large path attr

Mailman List Mirror (Read Only)
1

Feb 7 05:30:12 rpd[1752]: Prefix Send failed ! 103.148.40.0/24 bgp_rt_trace_too_big_message:1209 path attribute too big. Cannot build update.

anyone else seen this one? another kiddie?

randy

2

responding to private email

Yes, something was up, as seen at the AS22211 openbgpd logger "flight
recorder". I only looked near the time stamp you had.

# mrt2bgpdump /pool0/var/log/bgpd/all-in-2020-02-07-05-26 |grep 103.148.40
BGP4MP|02/07/20 05:30:15|A|66.79.132.1|22211|103.148.40.0/24|12182 174
132602 10075 134371 140076 140076 140076 140076 140076 140076 140076 140076
140076 140076 140076 140076 140076 140076 140076 140076 140076 140076
140076 140076 140076 140076 140076 140076 140076 140076 140076 140076
...
140076 140076 140076 140076 140076 140076 140076 140076 140076 140076
140076 140076 140076 140076 140076|IGP

BGP4MP|02/07/20 05:30:42|A|66.79.132.1|22211|103.148.40.0/24|12182 2914 174
132602 10075 134371 140076 140076 140076 140076 140076 140076 140076 140076
140076 140076 140076 140076 140076 140076 140076 140076 140076 140076
...

and so on

as140076 is Mir Internet Service in Dhaka

microtik prepend gl!tch?

randy

3

I feel like I saw this once with large communities, but memory is a bit fuzzy.

4

I feel like I saw this once with large communities, but memory is a
bit fuzzy.

yes, with this large an ops community, the clue distribution will likely
be long tailed :slight_smile: