[rbak-nsp] BGP Flapping after update with malformed ASPATH

[Olga Savinovskaya]

We have the same problem from yesterday 23:15

I created a ticket at the Atman(problem neighbor) but did not get a 
response jet.


May 29 10:41:01: [0266]: %BGP-6-INFO: 212.91.2.1 send NOTIFICATION: 3/11 
(update: malformed ASPATH) with 21 byte data. mxReadMs=1073

May 29 10:41:01 notification msg sent (nbr 212.91.2.1, context 
0x4008010a 42 bytes, repeated 192 times, code 3/11 (update: malformed 
ASPATH) -
  0000 0000 ffff ffff ffff ffff ffff ffff ffff ffff 002a 0303 0b40 0212 
0104 0000 17d9 0000 183e 0000 1840

May 29 10:41:01 Malformed UPDATE msg (nbr 212.91.2.1, context 
0x4008010a, 92 bytes, repeated 192 times, reason: Invalid msg) -
  ffff ffff ffff ffff ffff ffff ffff ffff 005c 0200 0000 4140 0101 0040 
0212 0104 0000 17d9 0000 183e 0000 1840 0000 1967 4003 04d4 5b00 1180 
0404 0000 0000 c007 0800
  0073 5fc3 95ef ffc0 080c 1b1b 0009 60ac 735f 735f 0a6b *16c3 95ec *

As i know 16c3 95ec = 22.195.149.236? But i can't parse from that update 
what AS makes problem.

SmartEdge OS Version SEOS-12.1.1.11p7-Release

_________________
Pozdrawiam, Savinovskaya Olga


> Hi everyone,
> It looks like we've managed to find another strange problem with BGP on
> SEOS. In the night one of our peers session started to flap with
> following message:
> May 29 10:52:01: [0001]: %BGP-6-INFO: 195.149.233.1 UP
> May 29 10:52:15: [0001]: %BGP-6-INFO: 195.149.233.1 DOWN - Notification sent
> May 29 10:52:15: [0001]: %BGP-6-INFO: 195.149.233.1 send NOTIFICATION:
> 3/11 (update: malformed ASPATH) with 21 byte data. mxReadMs=1555
>
> It does not look like previously mentioned attribute flag error. Does
> anyone had something simillar ? It is a session with route server, so i
> know about "no enforce first-as" option and it is turned on, it was
> working fine till this night with no configuration change on our side.
>
> "show bgp malform update" looks like this:
> May 29 10:52:15 Malformed UPDATE msg (nbr 195.149.233.1, context
> 0x40080001, 77 bytes, repeated 5 times, reason: Invalid msg) -
>    ffff ffff ffff ffff ffff ffff ffff ffff 004d 0200 0000 3240 0101 0040
> 0212 0104 0000 17d9 0000 183e 0000 1840 0000 1967 4003 04c3 95e9 6480
> 0404 0000 0000 c007 0800 0073 5fc3 95ef ff16 c395 ec
>
> SEOS version SEOS-12.1.1.11p7-Release
>
> Thanks in advance,
> Best regards,
>
> -- 
> Wojciech Wrona
>
> _______________________________________________
> redback-nsp mailing list
> redback-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/redback-nsp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://puck.nether.net/pipermail/redback-nsp/attachments/20180529/e208769b/attachment.html>