- Previous message: Sean Donelan: "Re: Customer-facing ACLs"
- Maybe in reply to: Josh Karlin: "Peering with the Internet Alert Registry"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
|
|
|
From: Josh Karlin (no email)
Date: Mon Mar 10 2008 - 22:02:12 EDT
Chris,
That's a good question. IAR peers that also wish to run PGBGP will transmit
their anomalous routes out of band to the IAR. This will likely be done via
logs and a simple forwarding script.
Josh
On Mon, Mar 10, 2008 at 4:01 PM, Christopher Morrow <
> wrote:
> On Mon, Mar 10, 2008 at 11:01 AM, Josh Karlin <> wrote:
> > All,
> >
> > Some of you are aware of the site for network operators:
> > http://iar.cs.unm.edu/ which has running for two years now. The
> purpose of
> > the site is to detect and distribute network anomaly information to the
> > network operators that need to know. The flip side of our proposed
> security
> > system, Pretty Good BGP (PGBGP), lowers the local preference of
> anomalous
> > routes on BGP routers for 24 hours, giving operators time to respond to
> > anomalous routes before they can fully propagate.
> >
>
> does pgbgp toss out alerts/snmp-traps/log-messages when these
> anomalous announcements arrive? if not, how does one know they are
> inside the 24hr window?
>
|
|
|