[NAP CABASE MZA] Informe evento IXP MZA Sábado 16/5/2020 16:05 - 19:10

Hernan Moguilevsky - NOC CABASE noc.hernan en cabase.org.ar
Mar Mayo 19 14:52:13 -03 2020


Estimados,

El día sábado 16/5 se reportó un evento en el IXP MZA.
En primer momento se perdió gestón y monitoreo desde RCN por lo que se 
generó el ticket TT2912 y se reclamó por el enlace a Silica.



Recibimos en ese horario un pico de 85 kpps L2 Multicast en RCN 
proveniente de MZA.



Al ser L2 no quedaron registrados en nuestro sistema de análisis de tráfico.

Durante el evento pudimos ver una gran cantidad de paquetes ICMPv6 y la 
caída de las sesiones BGP en AF IPv6 tanto de MZA-ROU03 como en RCN.
Y tambien la caída de sesiones BGP AF IPv4 en MZA-ROU-01


[root en RCN-ROU-01 ~]# tcpdump -s0 -c100 -i bond0.104 -Klnne
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on bond0.104, link-type EN10MB (Ethernet), capture size 65535 
bytes
19:09:57.802135 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802142 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802145 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802149 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802152 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802185 00:01:e8:87:8a:5c > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802192 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802197 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802200 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802203 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802206 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802209 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802212 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802215 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802219 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802222 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.802293 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802295 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802296 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802300 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802301 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802303 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802304 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802306 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802308 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802309 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802311 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802312 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802315 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802315 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.802319 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802978 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.802987 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803019 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:01, ethertype IPv6 
(0x86dd), length 86: fe80::22f1:7cff:fead:bbd1 > ff02::1:ff00:201: 
ICMP6, neighbor solicitation, who has 2001:13c7:600b::201, length 32
19:09:57.803073 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803122 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803172 00:01:e8:87:8a:5c > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803174 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803176 00:01:e8:87:8a:5c > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803176 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803187 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803280 00:01:e8:87:8a:5c > 33:33:00:00:00:01, ethertype IPv6 
(0x86dd), length 118: fe80::201:e8ff:fe87:8a5c > ff02::1: ICMP6, router 
advertisement, length 64
19:09:57.803286 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803290 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803293 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803296 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803299 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803302 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803305 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803308 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803311 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803314 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803317 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803320 00:01:e8:87:8a:5c > 33:33:ff:00:00:01, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:1: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::1, length 32
19:09:57.803540 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803546 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803549 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803553 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803556 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803559 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803592 64:d1:54:e3:b4:b0 > 33:33:00:00:00:16, ethertype IPv6 
(0x86dd), length 130: :: > ff02::16: HBH ICMP6, multicast listener 
report v2, 3 group record(s), length 68
19:09:57.803598 64:d1:54:e3:b4:b0 > 33:33:00:00:00:16, ethertype IPv6 
(0x86dd), length 130: :: > ff02::16: HBH ICMP6, multicast listener 
report v2, 3 group record(s), length 68
19:09:57.803607 64:d1:54:e3:b4:b0 > 33:33:00:00:00:16, ethertype IPv6 
(0x86dd), length 130: :: > ff02::16: HBH ICMP6, multicast listener 
report v2, 3 group record(s), length 68
19:09:57.803714 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803722 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803726 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803730 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803733 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803737 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803740 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803744 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803747 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803747 20:f1:7c:ad:bb:d1 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::10 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803751 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803755 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803758 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803762 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803765 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803769 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803773 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803776 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803780 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803783 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803787 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803790 c4:ad:34:81:ac:43 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::18 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803804 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803804 64:d1:54:e3:b4:b0 > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::21 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803812 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803814 00:01:e8:87:8a:5c > 33:33:ff:00:02:54, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:254: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::254, length 32
19:09:57.803815 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803818 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803822 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803825 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803828 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803834 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803843 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803852 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803858 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803867 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32
19:09:57.803873 00:01:e8:87:8a:5c > 33:33:ff:00:00:05, ethertype IPv6 
(0x86dd), length 86: 2001:13c7:600b::243 > ff02::1:ff00:5: ICMP6, 
neighbor solicitation, who has 2001:13c7:600b::5, length 32

