RIPE-Atlas Anchor installation

Ripe-Atlas project Anchor installation.

Anchor is high capacity RIPE-Atlas probe for internet measurements.

Anchor mainly consist of  Soekris Net6501-70 board (can find on kd85.com) and running Centos 6.x.

 

 

[gallery link="file" ids="802,801,800,799"]

Analyzing Spam - Visualization

Beautiful image of visualization spam traffic on primary mailserver.

Every blue path is spam detected and delivered to mailbox spam folder, every yellow path is rejected spam.

RIPE-Atlas Traceroute monitoring

Last day I did some measurements using RIPE-Atlas project.

I did traceroute to Livesport infrastructure using 1000 probes around the globe.

Here is some nice visualization of ASN paths.

 

How to handle thousands of reports from servers - Logstash, ElasticSearch, Kibana

Many services and server audit utilities like logcheck, logwatch, cron daemon, aide, ZRM, etc. are sending emails to local user or root. Some of them, can be easily configured but some of them not.

Best way in my case is to deal with emails directly, but how ?

Protect your announced IP prefix on the Internet

Many companies which provide various type of services which are depends on the internet have their own IP prefixes. They announces prefixes to the internet using BGP protocol and AS numbers.

From the principle of BGP, it's possible to break path to your servers if somebody announce same prefix as you. This is really big problem because your business is in risk. Communication is problematic and takes lot of time. Normaly, providers and peers should have configured some rules, filters and other types of security to prevent this.

Using filters isn't mandatory, so it can happen and it happened many times.

Question is, what you should do to avoid this situation ?