Diagnosis of IP-Service Anomalies Based on BGP-Update Temporal Analysis

  • Authors:
  • Osamu Akashi;Atsushi Terauchi

  • Affiliations:
  • NTT Network Innovation Laboratories, Tokyo, Japan 180-8585;NTT Network Innovation Laboratories, Tokyo, Japan 180-8585

  • Venue:
  • IPOM '08 Proceedings of the 8th IEEE international workshop on IP Operations and Management
  • Year:
  • 2008

Quantified Score

Hi-index 0.00

Visualization

Abstract

Diagnosing IP-service anomalies requires network operators to analyze routing and service-application behavior at the protocol level from multiple viewpoints. For analyzing anomalies whose effects can be observed as static inconsistency among BGP routing tables, the multi-agent-based diagnostic system called ENCORE has been developed and successfully applied to actual autonomous systems (ASes). This system can integrate BGP routing information observed at multiple ASes and verify whether the routing information is being correctly distributed throughout the Internet. However, actual IP-service failures sometimes require temporal analysis of routing updates to identify specific causes and, moreover, comprehensive analysis from the viewpoint of interaction with other protocols than BGP. Thus, we have integrated such functions in the ENCORE architecture and developed a comprehensive diagnostic system called IP-MIND. It can consider historical BGP routing updates and the behavior of other protocols in conjunction with BGP-information reachability analysis in order to identify specific causes. It also enables diagnosis of a class of anomalies that cause reachability failures while not creating any inconsistency among the current BGP routing tables at multiple ASes.