BGP Session Flapping Probe
The BGP Session Flapping probe shows BGP session statuses for all switches and raises
anomalies for flapping BGP sessions.
It contains three stages: BGP Session, BGP Session Flapping, and Sustained BGP Session
Flapping as described below:
BGP Session
The BGP Session stage shows a table with all available BGP sessions for switch systems. Each session is identified by the following parameters: Source IP, Source ASN, Destination IP, Destination ASN, Address Family and VRF name. The Flap Count column shows total number of BGP session flaps from the device. The Flap Count Increment column shows the number of new BGP session flaps for the service interval period. By default, it's two minutes. The FSM State and Status columns show the status of BGP sessions.
BGP Session Flapping
The BGP Session Flapping stage checks the Flap Count Increment value. If it's more than zero, the output value is 'true'. It only checks whether that BGP session has new flaps.
Sustained BGP Session Flapping
The Sustained BGP Session Flapping stage raises an anomaly for BGP sessions that have new BGP flaps for the specified time window. To illustrate, assume there are BGP flaps between leaf1 and spine1 nodes. The fabric BGP session between these nodes generates new BGP flaps when the interface status is changed on spine1 that's connected to leaf1. When shutdown and up interface is performed seven times on spine 1, it creates seven flaps for fabric BGP sessions between leaf1 and spine1. The seven new flaps are added and two anomalies are raised.
For more information about this probe, from the blueprint, navigate to Analytics > Probes, click Create Probe, then select Instantiate Predefined Probe from the drop-down list. Select the probe from the Predefined Probe drop-down list to see details specific to the probe.