On 2017-05-16, Nagarjun G <[email protected]> wrote: > Hi Team, > > We are running an OpenBGPD router inside an AS we own. We are collecting > BGP RIB files every 2 hours and UPDATE files every 5 mins. I tried parsing > these files using some well known parses like bgpstream and mabo. I am able > to parse RIB files successfully but I am unable to parse UPDATE files. I > see that files are getting truncated. Developers of mabo are saying that > files may be corrupted, mabo will not parse MRT headers are corrupted. > > *Commands used to dump files:* > > dump table-v2 "/tmp/rib-dump-v2-%Y%m%d%H%M" 7200 > dump updates in "/tmp/updates-%Y%m%d%H%M" 300 > > *Error while parsing UPDATE file using mabo:* > > $ ./mabo dump updates-in-1223.gz > {"type":"update","timestamp":1493880788.0,"peer_as":4755.0,"peer_ip":"121.244.206.224","as_path":"4755 > 6453 7575 38022 55702","announce":["49.0.31.0/24"],"withdraw":[]} > [..] > MRT parsing error: MRT dump is truncated: 1493880791 16/4 138 > > It starts parsing the file, then throws error. > > Could someone help me to fix the problem. > Thanks in Advance > > Regards, > Nagarjun >
I've just tried mabo on a mrt updates dump on an OpenBSD -current system and it works here. Is bgpdump able to read the file? (just "pkg_add libbgpdump" and "bgpdump $file"). If so, if you lookup the last entry that mabo was able to parse, and look at the next entry in bgpdump (presumably the one triggering the failure), does that give any clues about what the problem might be?