MZA-ROU-03
     2020-05-16 19:10:33     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 16s ago
     2020-05-16 19:10:33     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 9s ago
     2020-05-16 19:09:29     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 15s ago
     2020-05-16 19:09:29     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 1m 17s ago
     2020-05-16 19:07:27     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 1m 5s ago
     2020-05-16 19:07:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 38s ago
     2020-05-16 19:05:30     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 42s ago
     2020-05-16 19:03:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 2s ago
     2020-05-16 19:01:29     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 7s ago
     2020-05-16 19:01:03     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 35s ago
     2020-05-16 19:01:03     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1s ago
     2020-05-16 18:59:23     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 46s ago
     2020-05-16 18:57:21     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 43s ago
     2020-05-16 18:56:28     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 7s ago.
     2020-05-16 18:56:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 15s ago
     2020-05-16 18:55:17     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 32s ago
     2020-05-16 18:55:16     AS52360 200.14.38.254     BGP Session Up: 
200.14.38.254 (AS52360), time 1m 16s ago
     2020-05-16 18:53:22     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 37s ago
     2020-05-16 18:51:29     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 6s ago
     2020-05-16 18:51:29     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 6s ago
     2020-05-16 18:51:28     mza-rou-03     Bgp-peers: 4 updated, 7 
unchanged.
     2020-05-16 18:51:14     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 7s ago.
     2020-05-16 18:49:24     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 27s ago
     2020-05-16 18:47:26     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 27s ago
     2020-05-16 18:47:25     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 54s ago
     2020-05-16 18:46:11     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 11s ago.
     2020-05-16 18:45:24     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 14s ago
     2020-05-16 18:43:30     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 51s ago
     2020-05-16 18:43:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 42s ago
     2020-05-16 18:39:29     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 22s ago
     2020-05-16 18:39:29     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 10s ago
     2020-05-16 18:39:28     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 3s ago.
     2020-05-16 18:37:26     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 30s ago
     2020-05-16 18:37:26     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 1m 2s ago
     2020-05-16 18:36:15     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 14s ago
     2020-05-16 18:35:30     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 18s ago.
     2020-05-16 18:35:30     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 59s ago
     2020-05-16 18:31:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 32s ago
     2020-05-16 18:30:31     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 52s ago
     2020-05-16 18:29:30     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 52s ago
     2020-05-16 18:19:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 25s ago
     2020-05-16 18:17:22     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 47s ago
     2020-05-16 18:17:21     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 45s ago
     2020-05-16 18:17:21     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 46s ago
     2020-05-16 18:17:21     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 44s ago
     2020-05-16 18:15:29     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 1s ago.
     2020-05-16 18:15:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 16s ago
     2020-05-16 18:13:20     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 33s ago
     2020-05-16 18:11:43     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 2s ago
     2020-05-16 18:09:29     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 3s ago
     2020-05-16 18:07:22     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 24s ago
     2020-05-16 18:07:20     AS52360 200.14.38.254     BGP Session Up: 
200.14.38.254 (AS52360), time 22s ago
     2020-05-16 18:05:32     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 1m 2s ago
     2020-05-16 18:05:29     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 58s ago
     2020-05-16 18:05:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 53s ago
     2020-05-16 18:03:30     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 20s ago
     2020-05-16 18:00:27     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 39s ago
     2020-05-16 18:00:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 43s ago
     2020-05-16 17:59:28     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 9s ago.
     2020-05-16 17:57:22     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1s ago
     2020-05-16 17:55:18     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 23s ago
     2020-05-16 17:53:28     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 39s ago
     2020-05-16 17:53:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 55s ago
     2020-05-16 17:51:31     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 3s ago
     2020-05-16 17:50:22     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 17s ago
     2020-05-16 17:49:29     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 1s ago.
     2020-05-16 17:49:29     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 45s ago
     2020-05-16 17:45:22     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 4s ago
     2020-05-16 17:45:22     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 6s ago.
     2020-05-16 17:43:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 34s ago
     2020-05-16 17:43:27     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 1m 15s ago
