Extra alert information for the "Detected X being broadcast on IXP" alert
This alert is triggered when a remote BGP collector run by bgp.tools on a internet exchange (using AS212232) detects a broadcast/multicast packet on the exchange that came from your network that ideally should not be there.
The impact of these having these packets sent to other users on the internet exchanges can many problems such as:
- Unnecessary information disclosure (disclosing which software you are running)
- Allowing other networks to send traffic through your network without your consent
- Allowing other networks to merge their network with yours
- Breaking the rules of the internet exchange
- Allowing third parties to reconfigure your devices
Currently bgp.tools detects the following packets:
- LLDP
- CDP
- MNDP (Mikrotik Neighbor Discovery Protocol)
- MikroTik RoMON/WinBox
- DHCP / DHCPv6
- IPv6 ICMP Router Advertisements
- OSPFv2 / OSPFv3
- IS-IS / ES-IS
- RIP / RIPv2
- MPLS LDP
- PIM
- IEEE802.1Q
- Broadcast NTP
- DEC-MOP
- SSDP
- LLMNR / MDNS
- DNS Broadcasts
- NetBIOS
- VRRP / HSRP
← All knowledge base articles