Routing Table Jump caused by AS4151

Mailman List Mirror (Read Only)
1

I noticed a jump from some 171k to almost 175k in the last days, and checked CIDR http://www.cidr-report.org/:

Top 20 Net Increased Routes per Originating AS
Prefixes Change ASnum AS Description
3263 0->3263 AS4151 USDA-1 - USDA

so I wonder what's wrong with them.

Regards,
Fredy

2

they are leaking just about every /24 in several /16's? :frowning: ATT worldnet is
passing them on too, perhaps they can smackdown usda? :slight_smile:

3

Christopher L Morrow writes:

I noticed a jump from some 171k to almost 175k in the last days, and
checked CIDR http://www.cidr-report.org/:

> Top 20 Net Increased Routes per Originating AS
>
> Prefixes Change ASnum AS Description
> 3263 0->3263 AS4151 USDA-1 - USDA

so I wonder what's wrong with them.

they are leaking just about every /24 in several /16's? :frowning: ATT worldnet is
passing them on too, perhaps they can smackdown usda? :slight_smile:

Indeed.

   Network Path
[...hundreds of similar routes deleted...]
* 199.156.247.0 3549 7018 4152 13979 4151 ?
* 199.156.249.0 3549 7018 4152 13979 4151 i
* 199.156.250.0 3549 7018 4152 13979 4151 i
* 199.156.252.0 3549 7018 4152 13979 4151 i
* 199.156.254.0 3549 7018 4152 13979 4151 ?
* 199.156.255.0 3549 7018 4152 13979 4151 ?
* 199.157.1.0 3549 7018 4152 13979 4151 ?
* 199.157.2.0 3549 7018 4152 13979 4151 ?
* 199.157.3.0 3549 7018 4152 13979 4151 ?
* 199.157.5.0 3549 7018 4152 13979 4151 i
* 199.157.7.0 3549 7018 4152 13979 4151 ?
* 199.157.8.0 3549 7018 4152 13979 4151 ?
[...hundreds of similar routes deleted...]

This looks more like configuration error than like anything more evil
(such as fine-grained traffic engineering).

AS4151, could you please stop this?

Thanks & regards,

4

I send a message to my transits (Qwest and Global Crossing) and AT&T. Here
is the message
I got back from AT&T.

James,

We're looking into the situation. We'll get back with you shortly.

Regards,

Angie Eborn
AT&T IP COE
(866) 397-7309, option 1
aeborn@att.com

5

I am seeing 171K routes from my transits and looks like this has been fixed.

James
Routing and Security Administrator
At the Santa Fe Office: Cyber Mesa Telecom
jamesh@cybermesa.com noc@cybermesa.com
http://www.cybermesa.com/ContactCM