Bell Canada outage?

Wed Aug 8 19:55:15 UTC 2012

On Aug 8, 2012, at 3:50 PM, Andree Toonk wrote:

> Hi,
> 
> .-- My secret spy satellite informs me that at 12-08-08 11:35 AM  Darius
> Jahandarie wrote:
>> On Wed, Aug 8, 2012 at 2:31 PM, Zachary McGibbon
>> <zachary.mcgibbon+nanog at gmail.com> wrote:
>>> Anyone at Bell Canada / Sympatico can tell us what's going on?  Our routing
>>> table is going nuts with Bell advertising a lot of routes they shouldn't be
>> 
>> Bell leaked a full table. To add to the fun, it seems that TATA took
>> the full table and releaked it.
> 
> A quick analysis leads met to believe AS46618 ( Dery Telecom Inc) is the
> cause of this. AS46618 is dual homed to VIDEOTRON and Bell. What seems
> to have happened is that they leaked routes learned from VIDEOTRON to Bell.
> 
> Based on BGP data I see that at 17:27 UTC  AS46618 ( Dery Telecom Inc)
> started to leak a 'full table', or at least a significant chunk of it to
> its provider Bell AS577.
> Bell propagated that to it's peers. Tata was one of the ones that
> accepted all of that.
> 
> I can see that Bell propagated at least 74,109 prefixes learned from
> AS46618 to Tata. Tata selected 70,160 of those routes.

Taking a cursory look at the data processed by my now (very old) leak
auditing tool, this should give you an idea of the size of the impact...

bgp=# select count(*) from leakinfo where aprox_time::date='2012-08-08';
 count 
-------
 21212
bgp=# select count(*) from leakinfo where aprox_time::date='2012-08-07';
 count 
-------
  3681
bgp=# select count(*) from leakinfo where aprox_time::date='2012-08-06';
 count 
-------
  2428

You can see details of this at the leak info page here:

http://puck.nether.net/bgp/leakinfo.cgi

- Jared