<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">A quick update on this: I emailed
BGPmon and got a bounce message saying that our domain does not
exist. Our DNS servers are hosted on addresses within our AS, so
that makes perfect sense if there's a reachability issue.<br>
<br>
I've double-checked that the correct routes are advertised to all
our peers and confirmed this on several route-views servers. (See
the pastebin below.)<br>
<br>
Any suggestions on how to troubleshoot this further?<br>
<br>
Thanks in advance,<br>
Paul<br>
<br>
On 01/29/2014 01:09 PM, Nathan Phelan wrote:<br>
</div>
<blockquote
cite="mid:EBE9CB0906844B4C97AC2820943D16B97BDD89D1@ic-pra-wsv-03.interconnekt.local"
type="cite">
<meta http-equiv="Context-Type" content="text/html;
charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<div class="WordSection1">
<p class="MsoNormal"><span>Hi Paul,</span></p>
<p class="MsoNormal"><span>I’ve noticed the same thing; alerts
for prefixes being withdrawn but nothing when they come
back. In our account the alerts do change status to
“Cleared” once the prefix has been advertised again. Please
let me know what BGPmon’s response is (if you get one).</span></p>
<p class="MsoNormal"><span>Cheers,</span></p>
<p class="MsoNormal"><span>Nathan</span></p>
<p class="MsoNormal"><span> </span></p>
<div>
<div>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span
lang="EN-US"> AusNOG
[<a class="moz-txt-link-freetext" href="mailto:ausnog-bounces@lists.ausnog.net">mailto:ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Paul Gear<br>
<b>Sent:</b> Wednesday, 29 January 2014 9:00 AM<br>
<b>To:</b> <a class="moz-txt-link-abbreviated" href="mailto:ausnog@lists.ausnog.net">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] What are people doing for
monitoring BGP?</span></p>
</div>
</div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">Hi Ross/Nathan,<br>
<br>
These aren't new prefixes advertised from an AS, they're
existing prefixes being withdrawn and then returning later.
I get an alert email each time a prefix disappears, but no
end of alert email when it comes back.<br>
<br>
I also get alerts quite a lot about other parts of the world
(esp. Brazil, North America, and Northern Europe) not being
able to see our prefixes, even though they're advertised to
our providers and visible domestically. e.g. Here's our AS
viewed from 3 route-views servers as of yesterday:</p>
<ul type="disc">
<li class="MsoNormal">
<a moz-do-not-send="true"
href="http://paste.debian.net/hidden/524ca085/">http://paste.debian.net/hidden/524ca085/</a></li>
</ul>
<p class="MsoNormal"><a moz-do-not-send="true"
href="http://bgp.he.net/AS132897">http://bgp.he.net/AS132897</a>
shows it fine as well. Yet, there are presently 3 active
alerts for prefix 103.27.153.0/24 in my BGPmon account, one
going back to 20 December.<br>
<br>
I probably should contact BGPmon about these rather than
whining to you guys about it. <span class="moz-smiley-s3">
;-) </span> Writing email now...<br>
<br>
Regards,<br>
Paul<br>
<br>
On 01/29/2014 07:29 AM, Ross [Eve IT] wrote:</p>
</div>
<blockquote>
<div>
<div>
<p class="MsoNormal">Nathan is correct, works that way for
us too.</p>
</div>
<div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">On Tue, Jan 28, 2014 at 11:55 AM,
Nathan Brookfield <<a moz-do-not-send="true"
href="mailto:Nathan.Brookfield@simtronic.com.au"
target="_blank">Nathan.Brookfield@simtronic.com.au</a>>
wrote:</p>
<div>
<div>
<p class="MsoNormal">Paul that’s strange as it
absolutely can/does notify when a new prefix is
advertised from your ASN or if you have it set to
be monitored, it will also alert for more specific
prefixes and other similar alerts.</p>
<p class="MsoNormal"> </p>
<div>
<div>
<p class="MsoNormal"><b><span lang="EN-US">From:</span></b><span
lang="EN-US"> AusNOG [mailto:<a
moz-do-not-send="true"
href="mailto:ausnog-bounces@lists.ausnog.net"
target="_blank">ausnog-bounces@lists.ausnog.net</a>]
<b>On Behalf Of </b>Paul Gear<br>
<b>Sent:</b> Tuesday, 28 January 2014 11:53
AM<br>
<b>To:</b> <a moz-do-not-send="true"
href="mailto:ausnog@lists.ausnog.net"
target="_blank">ausnog@lists.ausnog.net</a><br>
<b>Subject:</b> Re: [AusNOG] What are people
doing for monitoring BGP?</span></p>
</div>
</div>
<div>
<div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal">On 01/28/2014 09:01 AM,
Nathan Brookfield wrote:</p>
</div>
<blockquote>
<div>
<p class="MsoNormal">+1 for BGPMon - There
tools are very good for monitoring
stability, spoofing, prefix hijacking etc.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">We also operate an
Australian monitoring station as do a few
other providers I believe.</p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
<div>
<p class="MsoNormal">Very accurate and very
reliable.</p>
</div>
</blockquote>
<p class="MsoNormal"><br>
I've been trialling BGPmon over the last few
months as well. One of the things I don't
like about it is that it emails you when a
prefix is withdrawn, but doesn't alert you
when it comes back.<br>
<br>
Otherwise, it seems to do the job.<br>
<br>
Paul</p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
_______________________________________________<br>
AusNOG mailing list<br>
<a moz-do-not-send="true"
href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a><br>
<a moz-do-not-send="true"
href="http://lists.ausnog.net/mailman/listinfo/ausnog"
target="_blank">http://lists.ausnog.net/mailman/listinfo/ausnog</a></p>
</div>
<p class="MsoNormal"> </p>
<div>
<p class="MsoNormal"> </p>
</div>
<p class="MsoNormal">-- </p>
<div>
<p class="MsoNormal">Regards,</p>
<div>
<p class="MsoNormal">Ross Tsolakidis<br>
IT Architect<br>
<br>
<b>Eve IT Pty Ltd</b></p>
<div>
<p class="MsoNormal"><a moz-do-not-send="true"
href="http://www.eve-it.com.au/" target="_blank">http://www.eve-it.net</a></p>
</div>
<div>
<p class="MsoNormal"><b>1300 65 77 75</b></p>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
</div>
<div>
<p class="MsoNormal"> </p>
</div>
</div>
</div>
</div>
<p class="MsoNormal"><br>
<br>
<br>
</p>
<pre>_______________________________________________</pre>
<pre>AusNOG mailing list</pre>
<pre><a moz-do-not-send="true" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a></pre>
<pre><a moz-do-not-send="true" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a></pre>
</blockquote>
<p class="MsoNormal"> </p>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
AusNOG mailing list
<a class="moz-txt-link-abbreviated" href="mailto:AusNOG@lists.ausnog.net">AusNOG@lists.ausnog.net</a>
<a class="moz-txt-link-freetext" href="http://lists.ausnog.net/mailman/listinfo/ausnog">http://lists.ausnog.net/mailman/listinfo/ausnog</a>
</pre>
</blockquote>
<br>
</body>
</html>