Diagnosing Route Flaps
You can diagnose route flaps by aggregating the count of add or remove route by IP address.
# dtrace -qn 'ip:::route-add,ip:::route-delete { @events[args[4]->route_destination_address] = count(); }'
^C
203.0.113.5 2
We can also print additional information from the routeinfo_t
structure such as process ID to show the responsible process.