Cingular Data Network Problems
I live in Los Angeles, and I'm experiencing very odd connect problems. I have both a Cingular Laptop connect card, and a Cingular 8525. Mostly i'm on edge, sometimes 3g/hsdpa. From anywhere in the world i can ping 66.102.136.161 except on my cingular network. Sometimes it works and most of the time it doesn't. It seems I can't access anything on the 66.102.128.0/20. From what i can tell of traceroutes, its not making it past cingular's filters or firewall. Tracing route to 66.102.136.161 over a maximum of 30 hops: 1 332 ms 238 ms 239 ms 172.26.248.2 2 819 ms 340 ms 617 ms 172.26.248.2 3 *** Request timed out. Anyone work for cingular or WDSPCo? Other networks to the same provider work just fine. I know its not filtering on the destination network. Anyone else have the same problem? Thanks Andrew
Re: Cingular Data Network Problems
On 4/27/07, andrew matthews [EMAIL PROTECTED] wrote: I live in Los Angeles, and I'm experiencing very odd connect problems. I have both a Cingular Laptop connect card, and a Cingular 8525. Mostly i'm on edge, sometimes 3g/hsdpa. From anywhere in the world i can ping 66.102.136.161 except on my cingular network. Sometimes it works and most of the time it doesn't. It seems I can't access anything on the 66.102.128.0/20. From what i can tell of traceroutes, its not making it past cingular's filters or firewall. Is that the only IP you can't ping? Or can you not ping/traceroute in general? I myself use T-Mobile's EDGE service in Chicago, and can ping but cannot traceroute out in any functional way. -brandon
Fwd: Cingular Data Network Problems
oops, i wasn't hitting reply all, apparently gmail strips out the email to nanog and sends it directly to the user. -- Forwarded message -- From: andrew matthews [EMAIL PROTECTED] Date: Apr 27, 2007 12:13 AM Subject: Re: Cingular Data Network Problems To: Brandon Galbraith [EMAIL PROTECTED] On 4/26/07, Brandon Galbraith [EMAIL PROTECTED] wrote: Is that the only IP you can't ping? Or can you not ping/traceroute in general? I myself use T-Mobile's EDGE service in Chicago, and can ping but cannot traceroute out in any functional way. -brandon Well I can cannot ping that network. But i can ping other ips on different subnets at the same provider. But lets say i want to access www.mednor.net Its on that network. I cannot do it on the Cingular network but i can on my cable modem or other networks i use. But randomly it works sometimes. I'm not sure about traceroutes i didn't try to do much of it. But for example. redline.mednor.net i've always been able to access using my cingular network. but www.mednor.net i cannot. -andrew
BGP Update Report
BGP Update Report Interval: 13-Apr-07 -to- 26-Apr-07 (14 days) Observation Point: BGP Peering with AS4637 TOP 20 Unstable Origin AS Rank ASNUpds % Upds/PfxAS-Name 1 - AS17974 39669 3.4% 125.5 -- TELKOMNET-AS2-AP PT TELEKOMUNIKASI INDONESIA 2 - AS477537289 3.2% 376.7 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 3 - AS912125024 2.2% 30.0 -- TTNET TTnet Autonomous System 4 - AS815120800 1.8% 6.3 -- Uninet S.A. de C.V. 5 - AS982917486 1.5% 86.1 -- BSNL-NIB National Internet Backbone 6 - AS24731 16237 1.4% 318.4 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 7 - AS306 11222 1.0% 66.4 -- DNIC - DoD Network Information Center 8 - AS1239 9766 0.8% 38.4 -- SPRINTLINK - Sprint 9 - AS6198 9539 0.8% 16.5 -- BATI-MIA - BellSouth Network Solutions, Inc 10 - AS5803 8395 0.7% 116.6 -- DDN-ASNBLK - DoD Network