Mark, Couple of suggestions/questions: -- Could you break out the ASes that are contribute to these graphs? Something like second graph on the Renesys blog entry [1], and/or links to the individual AS pages within RIPEstat or REX. Same would be great for prefixes, but maybe not practical. -- Is this page being automatically updated as things progress? It will be interesting to see how things come back. (If they come back?) Thanks for keeping up with this, though. Cheers, --Richard [1] <http://www.renesys.com/blog/2011/01/egypt-leaves-the-internet.shtml> On Jan 30, 2011, at 9:29 AM, Mark Dranse wrote:

On 28/01/2011 14:05:56, Mirjam Kuehne wrote:

...

Dear colleagues,

We did some analysis of the situation in Egypt using the RIPEstat toolbox:

http://labs.ripe.net/Members/akvadrako/live_eqyptian_internet_incident_analy...

This page is now updated with a second graph showing visible prefix count. Again, this is updating regularly.

We appreciate all of your feedback and comments.

Mark

-- Mark Dranse RIPE NCC

Definitely, this is the kind of effort and coverage I appreciate and expect from this working group. The measurement and visualization of these abnormal events provide easy to share insight, very hard to achieve otherwise. As Mark just pointed out, effort duplication is something to avoid in first place, but I do think, also, that putting all the interesting and meaningful graphs in one single place favours the analysis of the event in question, mostly for the not so trained eyes. Not only that, but also duplication of graphs may be worth when using different datasources, as I presume is the case of Renesys and RIPEstat. We might see the case where, the same analysis yield unexpectedly different results, which would in turn raise more questions: food for thought. Seems to me this working group has its own reason for existence pretty much justified as it is essential to understand the network. In summary, my humble opinion is that the development, design and promotion of a tool like RIPEstat (bringing together measurement data from Atlas, DNSmon, RRCs, TTM boxes and external datasets), that can be used for such different purposes as abnormal event analysis or delay and loss heatmaps, is pretty much the way to go. Just the two cents of an enthusiastic student PS: I hope I stood on-topic. First post around here On 1/30/11, Mark Dranse <markd@ripe.net> wrote:

Hi Richard,

On 30/01/2011 17:21:02, Richard L. Barnes wrote:

...

Couple of suggestions/questions:

-- Could you break out the ASes that are contribute to these graphs? Something like second graph on the Renesys blog entry [1], and/or links to the individual AS pages within RIPEstat or REX. Same would be great for prefixes, but maybe not practical.

It's possible, but I'm reluctant to duplicate other work. We can look at the complexity/benefit in business hours tomorrow.

...

-- Is this page being automatically updated as things progress? It will be interesting to see how things come back. (If they come back?)

It is being updated regularly via an automated process, so do please keep checking http://stat.ripe.net/egypt, and it will track the re-emergence of the Egyptian Internet.

...

Thanks for keeping up with this, though.

You're welcome, we feel that this is a useful contribution to the community. With a good level of support and interest, we can justify investing more in such activities in the future.

I would be delighted to hear feedback from other list members on this topic. Is this the sort of work you want to see from the RIPE NCC? Can we alter or improve it to serve and inform you better?

Regards,

Mark

-- Mark Dranse RIPE NCC

-- Iñigo Ortiz de Urbina Cazenave http://www.twitter.com/ioc32

my extremely crass view. cute pictures, but ... someone turned the lights out. how much time and energy are we going to put into measuring the base, diameter, screw pitch, ... of the flipping light bulb? they threw the bleedin' switch! what am i actually going to learn here? the issues are above layer seven. tarek kamel, a workshop student of mine in about '93, sold his sould to the devil years ago. the idea of him resisting the order is silly. i presume he has been removed, so we can not even hope he has the chance to redeem himself as things change. what are the implications of this class of government actions on us as operators? note that the american domain industrial complex caved to the clearly illegal request to block domain names without court orders. so do not be fooled that this is just an issue in openly repressive cultures. isoc seems to have made a policy statement. should the rirs? randy

About what we are doing: There is much mis-information and conjecture going on. Therefore it is important to get measurable facts out there in real time. We are being careful with analysis and conscious about not causing further breakage. But there is value in documenting the facts. About ISOC: It is ISOC's role to make policy statements supporting "The Internet is for Everyone!" and as an ISOC trustee I fully support that. About what the RIRs could do: I am not sure if it would be appropriate for the RIPE NCC to make policy statements on this issue. What would be the legitimacy of such statements? What would they do to the neutrality of the RIPE NCC? RIPE making a statement is an entirely different matter. That process is best started by enlisting support among the RIPE community, on the RIPE list and by talking to the chair. Daniel

Mark Dranse wrote:

...

-- Is this page being automatically updated as things progress? It will be interesting to see how things come back. (If they come back?)

It is being updated regularly via an automated process, so do please keep checking http://stat.ripe.net/egypt, and it will track the re-emergence of the Egyptian Internet.

For your information, we've made further updates to this page: - The rolling graph was getting quite wide, so the main graphs now shows just the last day or so. These graphs are updating roughly every 15 minutes. - We've archived the original removal/withdrawal event graphs further down the page for posterity. - We've added in some more methodology details, and links to the list of prefixes and AS numbers which our data is based on. As ever, we welcome feedback on this work. Regards Mark -- Mark Dranse RIPE NCC