS path length visible: 4.6 Max RIPE Region AS path length visible: 35 Number of RIPE region 32-bit ASNs visible in the Routing Table: 8271 Number of RIPE addresses announced to Internet: 720591744 Equivalent to 42 /8s, 243 /16s and 91 /24s RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 (pre-ERX allocations) 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-35839, 38912-39935 40960-45055, 47104-52223, 56320-58367 59392-61439, 61952-62463, 64396-64495 196608-210331 RIPE Address Blocks 2/8, 5/8, 25/8, 31/8, 37/8, 46/8, 51/8, 62/8, 77/8, 78/8, 79/8, 80/8, 81/8, 82/8, 83/8, 84/8, 85/8, 86/8, 87/8, 88/8, 89/8, 90/8, 91/8, 92/8, 93/8, 94/8, 95/8, 109/8, 141/8, 145/8, 151/8, 176/8, 178/8, 185/8, 188/8, 193/8, 194/8, 195/8, 212/8, 213/8, 217/8, LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 97530 Total LACNIC prefixes after maximum aggregation: 22349 LACNIC Deaggregation factor: 4.36 Prefixes being announced from the LACNIC address blocks: 98815 Unique aggregates announced from the LACNIC address blocks: 43026 LACNIC Region origin ASes present in the Internet Routing Table: 8624 LACNIC Prefixes per ASN: 11.46 LACNIC Region origin ASes announcing only one prefix: 2287 LACNIC Region transit ASes present in the Internet Routing Table: 1580 Average LACNIC Region AS path length visible: 5.1 Max LACNIC Region AS path length visible: 39 Number of LACNIC region 32-bit ASNs visible in the Routing Table: 6175 Number of LACNIC addresses announced to Internet: 173755392 Equivalent to 10 /8s, 91 /16s and 76 /24s LACNIC AS Blocks 26592-26623, 27648-28671, 52224-53247, 61440-61951, 64099-64197, 262144-270748 + ERX transfers LACNIC Address Blocks 177/8, 179/8, 181/8, 186/8, 187/8, 189/8, 190/8, 191/8, 200/8, 201/8, AfriNIC Region Analysis Summary ------------------------------- Prefixes being announced by AfriNIC Region ASes: 21569 Total AfriNIC prefixes after maximum aggregation: 4349 AfriNIC Deaggregation factor: 4.96 Prefixes being announced from the AfriNIC address blocks: 29253 Unique aggregates announced from the AfriNIC address blocks: 9320 AfriNIC Region origin ASes present in the Internet Routing Table: 1301 AfriNIC Prefixes per ASN: 22.49 AfriNIC Region origin ASes announcing only one prefix: 456 AfriNIC Region transit ASes present in the Internet Routing Table: 253 Average AfriNIC Region AS path length visible: 5.0 Max AfriNIC Region AS path length visible: 27 Number of AfriNIC region 32-bit ASNs visible in the Routing Table: 580 Number of AfriNIC addresses announced to Internet: 105781248 Equivalent to 6 /8s, 78 /16s and 24 /24s AfriNIC AS Blocks 36864-37887, 327680-328703 & ERX transfers AfriNIC Address Blocks 41/8, 45/8, 102/8, 105/8, 154/8, 196/8, 197/8, APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7545 4821 574 554 TPG-INTERNET-AP TPG Telecom Limited, AU 7552 3188 1459 31 VIETEL-AS-AP Viettel Group, VN 45899 3052 1765 114 VNPT-AS-VN VNPT Corp, VN 9808 2765 9043 63 CMNET-GD Guangdong Mobile Communication 9829 2696 1489 562 BSNL-NIB National Internet Backbone, IN 4766 2507 11118 759 KIXS-AS-KR Korea Telecom, KR 4755 2143 427 182 TATACOMM-AS TATA Communications formerl 9498 2117 430 198 BBIL-AP BHARTI Airtel Ltd., IN 9394 2080 4898 27 CTTNET China TieTong Telecommunications 7713 2058 608 612 TELKOMNET-AS-AP PT Telekomunikasi Indon Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-APNIC ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 11492 3677 240 616 CABLEONE - CABLE ONE, INC., US 6327 3563 1324 90 SHAW - Shaw Communications Inc., CA 22773 3435 2974 158 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 16509 3023 6386 1415 AMAZON-02 - Amazon.com, Inc., US 16625 2627 1377 1906 AKAMAI-AS - Akamai Technologies, Inc., 30036 2156 347 259 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom 20115 2151 2762 524 CHARTER-20115 - Charter Communications, 18566 2096 405 107 MEGAPATH5-US - MegaPath Corporation, US 5650 2084 3074 1459 FRONTIER-FRTR - Frontier Communications Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-ARIN RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 12479 5455 1629 141 UNI2-AS, ES 39891 3778 203 20 ALJAWWALSTC-AS, SA 8551 3314 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne 20940 2700 514 1929 AKAMAI-ASN1, US 12389 2339 2226 658 ROSTELECOM-AS, RU 34984 2096 344 547 TELLCOM-AS, TR 9009 1631 176 879 M247, GB 9121 1616 1692 19 TTNET, TR 13188 1604 100 47 TRIOLAN, UA 61317 1469 154 516 ASDETUK http://www.heficed.com, GB Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-RIPE LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6236 3367 599 Uninet S.A. de C.V., MX 10620 3407 535 435 Telmex Colombia S.A., CO 11830 2695 370 54 Instituto Costarricense de Electricidad 7303 1475 1021 274 Telecom Argentina S.A., AR 6503 1216 425 54 Axtel, S.A.B. de C.V., MX 28573 1164 2225 207 CLARO S.A., BR 6147 1096 377 31 Telefonica del Peru S.A.A., PE 3816 1044 525 115 COLOMBIA TELECOMUNICACIONES S.A. ESP, C 13999 976 470 242 Mega Cable, S.A. de C.V., MX 11172 935 112 60 Alestra, S. de R.L. de C.V., MX Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-LACNIC AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 24863 1187 393 22 LINKdotNET-AS, EG 37611 970 107 9 Afrihost, ZA 24835 885 634 22 RAYA-AS, EG 36903 842 423 114 MT-MPLS, MA 36992 815 1531 88 ETISALAT-MISR, EG 8452 660 1859 20 TE-AS TE-AS, EG 29571 516 68 11 ORANGE-COTE-IVOIRE, CI 37492 482 470 57 ORANGE-, TN 37342 405 32 1 MOVITEL, MZ 15399 386 45 11 WANANCHI-, KE Complete listing at http://thyme.rand.apnic.net/current/data-ASnet-AFRINIC Global Per AS prefix count summary ---------------------------------- ASN No of nets /20 equiv MaxAgg Description 8151 6236 3367 599 Uninet S.A. de C.V., MX 12479 5455 1629 141 UNI2-AS, ES 7545 4821 574 554 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 280 25 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 203 20 ALJAWWALSTC-AS, SA 11492 3677 240 616 CABLEONE - CABLE ONE, INC., US 6327 3563 1324 90 SHAW - Shaw Communications Inc., CA 22773 3435 2974 158 ASN-CXA-ALL-CCI-22773-RDC - Cox Communi 10620 3407 535 435 Telmex Colombia S.A., CO 8551 3314 379 46 BEZEQ-INTERNATIONAL-AS Bezeqint Interne Complete listing at http://thyme.rand.apnic.net/current/data-ASnet Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 12479 5455 5314 UNI2-AS, ES 7545 4821 4267 TPG-INTERNET-AP TPG Telecom Limited, AU 7155 4064 4039 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 3778 3758 ALJAWWALSTC-AS, SA 6327 3563 3473 SHAW - Shaw Communications Inc., CA 22773 3435 3277 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 8551 3314 3268 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 7552 3188 3157 VIETEL-AS-AP Viettel Group, VN 11492 3677 3061 CABLEONE - CABLE ONE, INC., US 10620 3407 2972 Telmex Colombia S.A., CO Complete listing at http://thyme.rand.apnic.net/current/data-CIDRnet List of Unregistered Origin ASNs (Global) ----------------------------------------- Bad AS Designation Network Transit AS Description 230105 UNALLOCATED 38.110.79.0/24 23015 CMC180-TOR-AS - Cambridge Merc 260984 UNALLOCATED 45.175.186.0/23 16735 ALGAR TELECOM S/A, BR 266842 UNALLOCATED 45.238.156.0/22 265680 HNTELCO S.A, HN 65550 DOCUMENT 81.8.34.0/24 15924 BORUSANTELEKOM-AS, TR 65550 DOCUMENT 81.8.35.0/24 15924 BORUSANTELEKOM-AS, TR 65549 DOCUMENT 117.239.163.0/24 65544 UNKNOWN 64339 UNALLOCATED 143.0.108.0/22 18747 IFX18747 - IFX Corporation, US 64355 UNALLOCATED 156.40.196.0/24 30387 NIH-NET-NCCS - National Instit 64011 UNALLOCATED 166.133.128.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& 64011 UNALLOCATED 166.133.192.0/18 20057 ATT-MOBILITY-LLC-AS20057 - AT& Complete listing at http://thyme.rand.apnic.net/current/data-badAS Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 27.100.7.0/24 56096 UNKNOWN 27.126.156.0/22 55827 UNKNOWN 27.126.156.0/23 55827 UNKNOWN 27.126.158.0/23 55827 UNKNOWN 36.255.24.0/24 40676 AS40676 - Psychz Networks, US 36.255.25.0/24 40676 AS40676 - Psychz Networks, US 36.255.26.0/24 40676 AS40676 - Psychz Networks, US 36.255.27.0/24 40676 AS40676 - Psychz Networks, US 41.76.136.0/22 37500 -Reserved AS-, ZZ 41.76.140.0/22 37500 -Reserved AS-, ZZ Complete listing at http://thyme.rand.apnic.net/current/data-add-IANA Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:10 /9:11 /10:37 /11:100 /12:294 /13:569 /14:1134 /15:1907 /16:13270 /17:8021 /18:13945 /19:25842 /20:40342 /21:47223 /22:95223 /23:77058 /24:435307 /25:887 /26:0 /27:0 /28:0 /29:0 /30:0 /31:0 /32:0 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 12479 4406 5455 UNI2-AS, ES 6327 3352 3563 SHAW - Shaw Communications Inc., CA 7155 3156 4064 VIASAT-SP-BACKBONE - ViaSat,Inc., US 39891 2946 3778 ALJAWWALSTC-AS, SA 11492 2880 3677 CABLEONE - CABLE ONE, INC., US 8551 2767 3314 BEZEQ-INTERNATIONAL-AS Bezeqint Internet Backbo 22773 2668 3435 ASN-CXA-ALL-CCI-22773-RDC - Cox Communications 11830 2043 2695 Instituto Costarricense de Electricidad y Telec 18566 1991 2096 MEGAPATH5-US - MegaPath Corporation, US 30036 1907 2156 MEDIACOM-ENTERPRISE-BUSINESS - Mediacom Communi Complete listing at http://thyme.rand.apnic.net/current/data-sXXas-nos Number of /24s announced per /8 block (Global) ---------------------------------------------- 1:1709 2:1072 3:6 4:20 5:3084 6:46 7:2 8:1341 9:1 12:1802 13:378 14:2067 15:38 16:7 17:259 18:79 20:56 23:2821 24:2578 25:4 27:2432 31:2012 32:101 35:37 36:885 37:3072 38:1772 39:293 40:121 41:3195 42:828 43:2094 44:153 45:8799 46:3366 47:263 49:1350 50:1110 51:337 52:1011 54:279 55:678 56:6 57:46 58:1763 59:1095 60:547 61:2177 62:1960 63:1864 64:4989 65:2215 66:4830 67:2774 68:1177 69:3553 70:1397 71:656 72:2637 74:2723 75:1294 76:570 77:1799 78:1866 79:2355 80:1837 81:1495 82:1135 83:945 84:1128 85:2301 86:556 87:1548 88:1048 89:2573 90:213 91:6612 92:1444 93:2479 94:2474 95:3330 96:946 97:340 98:961 99:793 100:88 101:1185 102:655 103:21702 104:3634 105:267 106:810 107:1767 108:690 109:3785 110:1720 111:2015 112:1529 113:1389 114:1240 115:1730 116:1760 117:1937 118:2178 119:1644 120:1056 121:1053 122:2269 123:1793 124:1505 125:2023 128:1360 129:830 130:552 131:1815 132:765 133:222 134:1090 135:250 136:589 137:790 138:2100 139:904 140:609 141:892 142:770 143:1057 144:880 145:276 146:1306 147:840 148:1718 149:1001 150:784 151:1015 152:1095 153:338 154:4412 155:884 156:1653 157:1045 158:662 159:1948 160:1606 161:936 162:2960 163:830 164:1250 165:1496 166:478 167:1411 168:3447 169:898 170:4152 171:613 172:1665 173:2219 174:1039 175:981 176:2382 177:4050 178:2565 179:1385 180:2136 181:2354 182:2725 183:1101 184:2278 185:15335 186:3625 187:2506 188:2951 189:1996 190:8221 191:1438 192:10080 193:6753 194:5507 195:4161 196:3008 197:1729 198:5936 199:5974 200:7096 201:5114 202:10406 203:10186 204:4555 205:3062 206:3263 207:3244 208:3940 209:4287 210:3929 211:2022 212:3119 213:2977 214:1119 215:55 216:5901 217:2231 218:884 219:609 220:1901 221:975 222:979 223:1391 End of report

