|
You are hereHome » NANOG Meeting Presentation Abstract
|
|
NANOG Meeting Presentation Abstract
BGP Tools | Meeting: | NANOG37 | |
Date / Time: | 2006-06-05 4:00pm - 5:30pm | |
Room: | Exhibit Hall 3 | |
Presenters: | Speakers: Dan Massey, Colorado State University.Nick Feamster, MIT.Lixiz Zhang, UCLA. | |
Abstract: | In recent years various non-commercial tools have been developed to collected and analyze BGP data. When combined with BGP data collected by individual ISPs as well as by public archives such as RouteViews and RIPE RIS, these tools can potentially provide invaluable insight into the operations of inter-domain routing. The fourth BGP Analysis Tools BOF builds on the potential of these tools by fostering a closer interaction between non-commercial tool developers and the potential users represented by NANOG. The BoF is organized as a series of short presentations and is followed by hands-on demonstrations. This BoF features the Routing Configuration Checker, Organized BGP Data Collector and Analysis, the Datapository, and short updates from a number of tools including a new BGP monitor tool. Following the presentations, the tool developers will be available for tool demonstrations and discussions. Featured Tools: Routing Configuration Checker: Guaranteeing that a routing configuration satisfies an operator\'s security policy is important not only for the public Internet, but also in the case of BGP/MPLS layer-3 VPNs and for other network configurations that must provide some security policy (e.g., IPSec, GRE tunnels, etc.). Existing techniques for assessing a network\'s security properties are often performed with attempts to actively compromise the network or to violate some security policy by actively sending streams of packets at the network perimeter; these techniques do not test network-wide configurations for invariants, and they do not provide a formal risk assessment. Existing tools that evaluate the security properties of network configurations operate at the device level but do not analyze network-wide} behavior, which is particularly important to understand, given that the {\\em interactions} between configurations across distributed network devices ultimately dictate the behavior of the network. Static configuration analysis can help network operators determine whether a network\'s behavior matches the network operator\'s expectations and achieves the intended security policies. O-BGP BGP Data Organization Tool and Data Collection Errors. The Organize BGP (O-BGP) project has developed software for downloading data from monitoring points such as RouteViews and RIPE RIS. The software organizes the data into a common format, adds labeling information into the updates, and compares the update logs with the routing table snapshots. Ideally, a routing table built from updates should equal the routing table snapshot from the corresponding time period, but this is often not the case. In addition to presenting the O-BGP toolset, this discussion covers the type of data, extent of errors, and possible explanations. The Datapository: Internet measurement data provides the foundation for the operation and planning of the networks that comprise the Internet, and is a necessary component in research for analysis, simulation, and emulation. Despite its critical role, however, the management of this data---from collection and transmission to storage and its use within applications---remains primarily ad hoc, using techniques created and re-created by each corporation or researcher that uses the data. To remedy these problems, we present the Datapository, a collaborative network data analysis and storage facility. Originally the ``MIT BGP Monitor\'\', the Datapository is growing to support multiple data feeds (e.g., spam, end-to-end measurement probes, traceroutes, Abilene data, etc.). The datapository is currently used by researchers at Georgia Tech, Carnegie Mellon, University of Michigan, Princeton, and MIT and has been used by operators in the past (in its previous life as the BGP monitor) to provide additional network visibility. Tool Updates and New Developments: Brief updates on advances from tools in previous BoFs and introductions or new tools. Motivated by some of the data collection discussed above, the RouteViews team along with several universities will begin developing a new BGP data collector and format for organizing the data. This presentation reviews some of the requirements and initial direction for this work. Additional tools including LinkRank and other projects will be on-hand to discuss their current plans. | |
Files: | Feamster: Datapository(PDF)
Feamster: rcc and Beyond(PDF)
Massey: OBGP Slides(PDF)
Zhang: Introduction(PDF)
| |
Sponsors: | None. | |
Back to NANOG37 agenda. NANOG37 Abstracts- NANOG Community Meeting
Moderators: Randy BushIIJ; .Panelists: Steve FeldmanCNET; .Betty BurkeMerit Network; .Rob SeastromClueTrust; .
- NANOG Community Meeting
Moderators: Randy BushIIJ; .Panelists: Steve FeldmanCNET; .Betty BurkeMerit Network; .Rob SeastromClueTrust; .
- NANOG Community Meeting
Moderators: Randy BushIIJ; .Panelists: Steve FeldmanCNET; .Betty BurkeMerit Network; .Rob SeastromClueTrust; .
- NANOG Community Meeting
Moderators: Randy BushIIJ; .Panelists: Steve FeldmanCNET; .Betty BurkeMerit Network; .Rob SeastromClueTrust; .
- BGP Tools
Speakers: Dan MasseyColorado State University; .Nick FeamsterMIT; .Lixiz ZhangUCLA; .
- BGP Tools
Speakers: Dan MasseyColorado State University; .Nick FeamsterMIT; .Lixiz ZhangUCLA; .
- BGP Tools
Speakers: Dan MasseyColorado State University; .Nick FeamsterMIT; .Lixiz ZhangUCLA; .
- OPSEC WG
Moderators: Ross Callon, Juniper; Panelists: Merike Kaeo, Double Shot Security; Chris Morrow, Verizon Business;
- OPSEC WG
Moderators: Ross Callon, Juniper; Panelists: Merike Kaeo, Double Shot Security; Chris Morrow, Verizon Business;
- OPSEC WG
Moderators: Ross Callon, Juniper; Panelists: Merike Kaeo, Double Shot Security; Chris Morrow, Verizon Business;
- Security
Moderators: Danny McPhersonArbor Networks; .Roland DobbinsCisco Systems; .
- Security
Moderators: Danny McPhersonArbor Networks; .Roland DobbinsCisco Systems; .
|
|