funsec mailing list archives
Fwd: BGP (hijack) prefix monitoring
From: "Paul Ferguson" <fergdawgster () gmail com>
Date: Sun, 12 Oct 2008 19:23:07 -0700
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Just in case you don't follow the NANOG mailing list, FYI. - - ferg - ---------- Forwarded message ---------- From: Andree Toonk <andree+nanog () toonk nl> Date: Sun, Oct 12, 2008 at 7:12 PM Subject: BGP (hijack) prefix monitoring To: nanog () nanog org Hi All, Given the recent interest in prefix monitoring (hijack) systems I decided to make my monitoring system publicly accessible for those who would like to use it. The original software was written over the course of 1.5 years, mainly for private use to monitor the stability of our prefixes. After some requests of others I've extended it to make it usable for different users and added some extra features. It has most of the functionality that other alternatives offer, these include: * Prefix hijack detection * support for aspath regex checks (including auto generate regex) * 4byte ASN support * support for auo discovery of prefixes for a specific Origin AS (useful for bulk entries) * Flexible email alerting system * Historical overview of "Interesting" updates * Support for multiple AS's per user * BGP updates (ipv4&ipv6) from over 120 peers, (several RIPE-RIS data sources) * Alert on "mass" withdraw of your prefix I documented most of the features as well as some background info in a FAQ at http://bgpmon.net/faq.php Anyway, for those of you who want to use it, please go ahead and try it. You can create a personal account and add your own prefixes, or browse around using the demo account. The url is: http://bgpmon.net Other things you will find there are the 'BGP weathermap' and some basic bogon detection. Hope you'll find it useful. Cheers, Andree -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.6.3 (Build 3017) wj8DBQFI8rEEq1pz9mNUZTMRAo32AKDpP/1EonaKe+yqeQpA3qDMmqEo6QCfagtr sNLt83hiv6UNmCYqEm71mEY= =33Ri -----END PGP SIGNATURE----- -- "Fergie", a.k.a. Paul Ferguson Engineering Architecture for the Internet fergdawgster(at)gmail.com ferg's tech blog: http://fergdawg.blogspot.com/ _______________________________________________ Fun and Misc security discussion for OT posts. https://linuxbox.org/cgi-bin/mailman/listinfo/funsec Note: funsec is a public and open mailing list.
Current thread:
- Fwd: BGP (hijack) prefix monitoring Paul Ferguson (Oct 12)