Home page logo
/

nanog logo nanog mailing list archives

Re: BGP noob needs monitoring advice
From: PC <paul4004 () gmail com>
Date: Tue, 20 Dec 2011 13:17:06 -0600

Depending on the nature of your redundant connections, your traffic
engineering/bgp settings, and the visibility of the routing through the
lost provider to the internet route servers mentioned, you may/may not be
able to easily monitor this.  Some failures are harder to find than others.

Suggestions:

1) On the provider that stopped accepting your prefix, your inbound traffic
would have dropped to 0.  Monitor for this if this isn't by design already.
2) Use the bgpmon suggested by Dave below to see events which are visible
to the route server they use.



On Tue, Dec 20, 2011 at 1:03 PM, Hank Nussbacher <hank () efes iucc ac il>wrote:

At 13:52 20/12/2011 -0500, Dave Pooser wrote:

Use one of the following services:
http://cyclops.cs.ucla.edu/
http://bgpmon.net/
You'll get an email whenever a routing change takes place in regards to
the prefix you are monitoring.

-Hank


 Earlier this year I got a /24 of PA space, set up our shiny new router,
got BGP working with both my upstreams, and heaved a sigh of relief: "I'll
never have to think about THAT again!" (Okay, quit laughing; I SAID I was
a noob!)

Now, I discover that one of my upstreams quit announcing our route in
November (fortunately the provider who assigned us the /24, so we're still
covered in their /18) and the other upstream apparently started filtering
our announcements last week. I'm working with both of them to get that
fixed, but it's made it clear to me that I need to be monitoring this.

My question for the group is, how? I can and do monitor my own router, and
I can see that I'm receiving full routes from both ISPs. I am capable of
manually accessing route servers and looking glass servers to check if
they're receiving routes to me, but I'd like something more automated.
Free is nice, $$ is not a problem, $$$$ might become a problem.

Thanks in advance for any suggestions.
--
Dave Pooser
Manager of Information Services
Alford Media  http://www.alfordmedia.com






  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault