[102833] in North American Network Operators' Group
RIPE NCC publishes case study of youtube.com hijack
daemon@ATHENA.MIT.EDU (Tom Quilling)
Fri Feb 29 09:14:12 2008
From: "Tom Quilling" <tier1@ncinet.de>
To: <nanog@merit.edu>
Date: Fri, 29 Feb 2008 15:04:18 +0100
Errors-To: owner-nanog@merit.edu
This is a multi-part message in MIME format.
------=_NextPart_000_000E_01C87AE4.5BD02940
Content-Type: text/plain;
charset="us-ascii"
Content-Transfer-Encoding: 7bit
for those interested in the matter
tom
Dear Colleagues,
As you may be aware from recent news reports, traffic to the youtube.com
website was 'hijacked' on a global scale on Sunday, 24 February 2008. The
incident was a result of the unauthorised announcement of the prefix
208.65.153.0/24 and caused the popular video sharing website to become
unreachable from most, if not all, of the Internet.
The RIPE NCC conducted an analysis into how this incident was seen and
tracked by the RIPE NCC's Routing Information Service (RIS) and has
published a case study at:
http://www.ripe.net/news/study-youtube-hijacking.html
The RIPE NCC RIS is a service that collects Border Gateway Protocol (BGP)
routing information from roughly 600 peers at 16 Internet Exchange Points
(IXPs) across the world. Data is stored in near real-time and can be
instantly queried by anyone to provide multiple views of routing activity
for any point in time.
The RIS forms part of the RIPE NCC's suite of Information Services, which
together provide a deeper insight into the workings of the Internet. The
RIPE NCC is a neutral and impartial organisation, and commercial interests
therefore do not influence the data collected.
The RIPE NCC Information Services suite also includes the Test Traffic
Measurement (TTM) service, the DNS Monitoring (DNSMON) service and
Hostcount. All of these services are available to anyone, and most of them
are offered free of charge.
More information about RIPE NCC Information Services can be found at:
http://is-portal.ripe.net
Regards,
Daniel Karrenberg
Chief Scientist, RIPE NCC
------=_NextPart_000_000E_01C87AE4.5BD02940
Content-Type: text/html;
charset="us-ascii"
Content-Transfer-Encoding: quoted-printable
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Dus-ascii">
<META content=3D"MSHTML 6.00.6000.16608" name=3DGENERATOR></HEAD>
<BODY=20
style=3D"WORD-WRAP: break-word; -webkit-nbsp-mode: space; =
-webkit-line-break: after-white-space">
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D325480014-29022008>for those interested in the =
matter</SPAN></FONT></DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D325480014-29022008></SPAN></FONT> </DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D325480014-29022008>tom</SPAN></FONT></DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D325480014-29022008></SPAN></FONT> </DIV>
<DIV dir=3Dltr align=3Dleft><FONT face=3DArial color=3D#0000ff =
size=3D2><SPAN=20
class=3D325480014-29022008></SPAN></FONT> </DIV><BR>
<BLOCKQUOTE dir=3Dltr style=3D"MARGIN-RIGHT: 0px">
<DIV class=3DOutlookMessageHeader lang=3Dde dir=3Dltr =
align=3Dleft><FONT face=3DArial=20
color=3D#0000ff size=3D2></FONT> </DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">Dear Colleagues,</DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">As you may be aware from recent news =
reports, traffic=20
to the youtube.com website was 'hijacked' on a global scale on Sunday, =
24=20
February 2008. The incident was a result of the unauthorised =
announcement of=20
the prefix 208.65.153.0/24 and caused the popular video sharing =
website to=20
become unreachable from most, if not all, of the Internet.</DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">The RIPE NCC conducted an analysis into how =
this=20
incident was seen and tracked by the RIPE NCC's Routing Information =
Service=20
(RIS) and has published a case study at:</DIV>
<DIV style=3D"MARGIN: 0px">
<DIV style=3D"MARGIN: 0px"><FONT style=3D"FONT: 12px Helvetica" =
face=3DHelvetica=20
size=3D3><A=20
=
href=3D"http://www.ripe.net/news/study-youtube-hijacking.html">http://www=
.ripe.net/news/study-youtube-hijacking.html</A></FONT></DIV></DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">The RIPE NCC RIS is a service that collects =
Border=20
Gateway Protocol (BGP) routing information from roughly 600 peers at =
16=20
Internet Exchange Points (IXPs) across the world. Data is stored in =
near=20
real-time and can be instantly queried by anyone to provide multiple =
views of=20
routing activity for any point in time.</DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">The RIS forms part of the RIPE NCC's suite =
of=20
Information Services, which together provide a deeper insight into the =
workings of the Internet. The RIPE NCC is a neutral and impartial=20
organisation, and commercial interests therefore do not influence the =
data=20
collected.</DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">The RIPE NCC Information Services suite =
also includes=20
the Test Traffic Measurement (TTM) service, the DNS Monitoring =
(DNSMON)=20
service and Hostcount. All of these services are available to anyone, =
and most=20
of them are offered free of charge.</DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">More information about RIPE NCC Information =
Services=20
can be found at:</DIV>
<DIV style=3D"MARGIN: 0px"><A=20
href=3D"http://is-portal.ripe.net">http://is-portal.ripe.net</A></DIV>
<DIV style=3D"MIN-HEIGHT: 14px; MARGIN: 0px"><BR></DIV>
<DIV style=3D"MARGIN: 0px">Regards,</DIV>
<DIV style=3D"MARGIN: 0px">Daniel Karrenberg</DIV>
<DIV style=3D"MARGIN: 0px">Chief Scientist, RIPE NCC</DIV>
<DIV><BR =
class=3Dwebkit-block-placeholder></DIV></BLOCKQUOTE></BODY></HTML>
------=_NextPart_000_000E_01C87AE4.5BD02940--
