apops November 2004

apops@apops.net

8 participants
21 discussions

Re: anycast roots
by Randy Bush 17 Nov '04

17 Nov '04

[ sorry for moving it to other lists. but the pathetic little self- appointed net nazi over at merit has removed me from nanog and nanog-post. pathtic, eh? ] > (I'm one of the persons who see a lot of jitter for > j.root-servers.net with Randy Bush's experiment.) pedantic but credit where due department: it is peter boothe's experiment. Peter Boothe <peter(a)cs.uoregon.edu> randy

1 0

SANOG V - 6 Feb - 13 Feb, 2005, Dhaka, Bangladesh - Call for Presentations
by Ananth Nagarajan 17 Nov '04

17 Nov '04

SANOG V- (South Asia Network Operators Group) - 6 Feb - 13 Feb, 2005, Dhaka, Bangladesh The South Asia Network Operators Group (SANOG) was set up in January 2003 to promote awareness of networking technologies and to establish a forum for discussion on operational issues and challenges in the South Asia region comprising of Afghanistan, Bangladesh, Bhutan, India, Maldives, Nepal, Pakistan and Sri Lanka. More information on SANOG can be found at http://www.sanog.org SANOG 1 was held in Kathmandu, Nepal, SANOG 2 in Colombo, Sri Lanka, SANOG 3 in Bangalore, India and SANOG 4 back in Kathmandu, Nepal. All four previous meetings were greatly successful. The last meeting (SANOG 4) held in Kathmandu in July 2004 had over 250 participants and very relevant topics being discussed. Clearly, the interest in networking technologies has rapidly grown in the region. SANOG 5 will comprise of workshops (Feb 6-10), tutorials (Feb 11-12) and a one-day conference (Feb 13). The following is an open call for papers/presentations for the one-day conference. Presentations are expected to be 20-30 minutes long with technical content. Marketing and sales content in presentations is against the spirit of the SANOG and is strictly prohibited. Please respond to this call for papers/presentations to ananth(a)juniper.net, with a title and brief abstract of the talk and a short bio of yourself. The conference will be comprised of 3 sessions (morning, post-lunch, afternoon). Session 1: Network operations In this session we invite papers, reports and presentations from network operators, equipment vendors and academic institutions conducting network research on operational issues. Possible topics for this track are: - Prevention and mitigation of Denial of Service attacks including intrusion, spam etc. - Routing policies and architecture for scalable IP and broadband networks - Technology updates and trends in security and routing - Traffic management - Network migration issues (IPv4 to v6, Layer 2 to IP etc.) Session 2: Applications and Services This track will discuss various services that can be enabled on packet networks. Papers and presentations are invited from developers, operators, equipment vendors and research organizations on the following and related topics - Voice and Multimedia over IP - Applications using IP Multicast - Managed network services including Security and VPNs - Mail servers Session 3: Regional updates This track is by invitation only, and will include updates from ISPs, regional Internet exchanges, APNIC, routing table updates and such information that would be useful to the SANOG community. Thanks and regards, Ananth Nagarajan ananth(a)juniper.net

1 0

RE: The Cidr Report
by Geoff Huston 14 Nov '04

14 Nov '04

Interestingly enough what Covad appears to be saying is: If we had a way to announce two things 1 - here are the advertisements for covering aggregates for Covad AND 2 - do not believe any more specifics for these address blocks, as they are NOT part of Covad's routing policy for these prefixes then we would not be seeing this unfortunate case of unauthorized route leakage being resolved in a way that seems to have unfortunate bgp implications in terms of more specifics appearing. So its an interesting question. How could Covad achieve a routing policy announcement of the form as stated in 2 above? regards, Geoff

2 1

Re: The Cidr Report
by Geoff Huston 14 Nov '04

14 Nov '04

> > e.g. is AS18566 the origin AS for 751 prefixes that could be > > collapsed to 6? > > > > Sort of - from here it looks like they aren't actually announcing >the supernets. The covering /162, /15 and /14 aggregates are being globally announced, and the more specifics are being announced from the same origin AS, apparently along the same AS paths as the specifics, so its not clear that there is any form of traffic engineering or load balancing going on. regards, Geoff > > o and who can hack the perl to generate filters for this > > so we can listen only to the aggregates > > > > I don't see their stuff listed in the radb, so it looks like you >have to go to the router itself to read the routes to determine what they >are announcing, then ask the appropriate registry which block they >are announcing from, aggregate the routes in that block, rinse and repeat, >aggregate the aggregated blocks, then filter. > ..but that only works if they announce the supernets. Without that >I'm not sure what you can do that wouldn't end up biting you back. It's also >a lot of work for not too much reward as long as these messes are the >exception and not the rule. > > Plus the public hand slap is kind of amusing. But that's probably >just me. > > Austin

