Revealed: The Internet's well known BGP behavior
Jim Popovitch
yahoo at jimpop.com
Thu Aug 28 05:40:23 UTC 2008
On Thu, Aug 28, 2008 at 1:22 AM, Patrick W. Gilmore <patrick at ianai.net> wrote:
> Assuming it is in the "wrong" place, you may be able to detect the
> intrusion. But most people do not run traceroutes all day and watch for it
> to change. If you run the traceroute after the attack starts, well, how are
> you to know that br01-pos07-$FOO-$BAR is wrong and br03-10GE02-$BLAH-$BAR is
> right?
Uhhh... network monitoring with traceroute and topology tools. There
are several off-the-shelf varieties to choose from, and I know of
several providers that use them.
-Jim P.
More information about the NANOG
mailing list