Re: Dynamic (changing) IPv6 prefix delegation

2011-11-25 Thread Mohacsi Janos




On Thu, 24 Nov 2011, Seth Mos wrote:


Hi,

Op 24 nov 2011, om 21:09 heeft Joel jaeggli het volgende geschreven:


On 11/21/11 14:18 , Nathan Eisenberg wrote:

Look at the number that are refusing to make generous prefix
allocations
to residential end users and limiting them to /56, /60, or even worse,
/64.


Owen,

What does Joe Sixpack do at home with a /48 that he cannot do with a /56 or a 
/60?


prefix delegation to a downstream device via dhcp-pd


Joe Sixpack might not even realize that his device even does this. I actually 
added a dhcpv6 server that can do just this. Still considering if it should do 
that automatically.

Contrary to proper networking, I frequently see double nat routers 
because they purchased a new wifi routers which is then daisy chained to 
the old one.


Or do bridging.



Or they had a non-wifi model and plugged in the port labeled (internet) 
of the new wifi router into the existing one. Which is more common.


With dhcp-pd in each, you could daisy chain a few times before it gives 
out. You know what, let's just build that because I can, it's a few 
hours of coding, but nothing too serious. Most hooks are already in 
place. I just didn't start a dhcpdv6 automatically yet.


In a nutshell. Yes, Please.

Regards,

Seth





Re: Looking for a Tier 1 ISP Mentor for career advice.

2011-11-25 Thread JC Dill

On 22/11/11 10:46 AM, Matthew Petach wrote:
And then start experimenting and breaking things--some of your best 
understanding is going to come from breaking your setup when 
experimenting, and then figuring out why it broke, and how to get it 
working again in the way you want. Debugging dual-stack networks is 
going to be required knowledge by the time you hit the industry; no 
reason not to start learning and using the information today, to 
really get comfortable with it.) 


I know I'm days late replying into this thread, but I wanted to 
highlight and emphasize this comment.  IMHO, the people who are most in 
demand are those who know how to fix stuff when someone else does 
something bone-headed and then can't fix it themselves and it gets 
bumped up the ladder to someone with super debugging skills who can fix 
it.  So don't hesitate to do bone-headed things to break your setup, and 
then figure out how to fix it.


+2 on working with dual-stacks and knowing everything you can about 
ipv6.  From the questions we see here on nanog it's clear that there are 
a whole lot of people who should know more about how ipv6 works (and how 
to integrate it into an ipv4 network) but don't.  When you graduate and 
are looking for that first job, you will likely come across a hiring 
manager who should know more about ipv6 but doesn't yet, and if you can 
position yourself as the person who can help with solving the ipv6 
knowledge gap in that organization it could put you above other 
candidates with more experience but who don't know anything about 
ipv6, and get you that job.


jc



Re: Network device command line interfaces

2011-11-25 Thread Joel Maslak
On Fri, Nov 25, 2011 at 12:01 AM, Robert Bonomi bon...@mail.r-bonomi.comwrote:


 The trick to deailing with this as a propellorhead[sic] is to include a
 *monetized* estimate of the increased manpower OPEX of using the 'dog to
 work with' box.  And a TCOS figure over the projected lifetime of the
 units.   No need to 'fight' with management about it, just understand
 'how'  they make the decisions, and give them the informatin they need
 to make the decision come out 'your way'.


I'd say that the ethical thing to do is to give them the information they
need to make a decision, not to get it your way.  I see, for instance,
people buying local closet switches from brand A when brand B is much, much
cheaper (but lacks the prestige of brand A), had a perfectly workable
management interface, and will perform identically, with similar support
offered by both vendors.  But they are an ACNA or whatever, or they've just
heard of (insert brand here), so they buy it.  Because it's easy and
familiar.

It's also possible that a web managed switch (which I despise) might
actually be the right choice for a business - because factors other than a
technologist's distaste might be important.

Part of being ethical (and NOT like the business people we might all
despise!) is to be honest.  So we don't compare brand A to brand B
unfairly.  We don't inflate the cost of brand B by adding brand B's
management infrastructure to the cost when we darn well know we just will
need a minor tweak to our scripts that can already manage brand A.  That
sort of thing.

