Using RIS for BGP route monitoring

RIPE RIS can be used for analysis of BGP updates or other source for BGP forensics.

https://www.ripe.net/analyse/internet-measurements/routing-information-service-ris

The access is simple and free. You can use curl to access the information or write python interface to query for information.

e.g { the prefix that my  home ISP lives in }

curl -s "https://ris-live.ripe.net/v1/stream/?format=json" -H 'X-RIS-Subscribe: {"prefix": "199.188.248.0/21"}'

And output would be similar to the following;

For traffic analysis you can query bgp message types;

You can string key/valuepair attributes to drill in and to reduce the number of matches, here I'm looking or interested in the remote-route-collector 00 & NOTIFICATIONS

If you knew the underlaying  rcc and it's peers, you can find BGP opens

So the options are quite flexible and wide. A organization could build a BGP message analysis database for querying to research events internal to it's BGP topology and to help analysis BGP flaps,events,outages or help with RCAs.

NSE ( network security expert) and Route/Switching Engineer

kfelix  -----a----t---- socpuppets ---dot---com

     ^      ^

=(  @  @ )=

         o

        /  \