1 0

The Cidr Report
by cidr-report＠potaroo.net 14 Nov '04

14 Nov '04

This report has been generated at Fri Nov 12 21:44:35 2004 AEST. The report analyses the BGP Routing Table of an AS4637 (Reach) router and generates a report on aggregation potential within the table. Check http://www.cidr-report.org/as4637 for a current version of this report. Recent Table History Date Prefixes CIDR Agg 05-11-04 156315 103806 06-11-04 156228 103992 07-11-04 156318 103854 08-11-04 156312 102177 09-11-04 148311 102028 10-11-04 148405 102407 11-11-04 148646 102468 12-11-04 148794 102646 AS Summary 18360 Number of ASes in routing system 7492 Number of ASes announcing only one prefix 1406 Largest number of prefixes announced by an AS AS7018 : ATTW AT&T WorldNet Services 86853120 Largest address span announced by an AS (/32s) AS721 : DNIC DoD Network Information Center Aggregation Summary The algorithm used in this report proposes aggregation only when there is a precise match using the AS path, so as to preserve traffic transit policies. Aggregation is also proposed across non-advertised address space ('holes'). --- 12Nov04 --- ASnum NetsNow NetsAggr NetGain % Gain Description Table 148874 102650 46224 31.0% All ASes AS18566 751 6 745 99.2% CVAD Covad Communications AS4134 825 178 647 78.4% CHINANET-BACKBONE No.31,Jin-rong Street AS4323 794 223 571 71.9% TWTC Time Warner Telecom AS7018 1406 1002 404 28.7% ATTW AT&T WorldNet Services AS6197 814 430 384 47.2% BNS-14 BellSouth Network Solutions, Inc AS22773 401 17 384 95.8% CXA Cox Communications Inc. AS27364 413 45 368 89.1% ARMC Armstrong Cable Services AS701 1230 884 346 28.1% UU UUNET Technologies, Inc. AS22909 412 81 331 80.3% CMCS Comcast Cable Communications, Inc. AS6478 426 98 328 77.0% ATTW AT&T WorldNet Services AS1239 930 620 310 33.3% SPRN Sprint AS17676 372 63 309 83.1% JPNIC-JP-ASN-BLOCK Japan Network Information Center AS9929 335 33 302 90.1% CNCNET-CN China Netcom Corp. AS7843 497 208 289 58.1% ADELPH-13 Adelphia Corp. AS4355 384 99 285 74.2% ERSD EARTHLINK, INC AS4766 531 268 263 49.5% KIXS-AS-KR Korea Telecom AS14654 261 6 255 97.7% WAYPOR-3 Wayport AS21502 253 3 250 98.8% ASN-NUMERICABLE NUMERICABLE is a cabled network in France, AS9443 358 109 249 69.6% INTERNETPRIMUS-AS-AP Primus Telecommunications AS15557 361 121 240 66.5% LDCOMNET LDCOM NETWORKS AS6140 370 133 237 64.1% IMPSA ImpSat AS721 1023 792 231 22.6% DNIC DoD Network Information Center AS2386 849 620 229 27.0% ADCS-1 AT&T Data Communications Services AS25844 244 16 228 93.4% SASMFL-2 Skadden, Arps, Slate, Meagher & Flom LLP AS1221 801 578 223 27.8% ASN-TELSTRA Telstra Pty Ltd AS6198 435 221 214 49.2% BNS-14 BellSouth Network Solutions, Inc AS4814 208 6 202 97.1% CHINA169-BBN CNCGROUP IP network¡ªChina169 Beijing Broadband Network AS5668 414 223 191 46.1% CIH-12 CenturyTel Internet Holdings, Inc. AS15270 226 36 190 84.1% PDP-14 PaeTec.net -a division of PaeTecCommunications, Inc. AS6517 300 116 184 61.3% YIPS Yipes Communications, Inc. Total 16624 7235 9389 56.5% Top 30 total Possible Bogus Routes 24.138.80.0/20 AS11260 AHSICHCL Andara High Speed Internet c/o Halifax Cable Ltd. 24.246.0.0/17 AS7018 ATTW AT&T WorldNet Services 24.246.38.0/24 AS25994 NPGCAB NPG Cable, INC 24.246.128.0/18 AS7018 ATTW AT&T WorldNet Services 64.46.27.0/24 AS8674 NETNOD-IX Netnod Internet Exchange Sverige AB 64.57.160.0/19 AS3561 CWU Cable & Wireless USA 64.92.128.0/19 AS3561 CWU Cable & Wireless USA 64.127.0.0/18 AS7018 ATTW AT&T WorldNet Services 64.209.192.0/18 AS3561 CWU Cable & Wireless USA 69.26.32.0/19 AS17307 VIRTEL-15 Virtela Communications 132.0.0.0/10 AS721 DNIC DoD Network Information Center 137.0.0.0/13 AS721 DNIC DoD Network Information Center 138.136.0.0/13 AS721 DNIC DoD Network Information Center 158.0.0.0/13 AS721 DNIC DoD Network Information Center 192.30.93.0/24 AS17757 HPAUS-AP HP Australia 192.30.94.0/24 AS17757 HPAUS-AP HP Australia 192.30.127.0/24 AS719 LANLINK Elisa Oyj 192.40.105.0/24 AS5515 SONERA-GLOBAL-IP Sonera Solution Autonomous System 192.44.0.0/19 AS702 AS702 MCI EMEA - Commercial IP service provider in Europe 192.70.164.0/24 AS25689 NRCC-2 National Research Council of Canada 192.81.182.0/24 AS719 LANLINK Elisa Oyj 192.81.183.0/24 AS719 LANLINK Elisa Oyj 192.81.184.0/24 AS719 LANLINK Elisa Oyj 192.119.135.0/24 AS270 NASA National Aeronautics and Space Administration 192.124.252.0/22 AS680 DFN-IP service G-WiN 192.133.6.0/24 AS4004 GLOBALONE-EQUANT-UK Equant UK & Greece Autonomous System 192.135.50.0/24 AS7018 ATTW AT&T WorldNet Services 192.153.144.0/21 AS721 DNIC DoD Network Information Center 192.172.0.0/19 AS721 DNIC DoD Network Information Center 192.188.208.0/20 AS721 DNIC DoD Network Information Center 192.243.32.0/23 AS2044 PALINA Palin Aquisitions Inc. 196.2.95.0/24 AS8668 TELONE-AS TelOne Zimbabwe P/L 198.23.26.0/24 AS4390 BELLAT-7 Bell Atlantic, Inc. 198.97.72.0/21 AS721 DNIC DoD Network Information Center 198.97.80.0/20 AS721 DNIC DoD Network Information Center 198.97.88.0/24 AS89 NUSC-1 Naval Underwater Systems Center 198.97.240.0/20 AS721 DNIC DoD Network Information Center 198.97.247.0/24 AS3475 DEPART-52 Department of the Navy 198.101.4.0/22 AS721 DNIC DoD Network Information Center 198.136.32.0/20 AS19329 MCBCC Martin County Board of County Commissioners 198.144.32.0/19 AS3998 CITY CityNet, Inc. 198.161.87.0/24 AS6539 GTGR GT Group Telecom Services Corp. 198.161.165.0/24 AS852 AGTA Telus Advanced Communications 198.163.155.0/24 AS684 MRN Manitoba Regional Network 198.167.0.0/16 AS7456 INS-51 Interhop Network SERVICES Inc. 198.167.163.0/24 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 198.168.0.0/16 AS701 UU UUNET Technologies, Inc. 198.169.0.0/16 AS803 SASK SaskTel 198.232.133.0/24 AS23075 SKOTOS Skotos Tech, Inc 199.10.0.0/16 AS721 DNIC DoD Network Information Center 199.60.0.0/20 AS271 UBC-3 University of British Columbia 199.96.44.0/23 AS19092 360NE-1 360Networks (USA) Inc. 199.96.46.0/24 AS19092 360NE-1 360Networks (USA) Inc. 199.114.0.0/18 AS568 DISOUN DISO-UNRRA 199.114.0.0/21 AS721 DNIC DoD Network Information Center 199.114.128.0/18 AS721 DNIC DoD Network Information Center 199.114.130.0/24 AS721 DNIC DoD Network Information Center 199.114.132.0/24 AS721 DNIC DoD Network Information Center 199.114.134.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.136.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.138.0/24 AS721 DNIC DoD Network Information Center 199.114.140.0/24 AS3544 DISAUN DISA/UNRRA 199.114.142.0/24 AS721 DNIC DoD Network Information Center 199.114.148.0/24 AS721 DNIC DoD Network Information Center 199.114.150.0/24 AS721 DNIC DoD Network Information Center 199.114.152.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.154.0/24 AS1733 ADP-41 AF DDN PMO 199.114.156.0/24 AS1913 DLA-8 Defense Logistics Agency 199.114.160.0/24 AS1733 ADP-41 AF DDN PMO 199.120.32.0/19 AS16582 NXLI NEXTLEVEL INTERNET, INC. 199.121.0.0/16 AS721 DNIC DoD Network Information Center 199.123.0.0/18 AS721 DNIC DoD Network Information Center 199.123.16.0/20 AS721 DNIC DoD Network Information Center 199.123.80.0/21 AS721 DNIC DoD Network Information Center 199.189.32.0/19 AS7332 IQUEST IQuest Internet 199.197.8.0/22 AS21814 PARSON-18 Parsons Corp. 199.202.0.0/16 AS701 UU UUNET Technologies, Inc. 202.47.1.0/24 AS7491 PI-PH-AS-AP PI-PHILIPINES 202.70.28.0/24 AS4515 ERX-STAR Star Internet Services Ltd. 202.72.64.0/21 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.64.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.65.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.66.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.67.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.68.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.69.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.70.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.71.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.72.0/21 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.72.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.73.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.74.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.75.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.76.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.77.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.78.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.72.79.0/24 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 202.73.128.0/22 AS4058 LINKAGENET-AP CPCNet Hong Kong Ltd. 202.93.0.0/20 AS4134 CHINANET-BACKBONE No.31,Jin-rong Street 202.160.128.0/23 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.131.0/24 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.132.0/22 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.136.0/22 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.142.0/24 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.144.0/24 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.145.0/24 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.146.0/24 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.147.0/24 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.148.0/22 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.156.0/23 AS9282 LEXICON-AS Lexicon Systems Pty Ltd 202.160.158.0/23 AS17642 RDSL-NATIONAL-AS Request Broadband BGP AS number 202.164.128.0/19 AS9654 CYBERSPACE-AP P/H Padilla Bldg., Emerald Avenue 202.164.224.0/19 AS7599 IPXC-AS-AP IP Exchange 203.32.4.0/23 AS7617 203.62.0.0/17 AS7572 AARNET-ACT-RNO Australian Academic and Reasearch Network (AARNet) 203.84.192.0/19 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.192.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.84.208.0/20 AS17433 PHILWEB-AP PhilWeb.Com, Inc. 203.99.0.0/19 AS17746 ORCONINTERNET-NZ-AP Orcon Internet 203.170.14.0/23 AS6648 ASN-SKYINTERNET Autonomous System Number peering of Sky Internet - BAYANTEL Inc. - Philppines 203.210.69.0/24 AS17536 PRODIGY-AS-AP Prodidgy Telecommunications 204.154.125.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.126.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.154.127.0/24 AS3952 TELLAB-1 TELLABS Operations, Inc. 204.194.110.0/23 AS30653 EXOBI Exobit Networks Inc. 205.150.0.0/15 AS701 UU UUNET Technologies, Inc. 206.167.57.0/24 AS376 RISQR-3 Reseau Interordinateurs Scientique Quebecois (RISQ) 206.191.64.0/18 AS15290 ACCA-2 Allstream Corp. Corporation Allstream 206.251.69.0/24 AS27429 TIL-33 Telesat International Ltd. 206.253.190.0/23 AS8123 POLYBA Polybase 207.47.254.0/24 AS701 UU UUNET Technologies, Inc. 207.231.96.0/19 AS11194 NUNETI NuNet Inc 208.81.187.0/24 AS19194 SNL-8 Sentris Network LLC 209.172.0.0/18 AS7770 TRTI Triton Technologies, Inc. 209.205.69.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.70.0/24 AS21578 Universidad autonoma de Bucaramanga 209.205.81.0/24 AS15066 SkyNet de Colombia S.A. 209.205.82.0/24 AS15066 SkyNet de Colombia S.A. 209.205.84.0/24 AS15066 SkyNet de Colombia S.A. 209.213.32.0/19 AS10629 INS-52 Inter-Pacific Network Services 209.213.48.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.49.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.213.50.0/24 AS10629 INS-52 Inter-Pacific Network Services 209.251.0.0/19 AS11036 SISCOM-1 SISCOM, Inc 216.37.110.0/23 AS4264 CERFN California Education and Research Federation Network 216.96.128.0/18 AS7018 ATTW AT&T WorldNet Services 216.145.156.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.158.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.176.0/21 AS20304 JIS-32 JVLNET Internet Services 216.145.177.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.178.0/24 AS20304 JIS-32 JVLNET Internet Services 216.145.184.0/21 AS10758 INWAVE INWave Internet, Inc 216.145.200.0/21 AS20304 JIS-32 JVLNET Internet Services 216.171.96.0/20 AS3356 LEVEL3 Level 3 Communications 216.186.151.0/24 AS3356 LEVEL3 Level 3 Communications 216.186.152.0/21 AS3356 LEVEL3 Level 3 Communications 216.186.160.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.164.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.192.0/22 AS3356 LEVEL3 Level 3 Communications 216.186.198.0/23 AS3356 LEVEL3 Level 3 Communications 216.186.248.0/23 AS3356 LEVEL3 Level 3 Communications Please see http://www.cidr-report.org for the full report ------------------------------------ Copies of this report are mailed to: nanog(a)merit.edu eof-list(a)ripe.net apops(a)apops.net routing-wg(a)ripe.net afnog(a)afnog.org swinog(a)swinog.ch

