nanog mailing list archives
RE: Anomalies with AS13214 ?
From: "Robert D. Scott" <robert () ufl edu>
Date: Mon, 11 May 2009 12:46:01 -0400
It looks like Cyclops is seeing these from AS 48285, but I see no indication they are being advertised to any production upstream provider. Our /16 is being alerted in Cyclops, but I can not find any advert on any looking glass.
From Cyclops:
BGP protocol Time (UTC) W/A/B Peer IP Peer ASN Prefix AS_PATH Origin NEXT_HOP LOCAL_PREF MED Community Atomic Agg Aggregator BGP4MP 1242044196 A 194.71.0.1 48285 128.227.0.0/16 48285 13214 INCOMPLETE 194.71.0.1 0 0 NAG Robert D. Scott Robert () ufl edu Senior Network Engineer 352-273-0113 Phone CNS - Network Services 352-392-2061 CNS Phone Tree University of Florida 352-392-9440 FAX Florida Lambda Rail 352-294-3571 FLR NOC Gainesville, FL 32611 321-663-0421 Cell -----Original Message----- From: James Kelty [mailto:jkelty () pandora com] Sent: Monday, May 11, 2009 12:20 PM To: nanog () nanog org Subject: Re: Anomalies with AS13214 ? Seeing the same issues with AS13214 and no corresponding drop in traffic, route views doesn't show any rogue adverts for out prefixes either. -James On May 11, 2009, at 9:01 AM, Vincent Hoffman wrote:
On 11/5/09 16:30, Jay Hennigan wrote:We're getting cyclops[1] alerts that AS13214 is advertising itself as origin for all of our prefixes. Their anomaly report shows thousands of prefixes originating there. Anyone else seeing evidence of this or being affected? [1] http://cyclops.cs.ucla.edu/I'm seeing alerts for AS13214 advertising our prefixes from cyclops also. However a quick look at a few looking glasses and route servers doesnt seem to show any rogue advertisments, and we havent see any drop in traffic as yet. Vince-- Jay Hennigan - CCIE #7880 - Network Engineering - jay () impulse net Impulse Internet Service - http://www.impulse.net/ Your local telephone and internet company - 805 884-6323 - WB6RDV
"Ravioli is the square root of pasta." - Max K., Age 11
Current thread:
- Anomalies with AS13214 ? Jay Hennigan (May 11)
- Re: Anomalies with AS13214 ? Vincent Hoffman (May 11)
- Re: Anomalies with AS13214 ? James Kelty (May 11)
- RE: Anomalies with AS13214 ? Robert D. Scott (May 11)
- Re: Anomalies with AS13214 ? Jay Hennigan (May 11)
- Re: Anomalies with AS13214 ? James Kelty (May 11)
- Re: Anomalies with AS13214 ? Vincent Hoffman (May 11)
- Re: Anomalies with AS13214 ? Russell Heilling (May 11)
- Re: Anomalies with AS13214 ? Jon Lewis (May 11)
- Re: Anomalies with AS13214 ? David Freedman (May 11)
- Re: Anomalies with AS13214 ? Christopher Morrow (May 11)
- Re: Anomalies with AS13214 ? David Freedman (May 11)
- Re: Anomalies with AS13214 ? bmanning (May 11)
- Re: Anomalies with AS13214 ? Hank Nussbacher (May 11)
- Re: Anomalies with AS13214 ? Christopher Morrow (May 11)
- Re: Anomalies with AS13214 ? Andree Toonk (May 11)
- Re: Anomalies with AS13214 ? Christopher Morrow (May 11)