I generally agree with what Robert said: It's about what makes sense to the
business.  If operating expenses will increase (Well have to grow
headcount by 3 to support this), then bring that up.  A caution though:
Takes less effort to run doesn't equate to dollars (the question a former
manager would ask me when I tried that line was, So who do you think we
should lay off then to get the dollar savings?  Fortunately he was a good
manager who wasn't serious, but was rather trying to get me to think about
what I'm saying).  I like paychecks, which is why I work for a living -
it's about the dollars.  So it's not unreasonable for my management to also
care about the money (since it's a key motivation for myself, after all!).
Yes, I'm fortunate to do a job I love and get paid for it at the same time.

I can say, for a CUI interface, operations over low-speed links (wireless
VPN when I'm away from the office and in a bad cell zone, for instance) is
likely important.  So is ability to script common tasks to allow people
like the help desk to do their jobs at low risk.  Flexibility is also
important - when I'm stuck with this piece of gear (which is shiny today)
in 5-7 years, when it's not so shiny, is it going to have flexibility to
last a bit longer if the business needs to conserve cash - or will a minor
change in how we do business make this thing functionally obsolete?

Relating to the discussion on the tier 1 mentor thread, someone who wants
to go far in networking won't be married to a particular vendor or way of
doing things.  They'll excel and find ways to overcome challenges,
including less than perfect equipment, that they might have to deal with.
They'll do so in a way that makes the customer and their own management
happy.  A highly paid network engineer who complains about work being
difficult probably won't do that.  One that finds a $500 replacement for a
$5000 router probably will stick around, provided they can actually deliver
what they promised (the guy that puts the $500 replacement in only to have
to replace it in a year with a $5000 router again won't go far, so be
careful! And you better have figured in the real costs of running a network
with $500 routers, not just the cost of the router).


Weekly Routing Table Report

2011-11-25 Thread Routing Analysis Role Account
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.

The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG,
CaribNOG and the RIPE Routing Working Group.

Daily listings are sent to bgp-st...@lists.apnic.net

For historical data, please see http://thyme.rand.apnic.net.

If you have any comments please contact Philip Smith pfsi...@gmail.com.

Routing Table Report   04:00 +10GMT Sat 26 Nov, 2011

Report Website: http://thyme.rand.apnic.net
Detailed Analysis:  http://thyme.rand.apnic.net/current/

Analysis Summary


BGP routing table entries examined:  383171
Prefixes after maximum aggregation:  167108
Deaggregation factor:  2.29
Unique aggregates announced to Internet: 188188
Total ASes present in the Internet Routing Table: 39373
Prefixes per ASN:  9.73
Origin-only ASes present in the Internet Routing Table:   32422
Origin ASes announcing only one prefix:   15459
Transit ASes present in the Internet Routing Table:5298
Transit-only ASes present in the Internet Routing Table:137
Average AS path length visible in the Internet Routing Table:   4.4
Max AS path length visible:  33
Max AS path prepend of ASN (48687)   24
Prefixes from unregistered ASNs in the Routing Table:  1776
Unregistered ASNs in the Routing Table: 904
Number of 32-bit ASNs allocated by the RIRs:   1995
Number of 32-bit ASNs visible in the Routing Table:1653
Prefixes from 32-bit ASNs in the Routing Table:3905
Special use prefixes present in the Routing Table:2
Prefixes being announced from unallocated address space: 85
Number of addresses announced to Internet:   2493814272
Equivalent to 148 /8s, 164 /16s and 150 /24s
Percentage of available address space announced:   67.3
Percentage of allocated address space announced:   67.3
Percentage of available address space allocated:  100.0
Percentage of address space in use by end-sites:   91.6
Total number of prefixes smaller than registry allocations:  161781

APNIC Region Analysis Summary
-

Prefixes being announced by APNIC Region ASes:95482
Total APNIC prefixes after maximum aggregation:   31239
APNIC Deaggregation factor:3.06
Prefixes being announced from the APNIC address blocks:   91934
Unique aggregates announced from the APNIC address blocks:38658
APNIC Region origin ASes present in the Internet Routing Table:4601
APNIC Prefixes per ASN:   19.98
APNIC Region origin ASes announcing only one prefix:   1253
APNIC Region transit ASes present in the Internet Routing Table:713
Average APNIC Region AS path length visible:4.4
Max APNIC Region AS path length visible: 18
Number of APNIC region 32-bit ASNs visible in the Routing Table:109
Number of APNIC addresses announced to Internet:  630811232
Equivalent to 37 /8s, 153 /16s and 106 /24s
Percentage of available APNIC address space announced: 80.0