3 2

RE: The Cidr Report
by Randy Bush 13 Nov '04

13 Nov '04

geoff, your proggy already knows what filter list(s) would keep us from carrying the polluters' rubbish. any chance you could generate the filter code for juniper, procket, and cisco so automated router builds could fetch it with batch wget or ncftp or whatever? another cutie would be if whovever is maintaining peval this week could add an option to not deliver covered prefixes from the same origin? no slur intended on any particular polluter. but i think what we have here is the strafing of the commons. enough is enough. randy

1 0

Re: The Cidr Report
by Randy Bush 13 Nov '04

13 Nov '04

>>> ASnum NetsNow NetsAggr NetGain % Gain Description >>> >>> AS18566 751 6 745 99.2% CVAD Covad Communications >>> AS4134 825 178 647 78.4% CHINANET-BACKBONE >>> No.31,Jin-rong Street >>> AS4323 794 223 571 71.9% TWTC Time Warner Telecom >>> AS6197 814 430 384 47.2% BNS-14 BellSouth Network >>> Solutions, Inc >>> AS22773 401 17 384 95.8% CXA Cox Communications Inc. >>> AS27364 413 45 368 89.1% ARMC Armstrong Cable Services >>> AS701 1230 884 346 28.1% UU UUNET Technologies, Inc. >>> AS22909 412 81 331 80.3% CMCS Comcast Cable >>> Communications, Inc. >> e.g. is AS18566 the origin AS for 751 prefixes that could be >> collapsed to 6? > > not to justify the expense, but perhaps covad is renumbering from one > block to another? Looking at their advertisments I see lots of /23 or /24 > blocks inside their larger covering routes... So either they deaggregated > to renumber more gracefully, or they forgot their prefix-list outbound to > williams and exodus ? > > perhaps covad can explain? or silently cover up the 'mistake' (which is > acceptable as well...) it's not just covad. they're just such an egregious case among many socially and technically irresponsible polluters. randy

