Monday, March 14, 2011

Is Plan B Painful 2010?

Historico de tablas BGP. ¿Hijack de mi red?

Description: Are you
an administrator of BGP routers to handle tables (probably ISP) may publish your own prefix / subnet to your upstream provider from your Autonomous System (AS). however, know that the same prefix or a very similar (maybe a larger prefix or small) can be, for any errors or attack from another AS-published elsewhere in the world. Unfortunately this is something that happens and we must be prepared.


Problem: I have suffered my hijack IP prefixes (published from an AS different from mine) and I need to check.
For this problem I recommend using a specifically
routeview

BGPlay tool. BGPplay 1) Head to the page http://bgplay.routeviews.org/
2) Click on the button "Start BGPlay"
3) Then load the Java applet, which you indicate there your code is a date range where you want to see
4) Click on Ok
5) Analyze the results

Recommendation: Have Alarms!, for this I should suggest the website: http://www . bgpmon.net / . BGPmon is a site dedicated
free
the monitoring and analysis of BGP tables. The most significant thing is that you can tell it what your prefixes, you AS and if there are any changes they will send an email. For example you can set the following alarms: - If there are any other AS to start posting some code emailed to you yours - Networks new
- Significant changes in path
- Networks subnet
- Retiro / withdraw
Network
luck, I hope your utility

0 comments:

Post a Comment