Hi Observium team,

Earlier this week the global route table hit 512k prefixes, so I was looking in Observium how many prefixes each peer announces. But there is something wrong that I can't explain and it could be a bug. This morning I upgraded to the latest (paid) version r5747, that didn't change this.

For peer 195.69.144.192 my Juniper router shows 89 received prefixes:

rtr1> show bgp neighbor 195.69.144.192 | match prefixes Active prefixes: 47 Received prefixes: 89 Accepted prefixes: 89 Advertised prefixes: 7

Via snmp on the router:

This peer has index 155, and Peer with index 155 has 89 prefixes:

rtr1> show snmp mib wal decimal 1.3.6.1.4.1.2636.5.1.1.2.1.1 | match 144.192 | match PeerIndex jnxBgpM2PeerIndex.0.1.195.69.144.49.1.195.69.144.192 = 155

rtr1> show snmp mib wal decimal 1.3.6.1.4.1.2636.5.1.1.2.6.2 | match .155. | match Prefixes jnxBgpM2PrefixInPrefixes.155.1.1 = 89 jnxBgpM2PrefixInPrefixesAccepted.155.1.1 = 89 jnxBgpM2PrefixInPrefixesRejected.155.1.1 = 42 jnxBgpM2PrefixOutPrefixes.155.1.1 = 7

Via snmp on the Observium server:

snmpwalk -v3 -l authPriv -u ***** -a SHA -A ****** -x AES -X ******* rtr1 1.3.6.1.4.1.2636.5.1.1.2.6.2 | grep .155. iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.7.155.1.1 = Gauge32: 89 iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.8.155.1.1 = Gauge32: 89 iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.9.155.1.1 = Gauge32: 42 iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.10.155.1.1 = Gauge32: 7

But the graphs looks like this, with only 8 prefixes:

[cid:image001.png@01CFB7A9.99364360]

And even worse for our transit provider:

rtr1> show bgp neighbor 195.69.144.34 | match prefixes Active prefixes: 158327 Received prefixes: 505071 Accepted prefixes: 505070 Advertised prefixes: 7

snmpwalk -v3 -l authPriv -u ***** -a SHA -A ***** -x AES -X ****** rtr1 1.3.6.1.4.1.2636.5.1.1.2.6.2.1 | grep '.4.1.1' iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.7.4.1.1 = Gauge32: 505068 iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.8.4.1.1 = Gauge32: 505066 iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.9.4.1.1 = Gauge32: 346727 iso.3.6.1.4.1.2636.5.1.1.2.6.2.1.10.4.1.1 = Gauge32: 7

[cid:image002.png@01CFB7AC.69D3A650]

This behavior seems to have changed around March 1st.

Any thoughts?

Met vriendelijke groet, kind regards,

Erwin Heringa

SIDN | Meander 501 | 6825 MD | Postbus 5022 | 6802 EA | ARNHEM T +31 (0)26 352 55 59 | F +31 (0)26 352 55 05 erwin.heringa@sidn.nl | www.sidn.nl