CAIDA / bgpstream

BGP measurement analysis for the masses
GNU General Public License v2.0
109 stars 43 forks source link

Problems with BGP4MP_ET subtype #92

Open romain-fontugne opened 5 years ago

romain-fontugne commented 5 years ago

Looks like something is broken with the dumps from the LINX collector in route.views. BGPreader download the MRT files but gives no output. For example this prints nothing: bgpreader -t updates -c route-views.linx -w 1565157600,1565158500

but this shows a lot of stuff: bgpreader -t updates -c rrc00 -w 1565157600,1565158500

romain-fontugne commented 5 years ago

I just downloaded a file and looked at it with libbgpdump. This collector is using a different subtype: BGP4MP_ET

Here is an example:

>> bgpdump -m  updates.20190807.0600.bz2 | head      
2019-08-07 15:56:15 [info] logging to syslog
BGP4MP_ET|1565157612.514770|A|195.66.238.102|37271|159.138.79.0/24|37271 2914 3491 11172 136907|IGP|195.66.238.102|0|0|2914:420 2914:1203 2914:2201 2914:3200 3491:11 3491:200 3491:208 37271:5002 37271:5100 37271:5103|NAG||
BGP4MP_ET|1565157612.514822|W|195.66.224.21|6939|99.194.200.0/22
BGP4MP_ET|1565157612.514822|A|195.66.224.21|6939|103.224.54.0/24|6939 9498 134922 134922 134922 134922 134922|IGP|195.66.224.21|0|0||NAG||
BGP4MP_ET|1565157612.514822|A|195.66.224.21|6939|103.210.29.0/24|6939 9498 134922 134922 134922 134922 134922|IGP|195.66.224.21|0|0||NAG||
BGP4MP_ET|1565157612.514857|W|195.66.224.29|5413|84.205.68.0/24
BGP4MP_ET|1565157612.514857|W|195.66.224.29|5413|103.134.31.0/24
BGP4MP_ET|1565157612.514857|W|195.66.224.29|5413|1.39.21.0/24
BGP4MP_ET|1565157612.514857|W|195.66.224.29|5413|185.194.152.0/24
BGP4MP_ET|1565157612.514857|W|195.66.224.29|5413|45.222.96.0/22
BGP4MP_ET|1565157612.514857|W|195.66.224.29|5413|185.239.178.0/24
alistairking commented 5 years ago

Yeah, we're aware of the problem. If possible, you're best to switch to using BGPStream v2 which fully supports ET. https://bgpstream.caida.org/v2-beta

romain-fontugne commented 5 years ago

Thanks, I will try that!