See through all BGP data with a monocle.
Still in early prototype phase. You are warned.
bash
cargo install monocle
Subcommands:
- parse
: parse individual MRT files
- search
: search for matching messages from all available public MRT files
- whois
: search AS and organization information by ASN or name
- time
: utility to convert time between unix timestamp and RFC3339 string
- country
: utility to lookup country name and code
Top-level help menu:
```text
➜ ~ monocle
A commandline application to search, parse, and process BGP information in public sources.
Usage: monocle [OPTIONS]
Commands: parse Parse individual MRT files given a file path, local or remote search Search BGP messages from all available public MRT files whois ASN and organization lookup utility country ASN and organization lookup utility time Time conversion utilities help Print this message or the help of the given subcommand(s)
Options:
-c, --config
monocle parse
Parsing single MRT file given a local path or a remote URL.
```text ➜ monocle git:(main) ✗ monocle parse --help monocle-parse 0.0.1 Parse individual MRT files given a file path, local or remote
USAGE:
monocle parse [OPTIONS]
ARGS:
OPTIONS:
-a, --as-path
monocle search
Search for BGP messages across publicly available BGP route collectors and parse relevant MRT files in parallel. More filters can be used to search for messages that match your criteria.
```text ➜ monocle git:(main) ✗ monocle search --help Search BGP messages from all available public MRT files
USAGE:
monocle search [OPTIONS] --start-ts
OPTIONS:
-a, --as-path
monocle time
Convert between UNIX timestamp and RFC3339 time strings.
```text
➜ ~ monocle time --help
Time conversion utilities
USAGE: monocle time [TIME]
ARGS:
OPTIONS: -h, --help Print help information -V, --version Print version information ```
Example runs: ```text ➜ monocle time ╭────────────┬───────────────────────────┬───────╮ │ unix │ rfc3339 │ human │ ├────────────┼───────────────────────────┼───────┤ │ 1659135226 │ 2022-07-29T22:53:46+00:00 │ now │ ╰────────────┴───────────────────────────┴───────╯
➜ monocle time 0 ╭──────┬───────────────────────────┬──────────────╮ │ unix │ rfc3339 │ human │ ├──────┼───────────────────────────┼──────────────┤ │ 0 │ 1970-01-01T00:00:00+00:00 │ 52 years ago │ ╰──────┴───────────────────────────┴──────────────╯
➜ monocle time 2022-01-01T00:00:00Z ╭────────────┬───────────────────────────┬──────────────╮ │ unix │ rfc3339 │ human │ ├────────────┼───────────────────────────┼──────────────┤ │ 1640995200 │ 2022-01-01T00:00:00+00:00 │ 6 months ago │ ╰────────────┴───────────────────────────┴──────────────╯
➜ monocle time 2022-01-01T00:00:00 Input time must be either Unix timestamp or time string compliant with RFC3339 ```
monocle whois
Search AS/organization-level information with ASN or organization name.
Data source: - The CAIDA AS Organizations Dataset, http://www.caida.org/data/as-organizations - Please also cite the data source above if you use this tool for your public work.
```text ➜ ~ monocle whois --help ASN and organization lookup utility
Usage: monocle whois [OPTIONS] [QUERY]...
Arguments: [QUERY]... Search query, an ASN (e.g. "400644") or a name (e.g. "bgpkit")
Options: -n, --name-only Search AS and Org name only -a, --asn-only Search by ASN only -C, --country-only Search by country only -u, --update Refresh local as2org database -p, --pretty Output to pretty table, default markdown table -F, --full-table Display full table (with ordid, orgsize) -P, --psv Export to pipe-separated values -f, --full-country Show full country names instead of 2-letter code -h, --help Print help -V, --version Print version ```
Example queries: ```text ➜ ~ monocle whois 400644 | asn | asname | orgname | org_country | |--------|------------|------------|-------------| | 400644 | BGPKIT-LLC | BGPKIT LLC | US |
➜ ~ monocle whois bgpkit | asn | asname | orgname | org_country | |--------|------------|------------|-------------| | 400644 | BGPKIT-LLC | BGPKIT LLC | US |
```
You can specify multiple queries:
text
➜ monocle whois 13335 bgpkit
| asn | as_name | org_name | org_country |
|--------|---------------|------------------|-------------|
| 13335 | CLOUDFLARENET | Cloudflare, Inc. | US |
| 400644 | BGPKIT-LLC | BGPKIT LLC | US |
Use --pretty
to output the table with pretty rounded corner
text
➜ monocle whois 13335 bgpkit --pretty
╭────────┬───────────────┬──────────────────┬─────────────╮
│ asn │ as_name │ org_name │ org_country │
├────────┼───────────────┼──────────────────┼─────────────┤
│ 13335 │ CLOUDFLARENET │ Cloudflare, Inc. │ US │
│ 400644 │ BGPKIT-LLC │ BGPKIT LLC │ US │
╰────────┴───────────────┴──────────────────┴─────────────╯
monocle country
Country name and code lookup utilities.
```text
➜ ~ monocle country --help
Country name and code lookup utilities
Usage: monocle country
Arguments:
Options: -h, --help Print help -V, --version Print version
```
Example runs:
```text
➜ monocle country US
╭──────┬──────────────────────────╮
│ code │ name │
├──────┼──────────────────────────┤
│ US │ United States of America │
╰──────┴──────────────────────────╯
➜ monocle country united ╭──────┬──────────────────────────────────────────────────────╮ │ code │ name │ ├──────┼──────────────────────────────────────────────────────┤ │ TZ │ Tanzania, United Republic of │ │ GB │ United Kingdom of Great Britain and Northern Ireland │ │ AE │ United Arab Emirates │ │ US │ United States of America │ │ UM │ United States Minor Outlying Islands │ ╰──────┴──────────────────────────────────────────────────────╯
➜ monocle country "United States" ╭──────┬──────────────────────────────────────╮ │ code │ name │ ├──────┼──────────────────────────────────────┤ │ UM │ United States Minor Outlying Islands │ │ US │ United States of America │ ╰──────┴──────────────────────────────────────╯ ```
BGPKIT is a small-team focuses on building the best open-source tooling for BGP data processing in Rust. We have over 10 years of experience in working with BGP data and we believe that our work can enable more companies to start keeping tracks of BGP data on their own turf. Learn more about what we do at https://bgpkit.com.