1 0

Weekly Routing Table Report
by Routing Table Analysis 12 Nov '04

12 Nov '04

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 13 Nov, 2004 Analysis Summary ---------------- BGP routing table entries examined: 150665 Prefixes after maximum aggregation: 88779 Unique aggregates announced to Internet: 71952 Total ASes present in the Internet Routing Table: 18421 Origin-only ASes present in the Internet Routing Table: 16001 Origin ASes announcing only one prefix: 7507 Transit ASes present in the Internet Routing Table: 2420 Transit-only ASes present in the Internet Routing Table: 73 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 25 Prefixes from unregistered ASNs in the Routing Table: 7 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 15 Number of addresses announced to Internet: 1351706232 Equivalent to 80 /8s, 145 /16s and 102 /24s Percentage of available address space announced: 36.5 Percentage of allocated address space announced: 58.9 Percentage of available address space allocated: 61.9 Total number of prefixes smaller than registry allocations: 69418 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 29210 Total APNIC prefixes after maximum aggregation: 14381 Prefixes being announced from the APNIC address blocks: 27317 Unique aggregates announced from the APNIC address blocks: 14188 APNIC Region origin ASes present in the Internet Routing Table: 2161 APNIC Region origin ASes announcing only one prefix: 650 APNIC Region transit ASes present in the Internet Routing Table: 330 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 16 Number of APNIC addresses announced to Internet: 166390400 Equivalent to 9 /8s, 234 /16s and 234 /24s Percentage of available APNIC address space announced: 75.9 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 23552-24575 APNIC Address Blocks 58/7, 60/7, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 85580 Total ARIN prefixes after maximum aggregation: 51859 Prefixes being announced from the ARIN address blocks: 65489 Unique aggregates announced from the ARIN address blocks: 23503 ARIN Region origin ASes present in the Internet Routing Table: 9704 ARIN Region origin ASes announcing only one prefix: 3509 ARIN Region transit ASes present in the Internet Routing Table: 941 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 18 Number of ARIN addresses announced to Internet: 235258640 Equivalent to 14 /8s, 5 /16s and 195 /24s Percentage of available ARIN address space announced: 70.1 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647,29695-30719, 31744-33791 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/7, 72/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 28029 Total RIPE prefixes after maximum aggregation: 19483 Prefixes being announced from the RIPE address blocks: 24785 Unique aggregates announced from the RIPE address blocks: 16295 RIPE Region origin ASes present in the Internet Routing Table: 5991 RIPE Region origin ASes announcing only one prefix: 3211 RIPE Region transit ASes present in the Internet Routing Table: 1025 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 25 Number of RIPE addresses announced to Internet: 178798976 Equivalent to 10 /8s, 168 /16s and 65 /24s Percentage of available RIPE address space announced: 62.7 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-34815 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 6576 Total LACNIC prefixes after maximum aggregation: 2354 Prefixes being announced from the LACNIC address blocks: 6413 Unique aggregates announced from the LACNIC address blocks: 3952 LACNIC Region origin ASes present in the Internet Routing Table: 401 LACNIC Region origin ASes announcing only one prefix: 116 LACNIC Region transit ASes present in the Internet Routing Table: 79 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 18 Number of LACNIC addresses announced to Internet: 16480512 Equivalent to 0 /8s, 251 /16s and 121 /24s Percentage of available LACNIC address space announced: 49.1 LACNIC AS Blocks 26592-26623, 27648-28671 LACNIC Address Blocks 200/7 Emerging AfriNIC Region Analysis Summary ---------------------------------------- Prefixes being announced by AfriNIC Region ASes: 1265 Total AfriNIC prefixes after maximum aggregation: 702 Prefixes being announced from the AfriNIC address blocks: 874 Unique aggregates announced from the AfriNIC address blocks: 669 AfriNIC Region origin ASes present in the Internet Routing Table: 93 AfriNIC Region origin ASes announcing only one prefix: 21 AfriNIC Region transit ASes present in the Internet Routing Table: 12 Average AfriNIC Region AS path length visible: 4.5 Max AfriNIC Region AS path length visible: 16 Number of AfriNIC addresses announced to Internet: 2068992 Equivalent to 0 /8s, 31 /16s and 146 /24s Percentage of available AfriNIC address space announced: 12.3 AfriNIC AS Blocks <none> AfriNIC Address Blocks 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 856 4407 163 Data Communications Bureau 1221 799 1183 573 Telstra Pty Ltd 9583 554 43 42 Satyam Infoway Ltd., 4766 546 3408 268 Korea Internet Exchange for " 4755 376 133 61 Videsh Sanchar Nigam Ltd. Aut 17676 374 5596 54 XTAGE CORPORATION 2907 354 1857 328 SINET Japan 9443 354 69 80 Primus Telecommunications 9929 344 161 33 China Netcom Corp. 703 316 346 244 UUNET 17557 315 23 156 Pakistan Telecom 2764 288 273 235 connect.com.au pty ltd 7474 267 268 198 Optus Communications Pty Ltd 4802 234 28 142 Wantree Development 9942 233 72 125 COMindico Australia 9800 230 380 70 CHINA UNICOM 7563 228 48 165 Korea Internet Infrastructure 9498 220 81 52 BHARTI BT INTERNET LTD. 10036 216 20 197 C&M Communication Co. Ltd. 4814 208 232 6 China Telecom (Group) ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1421 6633 986 AT&T WorldNet Services 701 1247 8417 892 UUNET Technologies, Inc. 721 1016 21013 299 DLA Systems Automation Center 1239 924 2880 612 Sprint 2386 849 530 610 AT&T Data Communications Serv 6197 819 514 311 BellSouth Network Solutions, 4323 796 670 217 Time Warner Telecom 18566 751 208 6 Covad Communications 209 660 3429 506 Qwest 3356 635 10944 458 Level 3 Communications, LLC 20115 601 461 323 Charter Communications 3561 558 2414 422 Cable & Wireless USA 852 522 1142 400 Telus Advanced Communications 7843 497 711 98 Adelphia Corp. 7132 445 8286 377 SBC Internet Services 6198 437 349 210 BellSouth Network Solutions, 6478 426 738 98 AT&T Worldnet Services 5668 414 87 18 Century Telephone 27364 413 36 19 Armstrong Cable Services 22909 412 863 61 Comcast Cable Corporation RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 631 2026 523 UUNET - Commercial IP service 3320 299 2996 235 Deutsche Telekom AG 8220 280 463 266 COLT Internet - International 3301 276 1099 267 TeliaNet Sweden 3300 256 167 81 AUCS Communications Services 21502 253 40 3 NUMERICABLE is a cabled netwo 680 251 2025 239 DFN-IP service G-WiN 3246 219 477 215 Song Networks 13083 217 51 8 Mannesmann Datenverarbeitung 1257 203 726 174 SWIPnet Swedish IP Network 8708 203 115 183 Romania Data Systems S.A. 5515 192 842 140 Sonera Solution Autonomous Sy 786 176 1794 176 The JANET IP Service 6746 160 30 130 Dynamic Network Technologies, 3215 159 940 77 France Telecom Transpac 8866 159 20 7 Bulgarian Telecommunication C 719 156 322 105 LANLINK autonomous system 3269 150 1259 68 TELECOM ITALIA 25186 148 154 104 France Telecom Transpac's Tra 5400 145 206 117 BT Ignite European Backbone LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6140 347 139 69 ImpSat 8151 309 471 134 UniNet S.A. de C.V. 11172 211 100 55 Servicios Alestra S.A de C.V 16814 211 13 7 NSS, S.A. 6147 190 94 20 Telefonica Del Peru 11664 157 12 32 Keytech SA 6505 140 90 94 Global One Communicaoes Ltda 7303 140 64 24 Telecom Argentina Stet-France 6503 123 148 82 AVANTEL, S.A. 11992 101 9 31 Integrated Systems 14117 98 6 4 Telefonica del Sur S.A. 11556 96 48 2 Cable-Wireless Panama 11311 86 8 23 Sinectis S.A. 6535 85 7 18 Chilesat Servicios Empresari 10481 82 32 7 Prima S.A. 14420 81 5 33 ANDINATEL S.A. 4270 80 18 9 Red de Interconexion Universi 15311 77 23 37 Telefonica Empresas 5639 75 8 8 Telecommunications Services o 11340 71 21 47 Red Universitaria Nacional AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 272 649 230 The Internet Solution 2905 116 260 74 The Internetworking Company o 5536 109 16 4 Internet Egypt Network 2018 101 297 97 Tertiary Education Network 20928 52 16 1 Noor Advanced Technologies AS 24835 40 34 7 RAYA Telecom - Egypt 9129 35 3 4 UUNET Kenya 6713 31 42 10 Itissalat Al-MAGHRIB 5713 26 125 24 Telkom SA Ltd 8524 24 1 4 AUCEGYPT Autonomous System 16637 22 10 19 Johnnic e-Ventures 8452 18 20 5 TEDATA 10798 18 1 12 Standard Bank of South Africa 12258 18 3 12 Vodacom Internet Company 12455 17 4 2 Jambonet Autonomous system 21280 16 2 3 Swift Global Kenya Ltd.Is an 8346 15 7 14 SONATEL-AS Autonomous System 15706 15 4 2 Sudatel Internet Exchange Aut 15808 13 1 2 Communication Solutions Ltd i 17148 13 1 7 First National Bank Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 18566 751 745 Covad Communications 721 1016 717 DLA Systems Automation Center 4134 856 693 Data Communications Bureau 4323 796 579 Time Warner Telecom 9583 554 512 Satyam Infoway Ltd., 6197 819 508 BellSouth Network Solutions, 7843 497 399 Adelphia Corp. 5668 414 396 Century Telephone 27364 413 394 Armstrong Cable Services 22773 401 384 Cox Communications, Inc. Atla 6467 405 375 E.Spire Communications, Inc. 701 1247 355 UUNET Technologies, Inc. 22909 412 351 Comcast Cable Corporation 6478 426 328 AT&T Worldnet Services 17676 374 320 XTAGE CORPORATION 4755 376 315 Videsh Sanchar Nigam Ltd. Aut 1239 924 312 Sprint 9929 344 311 China Netcom Corp. 4355 392 293 EarthLink, Inc. 20115 601 278 Charter Communications List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 65006 PRIVATE 84.18.32.0/19 33831 Royal Hashemite Cour 1877 UNALLOCATED 192.108.199.0/24 1876 Southern Methodist U 5555 UNALLOCATED 192.156.8.0/24 721 DLA Systems Automati 65529 PRIVATE 216.21.199.0/24 14697 VDot.Net 33507 UNALLOCATED 216.94.118.0/24 701 UUNET Technologies, 65529 PRIVATE 216.152.237.0/24 14697 VDot.Net 65000 PRIVATE 217.68.56.0/22 29263 HAAGnet, municipalit Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.83.16.0/20 5515 Sonera Solution Autonomous Sy 192.83.32.0/19 5515 Sonera Solution Autonomous Sy 192.83.96.0/22 5515 Sonera Solution Autonomous Sy 192.83.100.0/24 5515 Sonera Solution Autonomous Sy 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.136.79.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.172.11.0/24 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:3 /10:7 /11:15 /12:61 /13:138 /14:314 /15:555 /16:8115 /17:2274 /18:3941 /19:9816 /20:10413 /21:7998 /22:11065 /23:12698 /24:82332 /25:252 /26:241 /27:128 /28:71 /29:54 /30:118 /31:0 /32:37 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 736 751 Covad Communications 6197 657 819 BellSouth Network Solutions, 2386 614 849 AT&T Data Communications Serv 7018 576 1421 AT&T WorldNet Services 27364 398 413 Armstrong Cable Services 9583 389 554 Satyam Infoway Ltd., 702 385 631 UUNET - Commercial IP service 1239 367 924 Sprint 4766 366 546 Korea Internet Exchange for " 5668 358 414 Century Telephone 701 352 1247 UUNET Technologies, Inc. 6198 320 437 BellSouth Network Solutions, 6467 305 405 E.Spire Communications, Inc. 6517 282 306 Yipes Communications, Inc. 20115 282 601 Charter Communications 9929 275 344 China Netcom Corp. 13609 267 310 Choice One Communications Inc 11456 256 301 Carolina Online, Inc. 4323 255 796 Time Warner Telecom 21502 250 253 NUMERICABLE is a cabled netwo Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:11 12:1436 13:1 15:5 16:2 17:3 20:5 24:745 32:69 33:2 38:83 40:55 44:3 47:2 52:3 55:1 56:3 57:21 60:3 61:624 62:501 63:1849 64:2458 65:2065 66:2472 67:452 68:536 69:769 70:40 72:2 80:527 81:537 82:316 83:201 84:47 128:129 129:165 130:84 131:182 132:27 134:185 135:28 136:187 137:81 138:184 139:36 140:210 141:108 142:126 143:114 144:158 145:42 146:296 147:96 148:329 149:112 150:93 151:62 152:133 153:68 154:2 155:131 156:58 157:69 158:133 159:164 160:61 161:73 162:380 163:80 164:216 165:162 166:116 167:221 168:356 169:123 170:312 171:9 192:5659 193:2930 194:2165 195:1534 196:601 198:3915 199:3302 200:3834 201:23 202:4925 203:5780 204:3556 205:2063 206:2339 207:2593 208:2115 209:3088 210:1518 211:652 212:1148 213:1222 214:224 215:31 216:3690 217:1045 218:176 219:82 220:281 221:65 222:22 End of report

1 0

Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service
by Cisco Systems Product Security Incident Response Team 10 Nov '04

10 Nov '04

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco IOS DHCP Blocked Interface Denial-of-Service =============================================================================== Revision 1.0 For Public Release 2004 November 10 1700 UTC (GMT) - ------------------------------------------------------------------------------- Contents Summary Affected Products Details Impact Software Versions and Fixes Obtaining Fixed Software Workarounds Exploitation and Public Announcements Status of This Notice: FINAL Distribution Revision History Cisco Security Procedures - ------------------------------------------------------------------------------- Summary ======= Cisco IOS devices running branches of Cisco IOS version 12.2S that have Dynamic Host Configuration Protocol (DHCP) server or relay agent enabled, even if not configured, are vulnerable to a denial of service where the input queue becomes blocked when receiving specifically crafted DHCP packets. Cisco is providing free fixed software to address this issue. There are also workarounds to mitigate this vulnerability. This issue was introduced by the fix included in CSCdx46180 and is being tracked by Cisco Bug ID CSCee50294 ( registered customers only) . This advisory is available at http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml. Affected Products ================= This vulnerability was introduced by the fix for CSCdx46180, and was integrated in Cisco IOS 12.2(14)SZ and 12.2(18)S. The following Cisco products running Cisco IOS version 12.2(14)SZ, or a variant of Cisco IOS 12.2(18)S (as listed in the following section) and higher are affected by this vulnerability. * Cisco 7200, 7300, 7500 platforms * Cisco 2650, 2651, 2650XM, 2651XM Multiservice platform * Cisco ONS15530, ONS15540 * Cisco Catalyst 4000, Sup2plus, Sup3, Sup4 and Sup5 modules * Cisco Catalyst 4500, Sup2Plus TS * Cisco Catalyst 4948, 2970, 3560, and 3750 * Cisco Catalyst 6000, Sup2/MSFC2 and Sup720/MSFC3 * Cisco 7600 Sup2/MSFC2 and Sup720/MSFC3 Vulnerable Products - ------------------- This issue affects only Cisco devices running affected Cisco IOS versions 12.2 (18)EW, 12.2(18)EWA, 12.2(14)SZ, 12.2(18)S, 12.2(18)SE, 12.2(18)SV, 12.2(18)SW and higher that do not have the configuration command no service dhcp. It is not necessary for DHCP server or relay agent to be configured in order for this vulnerability to be present and exploited; "service dhcp" is enabled by default in IOS and is the only setting necessary (in addition to interface addresses) for exploitation of this vulnerability. This includes routers as well as switches and line cards which run Cisco IOS software. Cisco devices which do not run Cisco IOS software are not affected. Cisco devices running affected Cisco IOS software with the command no service dhcp enabled are not affected. To determine the software running on a Cisco product, log in to the device and issue the show version command to display the system banner. Cisco IOS software will identify itself as "Internetwork Operating System Software" or simply "IOS." On the next line of output, the image name will be displayed between parentheses, followed by "Version" and the IOS release name. Other Cisco devices will not have the show version command or will give different output. The following example identifies a Cisco product running IOS release 12.0(3) with an installed image name of C2500-IS-L: Cisco Internetwork Operating System Software IOS (TM) 2500 Software (C2500-IS-L), Version 12.0(3), RELEASE SOFTWARE The release train label is "12.0." The next example shows a product running Cisco IOS release 12.0(2a)T1 with an image name of C2600-JS-MZ: Cisco Internetwork Operating System Software IOS (tm) C2600 Software (C2600-JS-MZ), Version 12.0(2a)T1, RELEASE SOFTWARE (fc1) Additional information about Cisco IOS release naming can be found at http://www.cisco.com/warp/public/620/1.html. Products Confirmed Not Vulnerable - --------------------------------- Cisco devices running affected Cisco IOS software with the command no service dhcp enabled are not affected. Cisco products that run any versions of IOS not listed in the Software Versions and Fixes table below, are not affected. Cisco products that do not run Cisco IOS software and are not affected by this vulnerability include, but are not limited to: * 700 series dialup routers (750, 760, and 770 series) are not affected. * WAN switching products such as the IGX, BPX and MGX lines are not affected. * No host-based software is affected. * The Cisco PIX Firewall is not affected * The Cisco LocalDirector is not affected. * The Cisco Content Engine and ACNS is not affected. * The Catalyst 2901/2902, 2948G, 2980G, 4000, 5000, and 6000 switches running CatOS. * Cisco Network Registrar is not affected. * Cisco VPN 3000 series is not affected * Cisco IOS-XR platform is not affected. * Cisco MDS 9000 family is not affected. Details ======= DHCP services allow devices to request and receive basic host configuration information from the DHCP server via the network. Cisco routers can be configured to both provide dynamic host configuration information (termed DHCP server function), and forward DHCP and BootP packets across separate broadcast domains (termed DHCP relay agent function). Cisco routers are configured to process and accept DHCP packets by default, therefore the command "service dhcp" does not appear in the running configuration display, and only the command for the disabled feature, no service dhcp, will appear in the running configuration display when the feature is disabled. The vulnerability is present, regardless if the DHCP server or relay agent configurations are present on an affected product. The only required configuration for this vulnerability in affected versions is the lack of the no service dhcp command. Certain crafted DHCP packets may be undeliverable, but will remain in the queue instead of being dropped. If a number of packets are sent that equal the size of the input queue, no more traffic will be accepted on that interface. On a blocked Ethernet interface, Address Resolution Protocol (ARP) times out after a default time of four hours, and no inbound or outbound traffic can be processed, including both IP and non-IP traffic such as IPX. The device must be rebooted to clear the input queue on the interface, and will not reload without user intervention. The attack may be repeated on all interfaces, causing the router to be remotely inaccessible, excluding the console port where DHCP packets are not processed by default and which can be used for out-of-band management and configured for remote access. Workarounds are available, and are documented in the Workarounds section below. Other types of interfaces, including but not limited to ATM, Serial and POS interfaces, are affected, but ARP is not a factor. To identify a blocked input interface, use the show interfaces command and look for the Input Queue line. The size of the input queue may keep increasing. If the current size (in this case, 76) is larger than the maximum size (75), the input queue is blocked. Router#show interface ethernet 0/0 Ethernet0/0 is up, line protocol is up Hardware is AmdP2, address is 0050.500e.f1e0 (bia 0050.500e.f1e0) Internet address is 172.16.1.9/24 MTU 1500 bytes, BW 10000 Kbit, DLY 1000 usec, rely 255/255, load 1/255 Encapsulation ARPA, loopback not set, keepalive set (10 sec) ARP type: ARPA, ARP Timeout 04:00:00 Last input 00:00:41, output 00:00:07, output hang never Last clearing of "show interface" counters 00:07:18 Input queue: 76/75/1091/0 (size/max/drops/flushes); Total output drops: 0 !--- The 76/75 shows that this is blocked Impact ====== A device receiving these specifically crafted DHCP packets will force the inbound interface to stop processing traffic. The device may stop processing packets destined to the router, including routing protocol packets and ARP packets. No alarms will be triggered, nor will the router reload to correct itself. This vulnerability may be exercised repeatedly resulting in loss of availability until a workaround has been applied or the device has been upgraded to a fixed version of code. The effects of this vulnerability can be monitored by the same methods outlined in the white paper entitled Uses of Network Management for Monitoring the "IP Packet Blocks Input Queue" PSIRT Advisory which details methods to identify impacted devices via SNMP, RMON, and Network Management products. Software Versions and Fixes =========================== Each row of the Cisco IOS software table below describes a release train and the platforms or products for which it is intended. If a given release train is vulnerable, then the earliest possible releases that contain the fix (the "First Fixed Release") and the anticipated date of availability for each are listed in the "Rebuild" and "Maintenance" columns. A device running a release in the given train that is earlier than the release in a specific column (less than the First Fixed Release) is known to be vulnerable. The release should be upgraded at least to the indicated release or a later version (greater than or equal to the First Fixed Release label). When selecting a release, keep in mind the following definitions: * Maintenance: Most heavily tested, stable, and highly recommended release of a release train in any given row of the table. * Rebuild: Constructed from the previous maintenance or major release in the same train, it contains the fix for a specific defect. Although it receives less testing, it contains only the minimal changes necessary to repair the vulnerability. In all cases, customers should exercise caution to confirm that the devices to be upgraded contain sufficient memory and that current hardware and software configurations will continue to be supported properly by the new software release. If the information is not clear, contact the Cisco TAC for assistance as shown in the Obtaining Fixed Software section below. More information on Cisco IOS software release names and abbreviations is available at http://www.cisco.com/warp/public/620/1.html. The fixes will be available at the Software Center located at http://www.cisco.com/tacpage/sw-center/. For software installation and