[163011] in North American Network Operators' Group
Re: The BGP Visibility Scanner
daemon@ATHENA.MIT.EDU (Jason Hellenthal)
Wed May 15 11:07:54 2013
In-Reply-To: <5193A35D.8030405@ripe.net>
From: Jason Hellenthal <jhellenthal@dataix.net>
Date: Wed, 15 May 2013 11:07:39 -0400
To: Rene Wilhelm <wilhelm@ripe.net>
Cc: Olaf Maennel <O.M.Maennel@lboro.ac.uk>, "nanog@nanog.org" <nanog@nanog.org>,
Andra Lutu <andra.lutu@imdea.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Awesome! Thank you to you as well!
--=20
Jason Hellenthal
IS&T Services Professional
Inbox: jhellenthal@DataIX.net
JJH48-ARIN
On May 15, 2013, at 11:01, Rene Wilhelm <wilhelm@ripe.net> wrote:
>=20
> On 5/15/13 3:00 PM, Jason Hellenthal wrote:
>> Pretty nice. Thanks!
>>=20
>> I don't suppose there is any straight text version of all this info is th=
ere ?
> At the RIPE NCC we are publishing aggregated dumps from our collective of 1=
2 RIS route collectors every 8 hours. For each prefix we list the origin AS a=
nd the number of peers (on all collectors) which observe the prefix. If you a=
re happy to do your own post-processing, set your own boundaries on what to=
consider limited visibility prefixes, have a look at the IPv4 and IPv6 tabl=
e dumps at http://www.ris.ripe.net/dumps/
>=20
> Note that the fact that not all RIS peers give us a full BGP table blurs t=
he counts somewhat. Prefixes which are globally visible may (today) have any=
where between 96 and 110 peers announcing the prefix to the RIS route collec=
tors.
>=20
> -- Rene
>> -- Jason Hellenthal IS&T Services Professional Inbox: jhellenthal@DataIX.=
net JJH48-ARIN On May 15, 2013, at 6:22, Andra Lutu <andra.lutu@imdea.org> w=
rote:
>>> >Dear all,
>>> >
>>> >We have built a tool that checks the visibility of IPv4 prefixes at the=
interdomain level.
>>> >The tool is available at *http://visibility.it.uc3m.es/* and you can u=
se it to retrieve the Limited Visibility Prefixes (LVPs) (i.e., prefixes tha=
t are not present in all the global routing tables we analyse) injected by a=
certain originating AS.
>>> >The query is very simple, it just requires to input the AS number for w=
hich you want to retrieve the originated LVPs, if any.
>>> >After checking the limited-visibility prefixes, we would appreciate any=
feedback that you can provide on the cause of the limited visibility (we pr=
ovide a form with a few very short questions which you could fill in and sub=
mit).
>>> >
>>> >Using a dataset from May 2nd 2013, we generated a list with the ASes wh=
ich are originating LVPs:*http://visibility.it.uc3m.es/fullASlist.html*
>>> >We would like to hear from any operator who might find this project int=
eresting, and, in particular, from these large contributors to the LVPs set.=
>>> >Please note that advertising prefixes with limited visibility does not m=
ean that the originating AS is necessarily doing something wrong.
>>> >The ASes might be generating the LVPs knowingly (e.g., scoped advertise=
ments). However, there might be cases where the origin AS might be unaware t=
hat some prefixes are not globally visible (when they should) or that others=
are leaking as a consequence of mis-configurations/slips.
>>> >
>>> >Our purpose is to spread awareness about these latter phenomena, help e=
liminate the cause of unintended/accidental LVPs and upgrade this tool to an=
anomaly detection mechanism.
>>> >For more information on the definition and characteristics of a Limited=
Visibility prefix, please check the Frequently Asked Questions section of t=
he webpage, available here:*http://visibility.it.uc3m.es/Q_and_A_latest.html=
*
>>> >
>>> >The tool works with publicly available BGP routing data, retrieved from=
the RIPE NCC RIS and RouteViews Projects. The results are updated on a dail=
y basis.
>>> >For more information on the methodology we refer you to the slides of t=
he NANOG57 presentation about the BGP Visibility Scanner:
>>> >http://www.nanog.org/meetings/nanog57/presentations/Wednesday/wed.gener=
al.Lutu.BGP_visibility_scanner.19.pdf
>>> >Also, you can check the RIPE labs article about the BGP Visibility Scan=
ner, available here:https://labs.ripe.net/Members/andra_lutu/the-bgp-visibil=
ity-scanner
>>> >
>>> >We are looking forward to your feedback!
>>> >
>>> >Thank you, best regards,
>>> >Andra
>=20
