Skip to content

Instantly share code, notes, and snippets.

View tonusoo's full-sized avatar

Martin Tonusoo tonusoo

15 followers · 3 following
  • Tallinn, Estonia
View GitHub Profile
@tonusoo
tonusoo / Junos-RTBH-routes-validation.conf
Created March 16, 2026 09:08
RTBH prefixes validation on Junos || PoC setup || NANOG mailing list thread: https://lists.nanog.org/archives/list/nanog@lists.nanog.org/thread/O5XX6BHOSMINX4HKT2SMVOI66SMYXFOR/
root@vjr-17> show configuration routing-options bmp
/* Rotonda */
station BMP-feed-for-RTBH-1 {
/* if the session breaks, then the router tries to reestablish it every 30 seconds */
connection-mode active;
/* Route Monitoring messages are sent only for peers defined under specific BGP groups */
route-monitoring {
none;
}
station-address 10.10.8.3;
@tonusoo
tonusoo / Juniper_MX_host-outbound_traffic.png
Last active February 2, 2026 08:03
Host-outbound TCP SYN captured on internal bridge connecting the control- and forwarding-plane on MX-series router || discussion on Packet Pushers Slack group
Juniper_MX_host-outbound_traffic.png
@tonusoo
tonusoo / check_logs.bash
Created November 12, 2025 12:35
logtail functionality for journalctl versions older than 242 not supporting the "--cursor-file" option
#!/usr/bin/env bash
get_journal_logs() {
log_type="$1"
if [[ "$log_type" == "system" ]]; then
args+=( "--dmesg" )
@tonusoo
tonusoo / bgp-vortex-lab.jpg
Last active October 23, 2025 15:34
NANOG mailing list thread: https://lists.nanog.org/archives/list/nanog@lists.nanog.org/thread/SU76M47AOL5742T6Q5OW2DBMRNSYU42Y/
bgp-vortex-lab.jpg
@tonusoo
tonusoo / packet_capture_in_g-bird1.txt
Created September 17, 2025 08:47
Junos Non-Stop Active Routing and Fault-Tolerant TCP/IP test setup; https://cseweb.ucsd.edu/~marzullo/pubs/fttcp2.pdf
root@bird1:~# # acknowledgements to the client(10.10.10.1) are withheld until the hot backup has received the corresponding data
root@bird1:~# tshark -c 4 -i enp7s0 -f 'tcp and port 179'
Running as user "root" and group "root". This could be dangerous.
Capturing on 'enp7s0'
1 0.000000000 10.10.10.1 → 10.10.10.0 BGP 85 KEEPALIVE Message
2 0.601193559 10.10.10.0 → 10.10.10.1 TCP 66 179 → 60153 [ACK] Seq=1 Ack=20 Win=16384 Len=0 TSval=2273170037 TSecr=1268402651
3 4.135022182 10.10.10.0 → 10.10.10.1 BGP 85 KEEPALIVE Message
4 4.135067259 10.10.10.1 → 10.10.10.0 TCP 66 60153 → 179 [ACK] Seq=20 Ack=20 Win=126 Len=0 TSval=1268406786 TSecr=2273173570
4 packets captured
root@bird1:~#
@tonusoo
tonusoo / shutdown-bgp-session.bash
Last active September 7, 2025 20:09
NANOG mailing list thread: https://lists.nanog.org/archives/list/nanog@lists.nanog.org/thread/CS25Q74D72EUV3MVHOMT3GNZ5HGRZWGV/
#!/usr/bin/env bash
# Configures Juniper router to inject a 0x0b control character to
# "Shutdown Communication" field(RFC 9003) of a BGP cease NOTIFICATION message.
#
# Usage example:
# ./shutdown-bgp-session.bash | ssh root@192.168.103.20 -p 830 -s netconf
vertical_tab=$'\v'
@tonusoo
tonusoo / route.patch
Last active August 8, 2025 12:50
disables fallback to less specific routes explained in RFC 4191 3.2 and 3.6; patch --ignore-whitespace net/ipv6/route.c route.patch; tested on Linux 6.12.38
--- net/ipv6/route.c~ 2025-08-08 13:44:04.928000000 +0300
+++ net/ipv6/route.c 2025-08-08 13:48:01.448000000 +0300
@@ -2221,24 +2221,13 @@
int fib6_table_lookup(struct net *net, struct fib6_table *table, int oif,
struct flowi6 *fl6, struct fib6_result *res, int strict)
{
- struct fib6_node *fn, *saved_fn;
+ struct fib6_node *fn;
fn = fib6_node_lookup(&table->tb6_root, &fl6->daddr, &fl6->saddr);
@tonusoo
tonusoo / fix.txt
Created July 28, 2025 16:53
"can't open '/boot/loader.rc': no such file or directory" error in vJunos-router
qemu-nbd --connect=/dev/nbd0 vJunos-router-23.2R1.15.qcow2
fdisk -l /dev/nbd0
mkdir -p /tmp/nbd0p2
mount -v /dev/nbd0p2 /tmp/nbd0p2
qemu-nbd --connect=/dev/nbd1 /tmp/nbd0p2/home/pfe/junos/junos-virtual-x86-64-23.2R1.15.qcow2
mkdir -p /tmp/nbd1p3
mount -t ufs -v -o ro,ufstype=44bsd /dev/nbd1p3 /tmp/nbd1p3
cp -v /tmp/nbd1p3/boot/loader.rc .
umount /tmp/nbd1p3
qemu-nbd --disconnect /dev/nbd1
@tonusoo
tonusoo / r2_conditional-announcement.patch
Created April 20, 2025 14:54
Juniper conditional BGP announcement PoC
[edit policy-options]
+ prefix-list DC1-aggregate {
+ 10.10.0.0/23;
+ }
[edit policy-options]
+ policy-statement ISP-B-out-v4 {
+ term conditional-announcement {
+ from {
+ prefix-list DC1-aggregate;
+ condition conditional-announcement;
@tonusoo
tonusoo / origin_asn_analyzer.bash
Created February 16, 2025 11:59
#!/usr/bin/env bash
# Find IPv4 prefixes which have non-unique origin AS number, i.e. the rightmost AS number.
get_origin_asn() {
last_asn_elem="${1##* }"
case "$last_asn_elem" in
"{"*"}")
# It's an AS-set.