Product overview

Operational cases, not alert noise.

BGP Incident Analyzer turns historical BGP update datasets into a short list of explainable routing cases, ready for investigation and documentation.

CLI / deployable package Offline analysis Early access / free technical demo
Sample run 184,392 → 3 99.998% reduction
Early access product BGP Incident Analyzer is currently available through free 30-minute technical demos and assisted pilot evaluations. Public self-service download is not open yet. Request access
01

Input

RIPE RIS MRT update files from selected collectors and time windows.

02

Analysis

Origin-AS changes, synchronized events, ASN relationships and prefix activity are grouped into cases.

03

Output

HTML report, CSV master sheet, JSON case files and an auditable execution log.

Architecture

How the analyzer works.

A simple view of the processing flow: from RIPE RIS MRT datasets to an operational evidence package.

BGP Incident Analyzer pipeline architecture diagram showing RIPE RIS dataset input, dataset fetch, MRT parser, origin-AS detector, correlation engine, case classification and evidence outputs.

Download architecture diagram as PDF

What it finds

BGP events worth reviewing.

The analyzer focuses on routing changes that deserve human attention, instead of overwhelming the team with raw update volume.

Operational reorigin Many prefixes move origin AS in a coordinated pattern.
Internal ASN consolidation Changes appear inside a related ASN family or organization.
Related-network reorigin Origin changes involve ASNs with detectable operational relationships.
High-activity prefix A prefix shows unusual update volume and deserves review.
Deployment model

Post-event analysis. No router changes.

Offline evidence Works from published or provided BGP datasets.
Repeatable CLI workflow Suitable for routing, NOC and security engineers.
Private pilot Demo, selected dataset, assisted validation and early adopter feedback.
Data source

Real BGP data.

Sample runs use RIPE RIS update files in MRT format. Analysis can separate IPv4 and IPv6 events in the same run.

Collectorrrc00
Updates184,392
Cases3
Reduction99.998%
Free technical demo

See it running on real data.

Request a free 30-minute technical demo and review the analyzer with a dataset relevant to your network.

Request free demo View sample report