     2020-05-16 17:40:41     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 19s ago
     2020-05-16 17:40:40     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 10s ago
     2020-05-16 17:39:32     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 26s ago
     2020-05-16 17:36:14     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 34s ago
     2020-05-16 17:35:32     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 8s ago.
     2020-05-16 17:35:29     AS52360 200.14.38.254     BGP Session Up: 
200.14.38.254 (AS52360), time 52s ago
     2020-05-16 17:33:26     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 12s ago
     2020-05-16 17:33:26     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 1m 40s ago
     2020-05-16 17:31:26     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 35s ago
     2020-05-16 17:30:31     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 1s ago.
     2020-05-16 17:29:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 2s ago
     2020-05-16 17:26:05     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 3s ago
     2020-05-16 17:25:17     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 42s ago
     2020-05-16 17:23:25     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 47s ago
     2020-05-16 17:21:27     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 1m 41s ago
     2020-05-16 17:21:26     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 14s ago
     2020-05-16 17:19:18     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 32s ago
     2020-05-16 17:19:18     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 26s ago
     2020-05-16 17:17:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 3s ago
     2020-05-16 17:15:52     AS52360 200.14.38.254     BGP Session Up: 
200.14.38.254 (AS52360), time 6s ago
     2020-05-16 17:15:33     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 35s ago
     2020-05-16 17:13:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 53s ago
     2020-05-16 17:13:27     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 7s ago.
     2020-05-16 17:11:15     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 1m 22s ago
     2020-05-16 17:09:28     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 57s ago
     2020-05-16 17:09:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 17s ago
     2020-05-16 17:09:26     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 49s ago
     2020-05-16 17:07:28     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 4s ago.
     2020-05-16 17:07:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 43s ago
     2020-05-16 17:05:28     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 1m 7s ago
     2020-05-16 17:02:17     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 20s ago
     2020-05-16 17:01:27     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 44s ago
     2020-05-16 17:01:26     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 51s ago
     2020-05-16 16:57:18     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 8s ago
     2020-05-16 16:56:04     AS52376 2001:13c7:600b:304::201     BGP 
Session Down: 2001:13c7:600b:304::201 (AS52376), time 12s ago.
     2020-05-16 16:55:20     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 12s ago.
     2020-05-16 16:51:25     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 22s ago
     2020-05-16 16:51:25     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 16s ago.
     2020-05-16 16:50:40     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 1s ago.
     2020-05-16 16:49:32     AS7049 2001:13c7:600b:401::254     BGP 
Session Up: 2001:13c7:600b:401::254 (AS7049), time 1m 54s ago
     2020-05-16 16:49:31     AS52376 2001:13c7:600b:304::201     BGP 
Session Up: 2001:13c7:600b:304::201 (AS52376), time 35s ago
     2020-05-16 16:49:30     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 1m 38s ago
     2020-05-16 16:47:20     AS7049 2001:13c7:600b:401::254     BGP 
Session Down: 2001:13c7:600b:401::254 (AS7049), time 9s ago.
     2020-05-16 16:45:31     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 18s ago
     2020-05-16 16:45:30     AS52376 2001:13c7:600b:304::201     BGP 
Session Down: 2001:13c7:600b:304::201 (AS52376), time 6s ago.
     2020-05-16 16:41:26     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 1s ago
     2020-05-16 16:41:05     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 16s ago.
     2020-05-16 16:37:26     AS52360 200.14.38.254     BGP Session Up: 
200.14.38.254 (AS52360), time 47s ago
     2020-05-16 16:36:33     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 24s ago
     2020-05-16 16:36:32     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 58s ago
     2020-05-16 16:35:28     AS52360 2001:13c7:600b::254     BGP Session 
flapped: 2001:13c7:600b::254 (AS52360), time 1m 13s ago
     2020-05-16 16:29:30     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 8s ago
     2020-05-16 16:25:20     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 21s ago
     2020-05-16 16:25:20     AS52376 2001:13c7:600b:304::201     BGP 
Session Up: 2001:13c7:600b:304::201 (AS52376), time 1m 58s ago
     2020-05-16 16:23:19     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 3s ago
     2020-05-16 16:21:02     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 11s ago
     2020-05-16 16:19:26     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 48s ago
     2020-05-16 16:17:25     AS63293 2001:13c7:600b:510::10     BGP 
Session Up: 2001:13c7:600b:510::10 (AS63293), time 20s ago
     2020-05-16 16:17:25     AS52376 2001:13c7:600b:304::201     BGP 
Session flapped: 2001:13c7:600b:304::201 (AS52376), time 13s ago
     2020-05-16 16:17:24     AS63293 200.115.88.80     BGP Session 
flapped: 200.115.88.80 (AS63293), time 19s ago
     2020-05-16 16:13:28     AS52376 2001:13c7:600b:304::201     BGP 
Session Down: 2001:13c7:600b:304::201 (AS52376), time 30s ago.
     2020-05-16 16:13:28     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 3s ago.
     2020-05-16 16:11:14     AS52360 2001:13c7:600b::254     BGP Session 
Up: 2001:13c7:600b::254 (AS52360), time 1m 42s ago
     2020-05-16 16:09:32     AS7049 2001:13c7:600b:401::254     BGP 
Session flapped: 2001:13c7:600b:401::254 (AS7049), time 1m 27s ago
     2020-05-16 16:09:30     AS52360 2001:13c7:600b::254     BGP Session 
Down: 2001:13c7:600b::254 (AS52360), time 7s ago.

