Hi all,
As you (hopefully) know, as of 1-1-2010, the RIRs will only be giving
out 32-bit AS numbers. I'm writing an article for Ars Technica about
this, and I was wondering about the perspective of network operators
who may be faced with customers with a 32-bit AS number in the near
futur
On Wed, Oct 07, 2009 at 06:25:53AM -0700, Owen DeLong wrote:
> Additionally the problems of DDOS sourced from a collection of
> compromised hosts could be interfering with someone else's ability
> to make a successful VOIP call.
Much more than that: they could be interfering with the underlying
Hi there,
A customer of mine is reporting that there are a large number of addresses
he can not reach with his addresses in the 109/8 range. This was
declassified as a BOGON and assigned by IANA to RIPE in January 2009.
If you have a manually updated BOGON list, can I please ask that you review
i
Hi Matthew,
I had the same problem with our new range assigned to us by APNIC, out
of 110/8
You're in for a long, hard and frustrating road.
If you manage to get in contact with anyone, or anyone responds to
you, mind letting me know? I'd suspect they'd probably have us blocked
still too
The 109/8 range was removed from our ISP Ingress Prefix Filters in
version 22 (dated 6-Feb-2009):
ftp://ftp-eng.cisco.com/cons/isp/security/Ingress-Prefix-Filter-Template
s/T-ip-prefix-filter-ingress-loose-check-v22.txt
Thanks,
John
-Original Message-
From: Matthew Walster [mailto:mat
On 09/10/2009 4:22, "Matthew Walster" wrote:
> A customer of mine is reporting that there are a large number of addresses
> he can not reach with his addresses in the 109/8 range. This was
> declassified as a BOGON and assigned by IANA to RIPE in January 2009.
>
> If you have a manually updated
About 4 hours ago BGPmon picked up a rogue announcement of 129.77.0.0 from
AS9035 (ASN-WIND Wind Telecomunicazioni spa) with an upstream of AS1267
(ASN-INFOSTRADA Infostrada S.p.A.). I don't see it now on any looking glass
sites. Hopefully this was just a typo that was quickly corrected. I would
Hi Matthew,
You are not the only one having this issue. They are announcing some other
prefixes as well!
2009/10/9 Matthew Huff
> About 4 hours ago BGPmon picked up a rogue announcement of 129.77.0.0 from
> AS9035 (ASN-WIND Wind Telecomunicazioni spa) with an upstream of AS1267
> (ASN-INFOSTRADA
Agreed. Our prefixes at AS40060 were announced as well. I received a
notification around 7:00am EDT that our prefixes were detected announced
from AS9035 with the same upstream AS1267.
On 10/9/09 8:34 AM, "Wouter Prins" wrote:
> Hi Matthew,
> You are not the only one having this issue. They are
Hi Iljitsch-
This statement isnt entirely correct. Im not sure if this is just a word
smithing error in your email or if the management of this issue in the ARIN
region isnt well known. I can only address the ARIN region but in that region
if there is a 16 bit ASN in the free pool it will be
We also received a notification that our IP block 67.135.55.0/24 (AS19629) is
being annouced by AS9035. Hopefully someone is receiving my emails.
Thanks
Dylan Ebner, Network Engineer
Consulting Radiologists, Ltd.
1221 Nicollet Mall, Minneapolis, MN 55403
ph. 612.573.2236 fax. 612.573.2250
Lots of people were affected, but none significantly. They originated
86,747 networks very briefly (less than a minute at 7:23 UTC), and I don't
think anyone outside Telecom Italia's customer cone even saw them. So the
impact was really, really limited. The correct origins were being
reasserte
We are seeing the same ting with 66.146.192.0/19 & 66.251.224.0/19.
According to cyclopes this is still continuing. . .
Dylan Ebner wrote:
> We also received a notification that our IP block 67.135.55.0/24 (AS19629) is
> being annouced by AS9035. Hopefully someone is receiving my emails.
