Is it time to abandon bogon prefix filters?

Thu Aug 7 22:59:20 UTC 2008

rob,

> If the source of a scan or probe is a bogon, we tag it that way in our
> data store.  I went back to 2008-01 and found the following percentages
> of bogons in our data:
> 
>    2008-01: 0.001095262%
>    2008-02: 0.001759343%
>    2008-03: 0.001619555%
>    2008-04: 0.001433908%
>    2008-05: 0.001182351%
>    2008-06: 0.130534559%
>    2008-07: 0.002327683%
>    2008-08: 0.001258054% (thus far)

this is an extremely far cry from 60%.  what am i not understanding?

and can you separate reserved (127, ...) and unallocated?

randy