- Test - lists.nanog.org

The Cidr Report
by Tony Bates 18 Aug '00

18 Aug '00

This is an auto-generated mail on Fri Aug 18 12:00:00 PDT 2000 It is not checked before it leaves my workstation. However, hopefully you will find this report interesting and will take the time to look through this to see if you can improve the amount of aggregation you perform. The report is split into sections: 0) General Status List the route table history for the last week, list any possibly bogus routes seen and give some status on ASes. 1) Gains by aggregating at the origin AS level This lists the "Top 30" players who if they decided to aggregate their announced classful prefixes at the origin AS level could make a significant difference in the reduction of the current size of the Internet routing table. This calculation does not take into account the inclusion of holes when forming an aggregate so it is possible even larger reduction should be possible. 2) Weekly Delta A summary of the last weeks changes in terms of withdrawn and added routes. Please note that this is only a snapshot but does give some indication of ASes participating in CIDR. Clearly, it is generally a good thing to see a large amont of withdrawls. 3) Interesting aggregates Interesting here means not an aggregate made as a set of classful routes. Thanks to xara.net for giving me access to their routing tables once a day. Please send any comments about this report directly to me. Check http://www.employees.org/~tbates/cidr-report.html for a daily update of this report. ------------------------------------------------------------------------------ CIDR REPORT for 18Aug00 0) General Status Table History ------------- Date Prefixes 110800 83938 120800 83973 130800 83844 140800 84055 150800 84170 160800 84296 170800 84509 180800 85012 Check http://www.employees.org/~tbates/cidr.plot.html for a plot of the table history. Possible Bogus Routes --------------------- AS Summary ---------- Number of ASes in routing system: 6201 Number of ASes announcing only one prefix: 3042 (999 cidr, 2043 classful) Largest number of cidr routes: 553 announced by AS705 Largest number of classful routes: 1076 announced by AS701 1) Gains by aggregating at the origin AS level --- 18Aug00 --- ASnum NetsNow NetsCIDR NetGain % Gain Description AS271 434 156 278 64.1% BCnet Backbone AS1221 596 437 159 26.7% TELSTRA-AS AS7046 435 295 140 32.2% COQUI-NET PRTC Internet AS9706 155 26 129 83.2% Pusan Metropolitan City Office of AS2609 126 15 111 88.1% EUnet-TN AS7657 303 195 108 35.6% The Internet Group Limited AS1785 472 364 108 22.9% AppliedTheory Communications AS9304 121 15 106 87.6% Hutchcity AS9269 160 57 103 64.4% Hong Kong CTI AS7545 156 57 99 63.5% TPG Internet Pty Ltd AS6429 209 118 91 43.5% FirstCom Internet AS7496 126 38 88 69.8% Power Up AS577 260 174 86 33.1% Bell Backbone AS174 552 466 86 15.6% Performance Systems International AS4293 331 246 85 25.7% Internal ASN for C&W AS1727 185 106 79 42.7% MRMS-WEST AS3908 260 182 78 30.0% Supernet, Inc. AS705 322 247 75 23.3% ALTERNET-AS AS724 225 154 71 31.6% DLA-ASNBLOCK-AS AS816 341 272 69 20.2% UUNET Canada (ASN-UUNETCA-AS4) AS6595 122 54 68 55.7% DODDSEUR AS4755 175 110 65 37.1% Videsh Sanchar Nigam Ltd. India AS5106 98 36 62 63.3% AADS-COLUMBUS AS3749 122 60 62 50.8% TECNET AS7018 555 496 59 10.6% AT&T WorldNet Service Backbone AS701 1076 1018 58 5.4% Alternet AS3602 296 240 56 18.9% Sprint Canada Inc. AS11252 90 37 53 58.9% Idaho State University AS4740 318 266 52 16.4% Ozemail Pty Ltd (ASN-OZEMAIL) AS16758 62 10 52 83.9% UNKNOWN For the rest of the previous weeks gain information please see http://www.employees.org:80/~tbates/cidr-report.html 2) Weekly Delta Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report 3) Interesting aggregates Please see http://www.employees.org:80/~tbates/cidr-report.html for this part of the report

