1. 03/26/2009draft-cheng-grow-bgp-xml-00.txt 1 An XML Format for BGP Data Collection draft-cheng-grow-bgp-xml-00.txt Dan Massey Kevin BurnettPayne Cheng He YanLixia Zhang Colorado State UniversityUCLA

2. 03/26/2009draft-cheng-grow-bgp-xml-00.txt 2 BGP Data Collection Overview AS oreg linx RouteViews website ISP BGP peer router Update Rib+Update http://www.routeviews.org Format for the Archived Data? Format for the Real-Time Data Stream?

3. 03/26/2009draft-cheng-grow-bgp-xml-00.txt 3 Binary or ASCII? Binary and ASCII Both Require a Header – Indicate what time message was received – Identify peering session data not carried in BGP message Bit for bit representation of what came over the wire – Capture data directly with no intervening steps to “help” – Can replay into simulations – Similar to what MRT provides now Or an ASCII representation of BGP fields – Easy to parse/script data – Human readable scan of data – Similar to what bgpdump gives after processing MRT binary data

4. 03/26/2009draft-cheng-grow-bgp-xml-00.txt 4 Easy to Extend and Annotate Must Support Protocol Changes – IPv4 and IPv6 addresses, multiple SAFIs – 4 byte ASNs – New Path Attributes Annotate Data To Identify Important Attributes – Mark updates as duplicate messages, AS path changes, possible prefix hijacks, match ROAs, and so on – No universal agreement on “useful” annotations Don’t Want a New Type For Each Change – Scripts shouldn’t break as new attributes or annotations added – Read the types you understand – Easily skip the types you don’t

5. 03/26/2009draft-cheng-grow-bgp-xml-00.txt 5 How To Achieve This XML Easy to expand and annotate Wide range of processors Easy to ignore attributes

6. telnet bgpdata.netsec.colostate.edu 50001 Trying 129.82.138.6... Connected to 129.82.138.6. Escape character is '^]'. …snip… Basic XML Structure 03/26/2009 6 draft-cheng-grow-bgp-xml-00.txt

7. 1237917439 2009-03-24T17:57:19Z 391 129.82.138.6 4321 6447 89.149.178.10 179 3257 0.0.0.0 …snip… XML Message Header 03/26/2009 7 draft-cheng-grow-bgp-xml-00.txt

8. …snip… 99 UPDATE FFFFFFFFFFFFFFFFFFFFFFFFFFFFFFFF0063020000004440 01010040020C02050CB90D1C12755EE15EE14003045995B20 A8004040000000A400600C007065EE1CB51703CC008140CB9 1F9F0CB9755A0CB9C3520CB9C8640CB9C86516CB517816CB5170 XML BGP Wire Data 03/26/2009 8 draft-cheng-grow-bgp-xml-00.txt

9. …snip… FFFF…..FFFFFFFFFFFFFFF 99 UPDATE 0 68 …snip… 203.81.120/22 203.81.112/22 …snip… XML ASCII Format 03/26/2009 9 draft-cheng-grow-bgp-xml-00.txt

10. 1 ORIGIN IGP 20 Unknown Attribute Data Bytes ….. Example Path Attributes 03/26/2009 10 draft-cheng-grow-bgp-xml-00.txt

11. 203.81.120/22 203.81.112/22 Currently label updates as: NANN: New Announcement, NLRI not in RIB when update received WITH: Withdraw, NLRI in RIB and removed when update received DANN: Duplicate Announcement, update matches current RIB entry DUPW: Duplicate Withdraw, NLRI not in RIB and withdraw received DPATH: Update changes existing RIB entry to a Different AS path SPATH: Update uses Same AS Path, but changes some other attribute Annotations and Labels 03/26/2009 11 draft-cheng-grow-bgp-xml-00.txt

12. Archived Data Storage Size Format Uncompressed (Bytes) /MRT sizeCompressed/MRT size MRT 267116661.0056146501.00 Bgpdump745516282.7956450441.01 XML 2648243639.91134454512.39 XML- 2180650448.1662890031.12 03/26/2009 12 draft-cheng-grow-bgp-xml-00.txt XML data requires more space to store, But compresses to nearly match binary format

13. Conclusions XML Format Provides Lots Of Flexibility – Can include ASCII, Binary, or both – Easy to add new attributes and handle unknowns – Wide variety of parsers available Standard Format Greatly Improves Interop – First claim XML format needed – If yes, draft attempts to agree on schema 03/26/2009 13 draft-cheng-grow-bgp-xml-00.txt

14. Questions 03/26/2009 14 draft-cheng-grow-bgp-xml-00.txt