MZA-ROU-01
     2020-05-16 16:20:22     mza-rou-01     Device status changed to 
Down (snmp -> ping)
     2020-05-16 16:15:08     mza-rou-01     Device status changed to 
Down (snmp)
     2020-05-16 16:10:31     AS     BGP Session flapped: 
2001:13c7:600b::243 (AS52360), time 45s ago
     2020-05-16 16:10:26     AS     BGP Session flapped: 200.14.38.34 
(AS52436), time 6s ago
     2020-05-16 16:10:26     AS     BGP Session Up: 200.14.38.33 
(AS264800), time 53s ago
     2020-05-16 16:10:24     AS     BGP Session flapped: 200.14.38.28 
(AS264800), time 1m 47s ago
     2020-05-16 16:10:23     AS     BGP Session flapped: 200.14.38.22 
(AS265699), time 1m 10s ago
     2020-05-16 16:10:18     AS     BGP Session flapped: 200.14.38.3 
(AS52436), time 2m 49s ago
     2020-05-16 16:06:11     AS     BGP Session Up: 2001:13c7:600b::20 
(AS263172), time 18s ago
     2020-05-16 16:06:06     AS     BGP Session Down: 200.14.38.33 
(AS264800), time 2s ago.
     2020-05-16 16:06:04     AS     BGP Session Up: 200.14.38.24 
(AS265740), time 4m 23s ago
     2020-05-16 16:06:03     AS     BGP Session flapped: 200.14.38.20 
(AS263172), time 19s ago
     2020-05-16 16:00:51     AS     BGP Session Up: 200.14.38.20 
(AS263172), time 1m 59s ago
     2020-05-16 15:58:24     AS     BGP Session Up: 200.14.38.42 
(AS264656), time 5m 42s ago
     2020-05-16 15:58:20     AS     BGP Session Up: 200.14.38.34 
(AS52436), time 2m 31s ago
     2020-05-16 15:58:12     AS     BGP Session Up: 200.14.38.3 
(AS52436), time 2m 53s ago
     2020-05-16 15:58:11     AS     BGP Session Up: 200.14.38.2 
(AS52436), time 2m 44s ago
     2020-05-16 15:58:11     AS     BGP Session Up: 200.14.38.1 
(AS52436), time 2m 47s ago


