Re: Entry level WDM gear?
On 05/08/2013 09:21 PM, Jeff Kell wrote: > Ciena/Cyan/etc are way over our non-existant budget... what is the > going recommendation to throw say 4-8 lambdas over a dark pair without > breaking the bank? :) I've used http://www.omnitron-systems.com/ media converters and found them reliable. They've got the filters to do an 8 channel system.
Re: Open Resolvers pseudo Honey Pot (Was: Open Resolver Problems)
On 05/09/13 19:03, Mark Andrews wrote: > In message <518bd982.60...@pubnix.net>, Alain Hebert writes: >> ( Ok, ok, another bad customer =D ) >> >> Starting today at 5h15m EST... >> >> There is a bigger than usual DDoS amplification against the IP's >> listed below. >> >> Granted root servers query is barely 1k while the usual isc.org is >> 3.5k and this is a "possible" 15Mbps from this one source but still :( > With a validating resolver > > "dig any . +edns" return a 1872 byte payload. > "dig any . +dnssec" return a 2030 byte payload. > (difference is NS RRSIG records) > > Getting the DNSKEY records included isn't hard. Throw a > single DNSKEY query into the stream once a day/hour > and it will be cached for 48 hours. > > If you have the SOA cached as well it gets to > > "dig any . +edns" return a 2087 byte payload. > "dig any . +dnssec" return a 2245 byte payload. > > Mark Well during the spamhaus incident I saw some at around 8k. On another note... After 18 hours, that "pot" is still receiving ~200pps (down from 800 and 400pps) and its up to 614 IP now... I still do not see the motive behind this one: Either someone messed up his botnet and he's stuck on it =D Could be a rootkit using this server as a DNS server (lots of targets are hosted Linux in outfit like OVH). ( But again why spamming . IN ANY queries and not cache the results ) And a new query popped up -> doc.gov IN ANY +E, granted I only saw a few of them. And a few of the source IP's are gaming forums mostly Minecraft oriented. PS: Reminder, that this server do not actually amplify anything and the service at that location is not affected. > >> PS: >> >> If you're a Tier and wish to track down the *^%$*#@ source ISP's to >> explain to them the joy of BCP38... >> >> Contact me off list, from your corporate email address, and I'll >> provide you with the IP of that server. >> >> - IP are targeted for DDoS amplification. >> >> Format: >> >> >> [query] >> >> 94.23.42.215 >> 2128 . IN ANY +E >> 208.98.25.130 >> 3079 . IN ANY +E >> 188.134.46.102 >> 2639 . IN ANY +E >> 108.61.239.105 >> 2270 . IN ANY +E >> 95.129.166.186 >> 2416 . IN ANY +E >> 176.9.210.53 >> 2839 . IN ANY +E >> 145.53.65.130 >> 2326 . IN ANY +E >> 99.198.100.86 >> 1223 . IN ANY +E >> 37.59.72.74 >> 2508 . IN ANY +E >> 199.83.133.42 >> 2392 . IN ANY +E >> 74.63.248.210 >> 1481 . IN ANY +E >> 173.199.68.62 >> 1178 . IN ANY +E >> 82.80.17.4 >> 2666 . IN ANY +E >> 188.162.228.50 >> 1075 . IN ANY +E >> 79.225.4.183 >> 1014 . IN ANY +E >> 78.108.79.171 >> 1291 . IN ANY +E >> 31.53.123.192 >> 1093 . IN ANY +E >> 90.3.194.151 >> 1245 . IN ANY +E >> 27.50.70.191 >> 1304 . IN ANY +E >> 198.7.63.39 >> 1579 . IN ANY +E >> 81.220.28.129 >> 1103 . IN ANY +E >> 198.105.218.12 >> 1110 . IN ANY +E >> 86.160.85.37 >> 1128 . IN ANY +E >> 184.95.35.194 >> 1237 . IN ANY +E >> 134.255.237.244 >> 1245 . IN ANY +E >> 178.32.36.67 >> 1588 . IN ANY +E >> 204.45.55.8 >> 1419 . IN ANY +E >> 95.211.209.182 >> 1520 . IN ANY +E >> 80.192.224.22 >> 1430 . IN ANY +E >> 24.244.248.8 >> 1414 . IN ANY +E >> 79.71.69.165 >> 1090 . IN ANY +E >> 24.244.248.57 >> 1364 . IN ANY +E >> 82.132.226.216 >> 1079 . IN ANY +E >> 69.162.97.99 >> 1601 . IN ANY +E >> >> - >> Alain Hebertaheb...@pubnix.net >> PubNIX Inc. >> 50 boul. St-Charles >> P.O. Box 26770 Beaconsfield, Quebec H9W 6G7 >> Tel: 514-990-5911 http://www.pubnix.netFax: 514-990-9443 >> >>
Re: A spoof film about networking
On May 6, 2013, at 10:29 AM, Oliver wrote: > I cringed so hard at the EIGRP song, in fact, just thinking about it makes me > hurt inside. They posted it here: https://soundcloud.com/stickwell-productions/love_me_eigrp If you didn't watch it, at least listen to the song. You will either cringe or laugh. It's something nice to unwind after a long friday week. Plus it will play for 2 minutes while you do something else and you can enjoy. - Jared
Weekly Routing Table Report
This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. The posting is sent to APOPS, NANOG, AfNOG, AusNOG, SANOG, PacNOG, LacNOG, TRNOG, CaribNOG and the RIPE Routing Working Group. Daily listings are sent to bgp-st...@lists.apnic.net For historical data, please see http://thyme.rand.apnic.net. If you have any comments please contact Philip Smith . Routing Table Report 04:00 +10GMT Sat 11 May, 2013 Report Website: http://thyme.rand.apnic.net Detailed Analysis: http://thyme.rand.apnic.net/current/ Analysis Summary BGP routing table entries examined: 454386 Prefixes after maximum aggregation: 185202 Deaggregation factor: 2.45 Unique aggregates announced to Internet: 224421 Total ASes present in the Internet Routing Table: 44038 Prefixes per ASN: 10.32 Origin-only ASes present in the Internet Routing Table: 34566 Origin ASes announcing only one prefix: 16097 Transit ASes present in the Internet Routing Table:5845 Transit-only ASes present in the Internet Routing Table:151 Average AS path length visible in the Internet Routing Table: 4.6 Max AS path length visible: 57 Max AS path prepend of ASN ( 61154) 54 Prefixes from unregistered ASNs in the Routing Table: 315 Unregistered ASNs in the Routing Table: 131 Number of 32-bit ASNs allocated by the RIRs: 4760 Number of 32-bit ASNs visible in the Routing Table:3627 Prefixes from 32-bit ASNs in the Routing Table: 10293 Special use prefixes present in the Routing Table: 22 Prefixes being announced from unallocated address space:235 Number of addresses announced to Internet: 2614671852 Equivalent to 155 /8s, 216 /16s and 185 /24s Percentage of available address space announced: 70.6 Percentage of allocated address space announced: 70.6 Percentage of available address space allocated: 100.0 Percentage of address space in use by end-sites: 94.5 Total number of prefixes smaller than registry allocations: 160423 APNIC Region Analysis Summary - Prefixes being announced by APNIC Region ASes: 108833 Total APNIC prefixes after maximum aggregation: 33440 APNIC Deaggregation factor:3.25 Prefixes being announced from the APNIC address blocks: 110179 Unique aggregates announced from the APNIC address blocks:44862 APNIC Region origin ASes present in the Internet Routing Table:4837 APNIC Prefixes per ASN: 22.78 APNIC Region origin ASes announcing only one prefix: 1221 APNIC Region transit ASes present in the Internet Routing Table:827 Average APNIC Region AS path length visible:4.8 Max APNIC Region AS path length visible: 30 Number of APNIC region 32-bit ASNs visible in the Routing Table:523 Number of APNIC addresses announced to Internet: 721082080 Equivalent to 42 /8s, 250 /16s and 214 /24s Percentage of available APNIC address space announced: 84.3 APNIC AS Blocks4608-4864, 7467-7722, 9216-10239, 17408-18431 (pre-ERX allocations) 23552-24575, 37888-38911, 45056-46079, 55296-56319, 58368-59391, 131072-133119 APNIC Address Blocks 1/8, 14/8, 27/8, 36/8, 39/8, 42/8, 43/8, 49/8, 58/8, 59/8, 60/8, 61/8, 101/8, 103/8, 106/8, 110/8, 111/8, 112/8, 113/8, 114/8, 115/8, 116/8, 117/8, 118/8, 119/8, 120/8, 121/8, 122/8, 123/8, 124/8, 125/8, 126/8, 133/8, 150/8, 153/8, 163/8, 171/8, 175/8, 180/8, 182/8, 183/8, 202/8, 203/8, 210/8, 211/8, 218/8, 219/8, 220/8, 221/8, 222/8, 223/8, ARIN Region Analysis Summary Prefixes being announced by ARIN Region ASes:159410 Total ARIN prefixes after maximum aggregation:80155 ARIN Deaggregation factor: 1.99 Prefixes being announced from the ARIN address blocks: 160009 Unique aggregates announced from the ARIN address blocks: 73348 ARIN Region origin ASes present in the Internet Routing Table:15677 ARIN Prefixes per ASN:10.21 ARIN Region origin ASes announcing only
The Cidr Report
This report has been generated at Fri May 10 21:13:29 2013 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org for a current version of this report.
