BGP Update Report

Geoff_Huston · October 14, 2011, 10:00pm

BGP Update Report
Interval: 06-Oct-11 -to- 13-Oct-11 (7 days)
Observation Point: BGP Peering with AS131072

TOP 20 Unstable Origin AS
Rank ASN Upds 1 - AS9829 28719 2.0% 2 - AS38040 27672 1.9% 3 - AS32528 25784 1.8% 4 - AS6316 25314 1.8% 5 - AS5800 22216 1.5% 6 - AS14420 18751 1.3% 7 - AS17974 18434 1.3% 8 - AS9498 15367 1.1% 9 - AS8402 14949 1.0% 10 - AS7552 13808 1.0% 11 - AS16916 11954 0.8% 12 - AS9562 9855 0.7% 13 - AS11492 9496 0.7% 14 - AS51281 9415 0.7% 15 - AS2856 9187 0.6% 16 - AS9649 8844 0.6% 17 - AS24863 8809 0.6% 18 - AS14522 8545 0.6% 19 - AS8866 8160 0.6% 20 - AS27738 7865 0.5% % Upds/Pfx AS-Name
33.9 -- BSNL-NIB National Internet Backbone
5534.4 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
6446.0 -- ABBOTT Abbot Labs
550.3 -- AS-PAETEC-NET - PaeTec Communications, Inc.
111.1 -- DNIC-ASBLK-05800-06055 - DoD Network Information Center
23.8 -- CORPORACION NACIONAL DE TELECOMUNICACIONES - CNT EP
11.2 -- TELKOMNET-AS2-AP PT Telekomunikasi Indonesia
39.6 -- BBIL-AP BHARTI Airtel Ltd.
19.7 -- CORBINA-AS OJSC "Vimpelcom"
10.2 -- VIETEL-AS-AP Vietel Corporation
1992.3 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC
1407.9 -- MSU-TH-AP Mahasarakham University
17.8 -- CABLEONE - CABLE ONE, INC.
1569.2 -- COUNTRY-TELECOM-AS Country Telekom CJSC
48.4 -- BT-UK-AS BTnet UK Regional network
166.9 -- MOPH-TH-AP Information Technology Office
12.3 -- LINKdotNET-AS
24.6 -- Satnet
17.7 -- BTC-AS Bulgarian Telecommunication Company Plc.
23.1 -- Ecuadortelecom S.A.

TOP 20 Unstable Origin AS (Updates per announced prefix)
Rank ASN Upds % Upds/Pfx AS-Name
1 - AS32528 25784 1.8% 6446.0 -- ABBOTT Abbot Labs
2 - AS38040 27672 1.9% 5534.4 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
3 - AS17408 3226 0.2% 3226.0 -- ABOVE-AS-AP AboveNet Communications Taiwan
4 - AS16916 11954 0.8% 1992.3 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC
5 - AS50660 1767 0.1% 1767.0 -- SSIF-CJ-AS SOCIETATE DE SERVICII DE INVESTITII FINANCIARE BROKER SA
6 - AS51281 9415 0.7% 1569.2 -- COUNTRY-TELECOM-AS Country Telekom CJSC
7 - AS17425 7412 0.5% 1482.4 -- EPA-AS-TH Provincial Electricity Authority of Thailand.
8 - AS9562 9855 0.7% 1407.9 -- MSU-TH-AP Mahasarakham University
9 - AS10099 1036 0.1% 1036.0 -- HKUNICOM1-AP China Unicom (Hong Kong) Operations Limited
10 - AS44025 1022 0.1% 1022.0 -- KAMTELEKOM-NET Kamtelekom Ltd.
11 - AS55696 1018 0.1% 1018.0 -- SCOM-AS-ID Starcom Solusindo PT.
12 - AS51966 873 0.1% 873.0 -- RESTENA-ANYCAST-AS Fondation RESTENA
13 - AS9168 769 0.1% 769.0 -- TELINO-AS Telino Network AS Number
14 - AS56903 754 0.1% 754.0 -- TELEMARKET-AS OOO TELEMARKET
15 - AS8011 3189 0.2% 637.8 -- AS8011 - CoreComm Internet Services Inc
16 - AS32777 2446 0.2% 611.5 -- SMART-CITY-FORT-WORTH - Smart City Networks, L.P.
17 - AS51372 605 0.0% 605.0 -- ORANGE-AS Orange Ltd.
18 - AS50733 552 0.0% 552.0 -- BINA-AS Ertebat Gostaran Bina
19 - AS6316 25314 1.8% 550.3 -- AS-PAETEC-NET - PaeTec Communications, Inc.
20 - AS38528 497 0.0% 497.0 -- LANIC-AS-AP Lao National Internet Committee

