In this talk we will review several types of global BGP
instabilities observed between June 2001 and February 2002.
Identification and characterization of the instabilities
employs multi-resolution analysis of BGP message streams
collected from over 150 autonomous systems' border routers
in the RIPE RIS project.
At a coarse level, instabilities are analyzed in terms of
spatio-temporal correlations of BGP prefix update rates.
At a finer level of detail, the analysis extends to features
involving network prefixes, path attributes, and route lifetimes.
Furthermore, there is a strong interdependence between the routing
topology and the end-user traffic: Route fluctuations and failures
necessarily lead to data traffic failures along affected paths,
and, vice versa, certain abnormal data traffic conditions may
trigger routing failures. We will illustrate the importance
of correlating network measurements of both routing and data
traffic in the context of large scale routing instabilities
triggered by the Code Red II and Nimda worm attacks in July
and September 2001.
Copyright. All Rights Reserved.