APNIC AS Blocks4608-4864, 7467-7722, 9216-10239, 17408-18431
(pre-ERX allocations)  23552-24575, 37888-38911, 45056-46079, 55296-56319,
   58368-59391, 131072-132095, 132096-133119
APNIC Address Blocks 1/8,  14/8,  27/8,  36/8,  39/8,  42/8,  43/8,
49/8,  58/8,  59/8,  60/8,  61/8, 101/8, 103/8,
   106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8,
   116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8,
   123/8, 124/8, 125/8, 126/8, 133/8, 175/8, 180/8,
   182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8,
   219/8, 220/8, 221/8, 222/8, 223/8,

ARIN Region Analysis Summary


Prefixes being announced by ARIN Region ASes:145956
Total ARIN prefixes after maximum aggregation:74537
ARIN Deaggregation factor: 1.96
Prefixes being announced from the ARIN address blocks:   118222
Unique aggregates announced from the ARIN address blocks: 48634
ARIN Region origin ASes present in the Internet Routing Table:14758
ARIN Prefixes per ASN: 8.01
ARIN Region origin ASes announcing only one prefix:  

Re: OT: Traffic Light Control (was Re: First real-world SCADA attack in US)

2011-11-25 Thread Joel jaeggli
On 11/22/11 08:16 , Jay Ashworth wrote:
 - Original Message -
 From: Owen DeLong o...@delong.com
 
 As in all cases, additional flexibility results in additional ability
 to make mistakes. Simple mechanical lockouts do not scale to the
 modern world. The benefits of these additional capabilities far
 outweigh the perceived risks of programming errors.
 
 The perceived risk in this case is multiple high-speed traffic fatalities.
 
 I believe we rank that pretty high; it's entirely possible that a traffic
 light controller is the most potentially dangerous artifact (in terms of 
 number of possible deaths) that the average citizen interacts with on a 
 daily basis.

Cars generically cause at lot more deaths than faulty traffic
controllers 13.2 per 100,000 population in the US annually.



Re: OT: Traffic Light Control (was Re: First real-world SCADA attack in US)

2011-11-25 Thread Jay Hennigan
On 11/25/11 11:34 AM, Joel jaeggli wrote:

 Cars generically cause at lot more deaths than faulty traffic
 controllers 13.2 per 100,000 population in the US annually.

The cars don't (often) cause them.  The drivers do.  Yes, there are the
rare mechanical failures but the most likely cause is wetware.  Ditto
airplane crashes.  A mild example:

http://www.ntsb.gov/aviationquery/brief.aspx?ev_id=20001212X18632

--
Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net
Impulse Internet Service  -  http://www.impulse.net/
Your local telephone and internet company - 805 884-6323 - WB6RDV



Re: OT: Traffic Light Control (was Re: First real-world SCADA attack in US)

2011-11-25 Thread Joel jaeggli
On 11/25/11 12:02 , Jay Hennigan wrote:
 On 11/25/11 11:34 AM, Joel jaeggli wrote:
 
 Cars generically cause at lot more deaths than faulty traffic
 controllers 13.2 per 100,000 population in the US annually.
 
 The cars don't (often) cause them.  The drivers do.  Yes, there are the
 rare mechanical failures but the most likely cause is wetware.  Ditto
 airplane crashes.  A mild example:

while they may well have otherwise been runover by an oxcart in the
absence of automobiles, if they we're behind the wheel of a complex 2
ton machine there would be no accident.

 http://www.ntsb.gov/aviationquery/brief.aspx?ev_id=20001212X18632
 
 --
 Jay Hennigan - CCIE #7880 - Network Engineering - j...@impulse.net
 Impulse Internet Service  -  http://www.impulse.net/
 Your local telephone and internet company - 805 884-6323 - WB6RDV
 




NANOG Internet predictions for 2010

2011-11-25 Thread Frank Bulk
On this slower-than-normal day I was cleaning up my office and found this
article from 2006 making predictions for 2010.  It's now a year later, and
while many of these did not happen, some of them did and for others we are a
step closer.

