irrtoolset Digest, Vol 14, Issue 2

Sat Jan 2 16:36:05 UTC 2010

Hi
thank you very much for such valuable insights and useful links.

Profound Regards
Akmal

--- On Sat, 1/2/10, irrtoolset-request at lists.isc.org <irrtoolset-request at lists.isc.org> wrote:

> From: irrtoolset-request at lists.isc.org <irrtoolset-request at lists.isc.org>
> Subject: irrtoolset Digest, Vol 14, Issue 2
> To: irrtoolset at lists.isc.org
> Date: Saturday, January 2, 2010, 12:00 PM
> Send irrtoolset mailing list
> submissions to
>     irrtoolset at lists.isc.org
> 
> To subscribe or unsubscribe via the World Wide Web, visit
>     https://lists.isc.org/mailman/listinfo/irrtoolset
> or, via email, send a message with subject or body 'help'
> to
>     irrtoolset-request at lists.isc.org
> 
> You can reach the person managing the list at
>     irrtoolset-owner at lists.isc.org
> 
> When replying, please edit your Subject line so it is more
> specific
> than "Re: Contents of irrtoolset digest..."
> 
> 
> Today's Topics:
> 
>    1. Re: How can i generate the AS path
> from IRR data same as
>       found in BGP (Nick Hilliard)
>    2. Re: How can i generate the AS path
> from IRR data same as
>       found in BGP (S.P.Zeidler)
>    3. Re: How can i generate the AS path
> from IRR data same as
>       found in BGP (Doug Montgomery)
> 
> 
> ----------------------------------------------------------------------
> 
> Message: 1
> Date: Fri, 01 Jan 2010 13:00:22 +0000
> From: Nick Hilliard <nick at inex.ie>
> Subject: Re: How can i generate the AS path from IRR data
> same as
>     found in BGP
> To: irrtoolset at lists.isc.org
> Message-ID: <4B3DF1E6.4020802 at inex.ie>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> On 01/01/2010 07:52, Akmal Shahbaz wrote:
> > How similar do you think the paths would be from BGP
> and IRR data?
> 
> If you're looking for anecdotal indications of how close
> the IRR and DFZ
> bgp paths look, I maintain two peering matrices for INEX
> (IXP in Dublin),
> one of which uses netflow to detect bgp traffic between
> routers (slightly
> overestimates peering) and the other which uses the RIPE
> IRRDB.  Both are
> updated daily.
> 
> You can take a look at them here:
> 
> https://www.inex.ie/technical/peeringmatrix
> https://www.inex.ie/technical/peeringmatrix-ripe-irrdb
> 
> In an ideal world, you would expect the two to look the
> same, or even
> roughly similar.
> 
> We also use various IRRBs for pulling prefix origin
> information (i.e.
> route: and route6: objects).  We have measured this
> data against actual
> prefix announcements to our route servers and have found
> that there is a
> pretty good correlation between the two.  We haven't
> automated this yet to
> search for differences, but some day we'll do this.
> 
> Nick
> 
> 
> ------------------------------
> 
> Message: 2
> Date: Fri, 1 Jan 2010 14:33:13 +0100
> From: "S.P.Zeidler" <spz at serpens.de>
> Subject: Re: How can i generate the AS path from IRR data
> same as
>     found in BGP
> To: Akmal Shahbaz <akmal_shahbaz at yahoo.com>
> Cc: irrtoolset at isc.org
> Message-ID: <20100101133312.GX19220 at serpens.de>
> Content-Type: text/plain; charset=us-ascii
> 
> Hi,
> 
> Thus wrote Akmal Shahbaz (akmal_shahbaz at yahoo.com):
> 
> > >> How similar do you think the paths would be
> from BGP and IRR data?
> > > they are both ordered non-null sets of positive
> numbers drawn from the
> > > range 1..32k
> > 
> > so that means they can't be the same..
> 
> Not quite. It is not impossible that they are the same,
> there's just no
> guarantee that they would have a relationship.
> 
> >    Due to IRR consistency issues ?? or why?
> 
> a) people never bothering to enter their data
> b) third parties entering data for other people (in
> databases that don't
>    prevent this)
> c) noone bothering with clean-up (especially in case b)
> d) decreasing availability of necessary knowledge as
