[107394] in North American Network Operators' Group

home help back first fref pref prev next nref lref last post

Re: 198.32.64.12 -- Harmless mis-route or potential exploit?

daemon@ATHENA.MIT.EDU (bmanning@vacation.karoshi.com)
Wed Sep 3 08:48:41 2008

Date: Wed, 3 Sep 2008 12:48:30 +0000
From: bmanning@vacation.karoshi.com
To: Christopher Morrow <morrowc.lists@gmail.com>
In-Reply-To: <75cb24520809021908h6114592dsfd2f2bb4be657235@mail.gmail.com>
Cc: Todd Underwood <todd-nanog@renesys.com>, nanog@merit.edu
Errors-To: nanog-bounces@nanog.org

On Tue, Sep 02, 2008 at 10:08:10PM -0400, Christopher Morrow wrote:
> On 9/2/08, Todd Underwood <todd-nanog@renesys.com> wrote:
> 
> >  checking our current data, that block is not currently routed by any
> >  of our peers over the last month (i would assume ripe ris and
> >  routeviews report similar data, but i did not check them.
> 
> it's also probably worth stating that parts of 198.32/16 are never
> routed anywhere on the Internet (here comes bill to tell me 'who's
> Internet?' .....). Some is in use on private networks, some is in use
> at exchange points and not routed outside the immediate peers.

	grump... ok...  "who's internet"?

> Most times, as I recall, epnet does a decent job of keeping the whois
> data or rdns data updated though, for things in use. (though possibly
> not for private uses)

	rdns moreso that whois...  
> 
> -chris


home help back first fref pref prev next nref lref last post