Home page logo
/

nanog logo nanog mailing list archives

Re: Bell Canada outage?
From: Zachary McGibbon <zachary.mcgibbon+nanog () gmail com>
Date: Wed, 8 Aug 2012 16:34:55 -0400

Ouch!! That's a lot! What do you think the outcome of this will be?  What
do you think that Bell did/will do (hopefully) to fix this so it doesn't
happen again?

On Wed, Aug 8, 2012 at 4:31 PM, Andree Toonk <andree+nanog () toonk nl> wrote:

Further analysis shows that there were actually 107,409 prefixes
affected of 14,391 unique origin ASn's.

Interested if your prefixes was affected?
I've uploaded a list of prefixes and ASn's that were leaked here:
http://www.bgpmon.net/bell-leak.txt

Cheers,
 Andree



.-- My secret spy satellite informs me that at 12-08-08 12:50 PM  Andree
Toonk wrote:
Hi,

.-- My secret spy satellite informs me that at 12-08-08 11:35 AM  Darius
Jahandarie wrote:
On Wed, Aug 8, 2012 at 2:31 PM, Zachary McGibbon
<zachary.mcgibbon+nanog () gmail com> wrote:
Anyone at Bell Canada / Sympatico can tell us what's going on?  Our
routing
table is going nuts with Bell advertising a lot of routes they
shouldn't be

Bell leaked a full table. To add to the fun, it seems that TATA took
the full table and releaked it.

A quick analysis leads met to believe AS46618 ( Dery Telecom Inc) is the
cause of this. AS46618 is dual homed to VIDEOTRON and Bell. What seems
to have happened is that they leaked routes learned from VIDEOTRON to
Bell.

Based on BGP data I see that at 17:27 UTC  AS46618 ( Dery Telecom Inc)
started to leak a 'full table', or at least a significant chunk of it to
its provider Bell AS577.
Bell propagated that to it's peers. Tata was one of the ones that
accepted all of that.

I can see that Bell propagated at least 74,109 prefixes learned from
AS46618 to Tata. Tata selected 70,160 of those routes.


Cheers,
 Andree












  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault