I asked this question on inet-access and it was suggested I try NANOG.
I understand BGP flapping to be announcements followed by withdraws over a short period. I am seeing a peer with a large number of announcements and the normal number of withdraws. Is there a term to describe what I am seeing? I’d like to understand what is happening, but I’ve been looking for more info and can’t seem to find anything. I suspect I am just not using the right words to search.
If there isn’t a term, why would a peer announce thousands of time an hour with very few withdraws?
A peer should never announce a route it has already announced unless that route is withdrawn. (If the session goes down or is reset, that counts as a withdrawal.)
I understand AS3333 is RIS itself, is this some kind of misconfig on their end? It seems to be announcing it’s entire table every 5 minutes. This started late Friday and ended a few hours ago.
I understand BGP flapping to be announcements followed by withdraws over a short period. I am seeing a peer with a large number of announcements and the normal number of withdraws. Is there a term to describe what I am seeing? I'd like to understand what is happening, but I've been looking for more info and can't seem to find anything. I suspect I am just not using the right words to search.
If there isn't a term, why would a peer announce thousands of time an hour with very few withdraws?
There is a term, it's called "broken".
A peer should never announce a route it has already announced unless that route is withdrawn. (If the session goes down or is reset, that counts as a withdrawal.)
There's another term for that behavior. It's called "compliant".
There are a number of good implementation reasons why it is reasonable for an implementation to announce a route that it has already announced (e.g., peer groups). Admittedly announcing thousands of times an hour does NOT seem reasonable, but 'never' is not a requirement of the BGP spec either.
I give good odds this is not the oscillation issue. More likely a flapping IGP link and a lack of pull-up use (or pull-ups not installed such that link flaps would be non external impacting) etc...