CLI output
184,392 updates.
3 cases. Seconds.
A compact view of what the analyzer produces from a real RIPE RIS dataset. Raw BGP noise condensed into a reviewable set of operational cases.
$ bgp-analyzer run --collector rrc00 --date 2026-05-25 --time 1945
BGP INCIDENT ANALYZER v1.0 · ISP event intelligence
─────────────────────────────────────────────────────────────────
[01/06] Fetching dataset … OK updates.20260525.1945.gz
[02/06] Parsing MRT updates … OK 184,392 records
[03/06] Detecting origin changes …OK 10 origin-AS change cases found
[04/06] Grouping candidates … OK 46 candidate cases grouped
[05/06] Classifying … OK 3 classified · 43 high-activity
[06/06] Generating evidence … OK HTML PDF CSV JSON
─────────────────────────────────────────────────────────────────
SUMMARY
Updates analyzed 184,392
Candidate cases 46
Origin-AS changes 10
Noise reduction 99.998%
Top IPv4 case 146.66.28.0/22
─────────────────────────────────────────────────────────────────
TOP CASES
CASE PRIO SCORE TYPE PREFIXES
001 HIGH 92/100 Operational Reorigin 502
002 HIGH 81/100 Internal ASN Consolidation 107
003 MED 67/100 Related-Network Reorigin 49
─────────────────────────────────────────────────────────────────
EVIDENCE OUTPUT
✓ 01_raw/ original dataset
✓ 02_parsed/ structured CSV · 184,392 records
✓ 03_origin_changes/10 origin-AS cases · JSON
✓ 04_candidate_cases/46 cases · per-case JSON
✓ 05_reports/ HTML · PDF · CSV master · JSON export
─────────────────────────────────────────────────────────────────
Analysis complete. 3 cases require routing-team review.