Re: [Idr] Unknown Attributes seen in the wild

"Susan Hares" <shares@ndzh.com> Tue, 18 October 2016 18:17 UTC

Return-Path: <shares@ndzh.com>
X-Original-To: idr@ietfa.amsl.com
Delivered-To: idr@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id B3E991296C9 for <idr@ietfa.amsl.com>; Tue, 18 Oct 2016 11:17:38 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: 0.945
X-Spam-Level:
X-Spam-Status: No, score=0.945 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX=2.845] autolearn=no autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Pc7Q8z2uaWKe for <idr@ietfa.amsl.com>; Tue, 18 Oct 2016 11:17:37 -0700 (PDT)
Received: from hickoryhill-consulting.com (50-245-122-97-static.hfc.comcastbusiness.net [50.245.122.97]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 5D9DB129681 for <idr@ietf.org>; Tue, 18 Oct 2016 11:17:23 -0700 (PDT)
X-Default-Received-SPF: pass (skip=loggedin (res=PASS)) x-ip-name=199.187.221.190;
From: Susan Hares <shares@ndzh.com>
To: 'Peter Hessler' <phessler@theapt.org>
References: <01f401d22950$7f988470$7ec98d50$@ndzh.com> <5806484F.5080006@foobar.org> <6E6CFB88-04E7-45B6-A325-F57A165E901A@pfrc.org> <20161018172538.GD27221@gir.theapt.org> <01e301d22967$cb3e8c50$61bba4f0$@ndzh.com> <20161018175503.GE27221@gir.theapt.org>
In-Reply-To: <20161018175503.GE27221@gir.theapt.org>
Date: Tue, 18 Oct 2016 14:15:39 -0400
Message-ID: <012e01d2296b$a243fd90$e6cbf8b0$@ndzh.com>
MIME-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Mailer: Microsoft Outlook 14.0
Thread-Index: AQGxOA6e5ti/ZI3ng6LJlnwAiipARgH9+98qAfpX1oIBtoIawAKbWoOFAVjr3hWgo0r08A==
Content-Language: en-us
X-Authenticated-User: skh@ndzh.com
Archived-At: <https://mailarchive.ietf.org/arch/msg/idr/thwxEt5gWV9Ttjja6sazKWeEiCE>
Cc: idr@ietf.org
Subject: Re: [Idr] Unknown Attributes seen in the wild
X-BeenThere: idr@ietf.org
X-Mailman-Version: 2.1.17
Precedence: list
List-Id: Inter-Domain Routing <idr.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/idr>, <mailto:idr-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/idr/>
List-Post: <mailto:idr@ietf.org>
List-Help: <mailto:idr-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/idr>, <mailto:idr-request@ietf.org?subject=subscribe>
X-List-Received-Date: Tue, 18 Oct 2016 18:17:39 -0000

Peter: 

A set of ASes, I did not expect.  

AS 22742 = CT-ED-NET (State of Connecticut) 
AS14706 = Monterey Bay Aquarium Research Institute 
AS22490 = The Nerdery, LLC


Caida info: 
http://as-rank.caida.org/?mode0=as-info&mode1=as-table&as=22742
http://as-rank.caida.org/?mode0=as-info&mode1=as-table&as=14706
http://as-rank.caida.org/?mode0=as-info&mode1=as-table&as=22490

Hmm.  This is the wild, wild bgp world.  Hmm. 

Sue 

-----Original Message-----
From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of 'Peter Hessler'
Sent: Tuesday, October 18, 2016 1:55 PM
To: Susan Hares
Cc: idr@ietf.org
Subject: Re: [Idr] Unknown Attributes seen in the wild

For #20, all are coming from AS 22742

For #21, 2 are from AS 14706, 4 are from AS 11720, and 2 from AS 22490.

-peter


On 2016 Oct 18 (Tue) at 13:48:10 -0400 (-0400), Susan Hares wrote:
:Do we know which routers are sending path attributes with 20 or 21?  
:
:Sue
:
:-----Original Message-----
:From: Idr [mailto:idr-bounces@ietf.org] On Behalf Of Peter Hessler
:Sent: Tuesday, October 18, 2016 1:26 PM
:To: idr@ietf.org
:Subject: [Idr] Unknown Attributes seen in the wild
:
:On 2016 Oct 18 (Tue) at 12:28:09 -0400 (-0400), Jeffrey Haas wrote:
::> On Oct 18, 2016, at 12:05 PM, Nick Hilliard <nick@foobar.org> wrote:
::> On a related issue, it would probably be a good idea to run beacon tests
::> with other path attributes to see how they affect reachability, i.e.
::> have any other vendors squatted any other path attribute values, and if
::> large-communities is moved to 31 or 32, will it suffer the same problem?
::
::Even passive monitoring is a good start.
:
:I just did a check of the DFZ, both IPv4 and IPv6, and these are the
:unknown/deprecated attributes on paths that I can see.
:
:20 	Connector Attribute (deprecated) 	[RFC6037]
:21 	AS_PATHLIMIT (deprecated) 	[draft-ietf-idr-as-pathlimit]
:
:count                      type      flags  len    data in hex
:--------------------------------------------------------------
:  43     Unknown Attribute #20 flags [OTP] len 14: 00 01 00 00 58 d6 00 00
02 8e cf d2 8d b5
:   2     Unknown Attribute #21 flags [OTP] len 5: 02 00 00 57 da
:   4     Unknown Attribute #21 flags [OTP] len 5: 07 00 00 2d c8
:   2     Unknown Attribute #21 flags [OTP] len 5: 14 00 00 39 72

_______________________________________________
Idr mailing list
Idr@ietf.org
https://www.ietf.org/mailman/listinfo/idr