<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: BGP show Local RIB before Import filters in General Topics</title>
    <link>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/388866#M90556</link>
    <description>&lt;P&gt;The ridiculous conclusion I came to was to brute-force it with a pcap. It's certainly before the filter gets applied... &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;&lt;LI-CODE lang="python"&gt;# enable debug pcap for bgp
debug routing pcap bgp on virtualrouter default

# request bgp peer to resend all routes
test routing bgp virtual-router default refresh peer lab01

# pcap name might be different
view-pcap verbose++ yes debug-pcap bgp-vr-1.pcap

# or SCP it elsewhere to view in wireshark
scp export debug-pcap from bgp-vr-1.pcap to user@host:/optional/path

# disable and delete the debug pcap for bgp when done
debug routing pcap bgp off
debug routing pcap bgp delete&lt;/LI-CODE&gt;&lt;P&gt;Review the pcap preferably in wireshark and look for the prefixes. It works. Pretty asinine. There has to be a better way.&lt;/P&gt;</description>
    <pubDate>Wed, 03 Mar 2021 17:27:08 GMT</pubDate>
    <dc:creator>JohnUrbanek</dc:creator>
    <dc:date>2021-03-03T17:27:08Z</dc:date>
    <item>
      <title>BGP show Local RIB before Import filters</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/292861#M77456</link>
      <description>&lt;P&gt;Hello,&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;After applying Import filters in BGP the Local RIB is reduced to a filtered set of routes advertised by peers.&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;However it seems to be impossible to see what the original set of advertised routes is. The peers are still advertising these routes, but there seem to be no methods in the GUI or CLI (show routing, debug routing ...) to see those advertised routes...&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Is the only way to check this list really to disable all Import filters? And thus risking that unwanted routes will be installed? You could also first disable installing of routes (on the BGP General tab), but then you have a different problem...&lt;/P&gt;</description>
      <pubDate>Mon, 14 Oct 2019 13:08:55 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/292861#M77456</guid>
      <dc:creator>MichielDetailleur</dc:creator>
      <dc:date>2019-10-14T13:08:55Z</dc:date>
    </item>
    <item>
      <title>Re: BGP show Local RIB before Import filters</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/388866#M90556</link>
      <description>&lt;P&gt;The ridiculous conclusion I came to was to brute-force it with a pcap. It's certainly before the filter gets applied... &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt;&lt;/P&gt;&lt;LI-CODE lang="python"&gt;# enable debug pcap for bgp
debug routing pcap bgp on virtualrouter default

# request bgp peer to resend all routes
test routing bgp virtual-router default refresh peer lab01

# pcap name might be different
view-pcap verbose++ yes debug-pcap bgp-vr-1.pcap

# or SCP it elsewhere to view in wireshark
scp export debug-pcap from bgp-vr-1.pcap to user@host:/optional/path

# disable and delete the debug pcap for bgp when done
debug routing pcap bgp off
debug routing pcap bgp delete&lt;/LI-CODE&gt;&lt;P&gt;Review the pcap preferably in wireshark and look for the prefixes. It works. Pretty asinine. There has to be a better way.&lt;/P&gt;</description>
      <pubDate>Wed, 03 Mar 2021 17:27:08 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/388866#M90556</guid>
      <dc:creator>JohnUrbanek</dc:creator>
      <dc:date>2021-03-03T17:27:08Z</dc:date>
    </item>
    <item>
      <title>Re: BGP show Local RIB before Import filters</title>
      <link>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/388997#M90590</link>
      <description>&lt;P&gt;Kudos for your mad skills! But not gonna accept this as a solution &lt;span class="lia-unicode-emoji" title=":slightly_smiling_face:"&gt;🙂&lt;/span&gt; Indeed there HAS to be a better way...&lt;/P&gt;</description>
      <pubDate>Thu, 04 Mar 2021 08:29:52 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/general-topics/bgp-show-local-rib-before-import-filters/m-p/388997#M90590</guid>
      <dc:creator>MichielDetailleur</dc:creator>
      <dc:date>2021-03-04T08:29:52Z</dc:date>
    </item>
  </channel>
</rss>

