Cloudfare believes the routes were withdrawn: Beginning at 1026 UTC, routes were withdrawn for PCCW. The routing shifted primarily to Turk Telekom. Routes to Telecom Italia and TATA were also withdrawn, but has less of an impact. Then, at 1029 UTC, routes were withdrawn for Turk Telekom. After that, Syria was effectively cut off from the Internet. (Note that the remaining path that appears to be present in the video is an anomaly. We have confirmed that it is not actually active.) While we cannot know for sure, our network team estimates that Syria likely has a small number of edge routers. All the edge routers are controlled by Syrian Telecommunications. The systematic way in which routes were withdrawn suggests that this was done through updates in router configurations, not through a physical failure or cable cut. http://blog.cloudflare.com/how-syria-turned-off-the-internet BGPMon also talks about routes being withdrawn: http://www.bgpmon.net/syria-shuts-down-the-internet/ I wish those who directly peer with AS29256 would/could share their router logs. Did they see their BGP sessions timeout or were there BGP UPDATEs? Frank From: outages-bounces@outages.org [mailto:outages-bounces@outages.org] On Behalf Of Grant Ridder Sent: Thursday, November 29, 2012 9:16 PM To: Josh Luthman Cc: Carl Brooks; outages@outages.org Subject: Re: [outages] Syria off the net Did they physically disconnect? or just disable eBGP? -Grant On Thu, Nov 29, 2012 at 8:38 PM, Josh Luthman <josh@imaginenetworksllc.com <mailto:josh@imaginenetworksllc.com> > wrote: Using ASN numbers you can see that a tiny piece is back. http://www.renesys.com/blog/2012/11/syria-off-the-air.shtml Josh Luthman Office: 937-552-2340 <tel:937-552-2340> Direct: 937-552-2343 <tel:937-552-2343> 1100 Wayne St Suite 1337 Troy, OH 45373 On Thu, Nov 29, 2012 at 9:24 PM, Sanjeev Gupta <sanjeev@dcs1.biz <mailto:sanjeev@dcs1.biz> > wrote: On Fri, Nov 30, 2012 at 1:55 AM, Carl Brooks <carl.brooks@tier1research.com <mailto:carl.brooks@tier1research.com> > wrote: Can anyone on the list confirm/expand? Cutting off web traffic isn't cutting off network access. This is not blocking web, or a kind of traffic. This is switching off power to the routers that connect Syrian ISPs to the rest of the world. For all we can tell, domestic traffic may still be flowing. A similar case last year, in Egypt, see: http://bit.ly/65w20v -- Sanjeev Gupta +65 98551208 <tel:%2B65%2098551208> http://sg.linkedin.com/in/ghane _______________________________________________ Outages mailing list Outages@outages.org <mailto:Outages@outages.org> https://puck.nether.net/mailman/listinfo/outages _______________________________________________ Outages mailing list Outages@outages.org <mailto:Outages@outages.org> https://puck.nether.net/mailman/listinfo/outages