March 2015 - ripe-atlas - mailman.ripe.net

Wrong IP prefix values accepted?
by Stephane Bortzmeyer 05 Jul '15

05 Jul '15

It seems there is no protection against wrong prefixes? See measurement #1897909, which started with JSON: {'definitions': [{'query_class': 'IN', 'description': 'DNS resolution of jihadmin.com from prefix foobar', 'af': 4, 'query_argument': 'jihadmin.com', 'query_type': 'A', 'type': 'dns', 'is_oneoff': True, 'recursion_desired': True, 'use_probe_resolver': True}], 'probes': [{'requested': 3, 'type': 'prefix', 'value': 'foobar'}]}

2 5

Prototype of "Traceroute-consistency-check" completed
by Valentino Di Donato 31 Mar '15

31 Mar '15

Hello everybody, just to be fair I completed my prototype with the idea reported in my presentation. Everything is on github here: https://github.com/vdidonato/Traceroute-consistency-check This is just a snapshot: Best, Valentino -- Valentino Di Donato Department of Engineering <http://ingegneria.uniroma3.it> Roma Tre University <http://www.uniroma3.it/> Phone: +39.06.57333215 Fax: +39.06.57333612 www.dia.uniroma3.it/~didonato <http://www.dia.uniroma3.it/%7Edidonato> didonato(a)dia.uniroma3.it <mailto:didonato@dia.uniroma3.it>

1 0

New on RIPE Labs: Amsterdam Power Outage as Seen by RIPE Atlas
by Vesna Manojlovic 31 Mar '15

31 Mar '15

Dear colleagues, As you might have heard, there was a power outage last week Friday in the north of The Netherlands, a country with a very high density of RIPE Atlas probes. This density provides us with some interesting data and visualisation. You can find more details on RIPE Labs: https://labs.ripe.net/Members/andreas_strikos/amsterdam-power-outage-as-see… Kind regards, Vesna

2 1

probes on VMs
by Klaus Darilion 30 Mar '15

30 Mar '15

Hi! I just found an old thread about virtual probes: https://www.ripe.net/ripe/mail/archives/ripe-atlas/2013-June/000849.html I second the problems of virtual hosts and that the results may not as good as other probes result, but there is a big advantage for virtual probes - I can host them in the cloud. For example, I just wanted to debug routing issues from the Microsoft Cloud in Brazil to our server. Unfortunately there are no probes in this Cloud's AS. With a virtual probe it would be quite easy. I order an VM with Microsoft, and have my probe in the chosen datacenter. The probe could be tagged with "VM" to show that it is running on shared resources. Of course the VM will produce extra costs, but there may be sponsors, and the smallest VM is usually enough. For example , one possibility would be, that the sponsor donates the money, e.g. 10-20€ per month, and chooses the cloud location. RIPE will then rent the VMs and run the probes. With several sponsors we could get a nice cloud coverage, and we could deploy probes in networks where the provider does not want to hosts physical probes. regards Klaus

4 4

NAT conntrack invalid ICMP(v4) type 11 code 0 packets dropped by edge router
by Gary Gapinski 30 Mar '15

30 Mar '15

2 1

Create new measurement from old measurment
by Klaus Darilion 30 Mar '15

30 Mar '15

Hi! Is there a simple way in the webinterface to start a new measurement identical to an old one? (just duplicate them with new start-stop settings, in my case I want to duplicate one-off measurements) Thanks Klaus

2 2

Short and immediate report from the RIPE Atlas hackathon
by Vesna Manojlovic 30 Mar '15

