what happened to ARIN tonight ?

The Oregon route server seems to indicate they are off the air. Not that I care to look at fee schedules tonight, but the whois server for in-addr.arpa is toast as a result :frowning:

  ---Mike

BGP routing table entry for 192.149.252.0/24, version 1277910
Paths: (57 available, best #48, table Default-IP-Routing-Table)
Flag: 0x8A0
   Not advertised to any peer
   15290 7018 701 7046 (history entry)
     216.191.65.126 from 216.191.65.126 (216.191.65.126)
       Origin IGP, localpref 100, external
       Dampinfo: penalty 1407, flapped 2 times in 00:02:01
   6939 7911 701 7046 (history entry)
     216.218.252.152 from 216.218.252.152 (216.218.252.152)
       Origin IGP, localpref 100, external
       Dampinfo: penalty 1408, flapped 2 times in 00:01:42
   15290 7018 701 7046 (history entry)
     216.191.65.118 from 216.191.65.118 (216.191.65.118)
       Origin IGP, localpref 100, external
       Dampinfo: penalty 1407, flapped 2 times in 00:02:00
   6395 1239 701 7046 (history entry)
     216.140.2.59 from 216.140.2.59 (216.140.2.59)
       Origin IGP, metric 5657, localpref 100, external
       Community: 6395:1 6395:1007
       Dampinfo: penalty 2796, flapped 4 times in 00:01:46

works fine for me.

What AS path are you taking to get there ? From the oregon-ix, every peer listed there (57 of them) shows it flapping to various degrees

BGP routing table entry for 192.149.252.0/24, version 1277910
Paths: (57 available, best #48, table Default-IP-Routing-Table)
   Not advertised to any peer
   15290 701 7046, (suppressed due to dampening)
     216.191.65.126 from 216.191.65.126 (216.191.65.126)
       Origin IGP, localpref 100, valid, external
       Dampinfo: penalty 3275, flapped 7 times in 00:18:34, reuse in 00:09:59
   6939 3356 701 7046, (suppressed due to dampening)
     216.218.252.152 from 216.218.252.152 (216.218.252.152)
       Origin IGP, localpref 100, valid, external
       Dampinfo: penalty 3182, flapped 7 times in 00:18:16, reuse in 00:09:29
   15290 701 7046, (suppressed due to dampening)
     216.191.65.118 from 216.191.65.118 (216.191.65.118)
       Origin IGP, localpref 100, valid, external
       Dampinfo: penalty 3260, flapped 7 times in 00:18:34, reuse in 00:09:59
   6395 1239 701 7046 (history entry)
     216.140.2.59 from 216.140.2.59 (216.140.2.59)
       Origin IGP, metric 5346, localpref 100, external
       Community: 6395:1 6395:1004
       Dampinfo: penalty 7476, flapped 18 times in 00:18:19
   7911 701 7046 (history entry)
     64.200.199.4 from 64.200.199.4 (64.200.199.4)
       Origin IGP, localpref 100, external
       Community: 7911:999 7911:7303
       Dampinfo: penalty 3507, flapped 8 times in 00:18:38
   6079 3356 701 7046, (suppressed due to dampening)
     207.172.6.227 from 207.172.6.227 (207.172.6.227)
       Origin IGP, metric 0, localpref 100, valid, external
       Dampinfo: penalty 2420, flapped 5 times in 00:18:04, reuse in 00:03:29

I am seeing the same. ARIN is completely off the air

box02rsm-en01.twdx.net> sh ip bgp 192.149.252.16
% Network not in table

-hc

This issue is being looked into right now.

Richard Jimmerson
Director of Operations
American Registry for Internet Numbers (ARIN)

I see them via a UUNet announcement through Veroxity and Sprint transit, but I don't see it via any other peer or transit provider. Are they multi-homed?

R

core1-nwtnj#sho ip bgp 192.149.252.16
BGP routing table entry for 192.149.252.0/24, version 3225401
Paths: (2 available, best #1, table Default-IP-Routing-Table)
   Not advertised to any peer
   14985 701 7046
     216.182.0.65 (metric 311040) from 216.182.0.65 (216.182.0.65)
       Origin IGP, localpref 100, valid, internal, best
   1239 701 7046
     144.228.242.224 from 144.228.242.224 (144.228.242.224)
       Origin IGP, localpref 90, valid, external
       Dampinfo: penalty 706, flapped 4 times in 00:58:57

Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com | 888-TELLURIAN | 973-300-9211
"Good will, like a good name, is got by many actions, and lost by one." - Francis Jeffrey

I only see them via uunet as well. I noticed earlier that they were
supressed due to dampening (must have had some issues with their
connection and flapped one too many times).

They seem to be back now.

Looks like they are back on the air

route-views-v4.lab.occaid.org> sh ip bgp 192.149.252.16
BGP routing table entry for 192.149.252.0/24
Paths: (1 available, best #1, table Default-IP-Routing-Table)
  Not advertised to any peer
  27552 209 701 7046
    65.116.132.129 from 65.116.132.129 (65.116.132.129)
      Origin IGP, localpref 100, valid, external, best
      Last update: Sun Sep 28 22:31:14 2003
  64513 64512 64646 30071 3557 701 7046
    65.126.230.245 from 65.126.230.245 (65.126.230.145)
      Origin IGP, localpref 100, valid, external
      Last update: Sun Sep 28 22:34:53 2003

-hc

We experienced an unexpected outage of our services
while conducting routine maintenance. You should
have no trouble reaching our services now.

Best Regards,

Richard Jimmerson
Director of Operations
American Registry for Internet Numbers (ARIN)

Single-homed /24 through UUNet's 7046 to 701. Withdrawals started at 01:21:38 GMT
(21:21:38 Eastern time), and ARIN flapped severely for about fifteen minutes.

Then they spent another hour and ten minutes inconsistently reachable from half the
world, with the picture mutating slowly. 701 seems to have been telling inconsistent
stories about ARIN's reachability, depending on which of our peers you consulted --
IGP instability? By 03:10 GMT everyone seems to have slowly gotten a
consistent picture again, with ARIN restored.

AS7046 advertises 320 prefixes, of which ARIN is but one. Others (139.177.0.0/16,
139.85.0.0/16, 192.136.136.0/24) had even worse problems in the same timeframe.

My guess would be the collision of two maintenance windows -- a simple problem on
ARIN's end at the wrong moment, with global convergence severely prolonged by one of
the UUNet BGP tummy-rumbles that we commonly hear in the middle of the night. Some
of the little UUNet ASNs with 701 upstream can be really noisy -- 816 was rocking
all night long.

The RIPE NCC Routing Information System saw a very similar picture:
Flapping from 01:20:50Z - 01:38:22Z, consolidation 01:59:46Z - 02:28:20Z.

For details see:

http://www.ris.ripe.net/cgi-bin/risprefix.cgi?net=192.149.252.16%2F32&preftype=lspec&action=Search&startDay=20030929&startHour=00&startMin=00&startSec=00&endDay=20030929&endHour=06&endMin=00&endSec=00&rrcb=all&peer=all&type=%&sortby=stime&outype=html&.cgifields=type

http://www.ris.ripe.net/cgi-bin/risprefix.cgi
is quite useful in answering questions like this,
i.e. "What happened to prefix x.y.z/a between times t and u?"
It is near real time with a lag of typically 5 minutes.

Daniel

Swiftly :slight_smile:

Received: from smtp1.arin.net (smtp1.arin.net [192.149.252.33])
        by segue.merit.edu (Postfix) with ESMTP id B869F5DDBC
        for <nanog@merit.edu>; Tue, 30 Sep 2003 13:13:52 -0400 (EDT)
Received: by smtp1.arin.net (Postfix, from userid 5003)
        id 84AFA636; Sun, 28 Sep 2003 22:22:14 -0400 (EDT)

Richard Jimmerson wrote: