BGP Incident Analysis Open the App

BGP incident forensics

BGP incidents, reconstructed from evidence.

Analyze BGP updates, PCAP and MRT data. Detect routing anomalies, inspect the evidence and understand exactly what happened.

Start an investigation Explore the platform
A BGP origin-change incident on 203.0.113.0/24: AS65001's route via AS3356 and AS1299 is valid; AS64500 announces the prefix and the path turns RPKI invalid, with the BGP update log, a normal-versus-anomalous route comparison and the event timeline from UPDATE to WITHDRAW.

Real BGP data

1,487 updates. 5 critical incidents.

The BGP Incident Analysis investigation dashboard for the public analysis of updates.20080224.1845.gz: 1,487 messages, 86 incidents of which 5 are critical, 500 findings, and the RPKI validation status of 872 routes.
Public analysis · updates.20080224.1845.gz · 2008-02-24 · 18:45 to 18:50 UTC
Updates
1,487
Incidents
86
Critical
5
Open the public analysis

From routing data to evidence.

  1. 01

    Detect

    Hijacks, route leaks, origin changes, flapping and routing anomalies.

  2. 02

    Investigate

    Inspect PCAP, PCAPNG and MRT data with routing context.

  3. 03

    Explain

    Turn raw BGP events into evidence, reports and AI-assisted analysis.

  • PCAP
  • PCAPNG
  • MRT
  • IPv4
  • IPv6
  • RPKI
  • FlowSpec

Investigate your BGP data.

Start an investigation