[155439] in North American Network Operators' Group
Re: Bell Canada outage?
daemon@ATHENA.MIT.EDU (Jared Mauch)
Wed Aug 8 15:55:50 2012
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <5022C2F6.4080400@toonk.nl>
Date: Wed, 8 Aug 2012 15:55:15 -0400
To: andree@toonk.nl
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Aug 8, 2012, at 3:50 PM, Andree Toonk wrote:
> Hi,
>=20
> .-- My secret spy satellite informs me that at 12-08-08 11:35 AM =
Darius
> Jahandarie wrote:
>> On Wed, Aug 8, 2012 at 2:31 PM, Zachary McGibbon
>> <zachary.mcgibbon+nanog@gmail.com> wrote:
>>> Anyone at Bell Canada / Sympatico can tell us what's going on? Our =
routing
>>> table is going nuts with Bell advertising a lot of routes they =
shouldn't be
>>=20
>> Bell leaked a full table. To add to the fun, it seems that TATA took
>> the full table and releaked it.
>=20
> A quick analysis leads met to believe AS46618 ( Dery Telecom Inc) is =
the
> cause of this. AS46618 is dual homed to VIDEOTRON and Bell. What seems
> to have happened is that they leaked routes learned from VIDEOTRON to =
Bell.
>=20
> Based on BGP data I see that at 17:27 UTC AS46618 ( Dery Telecom Inc)
> started to leak a 'full table', or at least a significant chunk of it =
to
> its provider Bell AS577.
> Bell propagated that to it's peers. Tata was one of the ones that
> accepted all of that.
>=20
> I can see that Bell propagated at least 74,109 prefixes learned from
> AS46618 to Tata. Tata selected 70,160 of those routes.
Taking a cursory look at the data processed by my now (very old) leak
auditing tool, this should give you an idea of the size of the impact...
bgp=3D# select count(*) from leakinfo where =
aprox_time::date=3D'2012-08-08';
count=20
-------
21212
bgp=3D# select count(*) from leakinfo where =
aprox_time::date=3D'2012-08-07';
count=20
-------
3681
bgp=3D# select count(*) from leakinfo where =
aprox_time::date=3D'2012-08-06';
count=20
-------
2428
You can see details of this at the leak info page here:
http://puck.nether.net/bgp/leakinfo.cgi
- Jared=