Recent Table History
Date PrefixesCIDR Agg
03-05-13455147 259665
04-05-13455649 260035
05-05-13455820 259904
06-05-13455574 259944
07-05-13455611 260337
08-05-13455729 260398
09-05-13455897 260480
10-05-13456517 260613
AS Summary
44137 Number of ASes in routing system
18272 Number of ASes announcing only one prefix
3016 Largest number of prefixes announced by an AS
AS6389 : BELLSOUTH-NET-BLK - BellSouth.net Inc.
116963808 Largest address span announced by an AS (/32s)
AS4134 : CHINANET-BACKBONE No.31,Jin-rong Street
Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').
--- 10May13 ---
ASnumNetsNow NetsAggr NetGain % Gain Description
Table 456572 260614 19595842.9% All ASes
AS6389 3016 86 293097.1% BELLSOUTH-NET-BLK -
BellSouth.net Inc.
AS4766 2958 943 201568.1% KIXS-AS-KR Korea Telecom
AS17974 2512 570 194277.3% TELKOMNET-AS2-AP PT
Telekomunikasi Indonesia
AS10620 2630 707 192373.1% Telmex Colombia S.A.
AS28573 2671 755 191671.7% NET Serviços de Comunicação
S.A.
AS22773 1971 186 178590.6% ASN-CXA-ALL-CCI-22773-RDC -
Cox Communications Inc.
AS18566 2067 473 159477.1% COVAD - Covad Communications
Co.
AS2118 1390 65 132595.3% RELCOM-AS OOO "NPO Relcom"
AS7303 1689 457 123272.9% Telecom Argentina S.A.
AS4323 1616 403 121375.1% TWTC - tw telecom holdings,
inc.
AS4755 1725 610 111564.6% TATACOMM-AS TATA
Communications formerly VSNL
is Leading ISP
AS7552 1172 169 100385.6% VIETEL-AS-AP Vietel
Corporation
AS36998 1237 301 93675.7% SDN-MOBITEL
AS7029 2144 1240 90442.2% WINDSTREAM - Windstream
Communications Inc
AS18881 921 25 89697.3% Global Village Telecom
AS18101 1001 179 82282.1% RELIANCE-COMMUNICATIONS-IN
Reliance Communications
Ltd.DAKC MUMBAI
AS1785 1993 1241 75237.7% AS-PAETEC-NET - PaeTec
Communications, Inc.
AS4808 1120 385 73565.6% CHINA169-BJ CNCGROUP IP
network China169 Beijing
Province Network
AS13977 844 135 70984.0% CTELCO - FAIRPOINT
COMMUNICATIONS, INC.
AS855741 55 68692.6% CANET-ASN-4 - Bell Aliant
Regional Communications, Inc.
AS8151 1250 580 67053.6% Uninet S.A. de C.V.
AS22561 1169 500 66957.2% DIGITAL-TELEPORT - Digital
Teleport Inc.
AS24560 1069 408 66161.8% AIRTELBROADBAND-AS-AP Bharti
Airtel Ltd., Telemedia
Services
AS6983 1134 479 65557.8% ITCDELTA - ITC^Deltacom
AS17676 730 107 62385.3% GIGAINFRA Softbank BB Corp.
AS27947 826 207 61974.9% Telconet S.A
AS3549 1058 442 61658.2% GBLX Global Crossing Ltd.
AS34744 671 68 60389.9% GVM S.C. GVM SISTEM 2003
S.R.L.
AS3356 1082 495 58754.3% LEVEL3 Level 3 Communications
AS11830 710 129 58181.8% Instituto Costarricense de
Electricidad y Telecom.
