BGP update filter

asked 2021-02-18 13:43:28 +0000

Ratheesh
1 ●1

My CE router is sending plenty of subnets to PE. I have captured .pcap file of BGP update and I would like to see one of specific NLRI information form the pcap file. When I have opened the pcap file there are plenty of NLRI info .How can I filter for specific subnet .

Example :- From the plenty of subnets I would like to see only 192.168.10.0/24 and their attributes .Is it possible if yes how ?

Thanks in advance

edit retag flag offensive close merge delete

add a comment

1 Answer

Sort by » oldest newest most voted

answered 2021-02-18 14:23:38 +0000

Chuckc
2858 ●5 ●567 ●19

updated 2021-02-18 14:23:58 +0000

Have you tried
(bgp.nlri_prefix == 192.168.10.0) && (bgp.prefix_length == 24) ?

edit flag offensive delete link

Comments

Hi Chuckc ,really appreciate your reply. Thank you very much .

I have tried your combination and found the correct update packet in which that specific NLRI has been carried. But when I opened that update packet there are plenty of NLRI info .I opened one by one and found the correct one .But it was quite difficult. IS there any option to get correct NLRI info form the opened update packet.

Ratheesh ( 2021-02-18 14:56:49 +0000 )edit

add a comment

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

1 follower

Stats

Asked: 2021-02-18 13:43:28 +0000

Seen: 603 times

Last updated: Feb 18 '21

BGP update filter edit