upgrade procedures, see http://www.cisco.com/warp/public/130/upgrade_index.shtml. For a current view of all posted and repaired images for Cisco IOS, please check the listing available to registered Cisco.com users at: http://www.cisco.com/tacpage/sw-center/sw-ios.shtml. +---------------------------------------------+ | Major Release | Availability of Repaired | | | Releases | |----------------+----------------------------| | Affected | | | | 12.2-Based | Rebuild | Maintenance | | Release | | | |----------------+--------------+-------------| | 12.2(18)EW | 12.2(18)EW2 | | |----------------+--------------+-------------| | 12.2(18)EWA | | 12.2(20)EWA | |----------------+--------------+-------------| | | 12.2(18)S6 | | | |--------------+-------------| | | 12.2(20)S4 | | |12.2(18)S |--------------+-------------| | | 12.2(22)S2 | | | |--------------+-------------| | | | 12.2(25)S | |----------------+--------------+-------------| | 12.2(18)SE | 12.2(20)SE3 | | |----------------+--------------+-------------| | 12.2(18)SV | | 12.2(24)SV | |----------------+--------------+-------------| | 12.2(18)SW | | 12.2(25)SW | |----------------+----------------------------| | 12.2(18)SXD | Not impacted | |----------------+----------------------------| | 12.2(14)SZ | Migrates to | | | | 12.2(20)S4 | | +---------------------------------------------+ Obtaining Fixed Software ======================== Customers with Service Contracts - -------------------------------- Customers with contracts should obtain upgraded software through their regular update channels. For most customers, this means that upgrades should be obtained through the Software Center on Cisco's worldwide website at http:// www.cisco.com. Customers using Third-party Support Organizations - ------------------------------------------------- Customers whose Cisco products are provided or maintained through prior or existing agreement with third-party support organizations such as Cisco Partners, authorized resellers, or service providers should contact that support organization for assistance with the upgrade, which should be free of charge. Customers without Service Contracts - ----------------------------------- Customers who purchase direct from Cisco but who do not hold a Cisco service contract and customers who purchase through third-party vendors but are unsuccessful at obtaining fixed software through their point of sale should get their upgrades by contacting the Cisco Technical Assistance Center (TAC). TAC contacts are as follows. * +1 800 553 2447 (toll free from within North America) * +1 408 526 7209 (toll call from anywhere in the world) * e-mail: tac(a)cisco.com Please have your product serial number available and give the URL of this notice as evidence of your entitlement to a free upgrade. Free upgrades for non-contract customers must be requested through the TAC. Please do not contact either "psirt(a)cisco.com" or "security-alert(a)cisco.com" for software upgrades. See http://www.cisco.com/warp/public/687/Directory/DirTAC.shtml for additional TAC contact information, including special localized telephone numbers and instructions and e-mail addresses for use in various languages. Customers may only install and expect support for the feature sets they have purchased. By installing, downloading, accessing or otherwise using such software upgrades, customers agree to be bound by the terms of Cisco's software license terms found at http://www.cisco.com/public/sw-license-agreement.html, or as otherwise set forth at Cisco.com Downloads at http://www.cisco.com/public/sw-center/sw-usingswc.shtml. Workarounds =========== There are four possible workarounds for this vulnerability: * Disabling the dhcp service * Control Plane Policing * Two versions of Access Control Lists Disabling the DHCP Service - -------------------------- This vulnerability can be mitigated by utilizing the command: no service dhcp However, this workaround will disable all DHCP processing on the device, including the DHCP helper functionality that may be necessary in some network configurations. Control Plane Policing Feature - ------------------------------ The Control Plane Policy feature may be used to mitigate this vulnerability, as in the following example: access-list 140 deny udp host 192.168.13.1 any eq bootps access-list 140 deny udp any host 192.168.13.1 eq bootps access-list 140 deny udp any host 255.255.255.255 eq bootps access-list 140 permit udp any any eq bootps class-map match-all bootps-class match access-group 140 policy-map control-plane-policy class bootps-class police 8000 1500 1500 conform-action drop exceed-action drop control-plane service-policy input control-plane-policy For this example 192.168.13.1 is a legitimate DHCP server. Additional information on the configuration and use of the CPP feature can be found at this link: http://www.cisco.com/en/US/partner/products/sw/iosswrel/ps1838/ products_feature_guide09186a00801afad4.html. This workaround is only applicable to Cisco IOS 12.2S, as this feature is only available in Cisco IOS versions 12.2S and 12.3T. Cisco IOS 12.3T is not impacted by this advisory. Access Lists - Two Methods - -------------------------- Access lists can be applied to block DHCP/BootP traffic destined to any router interface addresses, as in the following example: In this example, the IP address 192.168.13.1 represents a legitimate DHCP server, the addresses 10.89.236.147 and 192.168.13.2 represent router interface addresses, and 192.168.61.1 represents a loopback interface on the router. In this example, any bootp/dhcp packets destined to the router interface addresses are blocked. access-list 100 remark permit bootps from the DHCP server access-list 100 permit udp host 192.168.13.1 any eq bootps access-list 100 remark deny bootps from any to router f1/0 access-list 100 deny udp any host 10.89.236.147 eq bootps access-list 100 remark deny bootps from any to router f0/0 access-list 100 deny udp any host 192.168.13.2 eq bootps access-list 100 remark deny bootps from any to router loopback1 access-list 100 deny udp any host 192.168.61.1 eq bootps access-list 100 remark permit all other traffic access-list 100 permit ip any any access-list 100 is applied to f0/0 and f1/0 physical interfaces. interface FastEthernet0/0 ip address 192.168.13.2 255.255.255.0 ip access-group 100 in interface FastEthernet1/0 ip address 10.89.236.147 255.255.255.240 ip access-group 100 in ip helper-address 192.168.13.1 An alternate configuration for the interface access-list workaround. This example would also need to be applied to all physical interfaces, but deny statements for all of the IP addresses configured on the router are not necessary in this approach. In this example, the address 192.168.13.1 represents a legitimate DHCP server. access-list 100 permit udp host 192.168.13.1 any eq bootps access-list 100 permit udp any host 192.168.13.1 eq bootps access-list 100 permit udp any host 255.255.255.255 eq bootps access-list 100 deny udp any any eq bootps interface FastEthernet0/0 ip address 192.168.13.2 255.255.255.0 ip access-group 100 in interface FastEthernet1/0 ip address 10.89.236.147 255.255.255.240 ip access-group 100 in ip helper-address 192.168.13.1 Note: These workarounds will not prevent spoofed IP packets with the source IP address set to that of the DHCP server For more information on anti-spoofing refer to http://www.cisco.com/en/US/tech/ tk648/tk361/technologies_tech_note09186a0080120f 48.shtml#sec_ip and http://www.ietf.org/rfc/rfc2827.txt. The Unicast Reverse Path Forwarding (Unicast RPF) feature helps to mitigate problems that are caused by spoofed IP source addresses. For further details, please refer to http://www.cisco.com/univercd/cc/td/doc/product/software/ios122 /122cgcr/fsecur_c/fothersf/scfrpf.htm. Exploitation and Public Announcements ===================================== The Cisco PSIRT is not aware of any public announcements or malicious use of the vulnerability described in this advisory. This vulnerability was reported to Cisco by a customer. Status of This Notice: FINAL ============================ THIS ADVISORY IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY. YOUR USE OF THE INFORMATION ON THE ADVISORY OR MATERIALS LINKED FROM THE ADVISORY IS AT YOUR OWN RISK. CISCO RESERVES THE RIGHT TO CHANGE OR UPDATE THIS NOTICE AT ANY TIME. Distribution This advisory will be posted on Cisco's worldwide website at http://www.cisco.com/warp/public/707/cisco-sa-20041110-dhcp.shtml. In addition to worldwide web posting, a text version of this notice is clear-signed with the Cisco PSIRT PGP key and is posted to the following e-mail and Usenet news recipients. * cust-security-announce(a)cisco.com * first-teams(a)first.org (includes CERT/CC) * bugtraq(a)securityfocus.com * vulnwatch(a)vulnwatch.org * cisco(a)spot.colorado.edu * cisco-nsp(a)puck.nether.net * full-disclosure(a)lists.netsys.com * comp.dcom.sys.cisco(a)newsgate.cisco.com Future updates of this advisory, if any, will be placed on Cisco's worldwide website, but may or may not be actively announced on mailing lists or newsgroups. Users concerned about this problem are encouraged to check the above URL for any updates. Revision History +---------------------------------------------+ | Revision | | Initial | | 1.0 | 2004-November-10 | public | | | | release. | +---------------------------------------------+ Cisco Security Procedures Complete information on reporting security vulnerabilities in Cisco products, obtaining assistance with security incidents, and registering to receive security information from Cisco, is available on Cisco's worldwide website at http://www.cisco.com/en/US/products/products_security_vulnerability_policy.…. This includes instructions for press inquiries regarding Cisco security notices. All Cisco security advisories are available at http://www.cisco.com/go/psirt. - ------------------------------------------------------------------------------- All contents are Copyright © 1992-2004 Cisco Systems, Inc. All rights reserved. Important Notices and Privacy Statement. -----BEGIN PGP SIGNATURE----- Version: PGP 7.0 iQA/AwUBQZJN63sxqM8ytrWQEQIT9gCg1F3Il3xJrvye98FMPwMAP8/WlfkAoOx3 +61bikQKb5rc/PFvzelpZfuP =XQ2O -----END PGP SIGNATURE-----