30 Mar '15

We had the first RIPE Atlas hackathon! Three days of intensive coding, cooperating, learning, connecting and having fun (& surviving massive power outage on Friday in Amsterdam) - - and the results have bee impressive! Ten final projects have been presented, and four have been chosen as worthy of the awards: 1. Disco: Combining the visalization of disconnection-events with localized Twitter feed & live weather data 2. Spatial Bucketing of RIPE Atlas Probes on Map Projections (aka Picketty — making the global probe selection more equal) 3. Traceroute stability check & BGP+traceroute (two projects sharing the 3rd place) We had 24 participants & 1 no-show, 6 jury members and 11 support staff (coincidentally: 42!) On behalf of the community, we are grateful to Comcast for sponsoring prizes and travel expenses, hackerspace Technologia Incognita for the inspiring location on Friday, and to RIPE NCC for the office facilities during the weekend, staff support, food & drinks & amazing data & tools & platform of RIPE Atlas. On behalf of the organizers (RIPE NCC & Comcast), we are grateful to everyone who took part & contributed, as well as to their family & employers, who let them get away for the weekend of combined work&fun. Longer and more detailed report will follow, once we all get some sleep & collect our notes from tweets, IRC, mailing list & pieces of papers. Cheers, Vesna

2 1

What to do with RIPE Atlas probes that have only a ULA as IPv6 address?
by Philip Homburg 27 Mar '15

27 Mar '15

Dear community members, The RIPE Atlas team has a question what to do with probes that have only a Unique Local IPv6 Unicast Address (ULA) [RFC4193] as their IPv6 address. The question is whether to treat those probes as IPv6 capable or not. It is known that about 10% of the RIPE Atlas probes that have IPv6 addresses do not actually have IPv6 connectivity. This was documented by Stéphane Bortzmeyer in his RIPE Labs article "How Many RIPE Atlas Probes Believe They Have IPv6 (But Are Wrong)?" (https://labs.ripe.net/Members/stephane_bortzmeyer/how-many-atlas-probes-bel…) As a way of dealing with this problem, the RIPE Atlas system now tags probes that have broken IPv6. Any probe that has an IPv6 address (other than link local) but cannot reach the global internet is tagged as "IPv6 Doesn't Work" (see https://atlas.ripe.net/docs/probe-tags/) At the moment, around 2800 probes are connected and have an IPv6 address. Of those probes, around 350 (12.5%) are tagged that IPv6 doesn't work. Of those 350 probes, 114 have the surprising condition that the connect system call fails immediately with the error 'Network is unreachable.' Those 114 probes have two things in common, they have only a ULA address and the do not have a default route. It is the lack of default route that causes the connect system call to fail immediately. This feature (ULA and no default route) is specified in RFC-7084 (IPv6 CE Router Requirements) requirement ULA-5 ("An IPv6 CE router MUST NOT advertise itself as a default router with a Router Lifetime greater than zero whenever all of its configured and delegated prefixes are ULA prefixes.") The surprising thing is that for some probes this condition persists for many months. For the Atlas project, the question is how we should treat these probes. Currently they are regarded as having broken IPv6 connectivity. However, an alternative is to consider those probes as having no IPv6 at all. Broader questions are: are CPEs doing the right thing here. Should a CPE announce a ULA on the local LAN even if there hasn't been any IPv6 internet connectivity for a very long time? It is already complex enough for normal users to understand that there is always a link local IPv6 address even if there is no IPv6 connectivity. Now we have to add ULA to that group as well. So the question to the community, should RIPE Atlas treat ULAs in the same way as RFC-1918, addresses that should be ignored unless a valid global address can be found elsewhere. Or should we keep the current approach where ULAs are treated just like other global IPv6 addresses and consider the probe host's network setup to be broken? Philip

15 31

Paris-traceroute flow identifier
by Ibrahim Coskun 26 Mar '15

26 Mar '15

Hello, This is Ibrahim Ethem Coskun from University of Nevada, Reno. I'm currently working on an Internet Measurement project with Professor Mehmet Hadi Gunes. We are modifying paris-traceroute's source code and set the flow identifier of each packet (both sending and returning packets) to a constant value for every traces. So that, we want a trace to follow the same path whenever we traceroute the same target. However, I get the below warning messages from each probe : paris-traceroute -T 500 -i -l -M 5 -p icmp -r 44000 -a hopbyhop -n " + target_ip [WARN](TracertImpl.cc, 335)ICMP reserved words 0 0 0 0 0 [WARN](TracertImpl.cc, 330)Bad return flow id 0xd24e from 4.69.152.80 So, what does this warning mean, I checked the source code but couldn't find and information regarding this issue, I also email paris-traceroute team, but no responses. I googled my question and found a similar question emailed to to you ( https://www.ripe.net/ripe/mail/archives/ripe-atlas/2012-July/000534.html). I would be very pleased if you can answer my question. Thank you;

