funsec mailing list archives

Fwd: BGP (hijack) prefix monitoring


From: "Paul Ferguson" <fergdawgster () gmail com>
Date: Sun, 12 Oct 2008 19:23:07 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Just in case you don't follow the NANOG mailing list, FYI.

- - ferg


- ---------- Forwarded message ----------
From: Andree Toonk <andree+nanog () toonk nl>
Date: Sun, Oct 12, 2008 at 7:12 PM
Subject: BGP (hijack) prefix monitoring
To: nanog () nanog org


Hi All,

Given the recent interest in prefix monitoring (hijack) systems I decided
to make my monitoring system publicly accessible for those who would like
to use it.
The original software was written over the course of 1.5 years, mainly for
private use to monitor the stability of our prefixes. After some requests
of others I've extended it to make it usable for different users and added
some extra features.

It has most of the functionality that other alternatives offer, these
include:
* Prefix hijack detection
* support for aspath regex checks (including auto generate regex)
* 4byte ASN support
* support for auo discovery of prefixes for a specific Origin AS (useful
for bulk entries)
* Flexible email alerting system
* Historical overview of "Interesting" updates
* Support for multiple AS's per user
* BGP updates (ipv4&ipv6) from over 120 peers,  (several RIPE-RIS data
sources)
* Alert on "mass" withdraw of your prefix

I documented most of the features as well as some background info in a FAQ
at http://bgpmon.net/faq.php

Anyway, for those of you who want to use it, please go ahead and try it.
You can create a personal account and add your own prefixes, or browse
around using the demo account.

The url is: http://bgpmon.net
Other things you will find there are the 'BGP weathermap' and some basic
bogon detection.

Hope you'll find it useful.

Cheers,
 Andree



-----BEGIN PGP SIGNATURE-----
Version: PGP Desktop 9.6.3 (Build 3017)

wj8DBQFI8rEEq1pz9mNUZTMRAo32AKDpP/1EonaKe+yqeQpA3qDMmqEo6QCfagtr
sNLt83hiv6UNmCYqEm71mEY=
=33Ri
-----END PGP SIGNATURE-----


-- 
"Fergie", a.k.a. Paul Ferguson
 Engineering Architecture for the Internet
 fergdawgster(at)gmail.com
 ferg's tech blog: http://fergdawg.blogspot.com/
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: