nanog mailing list archives
Re: Revealed: The Internet's well known BGP behavior
From: "Patrick W. Gilmore" <patrick () ianai net>
Date: Thu, 28 Aug 2008 01:46:53 -0400
On Aug 28, 2008, at 1:40 AM, Jim Popovitch wrote:
On Thu, Aug 28, 2008 at 1:22 AM, Patrick W. Gilmore <patrick () ianai net> wrote:Assuming it is in the "wrong" place, you may be able to detect theintrusion. But most people do not run traceroutes all day and watch for it to change. If you run the traceroute after the attack starts, well, how are you to know that br01-pos07-$FOO-$BAR is wrong and br03-10GE02- $BLAH-$BAR isright?Uhhh... network monitoring with traceroute and topology tools. There are several off-the-shelf varieties to choose from, and I know of several providers that use them.
I stand by my assertion that most people do not run traceroutes all day and watch for it to change.
That some people are diligent does not change the fact the overwhelming majority of people are not.
Or the fact that with the right placement of equipment (read "luck") and cooperation of networks involved (read "laziness"), even a traceroute won't show any change besides additional latency.
-- TTFN, patrick
Current thread:
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Adrian Chadd (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Jim Popovitch (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior michael.dillon (Aug 28)
- RE: Revealed: The Internet's well known BGP behavior John Lee (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior michael.dillon (Aug 28)
- Re: Revealed: The Internet's well known BGP behavior Patrick Giagnocavo (Aug 27)
- Message not available
- RE: Revealed: The Internet's well known BGP behavior Hank Nussbacher (Aug 27)
- RE: Revealed: The Internet's well known BGP behavior Jon Lewis (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Eric Spaeth (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Colin Alston (Aug 27)
- Re: Revealed: The Internet's well known BGP behavior Suresh Ramasubramanian (Aug 28)
- Re: Revealed: The Internet's well known BGP behavior Patrick W. Gilmore (Aug 28)