>
> Tha
Does anyone know why it takes BGPMon so long to send out an email. It looks
like it BGPMon detected the AS9035 announcements at the right time (around 7:00
UTC) but I didn't get a notification until around 13:00 UTC. It seems like many
people rely on BGPMon to do this type of detection, so the l
I just received confirmation from AS9035 that they are not annoucing my IP
block.
Dylan Ebner, Network Engineer
-Original Message-
From: sjk [mailto:s...@sleepycatz.com]
Sent: Friday, October 09, 2009 9:20 AM
Cc: nanog@nanog.org
Subject: Re: Invalid prefix announcement from AS9035 for
Usually I get alerts from BGPMon within about 20 minutes of an event being
detected. Not so much with the event this morning. I'm guessing that the
orgination of 86,747 prefixes from the wrong AS probably got their MTA pretty
busy...
-Original Message-
From: Dylan Ebner [mailto:dylan.
Is anyone else seeing connectivity issues to the internet using Time
Warner/Road Runner in the Mid West? Kansas City and Wisconsin seem to be
unable to access sites on the west coast...
I thought that may be the case as well. Do people know of other services like
BGPMon that may be able to keep up with the load better? Does anyone know how
cyclops faired this morning with the additional load?
Dylan Ebner
-Original Message-
From: Andrew Nusbaum [mailto:andrew.nusb..
there are multiple systems available, sign up for a few
i've noticed cyclops alerts are sent faster than bgpon
PHAS was fast, but the project is over and something new is going to be released
there is ripe MyASN
there is watchmynet
and IAR
On Fri, Oct 9, 2009 at 7:23 AM, Dylan Ebner wrote:
>
I actually got origin change alerts from Cyclops about 2 minutes after the
announcements started.
-Andy
-Original Message-
From: Dylan Ebner [mailto:dylan.eb...@crlmed.com]
Sent: Friday, October 09, 2009 10:31 AM
To: Andrew Nusbaum; Jim Cowie; Adam Kennedy
Cc: NANOG
Subject: RE: Invalid
On Fri, Oct 09, 2009 at 10:31:52AM +0200, Iljitsch van Beijnum wrote:
> As you (hopefully) know, as of 1-1-2010, the RIRs will only be giving
> out 32-bit AS numbers. I'm writing an article for Ars Technica about
> this, and I was wondering about the perspective of network operators who
> may
On Fri, Oct 09, 2009 at 07:30:19AM -0700, Mike Maberry wrote:
> Is anyone else seeing connectivity issues to the internet using Time
> Warner/Road Runner in the Mid West? Kansas City and Wisconsin seem to be
> unable to access sites on the west coast...
Mike,
There is an ongoing issue that our op
Greg Hankins wrote:
We also started a Wiki with content based on the presentation that has
more updated information, including a current list of vendor support.
If you see a vendor missing, let us know and we can update the list.
Or better yet, create an account and add some content yourself :-)
On Oct 9, 2009, at 12:05 PM, Kevin Loch wrote:
Greg Hankins wrote:
We also started a Wiki with content based on the presentation that
has
more updated information, including a current list of vendor support.
If you see a vendor missing, let us know and we can update the list.
Or better yet,
> While it's good to see support _finally_ in 2.2SX, I still don't see it
> in 12.2SR (for rsp720). It's almost like Cisco has no idea how
> many of these things are actually used on the Internet.
This is actually our issue as well. Our backbone runs primarily RSP720's
(with some Sup720's for go
We are running into the same issues regarding 12.0 train for 12008 GSR
w/PRP-2's. Even though there are IOS's that have a "fixed" 4 Byte ASN
code...it has other bugs in NSF-SSO that we use here extensively. So
hence the reason we are waiting to upgrade.
