Computer network control plane tampering monitor

A method practiced on a computer for monitoring a path through a computer network comprising:

• generating a first message unit, the first message unit including a path identifier and at least one information field;
• generating a second message unit within a node along the path through the computer network, the second message unit comprising the path identifier, and a path summary comprising the at least one information field;
• and
• generating a notification, responsive to determining whether the first message unit and the second message unit produce an expected pair of values of the at least one information field, wherein the path through the computer network comprises a label-switched path.

A method practiced on a computer for monitoring a path through a computer network comprising:

• detecting a generation of a tear-down message unit by a network node;
• determining whether the network node is an authorized node to generate the tear-down message unit;
• and
• generating a notification if the network node is not the authorized node.

A method practiced on a computer for monitoring a path through a computer network comprising:

• generating a message unit comprising a path identifier and a path summary comprising at least one information field;
• determining by a comparator whether the message unit complies with an allowed policy in a network policy database;
• and
• generating a notification if the message unit fails to comply with the allowed policy in the network policy database.