Los logs del MZA-SWT-01 indican un evento de mitigacion de tormenta de 
Broadcast en la interface Po7 de las interfaces Gi1/3 y Gi1/9 
Correspondiente al enlace del miembro Fernando Jurman (FDJ)

MZA-SWT-01
May 16 16:00:59: %SPANTREE-2-UNBLOCK_CONSIST_PORT: Unblocking 
GigabitEthernet1/24 on VLAN0430. Port consistency restored.
May 16 16:03:36: %STORM_CONTROL-3-FILTERED: A Broadcast storm detected 
on Gi1/9. A packet filter action has been applied on the interface.
May 16 16:03:43: %STORM_CONTROL-3-FILTERED: A Broadcast storm detected 
on Gi1/3. A packet filter action has been applied on the interface.
May 16 16:03:46: %STORM_CONTROL-3-FILTERED: A Broadcast storm detected 
on Gi1/9. A packet filter action has been applied on the interface.
May 16 16:03:48: %STORM_CONTROL-3-FILTERED: A Broadcast storm detected 
on Gi1/3. A packet filter action has been applied on the interface.
May 16 16:35:37: %STORM_CONTROL-3-FILTERED: A Broadcast storm detected 
on Gi1/9. A packet filter action has been applied on the interface.
May 16 19:11:55: %EC-5-UNBUNDLE: Interface GigabitEthernet1/18 left the 
port-channel Port-channel7
May 16 19:11:55: %EC-5-UNBUNDLE: Interface GigabitEthernet1/25 left the 
port-channel Port-channel7
May 16 19:12:10: %SYS-5-CONFIG_I: Configured from console by jvitale on 
vty0 (200.14.38.254)


En la gráfica del miembro se registró la inyeccion de 194 kpps del tipo 
Broadcast y 102 kpps del tipo Multicast:


En la puerta de un miembro sin tráfico se registró el siguiente 
comportamiento: Sólo se propagaron los paquetes Multicast.


El evento finalizó con la desconexion del miembro por parte de Silica al 
encontrar anomalías en su tráfico.


Preventivamente se configuraron las segurizaciones de puerto faltantes 
en MZA-SWT-01 y MZA-ROU-03.

Inicial:
MZA-ROU-03#sh mac-address-table dynamic vlan 430
VlanId     Mac Address           Type   Interface        State
  430    00:07:7d:cf:0c:30    Dynamic    Po 1          Active
  430    00:07:7d:cf:0c:3f    Dynamic    Po 1          Active
  430    00:0c:29:22:f7:61    Dynamic    Po 1          Active
  430    00:1c:73:c9:c0:fd    Dynamic    Po 4          Active
  430    00:32:17:e6:08:d9    Dynamic    Te 2/2        Active
  430    00:e0:fc:09:bc:f9    Dynamic    Te 2/0        Active
  430    0c:41:e9:a0:c0:60    Dynamic    Po 2          Active
  430    1a:69:8c:01:2c:5c    Dynamic    Po 1          Active
  430    20:f1:7c:ad:bb:d1    Dynamic    Te 2/0        Active
  430    2c:59:e5:9b:70:64    Dynamic    Po 1          Active
  430    44:1e:a1:3b:27:13    Dynamic    Po 2          Active
  430    44:31:92:15:e2:17    Dynamic    Po 1          Active
  430    4c:5e:0c:06:c9:d9    Dynamic    Po 1          Active
  430    4c:5e:0c:06:c9:da    Dynamic    Po 1          Active
  430    4c:5e:0c:de:b9:f2    Dynamic    Po 1          Active
  430    50:3d:e5:c6:33:78    Dynamic    Po 1          Active
  430    64:d1:54:cf:a9:3f    Dynamic    Po 1          Active
  430    64:d1:54:d0:55:7c    Dynamic    Po 1          Active
  430    64:d1:54:e3:b4:b0    Dynamic    Po 1          Active
  430    64:d1:54:e9:94:f7    Dynamic    Te 2/6        Active
  430    64:d1:54:ec:da:d7    Dynamic    Te 2/6        Active
  430    64:d1:54:ff:2d:a3    Dynamic    Po 1          Active
  430    6c:3b:6b:eb:64:9d    Dynamic    Po 4          Active
  430    6c:3b:6b:eb:64:9e    Dynamic    Po 4          Active
  430    6c:3b:6b:ef:17:1e    Dynamic    Po 1          Active
  430    6c:3b:6b:ef:1e:3a    Dynamic    Po 1          Active
  430    6c:ae:8b:5d:74:68    Dynamic    Po 1          Active
  430    6c:ae:8b:5d:74:6c    Dynamic    Po 1          Active
  430    72:b4:5e:62:e4:2c    Dynamic    Po 1          Active
  430    74:4d:28:27:97:aa    Dynamic    Te 2/2        Active
  430    74:4d:28:3d:a3:b7    Dynamic    Te 2/2        Active
  430    74:4d:28:e3:0b:b2    Dynamic    Po 1          Active
  430    78:1d:ba:56:f4:25    Dynamic    Te 2/6        Active
  430    b8:69:f4:1b:b3:61    Dynamic    Po 1          Active
  430    b8:69:f4:8e:86:d9    Dynamic    Po 1          Active
  430    b8:69:f4:8e:86:de    Dynamic    Po 1          Active
  430    b8:69:f4:e0:17:53    Dynamic    Po 1          Active
  430    c4:ad:34:81:ac:43    Dynamic    Po 1          Active
  430    c4:ad:34:d2:19:60    Dynamic    Po 1          Active
  430    cc:2d:e0:14:fa:83    Dynamic    Po 1          Active
  430    cc:2d:e0:20:8e:51    Dynamic    Po 1          Active
  430    cc:2d:e0:bd:3c:8d    Dynamic    Po 1          Active
  430    cc:2d:e0:bd:e0:d1    Dynamic    Po 1          Active
  430    cc:2d:e0:e4:7f:b7    Dynamic    Te 2/6        Active
  430    cc:53:b5:f0:53:9f    Dynamic    Te 2/6        Active
  430    d4:ca:6d:8e:bd:b2    Dynamic    Po 1          Active
  430    d4:ca:6d:8e:bd:b3    Dynamic    Po 1          Active
  430    e4:8d:8c:08:a8:b4    Dynamic    Po 1          Active
  430    e6:eb:69:ad:da:9d    Dynamic    Te 2/0        Active
  430    ec:eb:b8:1f:08:80    Dynamic    Po 1          Active
  430    ee:c9:23:b8:c6:99    Dynamic    Po 1          Active

