Identifying bogon address spaces

A system comprising:

• one or more processors;
• and
• a computer-readable medium comprising instructions stored therein, which when executed by the one or more processors, cause the one or more processors to:
• identify a network address associated with a network flow;
• obtain an indication of one or more reserved network address spaces, the indication being based on messages transmitted by a plurality of routers associated with the network flow, the messages including identifications of the one or more reserved network address spaces;
• determine whether the network address is associated with the one or more reserved network address spaces in a network, the determining based on the messages including the identifications of the one or more reserved network address spaces;
• and
• determine the network address is a bogon address when the network address is not associated with the one or more reserved network address spaces.

A non-transitory computer-readable storage medium comprising instructions stored therein, which when executed by one or more processors, cause the one or more processors to:

• identify a network address associated with a network flow;
• obtain an indication of one or more reserved network address spaces, the indication being based on messages transmitted by a plurality of routers associated with the network flow, the messages including identifications of the one or more reserved network address spaces;
• determine whether the network address is associated with the one or more reserved network address spaces in a network, the determining based on the messages including the identifications of the one or more reserved network address spaces;
• and
• determine the network address is a bogon address when the network address is not associated with the one or more reserved network address spaces.