Anomalies with AS13214 ?

Mon May 11 19:00:04 UTC 2009

Hello,

Jay Hennigan wrote:
> We're getting cyclops[1] alerts that AS13214 is advertising itself as
> origin for all of our prefixes.  Their anomaly report shows thousands of
> prefixes originating there.
> 
> Anyone else seeing evidence of this or being affected?

I have also seen this today for our prefixes where Cyclops reported the as path
"48285 13214". After sending an e-mail to both ASN I got the following answer
from AS48285:

"Our transit 13214 had interesting router problems affecting bgp
origins for the entire bgp table. The next-hop and thus routing was
still working fine though.

Since we collect bgp data from several transits and announce it to
multiple route servers and for our own publicly available bgp-tools,
it looked worse than it was, but as far as we can tell it was actually
never propagated by them to the Internet except to downstreams, where
traffic still worked, although via an unusually short path."

Regards,

Christian Seitz
Network Operations