1. A monitoring and alerting system for detecting a disruptive event on the Internet, comprising: a data collection and wrapping module configured to process input data, said input data including a plurality of messages produced by a network routing protocol on a selected network, wherein said input data comprises a live stream of said messages on said network, historical dumps of said messages to a computer's file system, or both; an automated analysis engine, said automated analysis engine comprising a plurality of analysis modules configured to analyze routing information and selected Internet behaviors from said input data; and user output, wherein said user output includes automated alerts to said user and an interactive analysis module.