TOP 20 Unstable Prefixes
Rank Prefix Upds % Origin AS -- AS Name
1 - 202.92.235.0/24 14361 0.9% AS9498 -- BBIL-AP BHARTI Airtel Ltd.
2 - 130.36.34.0/24 12843 0.8% AS32528 -- ABBOTT Abbot Labs
3 - 130.36.35.0/24 12843 0.8% AS32528 -- ABBOTT Abbot Labs
4 - 206.80.93.0/24 11767 0.8% AS16916 -- NETLOGIC-WEST - INFINIPLEX LLC DBA NETLOGIC
5 - 66.248.104.0/21 10830 0.7% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc.
6 - 66.248.120.0/21 10829 0.7% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc.
7 - 77.87.117.0/24 9388 0.6% AS51281 -- COUNTRY-TELECOM-AS Country Telekom CJSC
8 - 213.16.48.0/24 7142 0.5% AS8866 -- BTC-AS Bulgarian Telecommunication Company Plc.
9 - 180.180.249.0/24 6299 0.4% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
10 - 180.180.255.0/24 5720 0.4% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
11 - 156.152.33.0/24 5512 0.3% AS71 -- HP-INTERNET-AS Hewlett-Packard Company
12 - 180.180.248.0/24 5219 0.3% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
13 - 180.180.253.0/24 5218 0.3% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
14 - 180.180.250.0/24 5216 0.3% AS38040 -- GLOBAL-TRANSIT-TOT-IIG-TH TOT Public Company Limited
15 - 66.248.96.0/21 3518 0.2% AS6316 -- AS-PAETEC-NET - PaeTec Communications, Inc.
16 - 202.153.174.0/24 3226 0.2% AS17408 -- ABOVE-AS-AP AboveNet Communications Taiwan
17 - 202.41.70.0/24 3108 0.2% AS2697 -- ERX-ERNET-AS Education and Research Network
18 - 202.151.7.0/24 2464 0.2% AS17425 -- EPA-AS-TH Provincial Electricity Authority of Thailand.
19 - 202.151.6.0/24 2463 0.2% AS17425 -- EPA-AS-TH Provincial Electricity Authority of Thailand.
20 - 202.151.5.0/24 2460 0.2% AS17425 -- EPA-AS-TH Provincial Electricity Authority of Thailand.

Details at http://bgpupdates.potaroo.net

gih · October 15, 2011, 11:26am

While I am at it, does anyone read this report, or is this weekly report also just part of the spam load on this list?

regards,
Geoff

Etaoin_Shrdlu · October 15, 2011, 8:24pm

I read both of them, and also the Weekly Routing Report. I will regret the loss, and consider all three to be far more valuable than 90% of the traffic on the list.

John_Peach · October 15, 2011, 8:30pm

While I am at it, does anyone read this report, or is this weekly report also just part of the spam load on this list?

If you don't want them, filter them to /dev/null.

William_F_Maton_Soto · October 15, 2011, 8:31pm

+1

The reports are also useful to do a double-check on changes I've made from the perspective of others (even if they are automated tools).

wfms

Keegan_Holley · October 15, 2011, 9:01pm

+1

good to get a view from multiple sources even if they are automated. Should
be easy enough to filter for those that do not want them.

Skeeve_Stevens1 · October 16, 2011, 3:48am

I read them all too.

BUT, I get some 5 or 6 copies of them from all the lists I am on. I would rather subscribe to a list that was just for those.

…Skeeve

Skeeve_Stevens1 · October 16, 2011, 3:50am

John,

Bit hard for Geoff to devnull them, he is the author

…Skeeve

Don_Gould · October 16, 2011, 4:13am

I agree with Skeeve that it hits a number of lists, but I think that is a good thing and is of value.

I agree with others who have said that there is any amount of worthless noise on lists and we can just filter if not required.

Personally iirc, it was this content that led me to find Geoff's web site and follow on to a number of other very useful resources when I first started learning about this space.

We need to remember that not every person in this space enters from University but some migrate to it because of other drivers.

Hence some of these resources, that those of you with decades of experience, wonder about the value of, actually have far more value than just their core content. (Hope that makes sense.).

D

Charles_N_Wyble1 · October 16, 2011, 4:21am

+1. Or an rss feed or something.

That way interested folks could easily pull the data and stay up to date.

Bandy_Rush1 · October 16, 2011, 4:45am

BUT, I get some 5 or 6 copies of them from all the lists I am on. I
would rather subscribe to a list that was just for those.

procmail is your friend

# prevent dupes

John_Peach · October 16, 2011, 1:39pm

John,

Bit hard for Geoff to devnull them, he is the author

not really, given that he is not the sender, the mailing list is....

[snip]

William_F_Maton_Soto · October 16, 2011, 1:58pm

+1

good to get a view from multiple sources even if they are automated. Should
be easy enough to filter for those that do not want them.

Plus it's helped me in the past catch a very massive (well, OK, it was a less than a hundred unaggregated routes run off into the Internet) leak, which forced me to learn about prefix-lists and such. So for those that care enough about their own networks, it can be catalyst to learning something new.

While I am at it, does anyone read this report, or is this weekly report
also just part of the spam load on this list?

I read both of them, and also the Weekly Routing Report. I will regret the
loss, and consider all three to be far more valuable than 90% of the traffic
on the list.

+1

The reports are also useful to do a double-check on changes I've made from
the perspective of others (even if they are automated tools).

wfms

wfms

Valdis_Kletnieks · October 16, 2011, 6:25pm

We want to get pedantic, who generated the Message-ID: for the
mail in question?

John_Peach · October 16, 2011, 6:32pm

I had no intentions of being pedantic; just pointing out that once the
mail had gone to the mailing list there was no need to ever accept it
back again....