1 0

Weekly Routing Table Report
by Routing Table Analysis 05 Nov '04

05 Nov '04

This is an automated weekly mailing describing the state of the Internet Routing Table as seen from APNIC's router in Japan. Daily listings are sent to bgp-stats(a)lists.apnic.net If you have any comments please contact Philip Smith <pfs(a)cisco.com>. Routing Table Report 04:00 +10GMT Sat 06 Nov, 2004 Analysis Summary ---------------- BGP routing table entries examined: 150267 Prefixes after maximum aggregation: 88743 Unique aggregates announced to Internet: 71812 Total ASes present in the Internet Routing Table: 18370 Origin-only ASes present in the Internet Routing Table: 15942 Origin ASes announcing only one prefix: 7465 Transit ASes present in the Internet Routing Table: 2428 Transit-only ASes present in the Internet Routing Table: 73 Average AS path length visible in the Internet Routing Table: 4.5 Max AS path length visible: 25 Prefixes from unregistered ASNs in the Routing Table: 8 Special use prefixes present in the Routing Table: 0 Prefixes being announced from unallocated address space: 15 Number of addresses announced to Internet: 1348239976 Equivalent to 80 /8s, 92 /16s and 130 /24s Percentage of available address space announced: 36.4 Percentage of allocated address space announced: 58.8 Percentage of available address space allocated: 61.9 Total number of prefixes smaller than registry allocations: 69113 APNIC Region Analysis Summary ----------------------------- Prefixes being announced by APNIC Region ASes: 29109 Total APNIC prefixes after maximum aggregation: 14393 Prefixes being announced from the APNIC address blocks: 27212 Unique aggregates announced from the APNIC address blocks: 14288 APNIC Region origin ASes present in the Internet Routing Table: 2160 APNIC Region origin ASes announcing only one prefix: 650 APNIC Region transit ASes present in the Internet Routing Table: 330 Average APNIC Region AS path length visible: 4.4 Max APNIC Region AS path length visible: 15 Number of APNIC addresses announced to Internet: 165911680 Equivalent to 9 /8s, 227 /16s and 156 /24s Percentage of available APNIC address space announced: 75.7 APNIC AS Blocks 4608-4864, 7467-7722, 9216-10239, 17408-18431 23552-24575 APNIC Address Blocks 58/7, 60/7, 202/7, 210/7, 218/7, 220/7 and 222/8 ARIN Region Analysis Summary ---------------------------- Prefixes being announced by ARIN Region ASes: 85556 Total ARIN prefixes after maximum aggregation: 51860 Prefixes being announced from the ARIN address blocks: 65373 Unique aggregates announced from the ARIN address blocks: 23358 ARIN Region origin ASes present in the Internet Routing Table: 9669 ARIN Region origin ASes announcing only one prefix: 3474 ARIN Region transit ASes present in the Internet Routing Table: 949 Average ARIN Region AS path length visible: 4.3 Max ARIN Region AS path length visible: 16 Number of ARIN addresses announced to Internet: 234612736 Equivalent to 13 /8s, 251 /16s and 232 /24s Percentage of available ARIN address space announced: 69.9 ARIN AS Blocks 1-1876, 1902-2042, 2044-2046, 2048-2106 2138-2584, 2615-2772, 2823-2829, 2880-3153 3354-4607, 4865-5119, 5632-6655, 6912-7466 7723-8191, 10240-12287, 13312-15359, 16384-17407 18432-20479, 21504-23551, 25600-26591, 26624-27647,29695-30719, 31744-33791 ARIN Address Blocks 24/8, 63/8, 64/6, 68/7, 70/7, 72/8, 198/7, 204/6, 208/7 and 216/8 RIPE Region Analysis Summary ---------------------------- Prefixes being announced by RIPE Region ASes: 27821 Total RIPE prefixes after maximum aggregation: 19441 Prefixes being announced from the RIPE address blocks: 24696 Unique aggregates announced from the RIPE address blocks: 16225 RIPE Region origin ASes present in the Internet Routing Table: 5978 RIPE Region origin ASes announcing only one prefix: 3206 RIPE Region transit ASes present in the Internet Routing Table: 1024 Average RIPE Region AS path length visible: 5.1 Max RIPE Region AS path length visible: 25 Number of RIPE addresses announced to Internet: 176087168 Equivalent to 10 /8s, 126 /16s and 224 /24s Percentage of available RIPE address space announced: 61.7 RIPE AS Blocks 1877-1901, 2043, 2047, 2107-2136, 2585-2614 2773-2822, 2830-2879, 3154-3353, 5377-5631 6656-6911, 8192-9215, 12288-13311, 15360-16383 20480-21503, 24576-25599, 28672-29695 30720-31743, 33792-34815 RIPE Address Blocks 62/8, 80/5, 88/8, 188/8, 193/8, 194/7, 212/7 and 217/8 LACNIC Region Analysis Summary ------------------------------ Prefixes being announced by LACNIC Region ASes: 6541 Total LACNIC prefixes after maximum aggregation: 2359 Prefixes being announced from the LACNIC address blocks: 6389 Unique aggregates announced from the LACNIC address blocks: 3935 LACNIC Region origin ASes present in the Internet Routing Table: 401 LACNIC Region origin ASes announcing only one prefix: 115 LACNIC Region transit ASes present in the Internet Routing Table: 77 Average LACNIC Region AS path length visible: 5.0 Max LACNIC Region AS path length visible: 19 Number of LACNIC addresses announced to Internet: 16420096 Equivalent to 0 /8s, 250 /16s and 141 /24s Percentage of available LACNIC address space announced: 48.9 LACNIC AS Blocks 26592-26623, 27648-28671 LACNIC Address Blocks 200/7 Emerging AfriNIC Region Analysis Summary ---------------------------------------- Prefixes being announced by AfriNIC Region ASes: 1234 Total AfriNIC prefixes after maximum aggregation: 690 Prefixes being announced from the AfriNIC address blocks: 858 Unique aggregates announced from the AfriNIC address blocks: 670 AfriNIC Region origin ASes present in the Internet Routing Table: 92 AfriNIC Region origin ASes announcing only one prefix: 20 AfriNIC Region transit ASes present in the Internet Routing Table: 12 Average AfriNIC Region AS path length visible: 4.4 Max AfriNIC Region AS path length visible: 16 Number of AfriNIC addresses announced to Internet: 2069248 Equivalent to 0 /8s, 31 /16s and 147 /24s Percentage of available AfriNIC address space announced: 12.3 AfriNIC AS Blocks <none> AfriNIC Address Blocks 196/8 APNIC Region per AS prefix count summary ---------------------------------------- ASN No of nets /20 equiv MaxAgg Description 4134 856 4407 163 Data Communications Bureau 1221 801 1183 574 Telstra Pty Ltd 9583 546 41 103 Satyam Infoway Ltd., 4766 545 3408 268 Korea Internet Exchange for " 4755 377 133 58 Videsh Sanchar Nigam Ltd. Aut 17676 369 5516 54 XTAGE CORPORATION 2907 354 1857 328 SINET Japan 9443 353 69 79 Primus Telecommunications 9929 344 161 33 China Netcom Corp. 703 317 346 244 UUNET 17557 315 23 156 Pakistan Telecom 2764 287 273 235 connect.com.au pty ltd 7474 264 268 196 Optus Communications Pty Ltd 4802 234 28 142 Wantree Development 9942 233 72 124 COMindico Australia 9498 231 81 53 BHARTI BT INTERNET LTD. 9800 230 380 70 CHINA UNICOM 7563 227 48 164 Korea Internet Infrastructure 10036 210 19 191 C&M Communication Co. Ltd. 4814 206 232 6 China Telecom (Group) ARIN Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 7018 1427 6681 994 AT&T WorldNet Services 701 1236 8415 886 UUNET Technologies, Inc. 721 1023 21016 298 DLA Systems Automation Center 1239 921 2880 610 Sprint 2386 848 530 609 AT&T Data Communications Serv 6197 809 380 351 BellSouth Network Solutions, 4323 797 671 218 Time Warner Telecom 18566 751 208 6 Covad Communications 209 660 3435 504 Qwest 3356 646 10942 444 Level 3 Communications, LLC 20115 570 430 306 