Total 45117124003271772.5% Top 30 total
Possible Bogus Routes
BGP Update Report
BGP Update Report Interval: 02-May-13 -to- 09-May-13 (7 days) Observation Point: BGP Peering with AS131072 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS36998 174311 7.8% 204.6 -- SDN-MOBITEL 2 - AS22561 107210 4.8% 189.4 -- DIGITAL-TELEPORT - Digital Teleport Inc. 3 - AS982943679 2.0% 38.6 -- BSNL-NIB National Internet Backbone 4 - AS10620 36545 1.6% 14.4 -- Telmex Colombia S.A. 5 - AS580034733 1.6% 142.9 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center 6 - AS840227906 1.2% 21.8 -- CORBINA-AS OJSC "Vimpelcom" 7 - AS566827078 1.2% 168.2 -- AS-5668 - CenturyTel Internet Holdings, Inc. 8 - AS15003 21807 1.0% 43.0 -- NOBIS-TECH - Nobis Technology Group, LLC 9 - AS390920581 0.9%3430.2 -- QWEST-AS-3908 - Qwest Communications Company, LLC 10 - AS755218904 0.8% 16.2 -- VIETEL-AS-AP Vietel Corporation 11 - AS38547 16090 0.7% 143.7 -- WITRIBE-AS-AP WITRIBE PAKISTAN LIMITED 12 - AS941616010 0.7% 313.9 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 13 - AS926015321 0.7% 136.8 -- MULTINET-AS-AP Multinet Pakistan Pvt. Ltd. 14 - AS483714095 0.6% 22.6 -- CHINA169-BACKBONE CNCGROUP China169 Backbone 15 - AS23966 13799 0.6% 39.9 -- LDN-AS-PK LINKdotNET Telecom Limited 16 - AS27738 13377 0.6% 23.6 -- Ecuadortelecom S.A. 17 - AS291413127 0.6% 285.4 -- NTT-COMMUNICATIONS-2914 - NTT America, Inc. 18 - AS37054 12876 0.6% 98.3 -- DTS 19 - AS17563 12828 0.6% 104.3 -- NEXLINX-AS-AP Autonomous System Number for Nexlinx 20 - AS11664 12005 0.5% 37.9 -- Techtel LMDS Comunicaciones Interactivas S.A. TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASNUpds % Upds/PfxAS-Name 1 - AS6629 7373 0.3%7373.0 -- NOAA-AS - NOAA 2 - AS159579388 0.4%4694.0 -- WTG-AS Web Technology Group 3 - AS194064196 0.2%4196.0 -- TWRS-MA - Towerstream I, Inc. 4 - AS390920581 0.9%3430.2 -- QWEST-AS-3908 - Qwest Communications Company, LLC 5 - AS423343032 0.1%3032.0 -- BBP-AS Broadband Plus s.a.l. 6 - AS6174 5904 0.3%2952.0 -- SPRINTLINK8 - Sprint 7 - AS458082431 0.1%2431.0 -- UTP-MY Bandar Seri Iskandar 8 - AS146807077 0.3%2359.0 -- REALE-6 - Auction.com 9 - AS373181443 0.1%1443.0 -- BESA 10 - AS3789 1172 0.1%1172.0 -- VRMC-AS - Virginia Regional Medical Center 11 - AS486128864 0.4%1108.0 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 12 - AS460351036 0.1%1036.0 -- TRIKOMSEL-AS-ID PT Trikomsel Oke Tbk 13 - AS339202772 0.1% 924.0 -- AQL (aq) Networks Limited 14 - AS385232894 0.1% 723.5 -- INTIKOMP-AS-ID INTI INFORMATIKA, PT 15 - AS19796 721 0.0% 721.0 -- SHUBERT - Shubert Organization, Inc. 16 - AS8657 637 0.0% 637.0 -- CPRM PT Comunicacoes S A 17 - AS457081910 0.1% 636.7 -- SURABAYA-AS-ID Pemerintah Kota Surabaya 18 - AS8382 633 0.0% 633.0 -- IRTEL-AS OJSC Rostelecom 19 - AS385023611 0.2% 601.8 -- MDPNET-AS-ID PT. MULTI DATA PALEMBANG 20 - AS388682386 0.1% 596.5 -- UPM-AS-AP Universiti Putra Malaysia AS TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 209.142.140.0/24 10378 0.4% AS22561 -- DIGITAL-TELEPORT - Digital Teleport Inc. 2 - 193.19.90.0/23 9255 0.4% AS29684 -- NOURNET-ASN Nour Communication Co.Ltd - Nournet 3 - 92.246.207.0/248819 0.4% AS48612 -- RTC-ORENBURG-AS CJSC "Comstar-Regions" 4 - 203.118.224.0/21 7958 0.3% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 5 - 203.118.232.0/21 7904 0.3% AS9416 -- MULTIMEDIA-AS-AP Hoshin Multimedia Center Inc. 6 - 192.58.232.0/247373 0.3% AS6629 -- NOAA-AS - NOAA 7 - 151.118.255.0/24 6871 0.3% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 8 - 151.118.254.0/24 6871 0.3% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 9 - 151.118.18.0/246827 0.3% AS3909 -- QWEST-AS-3908 - Qwest Communications Company, LLC 10 - 12.139.133.0/245755 0.2% AS14680 -- REALE-6 - Auction.com 11 - 173.232.234.0/24 5167 0.2% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 12 - 173.232.235.0/24 5167 0.2% AS30693 -- EONIX-CORPORATION-AS-WWW-EONIX-NET - Eonix Corporation 13 - 212.28.16.0/20 4696 0.2% AS15957 -- WTG-AS Web Technology Group 14 - 212.28.0.0/20 4692 0.2% AS15957 -- WTG-AS Web Technology Group 15 - 69.38.178.0/24 4196 0.2% AS19406 -- TWRS-MA - To
