|This system monitors our bgp feeds (currently from AS
6450, please send us more) in real time to see if anyone's jacking your
space. You should get an alert within a few seconds of someone
performing said jacking. We will only alert once per hour at present.
There are 2 mandatory parameters and an optional parameter:
The optional parameter is whether you want to be alerted for more specifics inside that prefix. Probably you do.
One trickiness -
Let's say you have x/23 set as an alert. If you also set up x/24 as an alert, then even if the x/23 is set as an alert and more specific alert is checked off, we won't look at that rule since you've given us more specific info already.
That only applies for rules within the same user's settings, not across the whole system.
Right now we only reload the alert rules every hour but that will change to be semi-real time shortly.
There are a lot of things we don't do yet:
- 4-byte ASNs
- Tested for huge scale
- Alert history/archival
- Watching the transit part of the AS_PATH for ASNs that must or should never be there, but we might add them if there's interest.
For questions or comments please email firstname.lastname@example.org.
To offer us another BGP feed please email email@example.com!
The BGP jack-o-meter team
Avi, Andy and Gadi