China prefix hijack

Fri Apr 9 17:17:23 UTC 2010

"Martin A. Brown" <mabrown at renesys.com> writes:

> Just a note of confirmation that 23724 originated as many as 31847 
> prefixes during an 18 minute window starting around 15:54 UTC.  
> They were prepending their own AS, and this is several orders of 
> magnitude more prefixes than they normally originate.

a couple of times when CIX still existed, i fscked up badly and sent
a full deaggregated table to some peers.  (the perils of running BGP3
and BGP4 on the same router, plus on-the-job-training for yours truly.)

it's also happened a half dozen times by fat fingers other than mine.

then there are the people who advertise 0/0, and all the people who accept
0/0.  historians may say of the nanog@ m/l archives, "much hilarity ensued."

are we all freaking out especially much because this is coming from china
today, and we suppose there must be some kind of geopolitical intent
because china-vs-google's been in the news a lot today?

i'm more inclined to blame the heavy solar wind this month and to assume
that chinanet's routers don't use ECC on the RAM containing their RIBs and
that chinanet's router jockeys are in quite a sweat about this bad publicity.
-- 
Paul Vixie
KI6YSY