Blackholing events often have prolonged impacts and typically require manual intervention for recovery. Even a single occurrence is highly disruptive, frequently triggering executive-level escalations. Resolving such incidents demands top-tier expertise and often involves engagement with the vendor’s advanced technical support. To accelerate root cause identification, we present several methods for detecting blackholing events, identifying the affected transit flows, and analyzing potential correlations. This approach aims to reduce response times and improve overall network resilience. Licensed to the public under http://creativecommons.org/licenses/by/4.0 about this event: https://pretalx.com/denog17/talk/GJNTXH/