[43382] in North American Network Operators' Group
Re: BGP noise tonight?
daemon@ATHENA.MIT.EDU (Joel Baker)
Sun Oct 7 23:05:07 2001
From: "Joel Baker" <lucifer@lightbearer.com>
Date: Sun, 7 Oct 2001 21:04:32 -0600
To: cowie@renesys.com
Cc: nanog@merit.edu
Message-ID: <20011007210432.A23313@lightbearer.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <200110080236.WAA06857@renesys.com>; from cowie@renesys.com on Sun, Oct 07, 2001 at 10:36:49PM -0400
Errors-To: owner-nanog-outgoing@merit.edu
On Sun, Oct 07, 2001 at 10:36:49PM -0400, cowie@renesys.com wrote:
>
>
> Say, our alarms went off tonight when we saw a roughly tenfold spike in
> BGP prefix announcement and withdrawal rates at RIPE's rrc00 and rrc03
> collection points in Amsterdam. The trouble started around 20:00 GMT,
> hit its peak by about 21:00 GMT, and has trailed off slowly since then.
>
> Looking at the worst-behaved prefixes and AS paths led me to put in
> a call to the tech support center of an unnamed Major Provider, who
> confirmed that there had been a major BGP event but would provide
> no specifics.
>
> So, what's going on out there in the NOCs tonight? Inquiring minds
> want to know. --jim
Another poison route taking down sessions to RFC-compliant routers, it
looks like. At least, we reset sessions on all of our routers that reset
last time due to this issue, and not a flinch on $VENDOR's routers that
are known to disobey the RFC.
All of our (Tier 1, for whatever value you see it) upstreams saw it
throughout their networks; this would explain the exceedingly high BGP
levels, even discounting the "fragile" edge.
--
***************************************************************************
Joel Baker System Administrator - lightbearer.com
lucifer@lightbearer.com http://users.lightbearer.com/lucifer/