Information Center 11 - AS5501 8271 0.7% 179.8 -- FRAUNHOFER-CLUSTER-BW Fraunhofer Gesellschaft 12 - AS308907340 0.6% 35.5 -- EVOLVA Evolva Telecom 13 - AS239667200 0.6% 61.0 -- DANCOM-AS-AP Dancom Online Services 14 - AS7011 6981 0.6% 8.9 -- FRONTIER-AND-CITIZENS - Frontier Communications, Inc. 15 - AS702 6849 0.6% 9.9 -- AS702 Verizon Business EMEA - Commercial IP service provider in Europe 16 - AS4788 6626 0.6% 39.0 -- TMNET-AS-AP TM Net, Internet Service Provider 17 - AS126546611 0.6% 264.4 -- RIPE-NCC-RIS-AS RIPE NCC RIS project 18 - AS115566483 0.6% 27.4 -- Cable Wireless Panama 19 - AS176456430 0.6% 535.8 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 20 - AS163226250 0.5% 94.7 -- PARSONLINE PARSONLINE Autonomous System TOP 20 Unstable Origin AS (Updates per announced prefix) Rank ASNUpds % Upds/PfxAS-Name 1 - AS315944111 0.4%4111.0 -- FORTESS-AS Fortess LLC Network 2 - AS307071534 0.1%1534.0 -- 3 - AS380775284 0.5%1321.0 -- TIMOR-TELECOM-AS-AP Timor Telecom, SA 4 - AS201331027 0.1%1027.0 -- CASS-COL - CASS INFORMATION SYSTEMS 5 - AS34378 851 0.1% 851.0 -- RUG-AS Razguliay-UKRROS Group 6 - AS33025 820 0.1% 820.0 -- QE-ASN-01 - Quinn Emanuel Urquhart Oliver Hedges LLP 7 - AS3944 781 0.1% 781.0 -- PARTAN-LAB - Partan Partan 8 - AS35673 775 0.1% 775.0 -- BANK-CASPIAN-AS Bank Caspian JSC 9 - AS297001880 0.2% 626.7 -- CYPRESS-SEMICONDUCTOR - Cypress Semiconductor 10 - AS25872 623 0.1% 623.0 -- ARQULE - ArQule Inc. 11 - AS176456430 0.6% 535.8 -- NTT-SG-AP ASN - NTT SINGAPORE PTE LTD 12 - AS41555 526 0.1% 526.0 -- NOVATKL-AS FW Austria, Kundl 13 - AS32732 499 0.0% 499.0 -- 14 - AS33188 948 0.1% 474.0 -- SCS-NETWORK-1 - Sono Corporate Suites 15 - AS12408 453 0.0% 453.0 -- BIKENT-AS Bikent Ltd. Autonomous system 16 - AS32761 446 0.0% 446.0 -- WASSE-NYC - Wasserstein Co. 17 - AS413271197 0.1% 399.0 -- MT-ITTELECOM IT T AS number 18 - AS477537289 3.2% 376.7 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 19 - AS118283356 0.3% 372.9 -- SOINET - State of Illinois/CMS 20 - AS23917 725 0.1% 362.5 -- BRIBIE-NET-AS-AP Bribie Island Net Multihomed, Brisbane TOP 20 Unstable Prefixes Rank Prefix Upds % Origin AS -- AS Name 1 - 203.177.10.0/24 14400 1.0% AS4775 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 2 - 203.177.132.0/24 14394 1.0% AS4775 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 3 - 203.177.8.0/24 7461 0.5% AS4775 -- GLOBE-TELECOM-AS Telecom Carrier / ISP Plus + 4 - 81.212.197.0/246817 0.5% AS9121 -- TTNET TTnet Autonomous System 5 - 81.213.47.0/24 6293 0.4% AS9121 -- TTNET TTnet Autonomous System 6 - 194.242.124.0/22 4111 0.3% AS31594 -- FORTESS-AS Fortess LLC Network 7 - 59.94.240.0/20 4023 0.3% AS9829 -- BSNL-NIB National Internet Backbone 8 - 59.94.192.0/20 3827 0.3% AS9829 -- BSNL-NIB National Internet Backbone 9 - 59.94.160.0/20 3827 0.3% AS9829 -- BSNL-NIB National Internet Backbone 10 - 59.95.240.0/20 3825 0.3% AS9829 -- BSNL-NIB National Internet Backbone 11 - 89.4.131.0/24 3350 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 12 - 163.191.160.0/19 3337 0.2% AS11828 -- SOINET - State of Illinois/CMS 13 - 89.4.129.0/24 3246 0.2% AS24731 -- ASN-NESMA National Engineering Services and Marketing Company Ltd. (NESMA) 14
The Cidr Report
This report has been generated at Fri Apr 27 21:48:15 2007 AEST.
The report analyses the BGP Routing Table of an AS4637 (Reach) router
and generates a report on aggregation potential within the table.
Check http://www.cidr-report.org/as4637 for a current version of this report.