Final:
MZA-SWT-01#sh mac address-table dynamic
No entries present.

MZA-SWT-01#sh mac address-table static
Unicast Entries
  vlan   mac address     type        protocols               port
-------+---------------+--------+---------------------+--------------------
   10    0007.7dcf.0c3f    static ip,ipx,assigned,other Switch
  304    0001.e887.8a5c    static ip,ipx,assigned,other Port-channel1
  304    0001.e8a0.488a    static ip,ipx,assigned,other Port-channel1
  304    0007.7dcf.0c3f    static ip,ipx,assigned,other Switch
  304    0c41.e9a0.c060    static ip,ipx,assigned,other Port-channel1
  401    0001.e887.8a5c    static ip,ipx,assigned,other Port-channel1
  401    5c5e.abda.a5c1    static ip,ipx,assigned,other GigabitEthernet1/45
  401    cc53.b5f0.5390    static ip,ipx,assigned,other GigabitEthernet1/45
  430    0001.e887.8a5c    static ip,ipx,assigned,other Port-channel1
  430    0001.e8a0.488a    static ip,ipx,assigned,other Port-channel1
  430    0007.7dcf.0c3f    static ip,ipx,assigned,other Switch
  430    000c.2922.f761    static ip,ipx,assigned,other GigabitEthernet1/47
  430    001b.21bb.9c78    static ip,ipx,assigned,other Port-channel1
  430    001c.73c9.c0fd    static ip,ipx,assigned,other Port-channel1
  430    0032.17e6.08d9    static ip,ipx,assigned,other Port-channel1
  430    20f1.7cad.bbd1    static ip,ipx,assigned,other Port-channel1
  430    2c59.e59b.7064    static ip,ipx,assigned,other Port-channel5
  430    441e.a13b.2713    static ip,ipx,assigned,other Port-channel1
  430    4431.9215.e217    static ip,ipx,assigned,other Port-channel2
  430    444c.a820.ad2b    static ip,ipx,assigned,other Port-channel1
  430    4c5e.0c02.d79e    static ip,ipx,assigned,other Port-channel1
  430    4c5e.0c06.c9d9    static ip,ipx,assigned,other GigabitEthernet1/4
  430    4c5e.0c06.c9da    static ip,ipx,assigned,other GigabitEthernet1/21
  430    4c5e.0c4a.d113    static ip,ipx,assigned,other Port-channel1
  430    4c5e.0cde.b9f2    static ip,ipx,assigned,other GigabitEthernet1/21
  430    503d.e5c6.3378    static ip,ipx,assigned,other GigabitEthernet1/48
  430    64d1.54cf.a93f    static ip,ipx,assigned,other GigabitEthernet1/20
  430    64d1.54d0.557c    static ip,ipx,assigned,other GigabitEthernet1/4
  430    64d1.54dc.83b0    static ip,ipx,assigned,other Port-channel1
  430    64d1.54e3.b4b0    static ip,ipx,assigned,other GigabitEthernet1/21
  430    64d1.54e9.94f7    static ip,ipx,assigned,other Port-channel1
  430    64d1.54ec.dad7    static ip,ipx,assigned,other Port-channel1
  430    64d1.54ff.2da3    static ip,ipx,assigned,other GigabitEthernet1/40
  430    6c3b.6beb.649d    static ip,ipx,assigned,other Port-channel1
  430    6c3b.6bef.171e    static ip,ipx,assigned,other GigabitEthernet1/24
  430    6c3b.6bef.1e3a    static ip,ipx,assigned,other GigabitEthernet1/37
