Hi all,
As you (hopefully) know, as of 1-1-2010, the RIRs will only be giving
out 32-bit AS numbers. I'm writing an article for Ars Technica about
this, and I was wondering about the perspective of network operators
who may be faced with customers with a 32-bit AS number in the near
On Wed, Oct 07, 2009 at 06:25:53AM -0700, Owen DeLong wrote:
Additionally the problems of DDOS sourced from a collection of
compromised hosts could be interfering with someone else's ability
to make a successful VOIP call.
Much more than that: they could be interfering with the underlying
Hi there,
A customer of mine is reporting that there are a large number of addresses
he can not reach with his addresses in the 109/8 range. This was
declassified as a BOGON and assigned by IANA to RIPE in January 2009.
If you have a manually updated BOGON list, can I please ask that you review
Hi Matthew,
I had the same problem with our new range assigned to us by APNIC, out
of 110/8
You're in for a long, hard and frustrating road.
If you manage to get in contact with anyone, or anyone responds to
you, mind letting me know? I'd suspect they'd probably have us blocked
still
The 109/8 range was removed from our ISP Ingress Prefix Filters in
version 22 (dated 6-Feb-2009):
ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template
s/T-ip-prefix-filter-ingress-loose-check-v22.txt
Thanks,
John
-Original Message-
From: Matthew Walster
On 09/10/2009 4:22, Matthew Walster matt...@walster.org wrote:
A customer of mine is reporting that there are a large number of addresses
he can not reach with his addresses in the 109/8 range. This was
declassified as a BOGON and assigned by IANA to RIPE in January 2009.
If you have a
About 4 hours ago BGPmon picked up a rogue announcement of 129.77.0.0 from
AS9035 (ASN-WIND Wind Telecomunicazioni spa) with an upstream of AS1267
(ASN-INFOSTRADA Infostrada S.p.A.). I don't see it now on any looking glass
sites. Hopefully this was just a typo that was quickly corrected. I
Hi Matthew,
You are not the only one having this issue. They are announcing some other
prefixes as well!
2009/10/9 Matthew Huff mh...@ox.com
About 4 hours ago BGPmon picked up a rogue announcement of 129.77.0.0 from
AS9035 (ASN-WIND Wind Telecomunicazioni spa) with an upstream of AS1267
Agreed. Our prefixes at AS40060 were announced as well. I received a
notification around 7:00am EDT that our prefixes were detected announced
from AS9035 with the same upstream AS1267.
On 10/9/09 8:34 AM, Wouter Prins w...@null0.nl wrote:
Hi Matthew,
You are not the only one having this
Hi Iljitsch-
This statement isnt entirely correct. Im not sure if this is just a word
smithing error in your email or if the management of this issue in the ARIN
region isnt well known. I can only address the ARIN region but in that region
if there is a 16 bit ASN in the free pool it will be
We also received a notification that our IP block 67.135.55.0/24 (AS19629) is
being annouced by AS9035. Hopefully someone is receiving my emails.
Thanks
Dylan Ebner, Network Engineer
Consulting Radiologists, Ltd.
1221 Nicollet Mall, Minneapolis, MN 55403
ph. 612.573.2236 fax. 612.573.2250
Lots of people were affected, but none significantly. They originated
86,747 networks very briefly (less than a minute at 7:23 UTC), and I don't
think anyone outside Telecom Italia's customer cone even saw them. So the
impact was really, really limited. The correct origins were being
We are seeing the same ting with 66.146.192.0/19 66.251.224.0/19.
According to cyclopes this is still continuing. . .
Dylan Ebner wrote:
We also received a notification that our IP block 67.135.55.0/24 (AS19629) is
being annouced by AS9035. Hopefully someone is receiving my emails.
Thanks
Does anyone know why it takes BGPMon so long to send out an email. It looks
like it BGPMon detected the AS9035 announcements at the right time (around 7:00
UTC) but I didn't get a notification until around 13:00 UTC. It seems like many
people rely on BGPMon to do this type of detection, so the
I just received confirmation from AS9035 that they are not annoucing my IP
block.
Dylan Ebner, Network Engineer
-Original Message-
From: sjk [mailto:s...@sleepycatz.com]
Sent: Friday, October 09, 2009 9:20 AM
Cc: nanog@nanog.org
Subject: Re: Invalid prefix announcement from AS9035
Usually I get alerts from BGPMon within about 20 minutes of an event being
detected. Not so much with the event this morning. I'm guessing that the
orgination of 86,747 prefixes from the wrong AS probably got their MTA pretty
busy...
-Original Message-
From: Dylan Ebner
Is anyone else seeing connectivity issues to the internet using Time
Warner/Road Runner in the Mid West? Kansas City and Wisconsin seem to be
unable to access sites on the west coast...
I thought that may be the case as well. Do people know of other services like
BGPMon that may be able to keep up with the load better? Does anyone know how
cyclops faired this morning with the additional load?
Dylan Ebner
-Original Message-
From: Andrew Nusbaum
there are multiple systems available, sign up for a few
i've noticed cyclops alerts are sent faster than bgpon
PHAS was fast, but the project is over and something new is going to be released
there is ripe MyASN
there is watchmynet
and IAR
On Fri, Oct 9, 2009 at 7:23 AM, Dylan Ebner
I actually got origin change alerts from Cyclops about 2 minutes after the
announcements started.
-Andy
-Original Message-
From: Dylan Ebner [mailto:dylan.eb...@crlmed.com]
Sent: Friday, October 09, 2009 10:31 AM
To: Andrew Nusbaum; Jim Cowie; Adam Kennedy
Cc: NANOG
Subject: RE:
On Fri, Oct 09, 2009 at 10:31:52AM +0200, Iljitsch van Beijnum wrote:
As you (hopefully) know, as of 1-1-2010, the RIRs will only be giving
out 32-bit AS numbers. I'm writing an article for Ars Technica about
this, and I was wondering about the perspective of network operators who
may be
On Fri, Oct 09, 2009 at 07:30:19AM -0700, Mike Maberry wrote:
Is anyone else seeing connectivity issues to the internet using Time
Warner/Road Runner in the Mid West? Kansas City and Wisconsin seem to be
unable to access sites on the west coast...
Mike,
There is an ongoing issue that our ops
Greg Hankins wrote:
We also started a Wiki with content based on the presentation that has
more updated information, including a current list of vendor support.
If you see a vendor missing, let us know and we can update the list.
Or better yet, create an account and add some content yourself
On Oct 9, 2009, at 12:05 PM, Kevin Loch wrote:
Greg Hankins wrote:
We also started a Wiki with content based on the presentation that
has
more updated information, including a current list of vendor support.
If you see a vendor missing, let us know and we can update the list.
Or better
While it's good to see support _finally_ in 2.2SX, I still don't see it
in 12.2SR (for rsp720). It's almost like Cisco has no idea how
many of these things are actually used on the Internet.
This is actually our issue as well. Our backbone runs primarily RSP720's
(with some Sup720's for good
We are running into the same issues regarding 12.0 train for 12008 GSR
w/PRP-2's. Even though there are IOS's that have a fixed 4 Byte ASN
code...it has other bugs in NSF-SSO that we use here extensively. So
hence the reason we are waiting to upgrade.
Larry May
Network Services
n|Frame
Mike Maberry wrote:
Is anyone else seeing connectivity issues to the internet using Time
Warner/Road Runner in the Mid West? Kansas City and Wisconsin seem to be
unable to access sites on the west coast...
Still ongoing in los angeles,
howdy,
I'm chasing a technical contact at Facebook. There's some broken HTTP being
served which is confusing Squid in a way that isn't easily, cleanly
worked around.
Please feel free to contact me off-list.
Thanks,
Adrian
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.
Daily listings are sent to bgp-st...@lists.apnic.net
For historical data, please see http://thyme.apnic.net.
If you have any comments please contact Philip Smith
A few people have asked what the specific problem is.
http://www.squid-cache.org/mail-archive/squid-dev/200910/0089.html
Adrian
On Sat, Oct 10, 2009, Adrian Chadd wrote:
howdy,
I'm chasing a technical contact at Facebook. There's some broken HTTP being
served which is confusing Squid in
It is a HTTP/1.0 vs HTTP/1.1 thing (Chunked encoding for HTTP/1.1
doesn't require you to calculate and send a Content-Length.)
Adrian
On Fri, Oct 09, 2009, Jared Mauch wrote:
I've been having the same issue when going through my Linux+Squid+WCCP
setup, but if the browser is configured to
How are other providers approaching dial-up? I would presume we are in the
same boat as a lot of other folks - we have aging dial-up equipment that
does not support IPv6 (3com Total Control). Our customer base has dropped
quite a bit, and we have even kicked around the idea dropping that
BGP Update Report
Interval: 01-Oct-09 -to- 08-Oct-09 (7 days)
Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS
Rank ASNUpds % Upds/PfxAS-Name
1 - AS919849597 4.6% 163.7 -- KAZTELECOM-AS Kazakhtelecom
Corporate Sales Administration
This report has been generated at Fri Oct 9 21:11:14 2009 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org for a current version of this report.
Recent Table History
Date
On 7-Oct-09, at 11:22 AM, Scott Morris wrote:
I may be having my wires a little crossed (I'm not an electrical
engineer) but I was always under the impression that manipulation of
the
physical characteristics like that from heat/dampness didn't reduce
the
speed but the quality (like line
I may be missing a little bit here by jumping a bit in the thread so
sorry.
What is the difference between weather and seasonal?
I define weather like, well its cloudy and raining here and get in the
car and drive 20 minutes and it is clear and sunny. I would call this
mostly localized, like
On 10/9/09, Rich Kulawiec r...@gsp.org wrote:
On Wed, Oct 07, 2009 at 06:25:53AM -0700, Owen DeLong wrote:
Additionally the problems of DDOS sourced from a collection of
compromised hosts could be interfering with someone else's ability
to make a successful VOIP call.
Much more than that:
or when I initiate offsite backups.
I've seen ISPs that react to just traffic bursts. It's not the way to go
without more intelligent decision making on the content (i.e. SMTP, all SYNs,
etc). Of course, content inspection is a whole 'nother hornet's nest :)
- S
-Original
Lee wrote:
If an ISP is involved with tracking down DDOS participants or
something, I can understand how they'd know a system was compromised.
But any kind of blocking because the ISP sees 'anomalous' traffic
seems .. premature at best. SANS newsbites has this bit:
On Thursday, October 8,
39 matches
Mail list logo