1 0

lame delegations
by John O Comeau 18 Aug '00

18 Aug '00

I sent this last week but it seems to have gone to the bit-bucket... Does anyone know of a way to reclaim IPs left registered as hosts by former customers? Let's say Joe Blow moved to another service provider, but he still has ns.joeblow.dom and ns2.joeblow.dom registered using your IP numbers. Netsol gave me this very nice procedure using faxes and followup calls, but I just don't have hours to sit on the phone all day even if my company enjoyed paying the long distance. I would like to see an ISP having equal footing with the domain owner regarding host registrations; that is, the admin contacts and tech contacts OF THE DOMAIN OR OF THE NETBLOCK may delete a host registration. Pros and cons? Or a better forum for this discussion? jcomeau(a)world.std.com aka John Otis Lene Comeau Home page: http://world.std.com/~jcomeau/ Disclaimer: Don't risk anything of value based on free advice. "Anybody can do the difficult stuff. Call me when it's impossible."

4 3

CWI/111 8th
by Jeffrey Meltzer 18 Aug '00

18 Aug '00

If anyone is experiencing high latency with CWI in NYC, they've got an OC12 down. No ETA. Nothings down, things are just running at 700ms. Jeff Jeffrey Meltzer VillageWorld.com, Inc.

1 0

Re: reminder program wanted
by Tatsuya Kawasaki 16 Aug '00

16 Aug '00

John, It looks like it is only for window machine... Tatsuya /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ Tatsuya Kawasaki Allegiance Telecom Unlock the Power of the Internet http://www.kivex.com Phone 301.215.6777 Fax 301.215.5991 Affiliation given for identification not representation /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ On Wed, 16 Aug 2000, John Allspaw wrote: > > how about ical ? > can't remember where i got it, but you can set alarms that will pop up, > and you can snooze them if you want. > --john > > ------------------------------------------------------------------ > John Allspaw allspaw(a)salon.com > Sr. Unix Sys Admin 415.254.7599 > Salon.com > Not one shred of evidence supports the notion that life is serious. > > On Wed, 16 Aug 2000, Tatsuya Kawasaki wrote: > > > > > > > nanog reader, > > > > I am not sure this is completely appropriate or not. > > I need a help/suggestion. Like the rest of us, I am busy troublshoot > > customer problem, I forget to do routine stuffs, like calling customers > > to update and calling vender to esclate, report to superviser. > > Unfortunately a program which was running along with > > ticketing system die, nobody knows why. I wonder anyone has any > > free program running on unix box does the following. > > > > -remind me when the time come to do some action. > > -able to snooze it if it is not appropriate time. > > -able to glace the subject field for future event. > > -able to edit/re-edit some comment field. > > > > any suggestion.. > > > > > > TIA, > > Tatsuya > > /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ > > Tatsuya Kawasaki > > Allegiance Telecom > > Unlock the Power of the Internet > > http://www.kivex.com > > Phone 301.215.6777 Fax 301.215.5991 > > Affiliation given for identification not representation > > /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ > > > > > >

1 0

reminder program wanted
by Tatsuya Kawasaki 16 Aug '00

16 Aug '00

nanog reader, I am not sure this is completely appropriate or not. I need a help/suggestion. Like the rest of us, I am busy troublshoot customer problem, I forget to do routine stuffs, like calling customers to update and calling vender to esclate, report to superviser. Unfortunately a program which was running along with ticketing system die, nobody knows why. I wonder anyone has any free program running on unix box does the following. -remind me when the time come to do some action. -able to snooze it if it is not appropriate time. -able to glace the subject field for future event. -able to edit/re-edit some comment field. any suggestion.. TIA, Tatsuya /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/ Tatsuya Kawasaki Allegiance Telecom Unlock the Power of the Internet http://www.kivex.com Phone 301.215.6777 Fax 301.215.5991 Affiliation given for identification not representation /_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/

1 0

MCI ticketing
by Joseph Birthisel 15 Aug '00

15 Aug '00

How is everyone enjoying MCI's ticketing system being down for three days so far? Right now they are actually printing and faxing tickets to their nodes. Anyone have an ETR or more detailed info? Joseph

2 1

Re: Data Center
by Sean Donelan 15 Aug '00

15 Aug '00

On Mon, 14 August 2000, "HANSEN CHAN" wrote: > I am trying to understand more on the technical as well as operational > aspect of Data Center. Can someone point me to some useful URLs or > whitepaper? I only know of those on Exodus website. Many thanks. There is a world of knowledge which existed before the World Wide Web. Visit a major university or public library and ask the librarian for assistance researching those ancient tombes of knowledge. They may even have books you can't find on Amazon.com.