> struggling providers
>    exchange their skilled employees for
> cheaper ones. I.e. not only
>    clueless end users (that's normal), but
> also clueless transit providers
> 
> The closer you are to an ISP or ISPs that filter their
> customer prefixes
> and aspaths on IRR data, the better the data is likely to
> be.
> 
> regards,
>     spz
> -- 
> spz at serpens.de
> (S.P.Zeidler)
> 
> 
> ------------------------------
> 
> Message: 3
> Date: Fri, 01 Jan 2010 11:09:10 -0500
> From: Doug Montgomery <dougm at nist.gov>
> Subject: Re: How can i generate the AS path from IRR data
> same as
>     found in BGP
> To: Akmal Shahbaz <akmal_shahbaz at yahoo.com>
> Cc: irrtoolset at isc.org
> Message-ID: <4B3E1E26.40901 at nist.gov>
> Content-Type: text/plain; charset=ISO-8859-1
> 
> Akmal,
> 
> We have looked at this a bit recently.  You might find
> some of the
> papers and presentations below of interest.
> 
> http://www.antd.nist.gov/bgp_security/
> 
> We have tried to look at the completeness and consistency
> of RIR and IRR
> data sets and as part of that evaluation compared the data
> to BGP trace
> data.
> 
> Note that our focus was preliminarily on anomaly detection
> WRT route
> origination.   We did not look at other
> aspects of path validation.
> 
> dougm
> 
> 
> Akmal Shahbaz wrote:
> > Thanx Randy for your reply.
> > 
> >>> How similar do you think the paths would be
> from BGP and IRR data?
> >> they are both ordered non-null sets of positive
> numbers drawn from the
> >> range 1..32k
> > 
> > so that means they can't be the same..
> >    Due to IRR consistency issues ?? or why?
> >    
> > I have reviewed some of the previous work like
> Nemecis,RIPE RRCC,Univ.of Roma Analysis of RIR.What i have
> found is most of the work is on evaluating the consistency
> of IRR's.There are some other works on using IRR along with
> BGP and traceroute's to generate the topology of internet.
> > 
> > AS i am first year phd student at Seoul National
> University,Korea and working on BGP Security.For that i want
> to evaluate how i can use IRR data?Currently i think most of
> the people (if they use ) IRR data is to generate router
> configuration files.What are other uses of this data?
> ofcourse other than the usual looking up contact information
> etc..
> > 
> > Thank you.
> > 
> > Akmal
> > 
> > 
> > --- On Fri, 1/1/10, Randy Bush <randy at psg.com>
> wrote:
> > 
> >> From: Randy Bush <randy at psg.com>
> >> Subject: Re: How can i generate the AS path from
> IRR data same as found in BGP
> >> To: "Akmal Shahbaz" <akmal_shahbaz at yahoo.com>
> >> Cc: irrtoolset at isc.org
> >> Date: Friday, January 1, 2010, 9:14 AM
> >>>> How similar do you think the
> >> paths would be from BGP and IRR data?
> >>> they are both ordered non-null sets of
> positive
> >> numbers drawn from the
> >>> range 1..32k
> >> s/32/64/
> >>
> > 
> > 
> >       
> > 
> > _______________________________________________
> > irrtoolset mailing list
> > irrtoolset at lists.isc.org
> > https://lists.isc.org/mailman/listinfo/irrtoolset
> 
> -- 
> +----------------------------------------------------------------------+
> | Doug Montgomery           
> Mgr. Internet & Scalable Systems Research |
> | Advanced Network Technologies Division 
>    http://www.antd.nist.gov/ |
> | National Institute of Standards & Technology 
> Email:  dougm at nist.gov |
> | 100 Bureau Drive           
>                
>   Voice: +1-301-975-3630 |
> | Gaithersburg, MD 20899-8920 USA     
>      
>    Fax:   +1-301-975-6238 |
> +----------------------------------------------------------------------+
> 
> 
> 
> ------------------------------
> 
> _______________________________________________
> irrtoolset mailing list
> irrtoolset at lists.isc.org
> https://lists.isc.org/mailman/listinfo/irrtoolset
> 
> End of irrtoolset Digest, Vol 14, Issue 2
> *****************************************
> 