Bad Internet routing (old bogon list?)

David Bandel david.bandel
Wed Nov 2 11:52:24 PST 2005


Folks,

I've been plagued with a random, but recurring problem:

An IP suddenly cannot browse about 1/3 of the Internet.  Watching
traffic via tcpdump reveals the following:
64.116.183.62.1147 -> 203.115.195.216.80 S .....
64.255.255.0.80 -> 64.116.183.62.1147 S ... ACK
64.116.183.62.1147 -> 64.116.183.80 R

As you can see, something is intercepting the transmission (yes, the
sequence numbers match, 64.255.255.0, which doesn't exist, is
hijacking the connection).

This has now cost me some customers.  I need a way to track this down.
 I put 64.116.183.61 on my system and have a traceroute, but
64.255.255.0 isn't being returned to me, only 64.116.183.62.

And this only happens sometimes to some IPs, but not always. 
Frustrating.  just had a big customer get another connection, and
after seeing this only happened with their connection to me (the other
connection with the other provider worked fine) they cancelled my
service.

Anyone have any clues how to track this down?

TIA,

David A. Bandel
--
Focus on the dream, not the competition.
            - Nemesis Air Racing Team motto



More information about the Linux-users mailing list