Problme parsing the BGP UPDATE file

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

Problme parsing the BGP UPDATE file

Nagarjun G
Hi Team,

We are running an OpenBGPD router inside an AS we own. We are collecting
BGP RIB files every 2 hours and UPDATE files every 5 mins. I tried parsing
these files using some well known parses like bgpstream and mabo. I am able
to parse RIB files successfully but I am unable to parse UPDATE files. I
see that files are getting truncated. Developers of mabo are saying that
files may be corrupted, mabo will not parse MRT headers are corrupted.

*Commands used to dump files:*

dump table-v2 "/tmp/rib-dump-v2-%Y%m%d%H%M" 7200
dump updates in "/tmp/updates-%Y%m%d%H%M" 300

*Error while parsing UPDATE file using mabo:*

$ ./mabo dump updates-in-1223.gz
{"type":"update","timestamp":1493880788.0,"peer_as":4755.0,"peer_ip":"121.244.206.224","as_path":"4755
6453 7575 38022 55702","announce":["49.0.31.0/24"],"withdraw":[]}
[..]
MRT parsing error: MRT dump is truncated: 1493880791 16/4 138

It starts parsing the file, then throws error.

Could someone help me to fix the problem.
Thanks in Advance

Regards,
Nagarjun
Reply | Threaded
Open this post in threaded view
|

Re: Problme parsing the BGP UPDATE file

Stuart Henderson
On 2017-05-16, Nagarjun G <[hidden email]> wrote:

> Hi Team,
>
> We are running an OpenBGPD router inside an AS we own. We are collecting
> BGP RIB files every 2 hours and UPDATE files every 5 mins. I tried parsing
> these files using some well known parses like bgpstream and mabo. I am able
> to parse RIB files successfully but I am unable to parse UPDATE files. I
> see that files are getting truncated. Developers of mabo are saying that
> files may be corrupted, mabo will not parse MRT headers are corrupted.
>
> *Commands used to dump files:*
>
> dump table-v2 "/tmp/rib-dump-v2-%Y%m%d%H%M" 7200
> dump updates in "/tmp/updates-%Y%m%d%H%M" 300
>
> *Error while parsing UPDATE file using mabo:*
>
> $ ./mabo dump updates-in-1223.gz
> {"type":"update","timestamp":1493880788.0,"peer_as":4755.0,"peer_ip":"121.244.206.224","as_path":"4755
> 6453 7575 38022 55702","announce":["49.0.31.0/24"],"withdraw":[]}
> [..]
> MRT parsing error: MRT dump is truncated: 1493880791 16/4 138
>
> It starts parsing the file, then throws error.
>
> Could someone help me to fix the problem.
> Thanks in Advance
>
> Regards,
> Nagarjun
>

I've just tried mabo on a mrt updates dump on an OpenBSD -current
system and it works here.

Is bgpdump able to read the file? (just "pkg_add libbgpdump" and
"bgpdump $file").  If so, if you lookup the last entry that mabo was
able to parse, and look at the next entry in bgpdump (presumably the
one triggering the failure), does that give any clues about what
the problem might be?


Reply | Threaded
Open this post in threaded view
|

Re: Problme parsing the BGP UPDATE file

Claudio Jeker
On Tue, May 16, 2017 at 11:53:22AM +0000, Stuart Henderson wrote:

> On 2017-05-16, Nagarjun G <[hidden email]> wrote:
> > Hi Team,
> >
> > We are running an OpenBGPD router inside an AS we own. We are collecting
> > BGP RIB files every 2 hours and UPDATE files every 5 mins. I tried parsing
> > these files using some well known parses like bgpstream and mabo. I am able
> > to parse RIB files successfully but I am unable to parse UPDATE files. I
> > see that files are getting truncated. Developers of mabo are saying that
> > files may be corrupted, mabo will not parse MRT headers are corrupted.
> >
> > *Commands used to dump files:*
> >
> > dump table-v2 "/tmp/rib-dump-v2-%Y%m%d%H%M" 7200
> > dump updates in "/tmp/updates-%Y%m%d%H%M" 300
> >
> > *Error while parsing UPDATE file using mabo:*
> >
> > $ ./mabo dump updates-in-1223.gz
> > {"type":"update","timestamp":1493880788.0,"peer_as":4755.0,"peer_ip":"121.244.206.224","as_path":"4755
> > 6453 7575 38022 55702","announce":["49.0.31.0/24"],"withdraw":[]}
> > [..]
> > MRT parsing error: MRT dump is truncated: 1493880791 16/4 138
> >
> > It starts parsing the file, then throws error.
> >
> > Could someone help me to fix the problem.
> > Thanks in Advance
> >
> > Regards,
> > Nagarjun
> >
>
> I've just tried mabo on a mrt updates dump on an OpenBSD -current
> system and it works here.
>
> Is bgpdump able to read the file? (just "pkg_add libbgpdump" and
> "bgpdump $file").  If so, if you lookup the last entry that mabo was
> able to parse, and look at the next entry in bgpdump (presumably the
> one triggering the failure), does that give any clues about what
> the problem might be?
>

I guess this is the same bug reported in Dec last year and fixed in rev
1.356 of session.c. So this is fixed in 6.1 and -current but not in 6.0.

--
:wq Claudio