Frank

http://bpastudio.csudh.edu/fac/lpress/471/hout/nanog2010.htm 

Hi -

At a content forum and NANOG in June 2006 I led some discussions involving
predictions for what the Internet might look like in 2010. What makes this
so interesting is that so many perspectives highlighted so many potential
futures that others had not considered. When you then discuss the
implications of such varying futures, again with a diverse crowd, you end up
with a lively discussion and, well, some potential futures you may not have
considered. I've tried to list some of these predictions from the Content
Provider crowd and the ISP NANOG crowd here.

Content Provider Predictions for 2010
--
Here is the question I put to a group of Content Providers at a content
forum:

We are sitting around this table in 2010 and we are commenting how
remarkable the last few years have been, specifically that:
1.  Video streaming volume has grown 100 fold
2.  Last mile wireless replaced local loop
3.  Botnets (DDOS attacks) are still an issue
4.  Non-mechanical (i.e. Flash) Drives replaced internal hard drives on
laptops
5.  10% of all cell phones are now video phones
6.  We have cell phones that we actually like
7.  The U.S. is insignificant traffic wise relative to the rest of the
world
8.  Most popular question discussed around the table: 'How do we
operate business in China?'
9.  No online privacy. And the gov't watches everything
10. 18-25 demographic is best reached w/ads on the Internet
11. Next Gen 3D on-line Social Networks are so successful
12. No physical network interfaces are needed
13. We will big brother ourselves (video cams 'who scraped my car?')
14. So many special purpose Internet apps - in car google maps, live
traffic updates, etc.
15. So much of our personal information is on the net
16. Video IM emerged as a dominant app
17. P2P will emerge for non-pirated videos - DRM in place and embraced
18. Voice calls are free, bundled with other things

[some additional notable predictions from this group, but did not =
receive
simple majority validation] IPTV replaces cable TV IPv6 is adopted =
Massive
Internet Collapse - Metcalfe regurgitates his column Flexible screen
deployment SPAM is no longer a problem in 2010 Windows embraces =
distributed
computing Net is not Neutral Powerline Broadband emerges FTTH massive
deployment

Internet Service Providers Predictions for 2010
--
We didn't get to do this at the Peering BOF at NANOG, but I did some =
table
discussions outside in the hallways. There there was no voting so I am
listing a subset of the predictions that seemed to resonate among a =
couple
dozen or so folks at the hallway tables where question was discussed:

We are sitting around this table in 2010 at NANOG and we are commenting =
how
remarkable the last few years have been, specifically that:
1.  We have 10G network interface(s) on laptops (I assumed wired, but
someone else might have been thinking wireless)
2.  $5/mbps is the common/standard price of transit (other prediction
was $30/mbps)
3.  Internet traffic is now so heavily localized (as in 75% of
telephone calls are across town type of thing but for the Internet)
4.  Ad revenue will cover the cost/or subsidize significantly of DSL
5.  90% of Internet bits will be video traffic
6.  VoIP traffic exceeds the PSTN traffic
7.  Private networks predominantly migrate to overlays over the Internet
8.  Wireless Internet Service Providers (WISPs) are serious competitive
threat to DSL and Cable Internet
9.  Sprint is bought by Time Warner
10. Cable companies form cabal  hookup with Sprint or Level 3
11. Government passes Net Neutrality Law of some flavor
12. Earthlink successfully reinvents themselves as Wireless Metro
player in Response to ATT and Verizon
13. 40% paid or subscription as opposed to Content Click Ads. Like
Cable Company channel packages, folks will flock to subscriptions for
Internet Content packages.
14. RIAA proposes surcharge on network access (like Canada tax on blank
CDs)
15. NetFlix conversion to Internet delivery of movies to Tivo or PC,
or open source set top box
16. ISPs will be in pain
17. Last mile (fiber, wireless, .) in metro will be funded by municipal
bonds
18. Death of TV ads, Death of broadcast TV, Tivo  Tivo like
appliances all use the Internet with emergence of targeted ads based on
demographic profiles of viewer
19. Google in charge of 20% of ALL ads (TV, Radio, Billboards, .)
20. Ubiquitous wifi in every metro with wifi roaming agreements

