My CE router is sending plenty of subnets to PE. I have captured .pcap file of BGP update and I would like to see one of specific NLRI information form the pcap file. When I have opened the pcap file there are plenty of NLRI info .How can I filter for specific subnet .
Example :- From the plenty of subnets I would like to see only 192.168.10.0/24 and their attributes .Is it possible if yes how ?
Thanks in advance
Have you tried
(bgp.nlri_prefix == 192.168.10.0) && (bgp.prefix_length == 24) ?
Hi Chuckc ,really appreciate your reply. Thank you very much .
I have tried your combination and found the correct update packet in which that specific NLRI has been carried. But when I opened that update packet there are plenty of NLRI info .I opened one by one and found the correct one .But it was quite difficult. IS there any option to get correct NLRI info form the opened update packet.
Asked: 2021-02-18 13:43:28 +0000
Seen: 930 times
Last updated: Feb 18 '21
