BgpMon

Thanks For Downloading!

Review the documentation below and follow any custom installation steps. If no install steps are listed, most Splunk Apps and Add-ons can be installed as follows:

Windows: Decompress the downloaded file using a tool like 7-Zip and place the resulting folder into %PROGRAMFILES%\Splunk\etc\apps. Then restart Splunk using the splunk restart command or the GUI.

Unix/Linux: Decompress the downloaded file using a tool like tar -xvf and place the resulting folder into $SPLUNK_HOME/etc/apps. Then restart Splunk using the splunk restart command or the GUI.

This little app retrieves alerts for BGP announces changes with BGPMon.net web services.
It is based on the Ripe infrastucture that has BGP monitoring routers all over the world (mainly in Europe), and requires you to enter your public networks and your AS path. It will then alert you in case of path change than can be either network issue, or rerouting/hijack attack.

See http://bgpmon.net for more information

This apps has no UI. Use it to generate events that wil be integrated with your framework/app or with you own alerting.

Note: This is a first release. Consider it as beta quality and report any bug.