Recent Table History
Date PrefixesCIDR Agg
20-04-07215344 139384
21-04-07215482 139198
22-04-07215358 139334
23-04-07215438 139369
24-04-07215518 139250
25-04-07215624 139481
26-04-07215747 139355
27-04-07215786 139525
AS Summary
24932 Number of ASes in routing system
10539 Number of ASes announcing only one prefix
1476 Largest number of prefixes announced by an AS
AS7018 : ATT-INTERNET4 - ATT WorldNet Services
90346752 Largest address span announced by an AS (/32s)
AS721 : DISA-ASNBLK - DoD Network Information Center
Aggregation Summary
The algorithm used in this report proposes aggregation only
when there is a precise match using the AS path, so as
to preserve traffic transit policies. Aggregation is also
proposed across non-advertised address space ('holes').
--- 27Apr07 ---
ASnumNetsNow NetsAggr NetGain % Gain Description
Table 215811 1394177639435.4% All ASes
AS4134 1250 311 93975.1% CHINANET-BACKBONE
No.31,Jin-rong Street
AS4755 1104 191 91382.7% VSNL-AS Videsh Sanchar Nigam
Ltd. Autonomous System
AS4323 1265 363 90271.3% TWTC - Time Warner Telecom,
Inc.
AS9498 976 93 88390.5% BBIL-AP BHARTI BT INTERNET
LTD.
AS18566 1001 158 84384.2% COVAD - Covad Communications
Co.
AS6478 1089 251 83877.0% ATT-INTERNET3 - ATT WorldNet
Services
AS11492 1045 361 68465.5% CABLEONE - CABLE ONE
AS8151 1096 418 67861.9% Uninet S.A. de C.V.
AS22773 705 52 65392.6% CCINET-2 - Cox Communications
Inc.
AS19262 724 173 55176.1% VZGNI-TRANSIT - Verizon
Internet Services Inc.
AS6197 1035 510 52550.7% BATI-ATL - BellSouth Network
Solutions, Inc
AS7018 1476 975 50133.9% ATT-INTERNET4 - ATT WorldNet
Services
AS18101 530 32 49894.0% RIL-IDC Reliance Infocom Ltd
Internet Data Centre,
AS17488 666 190 47671.5% HATHWAY-NET-AP Hathway IP Over
Cable Internet
AS19916 568 101 46782.2% ASTRUM-0001 - OLM LLC
AS17676 504 65 43987.1% JPNIC-JP-ASN-BLOCK Japan
Network Information Center
AS4766 740 317 42357.2% KIXS-AS-KR Korea Telecom
AS4812 457 75 38283.6% CHINANET-SH-AP China Telecom
(Group)
AS2386 1137 760 37733.2% INS-AS - ATT Data
Communications Services
AS7029 576 237 33958.9% WINDSTREAM - Windstream
Communications Inc
AS721613 275 33855.1% DISA-ASNBLK - DoD Network
Information Center
AS5668 591 253 33857.2% AS-5668 - CenturyTel Internet
Holdings, Inc.
AS16852 399 75 32481.2% BROADWING-FOCAL - Broadwing
Communications Services, Inc.
AS15270 524 204 32061.1% AS-PAETEC-NET - PaeTec.net -a
division of
PaeTecCommunications, Inc.
AS7011 787 469 31840.4% FRONTIER-AND-CITIZENS -
Frontier Communications, Inc.
AS4668 3137 30697.8% LGNET-AS-KR LG CNS
AS6198 569 271 29852.4% BATI-MIA - BellSouth Network
Solutions, Inc
AS14654 3035 29898.3% WAYPORT - Wayport
AS855568 273 29551.9% CANET-ASN-4 - Bell Aliant
AS33588 437 153 284
More Cogent fun
After Wednesdays apparent 'software bug', it looks like Cogent are broken again. *Cogent Network Status/DNS Server Status Description: * Welcome to Cogent Communications’ Network Status Message. Today is 4/27/07 @ 11:11 ET. At this time, we are experiencing a network event. The NOC and Tier III IP Engineering team are investigating. There is no ETR at this time. All of my traffic seemed to get dumped around Boston, but who knows... Anyone been able to get them on the phone yet? I'm sure it's a 'We're broke, we're fixing it' response.
