Re: d000::/8 from AS28716

2010-01-12 Thread James Hess
On Tue, Jan 12, 2010 at 1:33 AM, Pierfrancesco Caci p.c...@seabone.net wrote:
..
 Maybe next time drop me a line when it's happening, I don't see the
 route from the customer now.

Can still be seen on  routeviews...  a  ghost route,  perhaps?

route-views6.routeviews.org show bgp d000::
BGP routing table entry for d000::/8
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  33437 29748 3257 6762 28716
2001:4810::1 from 2001:4810::1 (66.117.34.140)
  Origin IGP, localpref 100, valid, external, best
  Community: 3257:3300 3257:3301 3257:5033
  Last update: Tue Jan 12 13:10:31 2010


--
-J



Re: d000::/8 from AS28716

2010-01-12 Thread Pierfrancesco Caci
:- James == James Hess mysi...@gmail.com writes:

 On Tue, Jan 12, 2010 at 1:33 AM, Pierfrancesco Caci p.c...@seabone.net 
wrote:
 ..
 Maybe next time drop me a line when it's happening, I don't see the
 route from the customer now.

 Can still be seen on  routeviews...  a  ghost route,  perhaps?

Yes. 



-- 


---
 Pierfrancesco Caci | Network  System Administrator - INOC-DBA: 6762*PFC
 p.c...@seabone.net | Telecom Italia Sparkle - http://etabeta.noc.seabone.net/



d000::/8 from AS28716

2010-01-11 Thread Chuck Anderson
Anyone know why this ISP from Italy is advertising d000::/8 to the 
IPv6 Internet?

 show route d000::/8 

inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden)
Restart Complete
+ = Active Route, - = Last Active, * = Both

d000::/8   *[BGP/170] 01:08:26, MED 760, localpref 200
  AS path: 30071 6762 28716 I
 to 2001:4830:e1:10::1 via ge-0/0/0.593


aut-num:AS28716
as-name:EPLANET-AS
export: to AS49772 announce ANY
descr:  ePLANET SPA
descr:  Internet Service Provider
descr:  Via G.Vida 19 20127 Milano - ITALY -
admin-c:GU29-RIPE
tech-c: MF8125-RIPE
mnt-by: EPLANET-MNT
mnt-routes: EPLANET-MNT
changed:hostmas...@ripe.net 20080208
source: RIPE




Re: d000::/8 from AS28716

2010-01-11 Thread Scott Morris
   To be honest, when I figured a big BUNCH of d000 was going to hit the
   Internet, I did not expect it to come from Italy.;)
   Chuck Anderson wrote:

Anyone know why this ISP from Italy is advertising d000::/8 to the
IPv6 Internet?



show route d000::/8


inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1 hidden)
Restart Complete
+ = Active Route, - = Last Active, * = Both

d000::/8   *[BGP/170] 01:08:26, MED 760, localpref 200
  AS path: 30071 6762 28716 I
 to 2001:4830:e1:10::1 via ge-0/0/0.593


aut-num:AS28716
as-name:EPLANET-AS
export: to AS49772 announce ANY
descr:  ePLANET SPA
descr:  Internet Service Provider
descr:  Via G.Vida 19 20127 Milano - ITALY -
admin-c:GU29-RIPE
tech-c: MF8125-RIPE
mnt-by: EPLANET-MNT
mnt-routes: EPLANET-MNT
changed:[1]hostmas...@ripe.net 20080208
source: RIPE

References

   1. mailto:hostmas...@ripe.net


Re: d000::/8 from AS28716

2010-01-11 Thread Mark Jackson
I'd say that is a bogus route/AS announcement.
I see nothing in the address assignment for that. But I see traffic
started originating around 12/15/2009.


Mark Jackson, CCIE #4736
Sent from my iPhone. Please excuse spelling errors

On Jan 11, 2010, at 6:17 PM, Chuck Anderson c...@wpi.edu wrote:

 Anyone know why this ISP from Italy is advertising d000::/8 to the
 IPv6 Internet?

 show route d000::/8

 inet6.0: 2446 destinations, 5143 routes (2445 active, 0 holddown, 1
 hidden)
 Restart Complete
 + = Active Route, - = Last Active, * = Both

 d000::/8   *[BGP/170] 01:08:26, MED 760, localpref 200
  AS path: 30071 6762 28716 I
 to 2001:4830:e1:10::1 via ge-0/0/0.593


 aut-num:AS28716
 as-name:EPLANET-AS
 export: to AS49772 announce ANY
 descr:  ePLANET SPA
 descr:  Internet Service Provider
 descr:  Via G.Vida 19 20127 Milano - ITALY -
 admin-c:GU29-RIPE
 tech-c: MF8125-RIPE
 mnt-by: EPLANET-MNT
 mnt-routes: EPLANET-MNT
 changed:hostmas...@ripe.net 20080208
 source: RIPE





Re: d000::/8 from AS28716

2010-01-11 Thread Steve Bertrand
Mark Jackson wrote:
 I'd say that is a bogus route/AS announcement.
 I see nothing in the address assignment for that. But I see traffic
 started originating around 12/15/2009.

I envision that work will be done in this regard shortly.

God willing, our RIRs will be handing out prefixes to everyone from
blocks that are specifically designed for 'that purpose'.

It's interesting to know that since we are so virgin v6, that the RIRs
should have no problem shelving up address space into an
easy-to-document format. Although the RIRs can't dictate routing policy,
routing/ops people can dictate what the RIR policy states.

Then, Team Cymru will have an easy time laying base with an 'allowed' as
opposed to a 'denied' list of addresses.

Steve



Re: d000::/8 from AS28716

2010-01-11 Thread Andree Toonk
.-- My secret spy satellite informs me that at Mon, 11 Jan 2010, Mark Jackson 
wrote:

 I'd say that is a bogus route/AS announcement.
 I see nothing in the address assignment for that. But I see traffic
 started originating around 12/15/2009.

Actually d000::/8 has been around for 2 months already (2009-11-13 08:24:46).
Also see:
http://www.bgpmon.net/showbogons.php?inet=6

Cheers Andree



Re: d000::/8 from AS28716

2010-01-11 Thread Pierfrancesco Caci
:- Chuck == Chuck Anderson c...@wpi.edu writes:

 d000::/8   *[BGP/170] 01:08:26, MED 760, localpref 200
   AS path: 30071 6762 28716 I
 to 2001:4830:e1:10::1 via ge-0/0/0.593

I fail to see how this could have gone through this:

ipv6 prefix-list AS28716-V6-IN: 1 entries
   seq 5 permit 2001:1BD0::/32

unless Every IPv6 prefix list, including prefix lists that do not
have any permit and deny condition statements, has an implicit deny
any any statement as its last match condition is not true for this
particular IOS release, or the router just went nuts.

Maybe next time drop me a line when it's happening, I don't see the
route from the customer now. 

Pf


-- 


---
 Pierfrancesco Caci | Network  System Administrator - INOC-DBA: 6762*PFC
 p.c...@seabone.net | Telecom Italia Sparkle - http://etabeta.noc.seabone.net/