2 1

FranceIX ( Paris, France) has joined RIPE Atlas Anchors
by Alastair Strachan 26 Mar '15

26 Mar '15

Dear RIPE Atlas users, We're happy to announce that another RIPE Atlas anchor has joined the network and is now available as a target for probe hosts conducting their own user-defined measurements. The new anchor is called fr-par-as57734 and it is hosted by FranceIX in Paris, France. Anchoring measurements (ping, ping6, traceroute and traceroute6) are scheduled towards this anchor from all the other anchors as well as several hundred probes, providing a continual overview of regional reachability. Results of these measurements are available as raw data in JSON format, and visualised on the map and "seismograph" with many configurable features. You can access the anchoring measurements for all anchors at: https://atlas.ripe.net/anchors/list/ <https://atlas.ripe.net/anchors/list/> Learn more about RIPE Atlas anchors at: https://atlas.ripe.net/about/anchors/ <https://atlas.ripe.net/about/anchors/> Thank you for participating in RIPE Atlas! Kind Regards, RIPE Atlas Team

1 0

CarrierColo / IPB GmbH in (Berlin, Germany) has joined RIPE Atlas Anchors
by Alastair Strachan 25 Mar '15

25 Mar '15

Dear RIPE Atlas users, We're happy to announce that another RIPE Atlas anchor has joined the network and is now available as a target for probe hosts conducting their own user-defined measurements. The new anchor is called de-ber-as20647 and it is hosted by CarrierColo / IPB GmbH in Berlin, Germany. Anchoring measurements (ping, ping6, traceroute and traceroute6) are scheduled towards this anchor from all the other anchors as well as several hundred probes, providing a continual overview of regional reachability. Results of these measurements are available as raw data in JSON format, and visualised on the map and "seismograph" with many configurable features. You can access the anchoring measurements for all anchors at: https://atlas.ripe.net/anchors/list/ <https://atlas.ripe.net/anchors/list/> Learn more about RIPE Atlas anchors at: https://atlas.ripe.net/about/anchors/ <https://atlas.ripe.net/about/anchors/> Thank you for participating in RIPE Atlas! Kind Regards, RIPE Atlas Team

1 0

Feedback about the new webinterface
by Klaus Darilion 20 Mar '15

20 Mar '15

Hi! First, thanks for the new web interface. I really like how you show the most important parts of the results, e.g. decoding the NSID for DNS measurements, and showing the traceroute with editable geolocation. Nevertheless I have some feedback: On https://atlas.ripe.net/probes/, when I search for probes matching "6939", I get the results in a list view of matching probes. In the list view, I can see the probe's ASN. But when the result set is small (e.g. 2 probes only), I do not get a "list view" but view with bigger "thumbnails", but missing the ASN information. Also viewing the details of a probe does not reveal the probes ASN. Similar with IP addresses. When viewing the results of a measurement on the map, if a click on a probe I get the probe's IP addresses. But when watching a probe's details I can not see the IP addresses of the probe. For me it is strange to get the probe's IPs and ASN not when watching the probe's details. This is quite some interesting info when selecting probes or when analyzing why the result from a certain probe was bad. Thanks Klaus

1 0

SwissIX Internet Exchange (Glattbrugg, Switzerland) has joined RIPE Atlas Anchors
by Alastair Strachan 19 Mar '15

