Hello, thanks for your replies. This is really interesting, especially @MartinLL 's SNORT investigation. After disabling IDS I had no route change events and network outages since 10 days. This is the longest period of time so far since we started working on the problem. Hopping that we got rid of it, I think.I can do without IDS. ... View more