1 0

Re: Time and Timing Servers
by keith＠contoocook.net 12 Jul '19

12 Jul '19

2 1

Re: NANOG Digest, Vol 138, Issue 11
by Brandon Svec 11 Jul '19

11 Jul '19

Having a somewhat bell shaped head, this sums it up pretty well, “.. Maybe they don't actually care about this problem until they are 'forced' to care about it by their regulating body?” As I understand, currently carriers are required to pass spoofed caller ID because there are many legitimate reasons to do so. There was some recent legislation loosening that requirement and there is no requirement to define what legitimate is, but still the issue is some one needs to care about the problem. That will require legislation and incentives to get to. > >-----Original Message----- > >From: NANOG [mailto:nanog-bounces@nanog.org] On Behalf Of Christopher > >Morrow > >Sent: Wednesday, 10 July, 2019 22:10 > >To: Sean Donelan > >Cc: nanog list > >Subject: Re: SHAKEN/STIR Robocall Summit - July 11 2019 at FCC > > > >On Wed, Jul 10, 2019 at 11:56 PM Sean Donelan <sean(a)donelan.com> > >wrote: > >> > >> On Tue, 9 Jul 2019, Sean Donelan wrote: > >> > The agenda looks like lots of happy, happy talk from industry > >> > representatives. > >> > >> In advance of the SHAKEN/STIR robocall summit, AT&T has issued a > >press > >> release announcing plans to automatically block robocalls for its > >> customers. > >> > >> https://about.att.com/story/2019/att_call_protect.html > >> > >> Automatic Blocking of Fraud Calls Coming to Millions of AT&T > >Customers > >> AT&T* will add automatic fraud blocking and suspected spam-call > >alerts to > >> millions of AT&T consumer lines at no charge. > > > >oh goodie! > > > >So, not being a bell shaped headed person... a question: > > The calling path and data available inside the phone network smells > >(to me) like: > > ingress trunk + ANI + CallerID + outgoing trunk of destination > >ds0/handset > > > >There seem like a bunch of pretty simple 'correlations' one could > >make, that actually look a heck of a lot like 'netflow/log analysis > >for ddos detection': > > o is this trunk sourcing calls to 'too many' of my subs in > >period-of-time-X > > o is this trunk sourcing calls from a low distribution of ANI but > >a different distribution of CallerID > > o is this trunk sourcing calls from unmatched (as a percent of > >total) ANI/CallerID > > > >I would think you could make similar correlations across the > >destinations on your phone-network: > > o Is there one ANI or CallerID talking to 'all' (a bunch, more > >than X of type Y customer end point) of my endpoints? > > o are there implausible callerid being used? (lots of 'NPA-NXX > >matches destination, yet from a very different geography?) > > > >I imagine that with the number of calls here, this is just a splunk > >correlation away from successful identification and then disabling of > >these nuisance calls... > >I imagine this doesn't need 'shaken' nor 'stir', but DOES take: "a > >whiff of a care" on the part of the carrier(s), right? > >Maybe they don't actually care about this problem until they are > >'forced' to care about it by their regulating body? > >'shaken' and 'stir' may not do anything at all useful for the > >problem, > >but they do make it appear that the carriers care about the > >problem... > >I'm certain that they know there are problems. The 5 items above > >can't > >be 'new and novel' concepts ... since this is basically 'logs > >analysis' that any security engineer worth their salt does as a > >matter > >of course daily, right? > > > >-chris > > > > > > End of NANOG Digest, Vol 138, Issue 11 > ************************************** > -- Brandon Svec 15106862204 voice | fax | sms teamonesolutions.com 14729 Catalina St. San Leandro, CA 94577 .ılı.ılı. Cisco Meraki CMNA