Re: NANOG Internet predictions for 2010

2011-11-25 Thread William Herrin
On Fri, Nov 25, 2011 at 4:09 PM, Frank Bulk frnk...@iname.com wrote:
 On this slower-than-normal day I was cleaning up my office and found this
 article from 2006 making predictions for 2010.  It's now a year later, and
 while many of these did not happen, some of them did and for others we are a
 step closer.

 http://bpastudio.csudh.edu/fac/lpress/471/hout/nanog2010.htm

 Content Provider Predictions for 2010
 Internet Service Providers Predictions for 2010

I observe that the content providers had more than double the hit rate
of the ISPs.



BGP Update Report

2011-11-25 Thread cidr-report
BGP Update Report
Interval: 17-Nov-11 -to- 24-Nov-11 (7 days)
Observation Point: BGP Peering with AS131072

TOP 20 Unstable Origin AS
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS29049   79965  2.6% 207.2 -- DELTA-TELECOM-AS Delta Telecom 
LTD.
 2 - AS982949222  1.6%  90.5 -- BSNL-NIB National Internet 
Backbone
 3 - AS840241347  1.3%  18.3 -- CORBINA-AS OJSC Vimpelcom
 4 - AS34875   33439  1.1% 227.5 -- YANFES OJSC Uralsviazinform
 5 - AS543431214  1.0% 251.7 -- NURSAT-ALA-AS Nursat-Almaty
 6 - AS19743   29751  0.9%4958.5 -- 
 7 - AS755227656  0.9%  19.8 -- VIETEL-AS-AP Vietel Corporation
 8 - AS41440   25577  0.8% 216.8 -- SIBIRTELECOM-AS OJSC Rostelecom
 9 - AS32528   24172  0.8%4834.4 -- ABBOTT Abbot Labs
10 - AS919822845  0.7%  83.1 -- KAZTELECOM-AS JSC Kazakhtelecom
11 - AS20632   21072  0.7% 540.3 -- PETERSTAR-AS PeterStar
12 - AS682820101  0.6% 223.3 -- USI Uralsviazinform
13 - AS12772   19947  0.6% 127.1 -- ENFORTA-AS Enforta  Autonomous 
System
14 - AS21487   18021  0.6% 212.0 -- SAKHATELECOM-AS OJSC Rostelecom
15 - AS27738   16872  0.5%  49.6 -- Ecuadortelecom S.A.
16 - AS24689   16727  0.5% 223.0 -- ROSINTEL-AS Rosintel Network
17 - AS12332   16581  0.5% 221.1 -- PRIMORYE-AS OJSC Rostelecom
18 - AS15723   16072  0.5% 206.1 -- AZERONLINE Azeronline 
Information Services
19 - AS3   15463  0.5% 213.0 -- GUGIK Glowny Urzad Geodezji i 
Kartografii
20 - AS31148   14783  0.5%  35.9 -- FREENET-AS FreeNet ISP


TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASNUpds %  Upds/PfxAS-Name
 1 - AS19743   29751  0.9%4958.5 -- 
 2 - AS32528   24172  0.8%4834.4 -- ABBOTT Abbot Labs
 3 - AS169167281  0.2%3640.5 -- NETLOGIC-WEST - INFINIPLEX LLC 
DBA NETLOGIC
 4 - AS385283476  0.1%3476.0 -- LANIC-AS-AP Lao National 
Internet Committee
 5 - AS174083301  0.1%3301.0 -- ABOVE-AS-AP AboveNet 
Communications Taiwan
 6 - AS389602827  0.1%2827.0 -- INGBANK-UKRAINE Joint-stock 
bank ING BANK UKRAINE
 7 - AS420412093  0.1%2093.0 -- INGOUA-AS CJSC Joint Stock 
Insurance Company INGO Ukraine
 8 - AS11943 909  0.0% 909.0 -- GLOBE - Globe Wireless
 9 - AS21271 858  0.0% 858.0 -- SOTELMABGP
10 - AS19223   10937  0.3% 781.2 -- NTEGRATED-SOLUTIONS - Ntegrated 
Solutions
11 - AS607210164  0.3% 726.0 -- UNISYS-6072 For routing issues, 
email hostmas...@unisys.com
12 - AS37115 675  0.0% 675.0 -- TMP-UG
13 - AS57405 655  0.0% 655.0 -- MIHAN-NOC2 MIHAN COMMUNICATION 
SYSTEMS CO.,LTD
14 - AS48068 567  0.0% 567.0 -- VISONIC Visonic Ltd
15 - AS52140 562  0.0% 562.0 -- UNHCR-IR-AS United Nations High 
Commissioner for Refugees
16 - AS20632   21072  0.7% 540.3 -- PETERSTAR-AS PeterStar
17 - AS57282 498  0.0% 498.0 -- SOPREX-AS SOPREX D.o.o.
18 - AS52196 487  0.0% 487.0 -- TREC-AS Tehran Regional 
Electricity Joint Stock Company
19 - AS53362 465  0.0% 465.0 -- MIXIT-AS - Mixit, Inc.
20 - AS104451792  0.1% 448.0 -- HTG - Huntleigh Telcom


TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
 1 - 84.204.132.0/24   19391  0.6%   AS20632 -- PETERSTAR-AS PeterStar
 2 - 130.36.35.0/2412080  0.4%   AS32528 -- ABBOTT Abbot Labs
 3 - 130.36.34.0/2412079  0.4%   AS32528 -- ABBOTT Abbot Labs
 4 - 67.97.156.0/2410812  0.3%   AS19223 -- NTEGRATED-SOLUTIONS - Ntegrated 
Solutions
 5 - 66.248.104.0/21   10779  0.3%   AS6316  -- AS-PAETEC-NET - PaeTec 
Communications, Inc.
 6 - 202.92.235.0/24   10070  0.3%   AS9498  -- BBIL-AP BHARTI Airtel Ltd.
 7 - 206.80.93.0/24 7271  0.2%   AS16916 -- NETLOGIC-WEST - INFINIPLEX LLC 
DBA NETLOGIC
 8 - 65.122.196.0/246944  0.2%   AS19743 -- 
 9 - 72.164.144.0/244567  0.1%   AS19743 -- 
10 - 66.238.91.0/24 4560  0.1%   AS19743 -- 
11 - 65.162.204.0/244560  0.1%   AS19743 -- 
12 - 66.89.98.0/24  4560  0.1%   AS19743 -- 
13 - 65.163.182.0/244560  0.1%   AS19743 -- 
14 - 203.110.64.0/203476  0.1%   AS38528 -- LANIC-AS-AP Lao National 
Internet Committee
15 - 202.153.174.0/24   3301  0.1%   AS17408 -- ABOVE-AS-AP AboveNet 
Communications Taiwan
16 - 195.144.28.0/242827  0.1%   AS38960 -- INGBANK-UKRAINE Joint-stock 
bank ING BANK UKRAINE
17 - 213.16.48.0/24 2743  0.1%   AS8866  -- BTC-AS Bulgarian 
Telecommunication Company Plc.
18 - 85.223.211.0/242093  0.1%   AS42041 -- INGOUA-AS CJSC Joint Stock 
Insurance Company INGO Ukraine
19 - 14.102.50.0/24 1677  0.1%   AS18002 -- WORLDPHONE-IN AS Number for 
Interdomain Routing

The Cidr Report

2011-11-25 Thread cidr-report
This report has been generated at Fri Nov 25 21:12:35 2011 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.

Check http://www.cidr-report.org for a current version of this report.

Recent Table History
Date  PrefixesCIDR Agg
18-11-11384382  225289
19-11-11384737  225361
20-11-11384631  225219
21-11-11384703  225139
22-11-11384864  225632
23-11-11385042  225870
24-11-11384967  226037
25-11-11385336  226282


AS Summary
 39470  Number of ASes in routing system
 16606  Number of ASes announcing only one prefix
  3479  Largest number of prefixes announced by an AS
AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc.
  108833792  Largest address span announced by an AS (/32s)
AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street


Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as 
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').

