BGP noob needs monitoring advice
Andree Toonk
andree+nanog at toonk.nl
Tue Dec 20 19:43:45 UTC 2011
Hi,
.-- My secret spy satellite informs me that at 11-12-20 11:16 AM Bret
Clark wrote:
> Is http://cyclops.cs.ucla.edu/ still working? I don't seem to received
> emails from them anymore when we stop announcing to one of our upstream
> providers. On the other hand http://bgpmon.net/ does send me emails when
> an announcement disappears from an upstream, although it's usually a day
> later.
Just to clarify this:
For all alert types below BGPmon.net sends out an alert within minutes:
1) prefix withdrawal (prefix disappeared)
2) new upstream
3) new prefix
4) origin AS changes
5) ASpath regex failure
6) policy violation
7) RPKI validation failure
There's one other feature, the routing-report feature, that runs only
once a day. It's similar as the cidr report, but specific to your AS. I
like to refer to it as a rancid for your BGP announcements.
It's basically a diff between how your routes were visible today and
yesterday. This specific feature will also notify the user if you lost /
gained one or more upstreams per prefix.
Also see http://bgpmon.net/blog/?p=257 for more information about that
specific feature.
Cheers,
Andree
More information about the NANOG
mailing list