RE: Unusually Long AS Paths today?

["Matthew Williams" <]

Hi there,

Could an update like this cause the %BGP-3-INSUFCHUNKS:... error
considering the extremely long AS-SET?

TIME: 07/03/02 18:16:27 (-2 hrs for UTC) 
TYPE: BGP4MP/MESSAGE/Update
FROM: 195.66.224.54 AS286
TO: 195.66.225.241 AS12654
ORIGIN: INCOMPLETE
ASPATH: 286 3561 23037 [109 122 577 1239 1790 1791 2856 3303 3320 4323
4969 4999 5511 5778 6062 6165 6311 6347 6395 6396 6432 6453 6507 6532
6730 7066 7132 7341 7795 7859 7877 7944 8128 10246 10346 10497 10537
10913 11357 11381 11530 11548 11593 11737 11743 11760 11820 11850 11882
11981 12084 12101 12282 12486 13609 13789 13882 14130 14225 14256 14274
14410 14505 14564 14598 14665 14716 14735 14742 14819 14929 15094 15227
15320 16795 16968 17083 17239 17363 18577 19176 19195 19212 19481 19625
19757 19758 19779 19930 19979 20139 20208 20289 20342 20350 20357 20392
20436 20463 21535 21627 21676 21752 21770 21853 21927 22060 22132 22299
22302 22398 22406 22483 
23070 23125 23168 23180 23183 23239 23253 23364 23435 25614 25821]
NEXT_HOP: 195.66.224.54
AGGREGATOR: AS23037 205.139.73.5
ANNOUNCE
  205.139.72.0/24
  205.139.73.0/24
  206.97.8.0/24  
  206.97.9.0/24  
  206.97.10.0/24 
  206.97.11.0/24 
  206.97.12.0/24 
  206.97.13.0/24 
  206.97.14.0/24 
  206.97.15.0/24 
  208.153.4.0/24 
  208.154.206.0/24
  208.159.54.0/24

* Whois -ra 205.139.72.0/24 => Route object Origin: AS4293 (C&W) =>
AS4293 neither in AS_SEQUENCE or AS_SET
* Whois -ra AS4293 => part of AS assignment AS4287 - AS4298; Internal
ASN for C&W => export: to AS3561, announce AS4293, so AS_SEQUENCE should
be 286_3561_4293
* Traceroute today goes to customer of C&W in NYC

Could it be an attack or just a config error (probably the latter,
cannot find many occurrences)? It seems likely that AS23037 have
re-injected received external BGP routes into their own updates.

It would be nice to hear your comments.

Best regards,
Matthew Williams

---
> Matthew Williams-Bywater (MW243-RIPE)
> Customer Liaison Engineer
> RIPE NCC (www.ripe.net)

-----Original Message-----
From: Philip Smith [
	    
	    
] 
Sent: 04 July 2002 04:11
To: Mike Hughes
Cc: ris@localhost Robert Lister; Chris Fletcher
Subject: Re: Unusually Long AS Paths today?


Hi Mike,

Yes, I saw the same thing on my Japan view and my Australian view....

Jul  4 00:22:53 gw 489200: Jul  4 00:22:52.733 AEST: %BGP-3-INSUFCHUNKS:

Insufficient chunk pools for aspath, requested size 266

But that was the only one... IOS has a silent limit of 255 ASes in the 
AS-path - anything longer than this, afaik, produces this error and the 
update is ignored.

Would be really interesting to see what was actually being attempted
here....

philip
--

At 16:28 03/07/2002 +0100, Mike Hughes wrote:
>Hi guys,
>
>(Philip, copy FYI, in case you see anything interesting too)
>
>I've seen a few reports of the following error on some Ciscos - some
>belonging to LINX members, one of our transit routers, and on a network

>a friend runs in the US (AS6079).
>
>%BGP-3-INSUFCHUNKS: Insufficient chunk pools for aspath, requested size
>266
>
>I wonder if you guys have seen anything like unusually long AS paths in
>your raw data today?
>
>Mike
>--
>Mike Hughes     Network Architect       London Internet Exchange
>mike@localhost   http://www.linx.net/
>      "Only one thing in life is certain: init is Process #1"