 --- 25Nov11 ---
ASnumNetsNow NetsAggr  NetGain   % Gain   Description

Table 385375   226321   15905441.3%   All ASes

AS6389  3479  220 325993.7%   BELLSOUTH-NET-BLK -
   BellSouth.net Inc.
AS18566 2093  406 168780.6%   COVAD - Covad Communications
   Co.
AS4766  2520  996 152460.5%   KIXS-AS-KR Korea Telecom
AS7029  2950 1495 145549.3%   WINDSTREAM - Windstream
   Communications Inc
AS22773 1502  113 138992.5%   ASN-CXA-ALL-CCI-22773-RDC -
   Cox Communications Inc.
AS4755  1510  242 126884.0%   TATACOMM-AS TATA
   Communications formerly VSNL
   is Leading ISP
AS4323  1614  391 122375.8%   TWTC - tw telecom holdings,
   inc.
AS28573 1515  383 113274.7%   NET Servicos de Comunicao S.A.
AS1785  1852  781 107157.8%   AS-PAETEC-NET - PaeTec
   Communications, Inc.
AS19262 1387  401  98671.1%   VZGNI-TRANSIT - Verizon Online
   LLC
AS7552  1383  412  97170.2%   VIETEL-AS-AP Vietel
   Corporation
AS10620 1700  737  96356.6%   Telmex Colombia S.A.
AS7303  1238  360  87870.9%   Telecom Argentina S.A.
AS18101  954  150  80484.3%   RELIANCE-COMMUNICATIONS-IN
   Reliance Communications
   Ltd.DAKC MUMBAI
AS8151  1451  675  77653.5%   Uninet S.A. de C.V.
AS30036 1440  682  75852.6%   MEDIACOM-ENTERPRISE-BUSINESS -
   Mediacom Communications Corp
AS4808  1081  342  73968.4%   CHINA169-BJ CNCGROUP IP
   network China169 Beijing
   Province Network
AS7545  1625  946  67941.8%   TPG-INTERNET-AP TPG Internet
   Pty Ltd
AS17974 1635  960  67541.3%   TELKOMNET-AS2-AP PT
   Telekomunikasi Indonesia
AS8402  1567  893  67443.0%   CORBINA-AS OJSC Vimpelcom
AS3356  1106  457  64958.7%   LEVEL3 Level 3 Communications
AS24560  966  351  61563.7%   AIRTELBROADBAND-AS-AP Bharti
   Airtel Ltd., Telemedia
   Services
AS17676  671   71  60089.4%   GIGAINFRA Softbank BB Corp.
AS20115 1600 1026  57435.9%   CHARTER-NET-HKY-NC - Charter
   Communications
AS4804   660   95  56585.6%   MPX-AS Microplex PTY LTD
AS22561  931  376  55559.6%   DIGITAL-TELEPORT - Digital
   Teleport Inc.
AS22047  581   33  54894.3%   VTR BANDA ANCHA S.A.
AS3549   955  421  53455.9%   GBLX Global Crossing Ltd.
AS17488  928  402  52656.7%   HATHWAY-NET-AP Hathway IP Over
   Cable Internet
AS7011  1167  645  52244.7%   FRONTIER-AND-CITIZENS -
   

Water Utility SCADA 'Attack': The, um, washout

2011-11-25 Thread Jay Ashworth
Not an attack: an already failing pump, and an employee of a contractor to the
utility who was ... wait for it ...

traveling in Russia on personal business.

WaPo via Lauren @ Privacy:  http://j.mp/rrvMXR

Cheers,
-- jra
-- 
Jay R. Ashworth  Baylink   j...@baylink.com
Designer The Things I Think   RFC 2100
Ashworth  Associates http://baylink.pitas.com 2000 Land Rover DII
St Petersburg FL USA  http://photo.imageinc.us +1 727 647 1274



Re: Water Utility SCADA 'Attack': The, um, washout

2011-11-25 Thread Dobbins, Roland

On Nov 26, 2011, at 10:14 AM, Jay Ashworth wrote:

 traveling in Russia on personal business.

I've noticed that in general, when there isn't an actual attack taking place, 
but rather some kind of misconfiguration or other issue, there's all too often 
a tendency to run around shouting about the 133t h4x0rs; and when there's 
really an attack taking place, it's the last thing to be considered, if ever, 
heh.

---
Roland Dobbins rdobb...@arbor.net // http://www.arbornetworks.com

The basis of optimism is sheer terror.

  -- Oscar Wilde