[76939] in North American Network Operators' Group
Re: Tracking spoofed routes?
daemon@ATHENA.MIT.EDU (Arife Vural)
Thu Jan 6 05:23:35 2005
Date: Thu, 6 Jan 2005 11:23:06 +0100
From: Arife Vural <arife@ripe.net>
To: Florian Frotzler <florian.frotzler@gmx.at>
Cc: nanog@merit.edu
In-Reply-To: <000b01c4f33e$27b82d00$3200a8c0@thedude>
Errors-To: owner-nanog-outgoing@merit.edu
> > >> Alternately, are there any existing mechanisms for
> > monitoring route
> > >> announcements which can provide near real-time alerting when any
> > >> prefixes within specific subnet ranges are announced?
> >
> > Not that I know of. You can log into
> > route-views.routeviews.org and use the cli to watch it,
> > but that is a manual process.
> >
> > Hope this helps,
> >
> > Dave
> >
>
> To my knowledge, the myas-tool/-service from RIPE NCC is kind of doing what
> you like to achive.
MyASN is working on user-based. To get the alarm for unexpected routing patterns, you
should set it up an account beforehand.
I think for Kevin's situation, we have other tools. One is called, "Search by Prefix"
and other one is BGPlay. Both tools are running over last 3 months routing data.
URL for those tools,
http://www.ris.ripe.net/cgi-bin/risprefix.cgi
http://www.ris.ripe.net/bgplay/
Arife
