BGP update filter

retag add tags

My CE router is sending plenty of subnets to PE. I have captured .pcap file of BGP update and I would like to see one of specific NLRI information form the pcap file. When I have opened the pcap file there are plenty of NLRI info .How can I filter for specific subnet .

Example :- From the plenty of subnets I would like to see only 192.168.10.0/24 and their attributes .Is it possible if yes how ?

Thanks in advance

Have you tried
(bgp.nlri_prefix == 192.168.10.0) && (bgp.prefix_length == 24) ?

Chuckc

answered 2021-02-18 14:23:38 +0000, updated 2021-02-18 14:23:58 +0000

edit flag offensive 0 remove flag delete link

Comments

Hi Chuckc ,really appreciate your reply. Thank you very much .

I have tried your combination and found the correct update packet in which that specific NLRI has been carried. But when I opened that update packet there are plenty of NLRI info .I opened one by one and found the correct one .But it was quite difficult. IS there any option to get correct NLRI info form the opened update packet.

Ratheesh (2021-02-18 14:56:49 +0000) edit

add a comment see more comments

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account. This space is reserved only for answers. If you would like to engage in a discussion, please instead post a comment under the question or an answer that you would like to discuss.

BGP update filter edit

Comments

1 Answer

Comments