24 Sep
2013
24 Sep
'13
1:47 p.m.
On 24.09.2013 01:13, Randy Bush wrote:
as a researcher, how might i measure such a change? how might i tell if some piece of address space has been transferred on the black market?
If we have a strong registry policy and everybody sees the value of keeping the registry updated you look it up in the registry. (must be documented to be a legitimate transaction authorized by the appropriate registrant.) ((but then the colour of the market is probably not meaningful)) If we don't I guess you could look at changes in origin AS, change of hosts and traffic pattern etc.. - but you would have a large error margin both ways. Hans Petter