Mailing List Archive: BGP Monitoring

BGP Monitoring

Feb 26, 2024, 9:41 AM

Post #1 of 14 (291 views)

What tools are you using to monitor BGP announcements and route changes?

[OIT Website]<https://www.oit.co/>
Ray Orsini????
Chief Executive Officer
OIT, LLC
[cid:915068ae-ac24-488b-95e0-65fd40ea5afb] 305.967.6756 x1009<tel:305.967.6756%20x1009> | [cid:6f566813-2e6f-4b77-86fb-6dcf7b370a8a] 305.571.6272
[cid:3bcb9fcf-e0d4-43db-afd5-f0d92d993db5] ray@oit.co<mailto:ray@oit.co> | [https://www.oit.co] <https://www.oit.co/> www.oit.co<https://www.oit.co/>
[cid:de964c1d-0360-48dc-99f4-11b48385b44b]
oit.co/ray
[Facebook]<https://go.oit.co/facebook>
[LinkedIn]<https://go.oit.co/linkedin>
[Twitter]<https://go.oit.co/twitter>
[YouTube]<https://go.oit.co/youtube>
Join the OITVOIP Family at the Right of Boom Event in Las Vegas, NV on March 6th - 8th
Register Today! https://www.rightofboom.com/<https://www.rightofboom.com/>

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 9:49 AM

Post #2 of 14 (291 views)

[.Full Disclosure, the bgp.tools guy will of course tell you to use bgp.tools]

Unsure what the etiquette for self promotion is on this mailing list,
but I would happily recommend bgp.tools (the service I run). It
supports the development of the BGP toolkit at the same time.

For myself (since I cannot really monitor myself with myself) I use
https://github.com/nttgin/BGPalerter

On Mon, 26 Feb 2024 at 17:43, Ray Orsini via NANOG <nanog@nanog.org> wrote:
>
> What tools are you using to monitor BGP announcements and route changes?
>

Re: BGP Monitoring [ In reply to ]

mehmet at akcin

Feb 26, 2024, 9:52 AM

Post #3 of 14 (291 views)

I love bgp.tools ;) good product

On Mon, Feb 26, 2024 at 12:49 Ben Cox via NANOG <nanog@nanog.org> wrote:

> [.Full Disclosure, the bgp.tools guy will of course tell you to use
> bgp.tools]
>
> Unsure what the etiquette for self promotion is on this mailing list,
> but I would happily recommend bgp.tools (the service I run). It
> supports the development of the BGP toolkit at the same time.
>
> For myself (since I cannot really monitor myself with myself) I use
> https://github.com/nttgin/BGPalerter
>
>
> On Mon, 26 Feb 2024 at 17:43, Ray Orsini via NANOG <nanog@nanog.org>
> wrote:
> >
> > What tools are you using to monitor BGP announcements and route changes?
> >
>

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:03 AM

Post #4 of 14 (291 views)

bgp.tools

On Mon, Feb 26, 2024 at 9:54?AM Mehmet <mehmet@akcin.net> wrote:

> I love bgp.tools ;) good product
>
> On Mon, Feb 26, 2024 at 12:49 Ben Cox via NANOG <nanog@nanog.org> wrote:
>
>> [.Full Disclosure, the bgp.tools guy will of course tell you to use
>> bgp.tools]
>>
>> Unsure what the etiquette for self promotion is on this mailing list,
>> but I would happily recommend bgp.tools (the service I run). It
>> supports the development of the BGP toolkit at the same time.
>>
>> For myself (since I cannot really monitor myself with myself) I use
>> https://github.com/nttgin/BGPalerter
>>
>>
>> On Mon, 26 Feb 2024 at 17:43, Ray Orsini via NANOG <nanog@nanog.org>
>> wrote:
>> >
>> > What tools are you using to monitor BGP announcements and route changes?
>> >
>>
>

Re: BGP Monitoring [ In reply to ]

ian at ichilton

Feb 26, 2024, 10:03 AM

Post #5 of 14 (291 views)

Hi,

On Mon, 26 Feb 2024, at 5:41 PM, Ray Orsini via NANOG wrote:
> What tools are you using to monitor BGP announcements and route changes?

https://bgp.tools is excellent - and amazingly fast at BGP and IRR notifications: https://bgp.tools/pricing

Ian

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:12 AM

Post #6 of 14 (291 views)

On Mon, Feb 26, 2024 at 05:41:12PM +0000, Ray Orsini via NANOG wrote:
> What tools are you using to monitor BGP announcements and route changes?

The wonderful BGP.tools already has been mentioned a few times.

Another excellent option is https://Packetvis.com, I find their RPKI
monitoring approach to be very insightful.

Catchpoint might be another option, https://www.catchpoint.com/bgp,
AFAIK by the same people that worked on "Isolario" a few years ago.

Kind regards,

Job

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:22 AM

Post #7 of 14 (289 views)

Le Mon, Feb 26, 2024 at 07:12:57PM +0100, Job Snijders via NANOG a ?crit :
> On Mon, Feb 26, 2024 at 05:41:12PM +0000, Ray Orsini via NANOG wrote:
> > What tools are you using to monitor BGP announcements and route changes?
>
> The wonderful BGP.tools already has been mentioned a few times.
>
> Another excellent option is https://Packetvis.com, I find their RPKI
> monitoring approach to be very insightful.
>

Do you know who's behind that site ?

