Diagnosing Route Flaps

You can diagnose route flaps by aggregating the count of add or remove route by IP address.

# dtrace -qn 'ip:::route-add,ip:::route-delete { @events[args[4]->route_destination_address] = count(); }'
^C

203.0.113.5                              2

We can also print additional information from the routeinfo_t structure such as process ID to show the responsible process.