North American Network Operators Group
Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Re: Revealed: The Internet's well known BGP behavior

  • From: Jim Popovitch
  • Date: Thu Aug 28 01:40:30 2008 
On Thu, Aug 28, 2008 at 1:22 AM, Patrick W. Gilmore <[email protected]> wrote:
> Assuming it is in the "wrong" place, you may be able to detect the
> intrusion.  But most people do not run traceroutes all day and watch for it
> to change.  If you run the traceroute after the attack starts, well, how are
> you to know that br01-pos07-$FOO-$BAR is wrong and br03-10GE02-$BLAH-$BAR is
> right?

Uhhh... network monitoring with traceroute and topology tools.   There
are several off-the-shelf varieties to choose from, and I know of
several providers that use them.

-Jim P.