nanog mailing list archives
Re: Revealed: The Internet's well known BGP behavior
From: "Patrick W. Gilmore" <patrick () ianai net>
Date: Thu, 28 Aug 2008 01:22:21 -0400
On Aug 28, 2008, at 12:32 AM, John Lee wrote:
Thanks guys, going back to my Comer one more time. My issue, question was whether the organization doing the hijacking controlled all of the routers in the new modified path or only some of them?
That is correct. However, once a packet hits the miscreant's device, the traceroute is defeated.
Assuming their device is in the right place, you will not be able to see the difference.
Assuming it is in the "wrong" place, you may be able to detect the intrusion. But most people do not run traceroutes all day and watch for it to change. If you run the traceroute after the attack starts, well, how are you to know that br01-pos07-$FOO-$BAR is wrong and br03-10GE02-$BLAH-$BAR is right?
-- TTFN, patrick
Current thread:
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Adrian Chadd (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Jim Popovitch (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior michael.dillon (Aug 28)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior michael.dillon (Aug 28)
- Re: Revealed: The Internet's well known BGP behavior Patrick Giagnocavo (Aug 27)
- Message not available
- RE: Revealed: The Internet's well known BGP behavior Hank Nussbacher (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior Jon Lewis (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Eric Spaeth (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Colin Alston (Aug 27)