Re: More Cogent fun
David, After Wednesdays apparent 'software bug', it looks like Cogent are broken again. *Cogent Network Status/DNS Server Status Description: * Welcome to Cogent Communications’ Network Status Message. Today is 4/27/07 @ 11:11 ET. At this time, we are experiencing a network event. The NOC and Tier III IP Engineering team are investigating. There is no ETR at this time. All of my traffic seemed to get dumped around Boston, but who knows... Anyone been able to get them on the phone yet? I'm sure it's a 'We're broke, we're fixing it' response. Our interface peers to them in Boston were fine, but we couldn't reach their loopbacks from which we receive the full routing table. This lasted from about 11:04am to 11:09am, with another 10 minutes or so for the table to propogate down. According to Cogent, they are aware of the event and tracking it under master ticket #571-555. Eric :)
RE: More Cogent fun
Their DNS still points to joker2. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Gauthier Sent: Friday, April 27, 2007 11:29 AM To: David Coulson Cc: nanog@merit.edu Subject: Re: More Cogent fun David, After Wednesdays apparent 'software bug', it looks like Cogent are broken again. *Cogent Network Status/DNS Server Status Description: * Welcome to Cogent Communications' Network Status Message. Today is 4/27/07 @ 11:11 ET. At this time, we are experiencing a network event. The NOC and Tier III IP Engineering team are investigating. There is no ETR at this time. All of my traffic seemed to get dumped around Boston, but who knows... Anyone been able to get them on the phone yet? I'm sure it's a 'We're broke, we're fixing it' response. Our interface peers to them in Boston were fine, but we couldn't reach their loopbacks from which we receive the full routing table. This lasted from about 11:04am to 11:09am, with another 10 minutes or so for the table to propogate down. According to Cogent, they are aware of the event and tracking it under master ticket #571-555. Eric :)
Open WiFi Access Point BCP's???
Anyone have any recommendations for BCPs or software suggestions on running an open community-based access point (or network)? Think: an urban area where potentially lots of people could be popping on and off with little authentication. These seem to be pretty prevalent around Panera's and other things -- I just don't know what they are doing to manage (rather that prevent) P2P and Spam, etc uses. Pointers very appreciated!! Thanks, DJ
Re: Open WiFi Access Point BCP's???
If you want to follow just one rule, it's this:- Instruct your users to never (I mean NEVER) use applications which run over unencrypted protocols. Security first. Abraços, Marlon Borba, CISSP, APC DataCenter Associate Técnico Judiciário - Segurança da Informação TRF 3 Região (11) 3012-1683 -- Dont just sit there and think it does not matter. -Security is the problem we love to ignore. (David Clark, 1992) -- Deepak Jain [EMAIL PROTECTED] 27/4/2007 17:58:28 Anyone have any recommendations for BCPs or software suggestions on running an open community-based access point (or network)? Think: an urban area where potentially lots of people could be popping on and off with little authentication. These seem to be pretty prevalent around Panera's and other things -- I just don't know what they are doing to manage (rather that prevent) P2P and Spam, etc uses. Pointers very appreciated!! Thanks, DJ
Re: Open WiFi Access Point BCP's???
On 4/27/07, MARLON BORBA [EMAIL PROTECTED] wrote: If you want to follow just one rule, it's this:- Instruct your users to never (I mean NEVER) use applications which run over unencrypted protocols. Security first. Abraços, Indeed. If you know ahead of time unencrypted 802.11(whatever) is going to be used, *always* use a VPN or tunnel of some sort to secure your traffic (if the apps you'll be using have no native encryption).
Re: Open WiFi Access Point BCP's???
You can visit the US-CERT website at http://www.us-cert.gov/reading_room/ for overview and recommendations on wireless. Jerry - Original Message - From: Brandon Galbraith To: MARLON BORBA Cc: Deepak Jain ; nanog@merit.edu Sent: Friday, April 27, 2007 7:21 PM Subject: Re: Open WiFi Access Point BCP's??? On 4/27/07, MARLON BORBA [EMAIL PROTECTED] wrote: If you want to follow just one rule, it's this:- Instruct your users to never (I mean NEVER) use applications which run over unencrypted protocols. Security first. Abraços, Indeed. If you know ahead of time unencrypted 802.11(whatever) is going to be used, *always* use a VPN or tunnel of some sort to secure your traffic (if the apps you'll be using have no native encryption).
Re: Open WiFi Access Point BCP's???
On 4/28/07, Deepak Jain [EMAIL PROTECTED] wrote: Anyone have any recommendations for BCPs or software suggestions on running an open community-based access point (or network)? MAAWG BCPs on walled gardens (probably coming soon if not already out there). Quite a few ISPs - Bell Canada for example - are already doing this on a large scale. As these coffee shop APs are usually running off a standard DSL line - its not muni wifi as such - a walled garden should nail abuse very fast, and encourage sensible firewalling on the part of the coffee shop owner .. or he'll find that a NAT'ted IP with multiple infected laptops coming and going out of it might be in and out of a walled garden all the time. There's some vendors who concentrate on walled garden stuff - Perftech (www.perftech.com) for example. Arbor and Sandvine too have kit that can be used for this, I believe .. of course, at the edge of an ISP's DSL network. srs