2 1

Reddit down
by Robert Webb 11 Jul '19

11 Jul '19

Are we having yet another CDN meltdown or is it isolated to just reddit?

8 9

Research survey about locating configuration errors
by Aaron Gember-Jacobson 10 Jul '19

10 Jul '19

Over the past decade, numerous tools have been developed to check the correctness of router configurations. However, there seems to be a gap between the information these tools provide and the information required to fix the configurations. As part of an ongoing research project at Colgate University, we seek to better understand how network engineers currently locate errors in router configurations. We would appreciate if you could take 2 minutes to complete our anonymous, 10-question survey: https://colgate.co1.qualtrics.com/jfe/form/SV_e3CQ3JMfCnLJHTL If you are willing to share more about your experience with configuration errors and/or current network analysis tools, please let us know. You can learn more about our research at: https://aaron.gember-jacobson.com/research/faultloc. Thanks, Aaron Gember-Jacobson *Assistant Professor of Computer Science, **Colgate University*

1 0

QoS for Office365
by Joe Yabuki 10 Jul '19

10 Jul '19

Hi all, How do you deal with QoS for Office365, since the IPs are subject to changes ? How can we mark the trafic while keeping the security (I fear the marking based on TCP/UDP Ports since they are not without an additional risk coming from worms/virus using those ports for example, and doing that directly on the PCs doesn't seem to be the best solution) ? Many thanks, Joe

24 48

Looking for a knowledgeable Level3 and GTT off-list contact
by ecdhe 10 Jul '19

10 Jul '19

Some of your resources are being used for organized crime and attacks (but not originating from your network). I would appreciate an off-list contact if anyone knows of one. Thank you.

2 1

[FYI] Call for Presentations European Peering Forum 14 (EPF14) // NANOG
by Arnold Nipper 10 Jul '19

10 Jul '19

Dear Community This is the Call for Presentations European Peering Forum 14 (EPF14) AMS-IX, DE-CIX, LINX and Netnod are happy to host the 14th European Peering Forum (EPF) in Tallinn, Estonia from the 16th - 18th September 2019. The event will welcome up to 300 peering managers and coordinators from networks connected to the host Internet exchanges. Besides an interesting topical agenda, the three-day event accommodates room for attendees to meet on a one-to-one basis to discuss bilateral peering business opportunities. The programme committee will be looking for presentations and lightning talks related to peering and technical topics of interconnection. Your presentation should address * Interconnection Automation * Regional Peering * Interconnection / Peering Internet Governance and Regulatory Topics * Economic and Product Trends * Peering / Interconnection strategies * Interesting findings about Peering / Interconnection * 400GE and beyond Submissions =========== Presentations must be of a non-commercial nature. Product or marketing heavy talks are strongly discouraged. Submissions of presentations should be made to the programme committee <epf-pc(a)peering-forum.eu>. Please include: * Author's name and e-mail address * Presentation title * Abstract * Slides (if available) * Time requested (max. 30 minutes incl. Q&A) Deadlines ========= Presentation Abstract Deadline 15/07/2019 12:00 UTC Final Selection of Speakers 26/07/2019 Presentation Slides Submission Deadline 02/09/2019 12:00 UTC More information about the event and other activities around EPF14 may be found at * https://peering-forum.eu/ * https://www.facebook.com/groups/1486607564933665/ Best regards Arnold -- Arnold Nipper email: arnold(a)nipper.de mobile: +49 172 2650958

1 1

.ARPA Zone DNSSEC Operational Update -- ZSK length change
by Wessels, Duane 10 Jul '19

10 Jul '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 All, Verisign is in the process of increasing the size and strength of the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that it operates. As part of this process, the ZSK for the .ARPA zone will be increased in size from 1024 to 2048 bits. On July 11, 2019 the 2048 bit ZSK will be pre-published in the .ARPA zone. On July 21, the .ARPA zone will be signed with the 2048 bit ZSK. On August 10, the 1024 bit ZSK will be removed from the zone. We do not anticipate any problems from this upgrade. In accordance with our normal operating procedures we have a rollback process should it become necessary to revert to the 1024 bit ZSK. DW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJdJQifAAoJEGyZpGmowJiNxjcH/3a+ox9KyGAT5vnrcxfEYYIQ X2iQ0dSEBCv9JPNwTnKkV2U2xzG3uZb6LHjq9tihtA4M04IaMvlLnZMUFUyGgzrl ACvn6j9qCE0q7sgDGo/RNWXBsAd58mKgBVMMRCBR6AklDHVA+grEH2CwDwP0eGYZ 8dy6Cf94jqXqiVDQIxoK31YhYFqNVRhZE4f72V+6lh1fg4GrsfXKeErYwQooxdYT 91H9TmffWmEpG+eYdgWMOPPS+nsrDr/MAuSVD0t5hT8H/HrCo45MNxxskmwLg0Ni QAHgy5Ao2jgJj6MkzZdwjldM8mn5YzMegiHUF9R5W5TRlnNm7uGTU32Irzu7b/8= =lJK6 -----END PGP SIGNATURE-----

1 0

.NET Zone DNSSEC Operational Update -- ZSK length change
by Wessels, Duane 10 Jul '19

10 Jul '19

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 All, Verisign is in the process of increasing the size and strength of the DNSSEC Zone Signing Keys (ZSKs) for the top-level domains that it operates. As part of this process, the ZSK for the .NET zone will be increased in size from 1024 to 1280 bits. On July 10, 2019 the 1280 bit ZSK will be pre-published in the .NET zone. On July 15, the .NET zone will be signed with the 1280 bit ZSK. On July 20, the 1024 bit ZSK will be removed from the zone. We do not anticipate any problems from this upgrade. In accordance with our normal operating procedures we have a rollback process should it become necessary to revert to the 1024 bit ZSK. DW -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.22 (GNU/Linux) iQEcBAEBCAAGBQJdJQifAAoJEGyZpGmowJiNVEsH/2T8Qm/ZZiM7K1G+6XN4wMSR oqyuzY/0AiqXpw0C2aL3sE3VhYPZWTY+H5wwbvU+ZoAbiMfcOygBv/JTLizpjLLK NJD+Gh51Z6cQn5yk9cPjRtoxdQrV83T0gRQIlPeFW3sm9GrXgropfQ/Dw7O0lHkZ x2oiGwC0HF5npi6OWEHpETemtSMWl5HpFfmYZhzXoBSzEbzHgXQwr0Fie9wtNkDm qPjwaeq3drENOoum4egpAFxQZM7FclLtyqqT24h0m5GeunHIcXRRcfoOAEnEmjRJ b5ePCKxHqNY2Iz6MpiedTCpD2RIbI51wVhNGfmCiwyyl3500oqjvcmtYh00gCIU= =XP9d -----END PGP SIGNATURE-----

1 0