Beyond the best: real-time non-invasive collection of BGP messages

  • Authors:
  • Stefano Vissicchio;Luca Vergantini;Luca Cittadini;Valerio Mezzapesa;Maurizio Pizzonia;Maria Luisa Papagni

  • Affiliations:
  • Dipartimento di Informatica e Automazione, Università degli Studi Roma Tre, Rome, Italy;Dipartimento di Informatica e Automazione, Università degli Studi Roma Tre, Rome, Italy;Dipartimento di Informatica e Automazione, Università degli Studi Roma Tre, Rome, Italy;Dipartimento di Informatica e Automazione, Università degli Studi Roma Tre, Rome, Italy;Dipartimento di Informatica e Automazione, Università degli Studi Roma Tre, Rome, Italy;Dipartimento di Informatica e Automazione, Università degli Studi Roma Tre, Rome, Italy

  • Venue:
  • INM/WREN'10 Proceedings of the 2010 internet network management conference on Research on enterprise networking
  • Year:
  • 2010

Quantified Score

Hi-index 0.00

Visualization

Abstract

Interdomain routing in the Internet has a large impact on network traffic and related economic issues. For this reason, BGP monitoring attracts both academic and industrial research interest. The most common solution for collecting BGP routing data is to establish BGP peerings between border routers and a route collector. The downside of this approach is that it only allows us to trace changes of routes selected as best by routers: this drawback hinders a wide range of analyses that need access to all BGP messages received by border routers. In this paper, we present an effective technique enabling fast, non-invasive and scalable collection of all BGP messages received by border routers. By selectively cloning BGP traffic and sending it to a remote monitor, we are able to collect BGP messages without establishing additional BGP peerings. Our technique does not require any new feature to be implemented by routers and we experimentally show that our approach incurs a negligible processing overhead at the border routers. Our prototype implementation is able to process and archive all BGP messages in near real-time on commodity hardware.