Topic
Network-resource Evidence
Within the Topic facet, Network-resource Evidence topic intelligence connects articles that share a specific subject, signal focus, or monitoring theme. The page gives readers a richer path through related reporting, source evidence, market actors, and infrastructure implications, with enough context to understand why the topic matters across company movements, governance decisions, regional exposure, and operational risk. Readers can compare recurring signals, affected organisations, public evidence, market context, service continuity, procurement, competition, compliance, and strategic planning questions behind the subject instead of stopping at a thin list of matching articles. It explains what the topic covers, which infrastructure actors or policies are involved, what evidence supports the coverage, and why the subject may matter for operators, customers, investors, and policy readers.
Story
AFRINIC's IPv6 Monitor Shows What Its 54% Contains
A routing dashboard now distinguishes an advertised allocation prefix from routes to smaller pieces of it. Its South Africa data show why that distinction is useful—and why neither the combined total nor the narrower category is a service-quality score.
History
The Database Said One Address. The Reply Followed the Packet Back: RFC 1445
The address book and the live packet disagreed. For a new request, the 1993 SNMPv2 administrative model used the address recorded for the destination. For the reply, it ordered something else: use the transport domain and address from which this request actually arrived, even if…
History
The Clock Went Back. The Key Had to Change: RFC 1446
After a power failure, an SNMP agent wakes with yesterday’s shared secret and a clock that thinks yesterday has not happened yet. A captured request, previously too old to accept, can become “recent” again. Its digest never changed. The receiver’s boundary of acceptable time did.…
History
The Key Changed Before the Reply Arrived. The Manager Had to Remember Both: RFC 1446
The agent had already installed the new secret. Its reply was built with that new value. The manager, still waiting for the reply before changing its own database, continued to trust the old one. RFC 1446 made this awkward interval explicit: a secure command could succeed at its…
Story
One Prefix, Two Countries in LACNIC’s Geofeed
A public location feed repeats 23 prefixes, four with conflicting country codes. The useful repair is narrower than deciding where the networks are: stop a loading rule from masquerading as geographic evidence.
CASE FILE
The Name Stayed the Same. The Module Did Not: RFC 9890
RFC 9890 makes a small registry correction with a large evidentiary consequence: a YANG module keeps its name and XML namespace across revisions, so identity alone can never tell an operator which definitions a system actually uses.
IETF
Mukul Srivastava and the BMP Gauge That Counted a RIB but Did Not See a Route
A number can be both useful and radically incomplete. RFC 9972 gives BMP operators a more precise way to report how many routes occupy a named RIB view at a particular moment. It does not turn that count into a route record, a policy explanation or a delivery observation. Mukul…
History
The Module Kept Its Name. The Device Did Not Prove Its Version: RFC 1442
A monitoring console can display a MIB module's latest revision date with complete confidence and still know almost nothing about the code answering from a particular device. RFC 1442 gave SNMP information modules a stable identity and a disciplined memory of change. It also drew…
IETF
A DNS Cookie Supplies Return-Path Evidence, Not Client Identity
A valid DNS Server Cookie can show that a requester at a source address is returning a value issued in an earlier exchange. That is useful evidence against off-path forgery. It is not a login, a durable device identifier or permission to attach a person’s name to the query.
Story
ARIN’s Reverse-DNS Controls Follow the Parent Block
A customer’s address range does not tell an operator where the reverse-DNS handoff belongs. ARIN’s direct-allocation rules put the editing boundary higher in the tree than a downstream inventory may suggest.
History
The Same Application Crossed Two Versions. The Proxy Changed the Operation: RFC 1452
The application asked for a bulk retrieval. The old agent never saw one. Between them, a bilingual manager consulted a local database, selected SNMPv1, zeroed two fields and changed the PDU into a single next-step request. RFC 1452 called the result transparent to the…
Story
What Comes After ARIN’s Empty Whois Replies
ARIN resolved a problem with some Whois queries in August. For anyone whose tools retained a suspect result, the next task is different: checking the local copy without turning a failed observation into a registration verdict.
Creators
Stefan Savage and measuring cybercrime as a system
Stefan Savage’s research repeatedly replaced isolated attack stories with measurements of traffic, supply chains, incentives and failure paths. From DDoS and network worms to spam, payment networks, cloud infrastructure and connected vehicles, the method is consistent: identify…
CASE FILE
The Slice Identifier Reached the Transport Edge. The Guarantee Still Had to Be Built: RFC 9889
RFC 9889 turns 5G network slicing into a chain of accountable translations: the mobile domain can name a slice, but the transport domain must still classify traffic, allocate resources, install state and prove the resulting service.
Creators
Stefan Savage and the measurement of cybercrime as a system
Stefan Savage’s research repeatedly replaced stories about attacks with measurements of traffic, supply chains, incentives and failure paths. From denial-of-service and worms to spam, payment networks, cloud infrastructure and connected vehicles, the recurring method is to…
Story
APNIC REx: When a Date Becomes a Matching Key
Three historical address records changed their dates without changing their ranges. The case shows why reconstructing a resource's past also requires understanding the past of the fields used to identify it.
CASE FILE
The Token Arrived Before the Call. Verification Still Had to Wait: RFC 9888
The signed identity token reached the destination service first. The telephone call was still crossing a path that could not carry that token with it. RFC 9888 makes this split useful for legacy networks, but it also leaves an operational obligation: two arrivals on two channels…
History
The Version Number Survived. The Security Framework Did Not: RFC 1441
In one of SNMP's durable historical jokes, the integer `1` in a message wrapper can mean community-based SNMP version 2. The arithmetic is harmless. The assumption it invites is not. A version field tells a receiver how to process a message; it does not, by itself, reveal which…
History
The Alarm Survived. Its Route to the Other Manager Had Expired: RFC 1451
The monitoring station was still sampling. The threshold still meant what its operator had configured. The event definition was still present. Yet the row that told the station how to notify another manager could count itself down to destruction. RFC 1451 made operational…
Creators
Albert Greenberg: The Network as a Distributed Computer
Across AT&T, Microsoft Azure and Uber, Albert Greenberg has worked on a recurring problem: how to make a vast network behave as one coherent system when topology, traffic, control software, hardware and failure patterns change at different speeds. His influence is best understood…