BGP Attribute 92 ?

Fri Dec 17 04:53:28 UTC 2010

On 12/16/2010 10:41 PM, Randy Bush wrote:
>>> Unknown BGP attribute 92 (flags: 234)
>>> Hexdump start---
>>>  DD 78 FF 71
>>> Hexdump end ----
>> This appeared to bite my Level3-connected bandwidth as well.
> 
> sigh.  is this an attack by a black hat, or by an rir and researchers
> who do not know how to say "oops, sorreee!?"
> 
> randy
> 

Even weirder, a remote server running SmokePing showed a 11ms increase
in latency from 24ms to 35ms, which started after service was restored,
then a drop at precisely 11:00PM Eastern back to original, lower levels
of latency.

That is,

4:45PM 24ms on Level3
4:50PM to 5:07PM - Level3 outage
5:08PM to 10:59: 35ms on Level3
11:00PM and after: 24ms on Level3

Very odd.

--Patrick