June 2006 - Ris-int - mailman.ripe.net

[simon@limmat.switch.ch: Re: NCC#2005011655 Suggestion for improvement of myASN alarms]
by arife＠ripe.net 29 Jun '06

29 Jun '06

Hi all, I have put the code on RIS page. Arife ----- Forwarded message from Simon Leinen <simon(a)limmat.switch.ch> ----- From: Simon Leinen <simon(a)limmat.switch.ch> To: Travel <travel(a)ripe.net> Subject: Re: NCC#2005011655 Suggestion for improvement of myASN alarms Date: Wed, 28 Jun 2006 14:09:54 +0200 Cc: Arife Vural <arife(a)ripe.net> Content-Description: message body and .signature Hello Arife (Travel?), > I have fixed this bug, please let me know if you see other > problems. Wonderful, thanks! It was more an "RFE" (request for enhancement) than a bug. I just received my first message with the new AS path column, and found it very useful indeed. Actually, I have a script that I pipe the MyASN alerts through, and that generates a URL for BGPlay, so that I can "replay" what the alert was about. For the last alert, the script generates this URL: http://www.ris.ripe.net/cgi-bin/bgplay.cgi?prefix=130.59.0.0/16&start=2006-… Our (AS559's) peering with Cogent (AS174) flapped twice between 04:25:23 and 04:43:05 UTC. The other flaps before and after this may point to more general problems with Cogents backbone. (I'm attaching the original MyASN alert, and my little Perl script that transforms this into the BGPlay URL.) Thanks again for the change! With kind regards, -- Simon. Content-Description: forwarded message From: myASn Notifications <myasn(a)ripe.net> To: simon(a)limmat.switch.ch Subject: New alarms for 559 Date: Wed, 28 Jun 2006 07:18:52 GMT Dear myASn contact, New alarms were detected for 559. Please find the details below. Depending on your detail level settings you might not see all the events. Please use the web interface for further details. http://www.ris.ripe.net/myasn/ -- myASn system Advanced alarm 1253 (Default), 130.59.0.0/16 (exceptions not shown), \b(3549|3356|286|1299|3320)\s(559)\b, MinED: 1, MinEC: 1, ADW: 3600 .=------+---------------+--------------+----------------+--------------------------+--------------------------+------=. | RRC | Prefix | AS Path | Peer | First seen | Last seen | Count | |=------+---------------+--------------+----------------+--------------------------+--------------------------+------=| | rrc15 | 130.59.0.0/16 | 6140 174 559 | 200.219.130.18 | Wed Jun 28 03:54:23 2006 | Wed Jun 28 03:54:23 2006 | 1 | | rrc15 | 130.59.0.0/16 | 6140 174 559 | 200.219.130.18 | Wed Jun 28 04:01:51 2006 | Wed Jun 28 04:05:58 2006 | 2 | | rrc15 | 130.59.0.0/16 | 6140 174 559 | 200.219.130.18 | Wed Jun 28 04:10:43 2006 | Wed Jun 28 04:15:05 2006 | 2 | | rrc15 | 130.59.0.0/16 | 6140 174 559 | 200.219.130.18 | Wed Jun 28 04:20:12 2006 | Wed Jun 28 04:22:59 2006 | 2 | | rrc15 | 130.59.0.0/16 | 6140 174 559 | 200.219.130.18 | Wed Jun 28 04:30:37 2006 | Wed Jun 28 04:30:37 2006 | 1 | | rrc15 | 130.59.0.0/16 | 6140 174 559 | 200.219.130.18 | Wed Jun 28 04:45:11 2006 | Wed Jun 28 04:45:11 2006 | 1 | '=------+---------------+--------------+----------------+--------------------------+--------------------------+------=' #!/usr/bin/perl -w ### ### Parse MyASN report and generate a BGPlay URL of the form ### http://www.ris.ripe.net/cgi-bin/bgplay.cgi?prefix=195.135.220.0/22&start=20… use strict; use Time::Local; sub parse_message (); sub gmt_to_unix ($ ); sub init_months (); sub unixtime_to_bgplay ($ ); sub make_bgplay_url ($$$$); ## BGPlay this many seconds before the earliest "first seen" ## value in the MyASN alert. ## my $seconds_before_first_seen = 120; ## BGPlay this many seconds after the last "last seen" value in the ## MyASN alert. ## my $seconds_after_last_seen = 300; my $echo = 0; init_months (); my ($prefix, $rrcs, $first, $last) = parse_message (); print make_bgplay_url ($prefix, $rrcs, $first, $last),"\n"; sub parse_message () { my ($very_first, $very_last, @rrcs, %rrcs); my (@colnames, @columns, $columns, $line, $k, $rrc, $prefix, $first, $last); while (<>) { print if $echo; next if /^[.|\']=--+/; warn "Cannot parse $_", next unless ($columns) = m@^\| (.*) \|$@; @columns = map { /^(.*\S+)\s*$/ } split (/ \| /, $columns); if (! $colnames[0]) { @colnames = @columns; } else { $line = {}; for ($k = 0; $#columns >= 0; ++$k) { $line->{$colnames[$k]} = shift @columns; } $prefix = $line->{'Prefix'} or die "missing Prefix column"; $rrc = $line->{'RRC'} or die "missing RRC column"; $first = $line->{'First seen'} or die "missing First seen column"; $last = $line->{'Last seen'} or die "missing Last seen column"; ++$rrcs{$rrc}; $first = gmt_to_unix ($first); $last = gmt_to_unix ($last); $very_first = $first if !defined $very_first or $first < $very_first; $very_last = $last if !defined $very_last or $last > $very_last; } } @rrcs = sort keys %rrcs; return ($prefix, \@rrcs, $very_first-$seconds_before_first_seen, $very_last+$seconds_after_last_seen); } my %ugly_months = (); sub init_months () { my $k = 0; my @pretty_months = qw(Jan Feb Mar Apr May Jun Jul Aug Sep Oct Nov Dec); foreach my $month (@pretty_months) { $ugly_months{$month} = $k++; } } sub gmt_to_unix ($ ) { my ($gmt_string) = @_; my ($wday, $mname, $mon, $mday, $hour, $min, $sec, $year); die "malformed GMT string $gmt_string" unless (($wday, $mname, $mday, $hour, $min, $sec, $year) = $gmt_string =~ m@(Mon|Tue|Wed|Thu|Fri|Sat|Sun) \ (Jan|Feb|Mar|Apr|May|Jun|Jul|Aug|Sep|Oct|Nov|Dec) \ \s*(\d+) \ (\d\d):(\d\d):(\d\d)\ (\d\d\d\d)$@ix); die "unknown month $mname" unless $mon = $ugly_months{$mname}; return timegm ($sec, $min, $hour, $mday, $mon, $year); } sub unixtime_to_bgplay ($ ) { my ($time) = @_; my ($sec,$min,$hour,$mday,$mon,$year,$wday,$yday) = gmtime($time); return sprintf ("%04d-%02d-%02d+%02d:%02d", $year+1900, $mon+1, $mday, $hour, $min); } sub make_bgplay_url ($$$$) { my ($prefix, $rrcs, $first, $last) = @_; my $base_url = "http://www.ris.ripe.net/cgi-bin/bgplay.cgi"; return sprintf ("%s?prefix=%s&start=%s&end=%s", $base_url, $prefix, unixtime_to_bgplay ($first), unixtime_to_bgplay ($last)); } ----- End forwarded message ----- -- Arife Vural SED, RIPE NCC

1 1

Re: at guqia
by Kelcey Cantero 29 Jun '06

29 Jun '06

SAV x E UP TO 5 c 0 % on your PH h AR k MACY http://shesanoud.com <http://shesanoud.com> c V e I f A v G h R i A from x 3 f , u 3 a 3 $ y V x A w L r I v U n M from w 1 k , a 2 u 1 $ b C b I r A g L y I s S from u 3 s , q 7 o 5 $ j X p A s N l A a X from i 1 m , c 4 t 2 $ p A h M h B s I e E v N from g 2 j , s 8 r 9 $ And man q y oth w er . , , , the night he had to pass wet as he was and far from a fire, but the bottle helped him to do that, and he actually dozed a little on some dry leaves, even though the year was getting late and the air was chilly. He woke again with a specially loud sneeze. It was already grey morning, and there was a merry racket down by the river. They were making up a raft of barrels, and the raft-elves would soon be steering

1 0

RISToDo
by arife＠ripe.net 27 Jun '06

27 Jun '06

Hi Guys, I'm compiling RIS ToDo here, http://iii/twiki/bin/view/SED/RISToDo Please have a look at it and let me know if some stuff needs to be added. BTW, I will be on vacation and unpaid leave for July and August. Please contact with other SED staff about RIS related issues. -- Arife Vural SED, RIPE NCC

1 0

RE Hottest new offer You gape for shooting like you had seen in those films�
by Parker 24 Jun '06

24 Jun '06

Good afternoon Look, now it’s possible with this stuff And the results will impress your girl Now you could grant your wish Just take a look: http://ihlmail/gal/ms Worried it won't work? Do you wish to increase your volume by up to 500%?

1 0

RRC12: no DB insertion since mid April?
by Rene Wilhelm 14 Jun '06

14 Jun '06

Hi, Asking RIS DB for more detailed info regarding 2001:440:1880::/48 I was surprised to see only two entries returned vs. the three peers reported by RISwhois. Comparing the results I saw rrc12/DE-CIX was the one missing out; a further check of http://www.ris.ripe.net/cgi-bin/rrcstatus.cgi showed there's not been any data inserted from rrc12 for almost two months now! Are you aware of this? is there some specific, hard to fix, problem with the box? -- Rene

5 6

Re: bejes 495
by Giachetta Klass 13 Jun '06

13 Jun '06

Hi VlAGR az A f se rom on sw ly $ go 3,3 qq 3 P bb rozac Levi tj tra A ah mbien Merid xg ia ClALl qj S f pg rom o va nly $ yf 3,7 tg 5 VALlU zn M fro ei m onl dd y $ oy 1,2 ya 1 Xana ql x Som qc a Sav nk e ove tx r 50 cn % wi qr th u cc s http://www.leoperteas.com _____ As he went forward it grew and grew, till there was no doubt about it. It was a red light steadily getting redder and redder. Also it was now undoubtedly hot in the tunnel. Wisps of vapour floated up and past him and he began to sweat. A sound, too, began to throb in his ears, a sort of bubbling like the noise of a large pot galloping on the fire, mixed with a rumble as of a gigantic tom-cat purring. This grew to the

1 0

test aazy
by Hattie Quintanilla 12 Jun '06

12 Jun '06

Hi, Som nn a Pr td ozac Vl nb AGRA from o zv nly $ nx 3,3 ta 3 V zh ALlUM from on yn ly $ qp 1,2 qo 1 C wf lALlS from o wz nly $ ga 3,7 ck 5 Merid sg ia Levi ny tra Ambi zs en Xa rc nax all 5 ct 0% o di ff http://www.hagraisone.com _____ Bilbo had escaped the goblins, but he did not know where he was. He had lost hood, cloak, food, pony, his buttons and his friends. He wandered on and on, till the sun began to sink westwards-behind the mountains. Their shadows fell across Bilbos path, and he looked back. Then he looked forward and could see before him only ridges and slopes falling towards lowlands and plains glimpsed occasionally between the trees.

1 0