Larry May
Network Services
n|Frame
888-223-8
Mike Maberry wrote:
> Is anyone else seeing connectivity issues to the internet using Time
> Warner/Road Runner in the Mid West? Kansas City and Wisconsin seem to be
> unable to access sites on the west coast...
Still ongoing in los angeles,
howdy,
I'm chasing a technical contact at Facebook. There's some broken HTTP being
served which is confusing Squid in a way that isn't easily, cleanly
worked around.
Please feel free to contact me off-list.
Thanks,
Adrian
This is an automated weekly mailing describing the state of the Internet
Routing Table as seen from APNIC's router in Japan.
Daily listings are sent to bgp-st...@lists.apnic.net
For historical data, please see http://thyme.apnic.net.
If you have any comments please contact Philip Smith .
Routing
A few people have asked what the specific problem is.
http://www.squid-cache.org/mail-archive/squid-dev/200910/0089.html
Adrian
On Sat, Oct 10, 2009, Adrian Chadd wrote:
> howdy,
>
> I'm chasing a technical contact at Facebook. There's some broken HTTP being
> served which is confusing Squid
I've been having the same issue when going through my Linux+Squid+WCCP
setup, but if the browser is configured to go direct to the proxy it
does not seem to have the same issue. (At least so far).
- Jared
On Oct 9, 2009, at 2:48 PM, Adrian Chadd wrote:
A few people have asked what
It is a HTTP/1.0 vs HTTP/1.1 thing (Chunked encoding for HTTP/1.1
doesn't require you to calculate and send a Content-Length.)
Adrian
On Fri, Oct 09, 2009, Jared Mauch wrote:
> I've been having the same issue when going through my Linux+Squid+WCCP
> setup, but if the browser is configured to
> How are other providers approaching dial-up? I would presume we are in the
> same boat as a lot of other folks - we have aging dial-up equipment that
> does not support IPv6 (3com Total Control). Our customer base has dropped
> quite a bit, and we have even kicked around the idea dropping that se
BGP Update Report
Interval: 01-Oct-09 -to- 08-Oct-09 (7 days)
Observation Point: BGP Peering with AS131072
TOP 20 Unstable Origin AS
Rank ASNUpds % Upds/PfxAS-Name
1 - AS919849597 4.6% 163.7 -- KAZTELECOM-AS Kazakhtelecom
Corporate Sales Administration
This report has been generated at Fri Oct 9 21:11:14 2009 AEST.
The report analyses the BGP Routing Table of AS2.0 router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org for a current version of this report.
Recent Table History
Date
On 7-Oct-09, at 11:22 AM, Scott Morris wrote:
I may be having my wires a little crossed (I'm not an electrical
engineer) but I was always under the impression that manipulation of
the
physical characteristics like that from heat/dampness didn't reduce
the
"speed" but the "quality" (like li
I may be missing a little bit here by jumping a bit in the thread so
sorry.
What is the difference between weather and seasonal?
I define weather like, well its cloudy and raining here and get in the
car and drive 20 minutes and it is clear and sunny. I would call this
mostly localized, like grou
On 10/9/09, Rich Kulawiec wrote:
> On Wed, Oct 07, 2009 at 06:25:53AM -0700, Owen DeLong wrote:
>> Additionally the problems of DDOS sourced from a collection of
>> compromised hosts could be interfering with someone else's ability
>> to make a successful VOIP call.
>
> Much more than that: they c
or when I initiate offsite backups.
I've seen ISPs that react to just traffic bursts. It's not the way to go
without more intelligent decision making on the content (i.e. SMTP, all SYNs,
etc). Of course, content inspection is a whole 'nother hornet's nest :)
- S
-Original Message
Lee wrote:
If an ISP is involved with tracking down DDOS participants or
something, I can understand how they'd know a system was compromised.
But any kind of blocking because the ISP sees 'anomalous' traffic
seems .. premature at best. SANS newsbites has this bit:
On Thursday, October 8, Comca
40 matches
Mail list logo
