On 03/01/2013 10:47 AM, Rock wrote: > On Fri, 01 Mar 2013 10:27:12 -0600, Les Mikesell wrote: >> Those 'looking glass' sites can show you if the bgp >> routes are propagating to various locations. > I saw the reference to the lookingglass site, e.g., > http://www.lookinglass.org > But, I'm sorry ... I'm totally clueless as to how to properly USE them. > > May I ask: > Q: Which of the IP addresses below do I put into lookingglass to gather data? > > Given that these all died as follows: > $ traceroute tempotv.com.tr ==> died on the 23rd hop > 19 82.222.13.145 (82.222.13.145) 262.456 ms 82.222.3.117 (82.222.3.117) 270.129 ms 273.278 ms > 20 82.222.13.106 (82.222.13.106) 276.814 ms 276.812 ms 276.797 ms > 21 82.222.253.82 (82.222.253.82) 273.131 ms 264.450 ms 247.432 ms > 22 82.222.254.210 (82.222.254.210) 247.354 ms 247.362 ms 82.222.224.234 (82.222.224.234) 309.858 ms > 23 asy60.asy53.tellcom.com.tr (92.45.53.60) 326.022 ms 329.493 ms 329.483 ms > 24 * * * (and so on) > > $ traceroute -I www.centos.org ==> died on the 19th (penultimate) hop > 15 ae-6-6.ebr2.LosAngeles1.Level3.net (4.69.148.201) 60.128 ms 62.055 ms 63.873 ms > 16 ae-3-3.ebr3.Dallas1.Level3.net (4.69.132.78) 64.999 ms 56.867 ms 59.059 ms > 17 ae-73-73.csw2.Dallas1.Level3.net (4.69.151.145) 60.437 ms 62.928 ms 57.975 ms > 18 ae-2-70.edge3.Dallas1.Level3.net (4.69.145.72) 59.828 ms 55.071 ms 57.122 ms > 19 LAYERED-TEC.edge3.Dallas1.Level3.net (4.71.170.6) 56.049 ms 65.838 ms 58.644 ms > 20 * * * (and so on) > > $ traceroute www.gu.ac.ir ==> Iran, died on the 22nd hop > 14 rostelecom-ic-300487-ffm-b11.c.telia.net (213.248.96.202) 197.545 ms 197.545 ms 284.625 ms > 15 95.167.92.186 (95.167.92.186) 324.490 ms 324.486 ms 324.468 ms > 16 95.167.14.198 (95.167.14.198) 378.393 ms 378.393 ms 378.378 ms > 17 * * * > 18 195.146.33.29 (195.146.33.29) 369.322 ms 369.306 ms 300.357 ms > 19 78.38.245.228 (78.38.245.228) 300.263 ms 300.264 ms 306.080 ms > 20 78.38.244.250 (78.38.244.250) 290.148 ms 300.201 ms 300.198 ms > 21 89.221.87.25 (89.221.87.25) 338.022 ms 338.042 ms 337.997 ms > 22 95.38.120.254 (95.38.120.254) 330.673 ms 330.681 ms 330.669 ms > 23 * * * (and so on) > > $ traceroute www.gu.edu.pk ==> Pakistan, died on the 19th hop > 10 charter-peer.sv1.layer42.net (69.36.225.18) 45.929 ms 48.200 ms 48.191 ms > 11 bbr02snjsca-bue-6.snjs.ca.charter.com (96.34.3.2) 48.173 ms 50.328 ms 52.805 ms > 12 bbr01dnvrco-bue-2.dnvr.co.charter.com (96.34.0.3) 81.440 ms 81.442 ms 81.423 ms > 13 bbr01olvemo-bue-1.olve.mo.charter.com (96.34.0.145) 112.975 ms 112.900 ms 112.801 ms > 14 bbr01blvlil-tge-0-15-0-4.blvl.il.charter.com (96.34.0.111) 129.811 ms 129.811 ms 93.669 ms > 15 bbr01atlnga-tge-0-0-0-9.atln.ga.charter.com (96.34.0.120) 122.469 ms 122.468 ms 146.517 ms > 16 crr01sghlga-bue-3.sghl.ga.charter.com (96.34.2.71) 123.937 ms 123.943 ms 127.972 ms > 17 acr02atlnga-tge-0-0-0-0.atln.ga.charter.com (96.34.72.179) 130.189 ms 132.137 ms 132.136 ms > 18 75-131-187-34.static.gwnt.ga.charter.com (75.131.187.34) 129.996 ms 129.998 ms 129.978 ms > 19 67.23.161.143 (67.23.161.143) 129.894 ms 129.873 ms 129.859 ms > 20 * * * (and so on) > > $ traceroute -m 255 www.tourism.gov.my ==> Malaysia died on the 19th hop > 11 gi9-0-0.cr2.nrt1.asianetcom.net (202.147.50.134) 244.797 ms 244.804 ms 244.797 ms > 12 ge-0-0-0-0.gw3.nrt4.asianetcom.net (202.147.0.226) 215.347 ms 215.348 ms 220.710 ms > 13 61.8.59.22 (61.8.59.22) 267.994 ms 268.004 ms 267.960 ms > 14 ge-2-3-0-0.sin-64cbe-1a.ntwk.msn.net (207.46.41.75) 325.436 ms 259.629 ms 259.605 ms > 15 10.22.212.213 (10.22.212.213) 217.562 ms 10.22.212.209 (10.22.212.209) 273.695 ms ge-5-2-0-0.sin-64cbe-1b.ntwk.msn.net (207.46.41.26) 265.336 ms > 16 10.175.56.241 (10.175.56.241) 265.273 ms * 10.175.56.49 (10.175.56.49) 272.494 ms > 17 10.175.61.5 (10.175.61.5) 282.798 ms 10.175.60.7 (10.175.60.7) 248.975 ms 10.241.90.205 (10.241.90.205) 258.597 ms > 18 10.78.236.2 (10.78.236.2) 258.541 ms 10.78.220.2 (10.78.220.2) 211.475 ms 10.241.88.59 (10.241.88.59) 220.578 ms > 19 * * 10.78.246.2 (10.78.246.2) 239.054 ms > 20 * * * (and so on) We have a dynamic iptables blocking script on the site that adds IPs that do lots of nmap scans, try to do xss, spam the forums, etc. If you e-mail me your IP at johnny@xxxxxxxxxx off list, I'll take a look and see if you are being blocked by that. Thanks, Johnny Hughes
Attachment:
signature.asc
Description: OpenPGP digital signature
_______________________________________________ CentOS mailing list CentOS@xxxxxxxxxx http://lists.centos.org/mailman/listinfo/centos