2 1

IP alloc/mgmt software
by John Osmon 15 Aug '00

15 Aug '00

I'm interested in finding some IP address allocation/management software. Preferably something that uses a SQL back-end. I've seen similar requests on the list over the last few years, but there hasn't ever been an answer that points to any single piece of software with any great favor. I've looked into some of the commercially available products, but they seem to want to do *too* much. Most have integrated DHCP & DNS servers and other "features" I'm not interested in using. Examples include Lucent's QIP, and Check Point's MetaIP. Has anything of use appeared in the last year or so since this question was last posed? -- John Osmon josmon(a)rigozsaurus.com

1 0

Re: Rise in intrusion attempts from *.jp
by Jeremy T. Bouse 15 Aug '00

15 Aug '00

John Allspaw was said to been seen saying: > > yes, i have seen a large number of port scans on both work networks and > home network space. nothing more crazy then your standard sequential port > scan for open 53, 1, 8, etc. > What I'm talking about are not so obvious as a sequential port scan, but rather attempts directed at ports with known exploits against either a IP range or directed at a particular host. Also those hosts being directly targeted are not servers publically known (ie - Domain name servers, mail servers, etc) but those behind the scenes machines that help keep things flowing. Also the fact that even if the ports were open the sites making the attempts would have had no reason to make the connections in the first place. Granted the hardest part is getting any action taken. The times I do find action is taken it seems 9 out of 10 times it's a server which was inappropriately configured and thus compromised and used as a staging area for further attacks. Some of my more enjoyable attempts have been with UUnet whom I'd get a live body on the phone while it's occurring or shortly thereafter and I'm told to send the email with the logs. I send the logs get their lovely automated message then 48 hours later a message stating "we couldn't see anyone on that IP at that time, please check your servers for accurate time". Which I find humorous at the steps I take to ensure my logs are acurate and untampered. To give this more operational purpose. Has anyone found or aware of any good sites with accurate Abuse/Security contact info? I've found a lot of the companies still have telephone numbers listed with the various NICs that are answered by a fax machine or email addresses that bounce. IIRC abuse.net had one for spam contacts but I realize some organizations have two seperate departments to handle spam and network threats. Respectfully, Jeremy T. Bouse UnderGrid Network Services, LLC -- ,-----------------------------------------------------------------------------, | Jeremy T. Bouse - UnderGrid Network Services, LLC - www.UnderGrid.net | | All messages from this address should be atleast PGP/GPG signed | | Public PGP/GPG fingerprint and location in headers of message | | If received unsigned (without requesting as such) DO NOT trust it! | | undrgrid(a)UnderGrid.net - NIC Whois: JB5713 - Jeremy.Bouse(a)UnderGrid.net | `-----------------------------------------------------------------------------'

1 0

Rise in intrusion attempts from *.jp
by Jeremy T. Bouse 15 Aug '00

15 Aug '00

I'm curious to try and find out if any other networks have seen a rise in sites from within Japan being the source of intrusion attempts. For the past couple days we've seen a rise in the number of sites from within Japan making very questionable port attempts which systematically sweep our entire IP space. Fortunately the ports are blocked because of known exploits and the fact they are not used on our network. Respectfully, Jeremy T. Bouse UnderGrid Network Services, LLC -- ,-----------------------------------------------------------------------------, | Jeremy T. Bouse - UnderGrid Network Services, LLC - www.UnderGrid.net | | All messages from this address should be atleast PGP/GPG signed | | Public PGP/GPG fingerprint and location in headers of message | | If received unsigned (without requesting as such) DO NOT trust it! | | Jeremy.Bouse(a)UnderGrid.net - NIC Whois: JB5713 - undrgrid(a)UnderGrid.net | `-----------------------------------------------------------------------------'

1 0