Hi Observium team,

Earlier this week the global route table hit 512k prefixes, so I was looking in Observium how many prefixes each peer announces.

But there is something wrong that I can’t explain and it could be a bug.

This morning I upgraded to the latest (paid) version r5747, that didn’t change this.

For peer 195.69.144.192 my Juniper router shows 89 received prefixes:

rtr1> show bgp neighbor 195.69.144.192 | match prefixes 

    Active prefixes:              47

    Received prefixes:            89

    Accepted prefixes:            89

    Advertised prefixes:          7

Via snmp on the router:

This peer has index  155, and Peer with index 155 has 89 prefixes:

rtr1> show snmp mib wal decimal 1.3.6.1.4.1.2636.5.1.1.2.1.1 | match 144.192 | match PeerIndex

jnxBgpM2PeerIndex.0.1.195.69.144.49.1.195.69.144.192 = 155

rtr1> show snmp mib wal decimal 1.3.6.1.4.1.2636.5.1.1.2.6.2 | match \.155\. | match Prefixes    

jnxBgpM2PrefixInPrefixes.155.1.1 = 89

jnxBgpM2PrefixInPrefixesAccepted.155.1.1 = 89

jnxBgpM2PrefixInPrefixesRejected.155.1.1 = 42

jnxBgpM2PrefixOutPrefixes.155.1.1 = 7

Via snmp on the Observium server:

snmpwalk -v3  -l authPriv -u ***** -a SHA -A ****** -x AES -X ******* rtr1 1.3.6.1.4.1.2636.5.1.1.2.6.2 | grep \.155\.

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.7.155.1.1 = Gauge32: 89

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.8.155.1.1 = Gauge32: 89

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.9.155.1.1 = Gauge32: 42

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.10.155.1.1 = Gauge32: 7

But the graphs looks like this, with only 8 prefixes:

And even worse for our transit provider:

rtr1> show bgp neighbor 195.69.144.34 | match prefixes    

    Active prefixes:              158327

    Received prefixes:            505071

    Accepted prefixes:            505070

    Advertised prefixes:          7

snmpwalk -v3  -l authPriv -u ***** -a SHA -A ***** -x AES -X ****** rtr1 1.3.6.1.4.1.2636.5.1.1.2.6.2.1 | grep '\.4\.1\.1'

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.7.4.1.1 = Gauge32: 505068

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.8.4.1.1 = Gauge32: 505066

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.9.4.1.1 = Gauge32: 346727

iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.10.4.1.1 = Gauge32: 7

This behavior seems to have changed around March 1^st.

Any thoughts?

Met vriendelijke groet, kind regards,

Erwin Heringa

SIDN | Meander 501 | 6825 MD | Postbus 5022 | 6802 EA | ARNHEM

T +31 (0)26 352 55 59 | F +31 (0)26 352 55 05

erwin.heringa@sidn.nl | www.sidn.nl