Alerts are classified by category and type. You can specify a category or type as a filter when querying alerts.
Use the values in this table for API calls that take an alert category or type. Every alert type belongs to exactly one alert category, and every category has one or more types. Also, Internet Intelligence web interface may use a different name for the alert type than the API uses. This table maps the web interface name to the API name, then to the category name and its definition.
Category Name | Type Name | UI Name | Definition |
hijack | origin-hijack | Hijack | Raised when a prefix you originate is unexpectedly announced by a different Origin Autonomous System. The percentage of peers observing this change is provided as part of the alert. |
hijack | subprefix-hijack | Hijacked Subprefix | Raised when a sub-prefix (more-specific), beneath a prefix you are monitoring, is unexpectedly announced by a different Origin Autonomous System. The percentage of peers observing this change is provided as part of the alert. |
outage | outage | Outage | Raised when a prefix is withdrawn and is no longer reachable on the Internet by a majority of our peers. The percentage of peers affected by this change is provided as part of the alert. If a covering route also originated by the same ASN is currently available, that will be identified in the payload. |
instability | instability | Instability | Raised when a prefix is seen being announced and withdrawn rapidly by at least of 20% of our peers over a 5 minute period. A percentage of peers seeing this instability is provided as part of the alert. |
leak | asn-leak | New Origination | Raised when monitoring an AS and a new prefix is originated. This alert is the complement to the unexpected-prefix-activity alert. |
unexpected-activity | unexpected-prefix-activity | Newly Routed | Raised when a typically unrouted prefix is seen advertised for the first time. |
unexpected-activity | unexpected-subprefix-activity | Newly Routed Subprefix | Raised when an unrouted more-specific prefix of a prefix you originate is unexpectedly announced by one or more of our peers. |
upstream | new-upstream | New Upstream AS | Raised when a new upstream adjacent AS (peer or provider) is seen announcing a route to your monitored prefixes by at least one of our peers. |
performance | latency-fixed | Fixed Latency | Raised when a collector set measures latency, the round trip time for a ping, higher than the configured threshold (in milliseconds). |
performance | packet-loss | Packet Loss | Raised when a collector set measures the packet loss percentage at a higher percentage that the configured threshold. |
performance | connectivity | Connectivity | Raise when a collector set observes 100% packet loss to the targeted asset. |
cdn | cdn-latency | CDN Latency | Raised when our measurement network observes a sharp increase in HTTP(S) request times to the specified CDN asset, relative to its performance over the previous 24 hours. |
cdn | cdn-failure | CDN Failure | Raised when at least 10% of HTTP(S) requests from our measurement network to the specified CDN asset fail. |
cloudzone | cloudzone-latency | Cloud Latency | Raised when a collector set observes an increase in latency (ping round-trip time) to all of Dyn’s targets in a monitored cloud zone. |
cloudzone | cloudzone-packet-loss | Cloud Packet Loss | Raised when a collector set observes 50% packet loss to all of Dyn’s targets in a monitored cloud zone. |
cloudzone | cloudzone-connectivity | Cloud Connectivity | Raised when a collector set observes 100% packet loss to all of Dyn’s targets in a monitored cloud zone. |