Internet2 Network Security SIG

[Larry Blunk <>]

   The Colorado State BGPmon people had a talk at NANOG 69 last
year about a BGP Hijack detection system that they were beta
testing with Comcast and Charter.   It sounds like they were open
to involving other testers.   I just sent a note to Christos Papadopoulus
to see if he has any updates on this and he said they are still open
to additional participants.

https://www.nanog.org/sites/default/files/3_Papadopoulos_Bgpmon_The_Next_v1.pdf

  There's also a couple of possible roll-your-own detection systems out 
there --

https://github.com/jeroen92/bhas
https://github.com/ANSSI-FR/tabi


 -Larry


On 05/07/2018 07:37 PM, Mingwei Zhang wrote:
> On the topic of BGP data sources, BGPStream from CAIDA/UCSD is BGP data
> service that are currently available. It actually collects data from
> multiple sources.
> http://bgpstream.caida.org/data
>
> BGPmon from Colorado State is another one that provides real-time BGP 
> feed.
> https://www.bgpmon.io/
>
> - Mingwei
>
> Andrew Gallo 
> <>
>  writes:
>
> > Greetings:
> >
> > Good was good seeing everyone face to face today- some very interesting
> > discussions.
> >
> > For those organizations not currently monitoring prefixes, it seems that
> > BGPmon and 1000Eyes are the two services that are available
> >
> > https://bgpmon.net/
> > https://www.thousandeyes.com/solutions/bgp-and-route-monitoring
> >
> > BGPmon was purchased by OpenDNS, which was then purchased by Cisco, now
> > branded as Cisco Umbrella.  There is a free tier for monitoring 5 
> > prefixes.
> >
> > There was also a project run out of UCLA, Cyclops, though that no longer
> > appears to be active.
> >
> > There are other services that collect routing data- RouteViews is the
> > canonical example, but there's a new one, Isolario 
> > (https://www.isolario.it/).
> > Neither provide prefix monitoring, but they do make data available.  
> > Packet
> > Clearing House (PCH) is another, though it seems the MRT files there are
> > over 3 months old.  Not sure what the status of this organization is.
> >
> > Thanks.