<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div dir="ltr"></div><div dir="ltr">There's also <a href="https://github.com/NLNOG/bgpalerter">https://github.com/NLNOG/bgpalerter</a> (which I believe they're trying to turn into a website frontend based on RIS, but I run it with patches for as_path regexes and it works pretty well).</div><div dir="ltr"><br>On Jun 16, 2019, at 07:40, Michael Hallgren <<a href="mailto:mh@xalto.net">mh@xalto.net</a>> wrote:<br><br></div><blockquote type="cite"><div dir="ltr"><div dir="auto">RIS Live API is a choice for this.<br><br></div>
<div dir="auto">mh</div>
<div class="gmail_quote">Le 16 juin 2019, à 13:21, Brian Kantor <<a href="mailto:brian@ampr.org" target="_blank">brian@ampr.org</a>> a écrit:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="blue">That would be wonderful. Thank you!<br> - Brian<br><br><br>On Sun, Jun 16, 2019 at 03:59:29AM -0700, Mike Leber wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #729fcf; padding-left: 1ex;"> I'm sure if it doesn't do exactly that already, we can add it shortly.<br> <br> Some of planned functionality for hijack detection is already live. <br> That's one of the main reasons for creating this service.<br> <br> Mike.<br> <br> On 6/16/19 2:48 AM, Brian Kantor wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> On Sun, Jun 16, 2019 at 02:25:40AM -0700, Mike Leber wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #8ae234; padding-left: 1ex;"> As a beta service you can try out <a href="http://rt-bgp.he.net">rt-bgp.he.net</a>. This is a real time<br> bgp monitoring service we are developing.<br></blockquote> It's interesting, but I don't see any way to do what I primarily<br> use the existing BGPMon for: watch for hijacks.<br><br> That is, set up one or more prefixes to be continuously monitored<br> and have the monitor send me an email alert when that prefix or a<br> subnet of it begins to be announced by someone new.<br><br> For example, if I have told it to monitor <a href="http://44.0.0.0/8">44.0.0.0/8</a> and someone<br> somewhere begins announcing it, or perhaps <a href="http://44.1.0.0/16">44.1.0.0/16</a>, I'd very<br> much like to know about that, along with details of who and where.<br><br> Then if that announcement is authorized, I can tell the monitoring<br> service that this new entry is NOT a hijack, and it won't bug me<br> about it again.<br><br> Can it be persuaded to do this?<br> - Brian<br></blockquote></blockquote></pre></blockquote></div></div></blockquote></body></html>