On Thu, 22 Sep 2005, Manish Karir wrote: Thanks!
I don't understand something. Quoting from your page: "Based on the above data, we can see that both these prefixes were being (probably incorrectly) announced by AS9802 (CHINA-21VIANET 21vianet(China) Inc.) prior to Aug 30, at which time they withdrawn and re-announced by AS36666 (Team Cymru testing?)." The ASpath was: 7018 6461 4134 4847 9308 9802 or 3356 3561 4134 4847 9308 9802 or 1239 6461 4134 4847 9308 9802 Ignoring the Chinese ASNs, AS3561 (Savvis) or AS6461 (Abovenet) should have been checking AS4314 and all their downstream announcements for IP hijacking. Is this not being done? -Hank > I put up some pre-run queries for these prefixes based on the > routeviews data at: > http://bgpinspect.merit.edu/reports.php > > But you can probably run these yourself if you like. > > >From the perspective of atleast the 5 routeviews peers we track(att, > level3,aol,sprint,glx), all prefixes are pretty much visible by now, > what is perhaps more interesting is that it looks like these(and > a bunch more) were being incorrectly announced by AS9802 prior to Aug > 30th. > > -manish