Denis

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:28 AM

Post #8 of 14 (289 views)

I believe PacketVis is Massimo Candela , based on
https://ripe85.ripe.net/archives/video/987/

On Mon, 26 Feb 2024 at 18:24, Denis Fondras via NANOG <nanog@nanog.org> wrote:
>
> Le Mon, Feb 26, 2024 at 07:12:57PM +0100, Job Snijders via NANOG a écrit :
> > On Mon, Feb 26, 2024 at 05:41:12PM +0000, Ray Orsini via NANOG wrote:
> > > What tools are you using to monitor BGP announcements and route changes?
> >
> > The wonderful BGP.tools already has been mentioned a few times.
> >
> > Another excellent option is https://Packetvis.com, I find their RPKI
> > monitoring approach to be very insightful.
> >
>
> Do you know who's behind that site ?
>
> Denis

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:40 AM

Post #9 of 14 (289 views)

Whoa, its nice to see that Allesandro is still around.
It was sad to see when Isolario.it quietly went offline.

Also I would point out in CAIDA's general direction
https://bgpstream.caida.org/ (should fit OP bill).
CAIDA was first to show how much geeky fun might be had by monitoring (and
sometimes storing) BGP updates.

RIPE RIS
https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/
is also good, but as Job Snijders pointed me out doesn't send emails out
of the box.

On Mon, Feb 26, 2024 at 7:15?PM Job Snijders via NANOG <nanog@nanog.org>
wrote:

> On Mon, Feb 26, 2024 at 05:41:12PM +0000, Ray Orsini via NANOG wrote:
> > What tools are you using to monitor BGP announcements and route changes?
>
> The wonderful BGP.tools already has been mentioned a few times.
>
> Another excellent option is https://Packetvis.com, I find their RPKI
> monitoring approach to be very insightful.
>
> Catchpoint might be another option, https://www.catchpoint.com/bgp,
> AFAIK by the same people that worked on "Isolario" a few years ago.
>
> Kind regards,
>
> Job
>

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:58 AM

Post #10 of 14 (289 views)

nanog@nanog.org (Alexander Lyamin via NANOG) wrote:

> RIPE RIS
> https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/
> is also good, but as Job Snijders pointed me out doesn't send emails out
> of the box.

It does provide a filterable live feed that we use for leak detection.

Apart from that we're using bgp.tools when we want to dig into stuff.
Oh, and most of the T1s have either routeservers or at least mostly usable
looking glasses.

HTH,
Elmar.

Re: BGP Monitoring [ In reply to ]

Feb 26, 2024, 10:16 PM

Post #11 of 14 (285 views)

Ray mentioned precisely that he wants to monitor BGP announcements and
route changes.

Leak detection is kind of on a different level. You need a bit more data
to effectively detect them. ( I kind of know that).

It makes discussion more colorful to my taste. You can do a lot with
colorful bgp data ;)

On Mon, Feb 26, 2024 at 8:02?PM Elmar K. Bins <elmi@4ever.de> wrote:

>
> nanog@nanog.org (Alexander Lyamin via NANOG) wrote:
>
> > RIPE RIS
> >
> https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris/
> > is also good, but as Job Snijders pointed me out doesn't send emails out
> > of the box.
>
> It does provide a filterable live feed that we use for leak detection.
>
> Apart from that we're using bgp.tools when we want to dig into stuff.
> Oh, and most of the T1s have either routeservers or at least mostly usable
> looking glasses.
>
> HTH,
> Elmar.
>

Re: BGP Monitoring [ In reply to ]

fearghas at gmail

Feb 27, 2024, 12:18 AM

Post #12 of 14 (283 views)

> On 27 Feb 2024, at 01:28, Ben Cox via NANOG <nanog@nanog.org> wrote:
>
> I believe PacketVis is Massimo Candela , based on
> https://ripe85.ripe.net/archives/video/987/

It is run by his brother rather than Massimo, but it is his BGPalerter software behind the family business :)

f

Re: BGP Monitoring [ In reply to ]

Feb 27, 2024, 1:00 AM

Post #13 of 14 (283 views)

Aha! That makes sense!

I was struggling to find any kind of public data on who runs it, so I
assumed whoever was presenting it probably runs / owned it

On Tue, Feb 27, 2024, 08:20 Fearghas Mckay <fearghas@gmail.com> wrote:

>
>
> On 27 Feb 2024, at 01:28, Ben Cox via NANOG <nanog@nanog.org> wrote:
>
> I believe PacketVis is Massimo Candela , based on
> https://ripe85.ripe.net/archives/video/987/
>
>
> It is run by his brother rather than Massimo, but it is his BGPalerter
> software behind the family business :)
>
> f
>

Re: BGP Monitoring [ In reply to ]

Feb 27, 2024, 1:40 AM

Post #14 of 14 (283 views)

Hi Alex,

la@qrator.net (Alexander Lyamin) wrote:

> Ray mentioned precisely that he wants to monitor BGP announcements and
> route changes.
>
> Leak detection is kind of on a different level. You need a bit more data
> to effectively detect them. ( I kind of know that).

Our use case is extremely simple, so the RIS feed gives us everything we need.
We don't need to qualify the leak, *any* leak from a local node is undesirable,
they tag everything NO_EXPORT. Anybody exporting must thus be dealt with.

But you gave me an idea regarding our datacenter prefixes...

Cheers,
Elmar.