# BGP update filter

My CE router is sending plenty of subnets to PE. I have captured .pcap file of BGP update and I would like to see one of specific NLRI information form the pcap file. When I have opened the pcap file there are plenty of NLRI info .How can I filter for specific subnet .

Example :- From the plenty of subnets I would like to see only 192.168.10.0/24 and their attributes .Is it possible if yes how ?

edit retag close merge delete

Sort by » oldest newest most voted

Have you tried
(bgp.nlri_prefix == 192.168.10.0) && (bgp.prefix_length == 24) ?

more

Hi Chuckc ,really appreciate your reply. Thank you very much .

I have tried your combination and found the correct update packet in which that specific NLRI has been carried. But when I opened that update packet there are plenty of NLRI info .I opened one by one and found the correct one .But it was quite difficult. IS there any option to get correct NLRI info form the opened update packet.

( 2021-02-18 14:56:49 +0000 )edit

Please start posting anonymously - your entry will be published after you log in or create a new account.