  430    6cae.8b5d.7468    static ip,ipx,assigned,other GigabitEthernet1/47
  430    6cae.8b5d.746c    static ip,ipx,assigned,other GigabitEthernet1/47
  430    72b4.5e62.e42c    static ip,ipx,assigned,other Port-channel4
  430    744d.2827.97aa    static ip,ipx,assigned,other Port-channel1
  430    744d.2838.bc59    static ip,ipx,assigned,other Port-channel1
  430    744d.283d.a3b7    static ip,ipx,assigned,other Port-channel1
  430    744d.28e3.0bb2    static ip,ipx,assigned,other Port-channel6
  430    781d.ba56.f425    static ip,ipx,assigned,other Port-channel1
  430    b869.f41b.b361    static ip,ipx,assigned,other GigabitEthernet1/21
  430    b869.f48e.86d9    static ip,ipx,assigned,other Port-channel8
  430    b869.f48e.86de    static ip,ipx,assigned,other Port-channel8
  430    b869.f4e0.1753    static ip,ipx,assigned,other Port-channel6
  430    c4ad.3481.ac43    static ip,ipx,assigned,other Port-channel7
  430    c4ad.34d2.1960    static ip,ipx,assigned,other Port-channel8
  430    cc2d.e014.fa83    static ip,ipx,assigned,other GigabitEthernet1/2
  430    cc2d.e020.8e51    static ip,ipx,assigned,other GigabitEthernet1/10
  430    cc2d.e0bd.3c8d    static ip,ipx,assigned,other GigabitEthernet1/19
  430    cc2d.e0bd.e0d1    static ip,ipx,assigned,other GigabitEthernet1/39
  430    cc2d.e0e4.7fb7    static ip,ipx,assigned,other Port-channel1
  430    cc53.b5f0.539f    static ip,ipx,assigned,other Port-channel1
  430    d4ca.6d8e.bdb3    static ip,ipx,assigned,other Port-channel4
  430    d4ca.6d8e.c9a8    static ip,ipx,assigned,other Port-channel3
  430    e48d.8c08.a8b4    static ip,ipx,assigned,other Port-channel8
  430    e6eb.69ad.da9d    static ip,ipx,assigned,other Port-channel1
  430    eec9.23b8.c699    static ip,ipx,assigned,other Port-channel4

Multicast Entries
  vlan    mac address     type    ports
-------+---------------+-------+--------------------------------------------
    1    ffff.ffff.ffff   system
   10    ffff.ffff.ffff   system Switch
  304    ffff.ffff.ffff   system Switch,Po1
  401    ffff.ffff.ffff   system Gi1/45,Po1
  430    ffff.ffff.ffff   system 
Gi1/2,Gi1/4,Gi1/10,Gi1/19,Gi1/20,Gi1/21,Gi1/24
Gi1/37,Gi1/39,Gi1/40,Gi1/47,Gi1/48,Switch
                                 Po1,Po2,Po3,Po4,Po5,Po6,Po7,Po8
  444    ffff.ffff.ffff   system


Conclusion:

El miembro FDJ inyectó una cantidad extraordinaria de paquetes Broadcast 
y Multicast.
Los paqutes de Broadcast fueron mitigados por la configuración de 
storm-control existente en la interface.
Los paquetes de Multicast se propagaron a todos los enlaces del IXP MZA 
incluyendo el de RCN.
El procesamiento de dichos paquetes afectó al MZA-ROU-03 y RCN-ROU-05, 
ambos Force10 Exascale.
El filtrado de paquetes Multicast no está soportado por las tecnologías 
actuales del IXP MZA.


