BGP Vulnerability Testing Separating Fact from FUD