19 Mar '15

Dear RIPE Atlas users, We're happy to announce that another RIPE Atlas anchor has joined the network and is now available as a target for probe hosts conducting their own user-defined measurements. The new anchor is called ch-gtg-as20612 and it is hosted by SwissIX Internet Exchange in Glattbrugg, Switzerland Anchoring measurements (ping, ping6, traceroute and traceroute6) are scheduled towards this anchor from all the other anchors as well as several hundred probes, providing a continual overview of regional reachability. Results of these measurements are available as raw data in JSON format, and visualised on the map and "seismograph" with many configurable features. You can access the anchoring measurements for all anchors at: https://atlas.ripe.net/anchors/list/ <https://atlas.ripe.net/anchors/list/> Learn more about RIPE Atlas anchors at: https://atlas.ripe.net/about/anchors/ <https://atlas.ripe.net/about/anchors/> Thank you for participating in RIPE Atlas! Kind Regards, RIPE Atlas Team

1 0

Exact semantics of DNS' use_probe_resolver
by Stephane Bortzmeyer 17 Mar '15

17 Mar '15

The DNS-specific option use_probe_resolver is mentioned in <https://atlas.ripe.net/docs/measurement-creation-api/> but with little indication of the semantics. My experience is that some probes (with the default retry=0) return several responses, with the same "prb_id", but different "from". I assume it means the probe had several resolvers configured and tried them all. Am I correct? It may question some conclusions of <https://labs.ripe.net/Members/stephane_bortzmeyer/how-many-ripe-atlas-probe…>. Is there an option to switch to the more typical behaviour of a DNS client (try the first resolver configured and switch to the second if the first does not reply)?

2 2

Visualising RIPE Atlas Anchor Measurements
by Vesna Manojlovic 17 Mar '15

17 Mar '15

Dear colleagues, Salim Gasmi, one of the RIPE Atlas anchor hosts, visualised the measurements collected by the RIPE Atlas anchor. This monitoring page is publicly available and allows to analyse topology changes and helps debugging network issues. Please find more details on RIPE Labs: https://labs.ripe.net/Members/salim_gasmi/visualising-ripe-atlas-anchor-mea… Kind regards, Vesna

1 0

Re: [atlas] Please set your NIC handle for your RIPE Atlas anchor
by Paul Vlaar 17 Mar '15

17 Mar '15

Dear RIPE Atlas staff, I'm a little confused. I need to add a NIC handle, you say. "What is a NIC handle? A NIC handle is the unique identifier of a person. It is basically the person's unique ID and it helps to keep different people with the same name apart from each other. Whenever a person object is referenced in another object, they are referenced by their NIC handle ("nic-hdl:") and not by their name. See an example person object" How can a handle meant for a person be used for a machine? Is this correct? Thanks, Paul Vlaar Afilias On 11/3/15 12:59 PM, RIPE Atlas (no reply) wrote: > Dear Paul Vlaar, > > We noticed that you haven't added the NIC handle for your RIPE Atlas > anchor yet. Could you please add it as soon as possible? > > NIC handles are objects in the RIPE Database that contain contact > information. Having this information available for all anchors will > make it easier for other anchor hosts or members of the community to > communicate with one another by finding the appropriate technical or > administrative contacts. > > If you don't already have a NIC handle, you can learn more about what > it is and how to create one in the RIPE Database here: > http://www.ripe.net/lir-services/new-lir/first-steps-as-a-ripe-ncc-member#c… > > > Once you have a NIC handle, you can enter it on the RIPE Atlas > website under “My Atlas” > “Anchors” > "View". > > For any questions or issues with the creation of your NIC handle, > please contact ripe-dbm(a)ripe.net. > > Kind regards, > > Michela Galante RIPE Atlas Team RIPE NCC atlas(a)ripe.net > -- Paul Vlaar DNS Infrastructure Group Afilias e-mail: pvlaar(a)afilias.info phone: +1-416-673-4078

