[161394] in North American Network Operators' Group
Re: Odd announcement from AS27048
daemon@ATHENA.MIT.EDU (Christopher Morrow)
Tue Mar 12 10:23:36 2013
In-Reply-To: <513F33C8.3060900@pubnix.net>
Date: Tue, 12 Mar 2013 10:23:24 -0400
From: Christopher Morrow <morrowc.lists@gmail.com>
To: ahebert@pubnix.net
Cc: NANOG list <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Tue, Mar 12, 2013 at 9:55 AM, Alain Hebert <ahebert@pubnix.net> wrote:
> Hi,
>
> On the 5th we notice that 27048 was announcing 2 of ours /24
>
> 812 3549 209 721 27064 27047 27047 27047 27048
>
maybe 721 doesn't have prefix AND as-path filters? (or 209 maybe?)
or intentional filtering gone wrong :(
> It lasted about 9h but didn't impact anything due to its prepend and
> such...
>
> My inquiry is:
>
> . False positive?
> . Broken 16b <=> 32b ASN's?
> . Human Error?
> . I should remove my Echelon triggering keywords from my
> personal .sig?
> ( 27048 is part of a US DoD ASN range =D ).
>
> I check around and it happened a few times in the past.
> ( I saw a CIDR report in 2008 where 27048 was announcing 8m+ IP's )
>
> Let me know.
>
> --
> -----
> Alain Hebert ahebert@pubnix.net
> PubNIX Inc.
> 50 boul. St-Charles
> P.O. Box 26770 Beaconsfield, Quebec H9W 6G7
> Tel: 514-990-5911 http://www.pubnix.net Fax: 514-990-9443
>
>
