Anyone know why this ISP from Italy is advertising d000::/8 to the IPv6 Internet?
show route d000::/8
inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden) Restart Complete + = Active Route, - = Last Active, * = Both d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200 AS path: 30071 6762 28716 I > to 2001:4830:e1:10::1 via ge-0/0/0.593 aut-num: AS28716 as-name: EPLANET-AS export: to AS49772 announce ANY descr: ePLANET SPA descr: Internet Service Provider descr: Via G.Vida 19 20127 Milano - ITALY - admin-c: GU29-RIPE tech-c: MF8125-RIPE mnt-by: EPLANET-MNT mnt-routes: EPLANET-MNT changed: hostmaster@ripe.net 20080208 source: RIPE
To be honest, when I figured a big BUNCH of d000 was going to hit the Internet, I did not expect it to come from Italy. ;) Chuck Anderson wrote: Anyone know why this ISP from Italy is advertising d000::/8 to the IPv6 Internet? show route d000::/8 inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden) Restart Complete + = Active Route, - = Last Active, * = Both d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200 AS path: 30071 6762 28716 I > to 2001:4830:e1:10::1 via ge-0/0/0.593 aut-num: AS28716 as-name: EPLANET-AS export: to AS49772 announce ANY descr: ePLANET SPA descr: Internet Service Provider descr: Via G.Vida 19 20127 Milano - ITALY - admin-c: GU29-RIPE tech-c: MF8125-RIPE mnt-by: EPLANET-MNT mnt-routes: EPLANET-MNT changed: [1]hostmaster@ripe.net 20080208 source: RIPE References 1. mailto:hostmaster@ripe.net
I'd say that is a bogus route/AS announcement. I see nothing in the address assignment for that. But I see traffic started originating around 12/15/2009. Mark Jackson, CCIE #4736 Sent from my iPhone. Please excuse spelling errors On Jan 11, 2010, at 6:17 PM, Chuck Anderson <cra@WPI.EDU> wrote:
Anyone know why this ISP from Italy is advertising d000::/8 to the IPv6 Internet?
show route d000::/8
inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden) Restart Complete + = Active Route, - = Last Active, * = Both
d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200 AS path: 30071 6762 28716 I
to 2001:4830:e1:10::1 via ge-0/0/0.593
aut-num: AS28716 as-name: EPLANET-AS export: to AS49772 announce ANY descr: ePLANET SPA descr: Internet Service Provider descr: Via G.Vida 19 20127 Milano - ITALY - admin-c: GU29-RIPE tech-c: MF8125-RIPE mnt-by: EPLANET-MNT mnt-routes: EPLANET-MNT changed: hostmaster@ripe.net 20080208 source: RIPE
Mark Jackson wrote:
I'd say that is a bogus route/AS announcement. I see nothing in the address assignment for that. But I see traffic started originating around 12/15/2009.
I envision that work will be done in this regard shortly. God willing, our RIRs will be handing out prefixes to everyone from blocks that are specifically designed for 'that purpose'. It's interesting to know that since we are so virgin v6, that the RIRs should have no problem shelving up address space into an easy-to-document format. Although the RIRs can't dictate routing policy, routing/ops people can dictate what the RIR policy states. Then, Team Cymru will have an easy time laying base with an 'allowed' as opposed to a 'denied' list of addresses. Steve
.-- My secret spy satellite informs me that at Mon, 11 Jan 2010, Mark Jackson wrote:
I'd say that is a bogus route/AS announcement. I see nothing in the address assignment for that. But I see traffic started originating around 12/15/2009.
Actually d000::/8 has been around for 2 months already (2009-11-13 08:24:46). Also see: http://www.bgpmon.net/showbogons.php?inet=6 Cheers Andree
:-> "Chuck" == Chuck Anderson <cra@WPI.EDU> writes: > d000::/8 *[BGP/170] 01:08:26, MED 760, localpref 200 > AS path: 30071 6762 28716 I >> to 2001:4830:e1:10::1 via ge-0/0/0.593 I fail to see how this could have gone through this: ipv6 prefix-list AS28716-V6-IN: 1 entries seq 5 permit 2001:1BD0::/32 unless "Every IPv6 prefix list, including prefix lists that do not have any permit and deny condition statements, has an implicit deny any any statement as its last match condition" is not true for this particular IOS release, or the router just went nuts. Maybe next time drop me a line when it's happening, I don't see the route from the customer now. Pf -- ------------------------------------------------------------------------------- Pierfrancesco Caci | Network & System Administrator - INOC-DBA: 6762*PFC p.caci@seabone.net | Telecom Italia Sparkle - http://etabeta.noc.seabone.net/
On Tue, Jan 12, 2010 at 1:33 AM, Pierfrancesco Caci <p.caci@seabone.net> wrote: ..
Maybe next time drop me a line when it's happening, I don't see the route from the customer now.
Can still be seen on routeviews... a ghost route, perhaps? route-views6.routeviews.org> show bgp d000:: BGP routing table entry for d000::/8 Paths: (1 available, best #1, table Default-IP-Routing-Table) Not advertised to any peer 33437 29748 3257 6762 28716 2001:4810::1 from 2001:4810::1 (66.117.34.140) Origin IGP, localpref 100, valid, external, best Community: 3257:3300 3257:3301 3257:5033 Last update: Tue Jan 12 13:10:31 2010 -- -J
:-> "James" == James Hess <mysidia@gmail.com> writes: > On Tue, Jan 12, 2010 at 1:33 AM, Pierfrancesco Caci <p.caci@seabone.net> wrote: > .. >> Maybe next time drop me a line when it's happening, I don't see the >> route from the customer now. > Can still be seen on routeviews... a ghost route, perhaps? Yes. -- ------------------------------------------------------------------------------- Pierfrancesco Caci | Network & System Administrator - INOC-DBA: 6762*PFC p.caci@seabone.net | Telecom Italia Sparkle - http://etabeta.noc.seabone.net/
participants (7)
-
Andree Toonk
-
Chuck Anderson
-
James Hess
-
Mark Jackson
-
Pierfrancesco Caci
-
Scott Morris
-
Steve Bertrand