Charter Communications 3561 552 2416 416 Cable & Wireless USA 852 518 1142 401 Telus Advanced Communications 7843 496 709 93 Adelphia Corp. 7132 445 8288 377 SBC Internet Services 6198 437 377 202 BellSouth Network Solutions, 705 436 163 276 UUNET Technologies, Inc. 6478 425 737 102 AT&T Worldnet Services 27364 414 36 19 Armstrong Cable Services 5668 411 87 18 Century Telephone RIPE Region per AS prefix count summary --------------------------------------- ASN No of nets /20 equiv MaxAgg Description 702 635 2026 527 UUNET - Commercial IP service 3320 297 2484 234 Deutsche Telekom AG 8220 281 463 267 COLT Internet - International 3301 277 1099 267 TeliaNet Sweden 21502 254 40 3 NUMERICABLE is a cabled netwo 680 251 2025 239 DFN-IP service G-WiN 3246 219 477 215 Song Networks 13083 217 51 8 Mannesmann Datenverarbeitung 1257 208 743 179 SWIPnet Swedish IP Network 8708 203 115 184 Romania Data Systems S.A. 5515 193 842 141 Sonera Solution Autonomous Sy 786 176 1794 176 The JANET IP Service 6746 161 30 130 Dynamic Network Technologies, 8866 160 20 7 Bulgarian Telecommunication C 3215 158 940 77 France Telecom Transpac 719 157 288 102 LANLINK autonomous system 3269 149 1259 67 TELECOM ITALIA 5400 148 207 119 BT Ignite European Backbone 25186 148 154 104 France Telecom Transpac's Tra 3303 131 610 129 Swisscom Ltd LACNIC Region per AS prefix count summary ----------------------------------------- ASN No of nets /20 equiv MaxAgg Description 6140 347 139 69 ImpSat 8151 308 455 134 UniNet S.A. de C.V. 16814 212 13 7 NSS, S.A. 11172 208 100 55 Servicios Alestra S.A de C.V 6147 185 94 20 Telefonica Del Peru 11664 164 12 35 Keytech SA 6505 138 90 94 Global One Communicaoes Ltda 7303 137 62 24 Telecom Argentina Stet-France 6503 122 164 83 AVANTEL, S.A. 11992 101 9 31 Integrated Systems 14117 98 6 4 Telefonica del Sur S.A. 11556 96 48 2 Cable-Wireless Panama 6535 84 7 19 Chilesat Servicios Empresari 11311 84 8 24 Sinectis S.A. 10481 82 32 7 Prima S.A. 4270 80 18 9 Red de Interconexion Universi 14420 80 5 33 ANDINATEL S.A. 15311 77 23 37 Telefonica Empresas 5639 75 8 8 Telecommunications Services o 11340 71 21 47 Red Universitaria Nacional AfriNIC Region per AS prefix count summary ------------------------------------------ ASN No of nets /20 equiv MaxAgg Description 3741 272 649 230 The Internet Solution 5536 113 16 4 Internet Egypt Network 2018 101 297 97 Tertiary Education Network 2905 93 259 65 The Internetworking Company o 20928 52 16 1 Noor Advanced Technologies AS 9129 33 3 4 UUNET Kenya 24835 33 34 7 RAYA Telecom - Egypt 6713 31 42 10 Itissalat Al-MAGHRIB 5713 26 125 24 Telkom SA Ltd 8524 25 1 4 AUCEGYPT Autonomous System 16637 22 10 19 Johnnic e-Ventures 10798 18 1 12 Standard Bank of South Africa 12258 18 3 12 Vodacom Internet Company 8452 17 20 5 TEDATA 12455 17 4 2 Jambonet Autonomous system 21280 16 2 3 Swift Global Kenya Ltd.Is an 8346 15 7 14 SONATEL-AS Autonomous System 15706 15 4 2 Sudatel Internet Exchange Aut 15808 13 1 2 Communication Solutions Ltd i 17148 13 1 7 First National Bank Global Per AS Maximum Aggr summary ---------------------------------- ASN No of nets Net Savings Description 18566 751 745 Covad Communications 721 1023 725 DLA Systems Automation Center 4134 856 693 Data Communications Bureau 4323 797 579 Time Warner Telecom 6197 809 458 BellSouth Network Solutions, 9583 546 443 Satyam Infoway Ltd., 7843 496 403 Adelphia Corp. 27364 414 395 Armstrong Cable Services 5668 411 393 Century Telephone 22773 400 383 Cox Communications, Inc. Atla 6467 400 370 E.Spire Communications, Inc. 22909 409 351 Comcast Cable Corporation 701 1236 350 UUNET Technologies, Inc. 6478 425 323 AT&T Worldnet Services 4755 377 319 Videsh Sanchar Nigam Ltd. Aut 17676 369 315 XTAGE CORPORATION 1239 921 311 Sprint 9929 344 311 China Netcom Corp. 4355 392 293 EarthLink, Inc. 6140 347 278 ImpSat List of Unregistered ASNs (Global) ---------------------------------- Bad AS Designation Network Transit AS Description 65006 PRIVATE 84.18.32.0/19 33831 * 65217 PRIVATE 192.102.236.0/24 217 University of Minnes 1877 UNALLOCATED 192.108.199.0/24 1876 Southern Methodist U 5555 UNALLOCATED 192.156.8.0/24 721 DLA Systems Automati 65529 PRIVATE 216.21.199.0/24 14697 VDot.Net 33507 UNALLOCATED 216.94.118.0/24 701 UUNET Technologies, 65529 PRIVATE 216.152.237.0/24 14697 VDot.Net 65000 PRIVATE 217.68.56.0/22 29263 HAAGnet, municipalit Advertised Unallocated Addresses -------------------------------- Network Origin AS Description 132.0.0.0/10 721 DLA Systems Automation Center 137.0.0.0/13 721 DLA Systems Automation Center 158.0.0.0/13 721 DLA Systems Automation Center 192.44.0.0/19 702 UUNET - Commercial IP service 192.70.164.0/24 25689 National Research Council of 192.83.16.0/20 5515 Sonera Solution Autonomous Sy 192.83.32.0/19 5515 Sonera Solution Autonomous Sy 192.83.96.0/22 5515 Sonera Solution Autonomous Sy 192.83.100.0/24 5515 Sonera Solution Autonomous Sy 192.84.205.0/24 719 LANLINK autonomous system 192.119.135.0/24 270 NASA 192.135.50.0/24 7018 AT&T WorldNet Services 192.136.79.0/24 719 LANLINK autonomous system 192.172.0.0/19 721 DLA Systems Automation Center 192.172.11.0/24 721 DLA Systems Automation Center Number of prefixes announced per prefix length (Global) ------------------------------------------------------- /1:0 /2:0 /3:0 /4:0 /5:0 /6:0 /7:0 /8:19 /9:3 /10:6 /11:15 /12:61 /13:138 /14:314 /15:554 /16:8110 /17:2266 /18:3925 /19:9790 /20:10385 /21:7964 /22:11021 /23:12683 /24:82125 /25:249 /26:236 /27:134 /28:68 /29:55 /30:113 /31:0 /32:33 Advertised prefixes smaller than registry allocations ----------------------------------------------------- ASN No of nets Total ann. Description 18566 736 751 Covad Communications 6197 657 809 BellSouth Network Solutions, 2386 613 848 AT&T Data Communications Serv 7018 578 1427 AT&T WorldNet Services 27364 398 414 Armstrong Cable Services 702 389 635 UUNET - Commercial IP service 9583 382 546 Satyam Infoway Ltd., 1239 366 921 Sprint 4766 365 545 Korea Internet Exchange for " 5668 356 411 Century Telephone 701 346 1236 UUNET Technologies, Inc. 6198 318 437 BellSouth Network Solutions, 6467 300 400 E.Spire Communications, Inc. 6517 281 305 Yipes Communications, Inc. 20115 279 570 Charter Communications 9929 275 344 China Netcom Corp. 13609 266 309 Choice One Communications Inc 14824 258 268 NewSouth Communications Corp. 4323 256 797 Time Warner Telecom 21502 251 254 NUMERICABLE is a cabled netwo Number of /24s announced per /8 block (Global) ---------------------------------------------- 4:4 8:11 12:1434 13:1 15:5 16:2 17:3 20:5 24:746 32:67 33:2 38:81 40:55 44:3 47:2 52:3 55:1 56:3 57:22 60:3 61:615 62:496 63:1845 64:2445 65:2076 66:2462 67:447 68:537 69:755 70:36 72:2 80:516 81:548 82:306 83:193 84:47 128:128 129:164 130:84 131:185 132:26 134:186 135:26 136:187 137:85 138:184 139:39 140:195 141:108 142:126 143:115 144:159 145:42 146:295 147:95 148:328 149:112 150:95 151:64 152:133 153:68 154:2 155:131 156:58 157:67 158:133 159:163 160:61 161:73 162:379 163:80 164:216 165:157 166:118 167:222 168:338 169:123 170:298 171:9 192:5663 193:2921 194:2167 195:1510 196:588 198:3892 199:3299 200:3814 201:23 202:4939 203:5746 204:3571 205:2078 206:2337 207:2625 208:2122 209:3076 210:1516 211:641 212:1132 213:1219 214:223 215:31 216:3681 217:1058 218:176 219:81 220:273 221:65 222:22 End of report

1 0

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

apops November 2004