Problemas encontrados que requieren atención:
Bajar administrativamente las interfaces que no están cursando tráfico.
Configurar los Etherchannel en LACP. Ya que una mala configuración del 
lado de los miembros podría generar un loop.


MZA-SWT-01# sh lacp 1 in
Flags:  S - Device is requesting Slow LACPDUs
         F - Device is requesting Fast LACPDUs
         A - Device is in Active mode       P - Device is in Passive mode

Channel group 1
                             LACP port     Admin     Oper Port        Port
Port      Flags   State     Priority      Key       Key Number      State
Te1/49    SA      bndl      32768         0x1       0x1 0x32        0x3D
Te1/50    SA      bndl      32768         0x1       0x1 0x33        0x3D


MZA-SWT-01# sh lacp 2 in
Channel group 2 is not participating in LACP
MZA-SWT-01# sh lacp 3 in
Channel group 3 is not participating in LACP
MZA-SWT-01# sh lacp 4 in
Channel group 4 is not participating in LACP
MZA-SWT-01# sh lacp 5 in
Channel group 5 is not participating in LACP
MZA-SWT-01# sh lacp 6 in
Channel group 6 is not participating in LACP
MZA-SWT-01# sh lacp 7 in
Channel group 7 is not participating in LACP
MZA-SWT-01#

Po1                            up             up       Trunk: MZA-ROU-03 
eth2 [10Gb]
Po2                            up             up       MZA: Arlink (ARK) 
[4Gb] {28075}
Po3                            up             up       MZA: Fernando 
Jurman SA (FDJ) [2Gb] {52503}
Po4                            up             up       MZA: INTELISIS SA 
(ILS) [2Gb] {263775}
Po5                            up             up       MZA: Fibras 
Opticas del oeste (FOO) [2Gb] {265692}
Po6                            up             up       MZA: Kepwisp SRL 
(KEP) [2Gb] {264679}
Po7                            up             up       MZA: MZA: Andres 
Pozzi (APO) [2Gb] {264787}
Po8                            up             up       MZA:Waycom SA 
(WAY) [1Gb] via MZA-SWT-01 F0/12 F0/13


Saludos cordiales.

-- 
Firma Gmail
Logo CABASE <https://www.cabase.org.ar/>

*Hernan Moguilevsky* | Supervisor NOC
Suipacha 128 - 3 "F" <https://goo.gl/maps/bpkHRVuKDzj> - Tel: (+5411) 
5263-7456 ext. 109
www.cabase.org.ar <https://www.cabase.org.ar/>
Linkedin <https://www.linkedin.com/company/cabase> Facebook 
<https://www.facebook.com/CabaseAr/> Twitter 
<https://twitter.com/CabaseAr> Youtube 
<https://www.youtube.com/channel/UCFv0lo1ybgvDesRoFr1ZTTw>

------------ próxima parte ------------
Se ha borrado un adjunto en formato HTML...
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/napmendoza/attachments/20200519/da087c34/attachment-0001.html>
------------ próxima parte ------------
A non-text attachment was scrubbed...
Name: fcecckdeelomkbll.png
Type: image/png
Size: 48225 bytes
Desc: no disponible
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/napmendoza/attachments/20200519/da087c34/attachment-0004.png>
------------ próxima parte ------------
A non-text attachment was scrubbed...
Name: lhmjnclegmkkjcmb.png
Type: image/png
Size: 93239 bytes
Desc: no disponible
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/napmendoza/attachments/20200519/da087c34/attachment-0005.png>
------------ próxima parte ------------
A non-text attachment was scrubbed...
Name: hhbbfcoffdioloii.png
Type: image/png
Size: 95630 bytes
Desc: no disponible
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/napmendoza/attachments/20200519/da087c34/attachment-0006.png>
------------ próxima parte ------------
A non-text attachment was scrubbed...
Name: hdfoloaleafjmijp.png
Type: image/png
Size: 102671 bytes
Desc: no disponible
URL: <http://mailmancabase.interdotnet.com.ar/pipermail/napmendoza/attachments/20200519/da087c34/attachment-0007.png>


Más información sobre la lista de distribución Napmendoza