2 2

Re: [atlas] Probe #1047
by Ben Vaux 16 Mar '15

16 Mar '15

I had my Probe drop out a few times, I replaced the Apple USB Power Supply with a new one and it seem better now. Best regards, Ben Vaux From: Ben Choy <ben.choy(a)hkirc.hk> Date: Friday, 13 March 2015 06:16 To: "ripe-atlas(a)ripe.net" <ripe-atlas(a)ripe.net> Subject: [atlas] Probe #1047 Dear RIPE, Our probe #1047 has been playing up lately eg. keep dropping out after a few hours even after power cycle. Any chance of getting a replacement if we sent it back. BTW, it is one of the “Old” v1. Cheers. Benjamin ChoyProject Manager (System & Network)Hong Kong Internet Registration Corporation Limited (HKIRC) http://www.hkirc.hk <http://www.hkirc.hk/> http://互聯網註冊.香港 <http://互聯網註冊.香港/> Hong Kong Domain Name Registration Company Limited (HKDNR) http://www.hkdnr.hk <http://www.hkdnr.hk/> http://域名註冊.香港 <http://域名註.香港/> Tel: +852 2319 1313 / Fax: +852 2319 2626 / Direct: +852 2319 3819 / Email: ben.choy(a)hkirc.hk <http://www.hkirc.hk/> The information in this email is confidential and may be legally privileged. If you are not the intended recipient, please notify the sender immediately and then delete this e-mail entirely. You must not retain, copy, distribute or use this e-mail for any other purpose not intended by this email or disclose any of its content to others. The recipient should check the email and attachment for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email.PROTECT OUR ENVIRONMENT - think before printing!

1 0

Probe #1047
by Ben Choy 13 Mar '15

13 Mar '15

Dear RIPE, Our probe #1047 has been playing up lately eg. keep dropping out after a few hours even after power cycle. Any chance of getting a replacement if we sent it back. BTW, it is one of the “Old” v1. Cheers. [hkirc] Benjamin Choy Project Manager (System & Network) Hong Kong Internet Registration Corporation Limited (HKIRC) http://www.hkirc.hk<http://www.hkirc.hk/> http://互聯網註冊.香港<http://互聯網註冊.香港/> Hong Kong Domain Name Registration Company Limited (HKDNR) http://www.hkdnr.hk<http://www.hkdnr.hk/> http://域名註冊.香港<http://域名註.香港/> Tel: +852 2319 1313 / Fax: +852 2319 2626 / Direct: +852 2319 3819 / Email: ben.choy(a)hkirc.hk [cid:image002.png@01CEAE2D.C3DA7B80]<http://www.hkirc.hk/> The information in this email is confidential and may be legally privileged. If you are not the intended recipient, please notify the sender immediately and then delete this e-mail entirely. You must not retain, copy, distribute or use this e-mail for any other purpose not intended by this email or disclose any of its content to others. The recipient should check the email and attachment for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. PROTECT OUR ENVIRONMENT - think before printing!

1 0

Internet Exchange Nepal (NPIX) has joined RIPE Atlas anchors
by Michela Galante 10 Mar '15

10 Mar '15

Dear RIPE Atlas users, We're happy to announce that another RIPE Atlas anchor has joined the network and is now available as a target for probe hosts conducting their own user-defined measurements. The new anchor is called np-ktm-as45170 and it is hosted by the Internet Exchange Nepal (NPIX) in Kathmandu, Nepal, and sponsored by APNIC. Anchoring measurements (ping, ping6, traceroute and traceroute6) are scheduled towards this anchor from all the other anchors as well as several hundred probes, providing a continual overview of regional reachability. Results of these measurements are available as raw data in JSON format, and visualised on the map and "seismograph" with many configurable features. You can access the anchoring measurements for all anchors at: https://atlas.ripe.net/anchors/list/ Learn more about RIPE Atlas anchors at: https://atlas.ripe.net/about/anchors/ Thank you for participating in RIPE Atlas! Kind Regards, RIPE Atlas Team atlas(a)ripe.net

1 0

Mistakenly sent "please register your probe" emails
by Robert Kisteleki 05 Mar '15

05 Mar '15

Dear RIPE Atlas users, As part of our regular development schedule, the development team rolled out a new version of the infrastructure components yesterday. As a side-effect, due to a mistake on our end, some users received emails urging them to register their probe(s), even though this has already been done. If you got such a mail although you've done your part, then please ignore this mail. Our apologies for the confusion. Regards, Robert Kisteleki

1 0