[nsp-sec] 94.125.216.0/21 - ASN 47868 SUPRO-AS

[Hank Nussbacher]

At 12:49 PM 17-02-09 -0700, Mike Lewinski wrote:

I have maxas=50 and got the following message on Feb 16:
Feb 16 18:23:45: %BGP-6-ASPATH: Long AS path 8551 8551 8551 8551 8551 8551 
8551 8551 8551 8551 8551 3356 29113 47868 47868 47868 47868 47868 47868 
47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
47868 47868 received from 128.139.247.2: More than configured MAXAS-LIMIT

BGP did not reset on 12.2(18)SXE6b.

-Hank

>Not working on Feb 16:
>
>Feb 16 09:24:27 lsvl-gw-1 328: Feb 16 09:24:27 MST: %BGP-6-ASPATH: Long AS 
>path 209 3356 29113 47868 47868 47868 47868 47868 47868 47868 47868 47868 
>47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
>47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
>47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
>47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
>47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 47868 
>47868 47868 47868 47868 47868 47868 47868 47868 received from 
>63.224.65.109: Has more than 255 AS
>
>Feb 16 09:24:27 lsvl-gw-1 329: Feb 16 09:24:27 MST: %BGP-5-ADJCHANGE: 
>neighbor 63.224.65.109 Down BGP Notification sent
>
>Feb 16 09:24:27 lsvl-gw-1 330: Feb 16 09:24:27 MST: %BGP-3-NOTIFICATION: 
>sent to neighbor 63.224.65.109 3/11 (invalid or corrupt AS path) 516 bytes 
>50020200 02FF00D1 0D1C71B9 BAFCBAFC BA
>
>I actually removed the " bgp maxas-limit 75" when things started to crash, 
>thinking that maybe it was causing the problem somehow. It made no 
>difference at all to have it or not.
>
>
>
>_______________________________________________
>nsp-security mailing list
>nsp-security at puck.nether.net
>https://puck.nether.net/mailman/listinfo/nsp-security
>
>Please do not Forward, CC, or BCC this E-mail outside of the nsp-security
>community. Confidentiality is essential for effective Internet security 
>counter-measures.
>_______________________________________________