SHARE
TWEET

BGP data during syria blackout

a guest May 10th, 2013 90 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. Basically the data is all the BGP updates and withdrawal messages for 2
  2. Syrian networks. 82.137.192.0/18 is the one with the DNS servers for SY.
  3. The format is somewhat self explanatory. Basically it has
  4. timestamps, Type (A=announcement / path change W=withdrawal /lost path)
  5. then the peerAS, that's the Autonomous system that saw this update (on
  6. of bgpmon peering partners). Then the prefix and ASpath. The Aspath is
  7. basically a sequence of AS numbers through which the packet will travel
  8. before it will reach its destination. The left AS is the peer (local)
  9. AS, the most right one is the source AS (the one that owns / originated
  10. the prefix).
  11.  
  12. One thing to know about BGP and ASpaths is that in general routes with
  13. the shortest ASpath are selected as best paths.
  14.  
  15. Let's look for example at how AS271 (BCNET - University network here in
  16. BC, Canada) saw the events:
  17.  
  18. date=1367952365|datetime=2013-05-07
  19. 18:46:05|type=A|peerAS=271|prefix=90.153.128.0/17|ASpath=271 577 6453
  20. 29386 29256|inet=4|sourceAS=29256|transitAS=29386
  21. date=1367952384|datetime=2013-05-07
  22. 18:46:24|type=A|peerAS=271|prefix=90.153.128.0/17|ASpath=271 6327 2914
  23. 6453 29386 29256|inet=4|sourceAS=29256|transitAS=29386
  24. date=1367952396|datetime=2013-05-07
  25. 18:46:36|type=A|peerAS=271|prefix=90.153.128.0/17|ASpath=271 577 1239
  26. 6453 29386 29256|inet=4|sourceAS=29256|transitAS=29386
  27. date=1367952406|datetime=2013-05-07
  28. 18:46:46|type=W|peerAS=271|prefix=90.153.128.0/17|ASpath=|inet=4|sourceAS=|transitAS=
  29. date=1368022352|datetime=2013-05-08
  30. 14:12:32|type=A|peerAS=271|prefix=90.153.128.0/17|ASpath=271 577 6453
  31. 29386 29256|inet=4|sourceAS=29256|transitAS=29386
  32. date=1368022352|datetime=2013-05-08
  33. 14:12:32|type=A|peerAS=271|prefix=90.153.128.0/17|ASpath=271 6939 1299
  34. 6453 29386 29256|inet=4|sourceAS=29256|transitAS=29386
  35.  
  36. You can see it changing paths at around 18:46, bounced around for a few
  37. seconds, trying to find alternative paths, before giving up and sending
  38. the withdrawal at 18:46:46.
  39.  
  40. Then at 14:12:32 it found a new path (syria back online).
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top