Peering with the Internet Alert Registry

Tue Mar 11 02:02:12 UTC 2008

Chris,

That's a good question.  IAR peers that also wish to run PGBGP will transmit
their anomalous routes out of band to the IAR.  This will likely be done via
logs and a simple forwarding script.

Josh

On Mon, Mar 10, 2008 at 4:01 PM, Christopher Morrow <
christopher.morrow at gmail.com> wrote:

> On Mon, Mar 10, 2008 at 11:01 AM, Josh Karlin <karlinjf at cs.unm.edu> wrote:
> > All,
> >
> > Some of you are aware of the site for network operators:
> > http://iar.cs.unm.edu/  which has running for two years now.  The
> purpose of
> > the site is to detect and distribute network anomaly information to the
> > network operators that need to know.  The flip side of our proposed
> security
> > system, Pretty Good BGP (PGBGP), lowers the local preference of
> anomalous
> > routes on BGP routers for 24 hours, giving operators time to respond to
> > anomalous routes before they can fully propagate.
> >
>
> does pgbgp toss out alerts/snmp-traps/log-messages when these
> anomalous announcements arrive? if not, how does one know they are
> inside the 24hr window?
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20080310/5be2431a/attachment.html>