[Outages-discussion] [outages] Spectrum/LTWC Ohio/KY

Jared Mauch jared at puck.nether.net
Tue Sep 7 19:34:59 EDT 2021


Starting around 1646 UTC there started to be some BGP instability out there in the internet, it looks to be related to announcements that originated from this network (as7713)

TIME: 09/07/21 17:17:06.677443
TYPE: BGP4MP_ET/MESSAGE/Update
FROM: 85.114.0.217 AS8492
TO: 128.223.51.102 AS6447
ORIGIN: IGP
ASPATH: 8492 31133 7713
NEXT_HOP: 85.114.0.217
   UNKNOWN_ATTR(224, 255, 22): 00 00 07 db 00 00 00 01 00 01 00 0a ff 08 00 00 00 00 5a f0 eb 10
COMMUNITY: 8492:1104 8492:1602
ANNOUNCE
  36.75.168.0/21
  36.84.8.0/22
  36.68.116.0/22
  36.85.104.0/22
  36.85.100.0/22
  36.75.164.0/22
  36.75.176.0/23
  110.136.150.0/23
  180.242.72.0/23

It seemed to subside about an hour later at 17:43 UTC.  This caused increased BGP churn you can see in graphs like this that monitor BGP announcements (add).




- Jared

> On Sep 7, 2021, at 7:08 PM, Ross Tajvar <ross at tajvar.io> wrote:
> 
> Care to elaborate on the attributes in question?
> 
> On Tue, Sep 7, 2021, 7:05 PM Jared Mauch via Outages <outages at outages.org> wrote:
> Sorry just saw this. I think this may have been related to some unknown BGP attributes today and I expect their BGP was flapping as a result.
> 
> Sent from my TI-99/4a
> 
>> On Sep 7, 2021, at 6:24 PM, Ben Groves via Outages <outages at outages.org> wrote:
>> 
>> 
>> Per Spectrum NOC, the issue has been resolved.
>> "The Spectrum Enterprise NOC confirmed that a routing issue was found by Spectrum Enterprise Engineering team once corrected the severe packet loss and intermittent connectivity that customers were experiencing. This will serve as the final notification for this event. "
>> 
>> On Tue, Sep 7, 2021, 1:14 PM Josh Luthman via Outages <outages at outages.org> wrote:
>> Looks like there is an issue with the coax network.
>> > /tool traceroute 1.1.1.1
>>  # ADDRESS                          LOSS SENT    LAST     AVG    BEST   WORST
>>  1 142.254.145.13                   9.8%  143 timeout    13.5     7.9   100.7
>>  2 24.29.6.105                      9.1%  143  24.3ms    42.4    13.4   226.8
>>  3 65.29.36.238                     10..  143  14.1ms    19.7     9.8   179.4
>>  4 65.29.1.46                        14%  143    25ms    27.2    16.7    95.6
>>  5 66.109.6.66                      10..  143  34.1ms    30.7    23.8   141.6
>>  6 66.109.3.24                      13..  143  26.6ms    35.4    24.5     202
>>  7 209.18.43.59                     8.4%  143  28.3ms    30.7    24.3    95.1
>>  8 173.245.63.56                    12..  143  42.2ms    39.3    27.5   135.5
>>  9 172.70.44.4                      11..  142  43.5ms    35.1    24.2   161.6
>> 10 1.1.1.1                          6.3%  142  44.1ms    33.4    24.1   149.8
>> 11 1.1.1.1                            0%    1  26.1ms    26.1    26.1    26.1
>> 
>> 
>> Fiber DIA seems just fine to me.
>> 
>>  > /tool traceroute 1.1.1.1
>>  # ADDRESS                          LOSS SENT    LAST     AVG    BEST   WORST
>>  1 10.10.10.1                         0%  171   0.3ms     0.3     0.3     3.6
>>  2 192.149.254.1                      0%  171   0.4ms     0.4     0.3     1.3
>>  3 74.218.88.129                      0%  171     2ms     1.4     0.6    31.9
>>  4 65.189.190.189                     0%  171   8.7ms    10.4     0.8   143.4
>>  5 65.29.38.112                       0%  171  14.2ms    12.5     8.3    16.9
>>  6 65.29.1.46                         0%  170  11.4ms     9.6     8.2    14.9
>>  7 66.109.6.12                        0%  170  17.5ms    16.5    16.1      20
>>  8 66.109.3.24                        0%  170  16.9ms    17.1    16.5    42.2
>>  9 209.18.43.59                       0%  170  26.2ms    20.2    16.2    64.7
>> 10 24.30.200.73                       0%  170  20.4ms    31.1    16.7    89.4
>> 11 172.70.44.2                        0%  170  17.2ms    19.5    16.6    72.3
>> 12 1.1.1.1                            0%  170  16.2ms    16.4    16.2    31.5
>> 
>> Josh Luthman
>> 24/7 Help Desk: 937-552-2340
>> Direct: 937-552-2343
>> 1100 Wayne St
>> Suite 1337
>> Troy, OH 45373
>> 
>> 
>> On Tue, Sep 7, 2021 at 1:09 PM Savarrah Goss via Outages <outages at outages.org> wrote:
>> https://app.fing.com/internet/outage/DROP:US-Ohio--Spectrum%20Business@2021-09-07-1650-00000
>> 
>>  
>> 
>> Savarrah Goss | Hamilton Relay
>> 
>> O: 229.338.7086 | C: 229.854.8872 | Savarrah.Goss at hamiltonrelay.com | HamiltonRelay.com
>> 
>> 
>> 
>>   Hamilton Relay  |   @HamiltonRelay
>> 
>>  
>> 
>> From: Outages <outages-bounces at outages.org> On Behalf Of Mike Markwood via Outages
>> Sent: Tuesday, September 7, 2021 1:00 PM
>> To: 'outages at outages.org' <outages at outages.org>; Neader, Brent <Brent.Neader at druryhotels.com>
>> Subject: Re: [outages] Spectrum/LTWC Ohio/KY
>> 
>>  
>> 
>> **This email originated from outside of the Hamilton network.  Please use extra caution with links and attachments. **
>> 
>> We're seeing our Spectrum cable modem customers across Northeast Ohio bouncing as well as Columbus, OH and a few customers in TN. 
>> 
>>  
>> 
>> Mike Markwood | Director of Network Operations
>> P: 866.986.1066  E: mmarkwood at geostarllc.net
>> 
>> 1000 S. Cleveland Massillon Road, Suite 3
>> Fairlawn, OH 44333
>> 
>> 
>> 
>>  
>> 
>> From: Outages <outages-bounces at outages.org> on behalf of Neader, Brent via Outages <outages at outages.org>
>> Sent: Tuesday, September 7, 2021 12:52 PM
>> To: 'outages at outages.org' <outages at outages.org>
>> Subject: [outages] Spectrum/LTWC Ohio/KY
>> 
>>  
>> 
>> Seeing enterprise DIA sites drop off and come back repeatedly in these areas, Dayton, Cinci, Cleveland, Middletown, Louisville.
>> 
>> 
>> 
>> 
>> 
>> CONFIDENTIALITY NOTE: This email and any attachments are confidential and may be protected by legal privilege. If you have received this email in error, please immediately notify the sender by return email and delete all copies of this email.
>> _______________________________________________
>> Outages mailing list
>> Outages at outages.org
>> https://puck.nether.net/mailman/listinfo/outages
>> _______________________________________________
>> Outages mailing list
>> Outages at outages.org
>> https://puck.nether.net/mailman/listinfo/outages
>> _______________________________________________
>> Outages mailing list
>> Outages at outages.org
>> https://puck.nether.net/mailman/listinfo/outages
> _______________________________________________
> Outages mailing list
> Outages at outages.org
> https://puck.nether.net/mailman/listinfo/outages

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/outages-discussion/attachments/20210907/44b47af9/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: Screen Shot 2021-09-07 at 2.28.16 PM.png
Type: image/png
Size: 93558 bytes
Desc: not available
URL: <https://puck.nether.net/pipermail/outages-discussion/attachments/20210907/44b47af9/attachment-0001.png>


More information about the Outages-discussion mailing list