[144398] in North American Network Operators' Group
Re: Saudi Telecom sending route with invalid attributes
daemon@ATHENA.MIT.EDU (Jen Linkova)
Sat Sep 10 19:58:30 2011
In-Reply-To: <CAK5YLgcenPt4iUrHCBH2g0d28+fG7NRKaz+7c6xW3kuRsq04QQ@mail.gmail.com>
Date: Sun, 11 Sep 2011 09:57:04 +1000
From: Jen Linkova <furry13@gmail.com>
To: Aftab Siddiqui <aftab.siddiqui@gmail.com>
Cc: "Jonas Frey \(Probe Networks\)" <jf@probe-networks.de>, nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Sun, Sep 11, 2011 at 8:49 AM, Aftab Siddiqui
<aftab.siddiqui@gmail.com> wrote:
> with in the span of couple of hours this prefix was originated from 3 ASN
> i.e. AS3561 (Savvis), AS8866 (BTC) and AS25019 (STC original custodians).
>
> As per the STC it was orginated by one of their customer having Juniper
> router. but I still don't understand why/how they are adv this prefix wit=
h
> unrecog transitive attributes.
For example, AS_CONFED_SEQUENCE and/or AS_CONFED_SET in AS4_PATH again..;(
> On Sun, Sep 11, 2011 at 3:26 AM, Richard Barnes <richard.barnes@gmail.com=
>wrote:
>
>> Looks like the RIS collectors are seeing it originating mostly from
>> STC and KACST ASNs:
>> <http://stat.ripe.net/212.118.142.0/24>
>>
>> Some of the "show ip bgp" reports on that screen are also showing
>> AS8866 "BTC-AS Bulgarian Telecommunication Company". =A0Not sure what's
>> up with that.
>>
>> --Richard
>>
>>
>>
>> On Sat, Sep 10, 2011 at 2:01 PM, Christopher Morrow
>> <morrowc.lists@gmail.com> wrote:
>> > On Fri, Sep 9, 2011 at 9:26 PM, Kyle Duren <pixitha.kyle@gmail.com>
>> wrote:
>> >> Is this announcement still showing up this way (no easy way to check
>> >> myself).
>> >
>> > ripe ris?
>> >
>> >> -Kyle
>> >>
>> >> On Thu, Sep 8, 2011 at 4:20 PM, Clay Haynes <chaynes@centracomm.net>
>> wrote:
>> >>
>> >>> On Thu, Sep 8, 2011 at 7:11 PM, Jonas Frey (Probe Networks) <
>> >>> jf@probe-networks.de> wrote:
>> >>>
>> >>> > Hello,
>> >>> >
>> >>> > anyone else getting a route for 212.118.142.0/24 with invalid
>> >>> > attributes? Seems this is (again) causing problems with some (olde=
r)
>> >>> > routers/software.
>> >>> >
>> >>> > =A0 =A0 =A0 =A0 =A0 =A0 =A0 Announcement bits (4): 0-KRT 3-KRT 5-R=
esolve tree 1
>> >>> > 6-Resolve tree 2
>> >>> > =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0AS path: 6453 39386 25019 I Unrecog=
nized Attributes:
>> 39
>> >>> > bytes
>> >>> > =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0AS path: =A0Attr flags e0 code 80: =
00 00 fd 88 40 01 01
>> 02
>> >>> > 40 02 04 02 01 5b a0 c0 11 04 02 01 fc da 80 04 04 00 00 00 01 40 =
05
>> 04
>> >>> > 00 00 00 64
>> >>> > =A0 =A0 =A0 =A0 =A0 =A0 =A0 =A0Accepted Multipath
>> >>> >
>> >>> >
>> >>> > -Jonas
>> >>> >
>> >>> >
>> >>> Yup! We're seeing the same thing too, and we're filtering it out.
>> >>> Originating AS is 25019
>> >>>
>> >>> -Clay
>> >>>
>> >>
>> >
>> >
>>
>>
>
--=20
SY, Jen Linkova aka Furry
