IX violators

A peering LAN should only carry IP unicast, ARP and IPv6 neighbour discovery between member routers. Our IX ports watch for everything else: router advertisements, discovery protocols, DHCP and stray broadcast. This page updates live as frames arrive. Networks still sending are at the top. Once a network has been clean for 7 days, it drops off the list.

We only list a source when we could tie its MAC address to an IX member. Click a row to see the decoded headers of the last frames we caught, or a network's name for its own page with details and how to fix it. If you think we got yours wrong, or you fixed it and want a re-check, mail noc at bgp dot rodeo.

Loading live data… connecting

Most of these come down to one missing line of config on the IX-facing interface. Your IXP's technical requirements list what's allowed on the LAN.

The data is public: https://api.bgp.rodeo/ix-violators.json, plus a live stream of server-sent events at /ix-violators/events.