Re: [Idr] Unknown Attributes seen in the wild

Jared Mauch <jared@puck.nether.net> Tue, 18 October 2016 17:52 UTC

Return-Path: <jared@puck.nether.net>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id EFCF71295C3 for <idr@ietfa.amsl.com>; Tue, 18 Oct 2016 10:52:16 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -4.633
X-Spam-Level:
X-Spam-Status: No, score=-4.633 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RP_MATCHES_RCVD=-0.431, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id xMZNlproHTZO for <idr@ietfa.amsl.com>; Tue, 18 Oct 2016 10:52:15 -0700 (PDT)
Received: from puck.nether.net (puck.nether.net [IPv6:2001:418:3f4::5]) by ietfa.amsl.com (Postfix) with ESMTP id 6F96E129404 for <idr@ietf.org>; Tue, 18 Oct 2016 10:52:15 -0700 (PDT)
Received: from [IPv6:2620::ce0:101:3849:f195:6e10:a7c7] (unknown [IPv6:2620:0:ce0:101:3849:f195:6e10:a7c7]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (No client certificate requested) by puck.nether.net (Postfix) with ESMTPSA id ECCCA54051B; Tue, 18 Oct 2016 13:52:13 -0400 (EDT)
Content-Type: text/plain; charset=us-ascii
Mime-Version: 1.0 (Mac OS X Mail 10.1 \(3246\))
From: Jared Mauch <jared@puck.nether.net>
In-Reply-To: <01e301d22967$cb3e8c50$61bba4f0$@ndzh.com>
Date: Tue, 18 Oct 2016 13:52:13 -0400
Content-Transfer-Encoding: 7bit
Message-Id: <69BB40FC-7A77-43E2-A80B-C176288A2463@puck.nether.net>
References: <01f401d22950$7f988470$7ec98d50$@ndzh.com> <5806484F.5080006@foobar.org> <6E6CFB88-04E7-45B6-A325-F57A165E901A@pfrc.org> <20161018172538.GD27221@gir.theapt.org> <01e301d22967$cb3e8c50$61bba4f0$@ndzh.com>
To: Susan Hares <shares@ndzh.com>
X-Mailer: Apple Mail (2.3246)
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/ikA-hFFO4xLIJR89nlciRt1rQjg>
Cc: idr@ietf.org, Peter Hessler <phessler@theapt.org>
Subject: Re: [Idr] Unknown Attributes seen in the wild
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Oct 2016 17:52:17 -0000

route-views>sh ip bgp path-attribute unknown 
Network            Next Hop
134.89.0.0         216.218.252.164 
185.104.128.0/24   129.250.0.11    
185.104.129.0/24   129.250.0.11    
185.104.130.0/24   129.250.0.11    
185.104.131.0/24   129.250.0.11    
192.147.168.0      129.250.0.11    
198.17.60.0        216.218.252.164 
198.17.61.0        216.218.252.164 
204.62.150.0/23    208.51.134.254  


e.g.:

134.89.0.0
      unknown transitive attribute: flag 0xE0 type 0x15 length 0x5
        value 1400 0039 72

- Jared


> On Oct 18, 2016, at 1:48 PM, Susan Hares <shares@ndzh.com>; wrote:
> 
> Do we know which routers are sending path attributes with 20 or 21?  
> 
> Sue
> 
> -----Original Message-----
> From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Peter Hessler
> Sent: Tuesday, October 18, 2016 1:26 PM
> To: idr@ietf.org
> Subject: [Idr] Unknown Attributes seen in the wild
> 
> On 2016 Oct 18 (Tue) at 12:28:09 -0400 (-0400), Jeffrey Haas wrote:
> :> On Oct 18, 2016, at 12:05 PM, Nick Hilliard <nick@foobar.org>; wrote:
> :> On a related issue, it would probably be a good idea to run beacon tests
> :> with other path attributes to see how they affect reachability, i.e.
> :> have any other vendors squatted any other path attribute values, and if
> :> large-communities is moved to 31 or 32, will it suffer the same problem?
> :
> :Even passive monitoring is a good start.
> 
> I just did a check of the DFZ, both IPv4 and IPv6, and these are the
> unknown/deprecated attributes on paths that I can see.
> 
> 20 	Connector Attribute (deprecated) 	[RFC6037]
> 21 	AS_PATHLIMIT (deprecated) 	[draft-ietf-idr-as-pathlimit]
> 
> count                      type      flags  len    data in hex
> --------------------------------------------------------------
>  43     Unknown Attribute #20 flags [OTP] len 14: 00 01 00 00 58 d6 00 00
> 02 8e cf d2 8d b5
>   2     Unknown Attribute #21 flags [OTP] len 5: 02 00 00 57 da
>   4     Unknown Attribute #21 flags [OTP] len 5: 07 00 00 2d c8
>   2     Unknown Attribute #21 flags [OTP] len 5: 14 00 00 39 72
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr
> 
> _______________________________________________
> Idr mailing list
> Idr@ietf.org
> https://www.ietf.org/mailman/listinfo/idr