Archives

Current we dump four kinds of data from BGP router.

  1. DUMP_BGP_ALL (use BGP command "dump bgp all" to dump all updates/state changes)
  2. DUMP_BGP_UPDATE (use BGP command "dump bgp updates" to dump updates)

  3. DUMP_BGP_ROUTE (use BGP command "dump bgp routes-mrt" to dump RIB tables)

  4. SH_IP_BGP (use command line "sh ip bgp" to get routing tables )

Format of archive files

  1. File format for "DUMP BGP ALL"

    Note: it dumps all update (announcement & withdrawal ) and state change messages into one file in every 60 minutes. 
    For example, the filename will be like all.20030321.144534
    The format of this file is MRTd binary format. You can use “route_btoa –i all.20030321.144534” command to interpret these information into readable text MRTd format described as below:

    TIME: 03/21/03 14:46:54
TYPE: BGP4MP/MESSAGE/Keepalive
FROM: 128.119.3.248 AS1249
TO: 128.119.85.173 AS65432

TIME: 03/21/03 14:47:04
TYPE: BGP4MP/MESSAGE/Update
FROM: 128.119.3.248 AS1249
TO: 128.119.85.173 AS65432
WITHDRAW
134.75.19.0/24

TIME: 03/21/03 14:47:33
TYPE: BGP4MP/MESSAGE/Update
FROM: 128.119.3.248 AS1249
TO: 128.119.85.173 AS65432
WITHDRAW
134.75.171.0/24
134.75.180.0/24
134.75.196.0/24 

    Or you can use “route_btoa –i –m all.20030321.144534” command to get another text MRTd format described as below:

    BGP4MP|1048276137|W|128.119.3.248|1249|210.240.184.0/23
BGP4MP|1048276137|W|128.119.3.248|1249|210.240.186.0/24
BGP4MP|1048276165|A|128.119.3.248|1249|134.75.19.0/24|1249 10578 11537 17579 1237|IGP|128.119.3.248|0|0||NAG||
BGP4MP|1048276165|A|128.119.3.248|1249|134.75.171.0/24|1249 10578 11537 17579 1237|IGP|128.119.3.248|0|0||NAG||
BGP4MP|1048276165|A|128.119.3.248|1249|134.75.180.0/24|1249 10578 11537 17579 1237|IGP|128.119.3.248|0|0||NAG||
BGP4MP|1048276279|W|128.119.3.248|1249|203.68.14.0/23
BGP4MP|1048276279|W|128.119.3.248|1249|210.71.49.0/24 
     
  2. File format for "DUMP BGP UPDATES"

Note: the same as “dump bgp all” command, but it will only dump the update messages. It does not dump the state change information in the file.

The format and usage of this file is the same as that in "DUMP BGP ALL"

  1. File format for "DUMP BGP ROUTE-MRT"

Note: it dumps all available routes in RIB-IN routing table into one file in every 2 hours. (It seems that there is no best path information in this file) 

The format of this file is MRTd binary format. You can use “route_btoa –i routes.20030321.104534” command to interpret these information into readable text MRTd format described as below:

TIME: 03/21/03 10:45:34
TYPE: TABLE_DUMP/INET
VIEW: 0
SEQUENCE: 1
PREFIX: 4.17.88.0/21
FROM: 128.119.3.248 AS1249
ORIGINATED: 03/17/03 20:54:20
ORIGIN: IGP
ASPATH: 1249 10578 11537 10886 6059
NEXT_HOP: 128.119.3.248
STATUS: 0x1

TIME: 03/21/03 10:45:34
TYPE: TABLE_DUMP/INET
VIEW: 0
SEQUENCE: 2
PREFIX: 6.1.0.0/16
FROM: 128.119.3.248 AS1249
ORIGINATED: 03/13/03 09:27:20
ORIGIN: IGP
ASPATH: 1249 10578 11537 7170 1455
NEXT_HOP: 128.119.3.248
STATUS: 0x1 

Or you can use “route_btoa –i –m routes.20030321.104534” command to get another text MRTd format described as below:

TABLE_DUMP|1048261534|B|128.119.3.248|1249|4.17.88.0/21|1249 10578 11537 10886 6059|IGP|128.119.3.248|0|0||NAG||
TABLE_DUMP|1048261534|B|128.119.3.248|1249|6.1.0.0/16|1249 10578 11537 7170 1455|IGP|128.119.3.248|0|0||NAG||
TABLE_DUMP|1048261534|B|128.119.3.248|1249|6.2.0.0/22|1249 10578 11537 7170 1455|IGP|128.119.3.248|0|0||NAG||
TABLE_DUMP|1048261534|B|128.119.3.248|1249|6.3.0.0/18|1249 10578 11537 7170 1455|IGP|128.119.3.248|0|0||NAG||
TABLE_DUMP|1048261534|B|128.119.3.248|1249|6.4.0.0/16|1249 10578 11537 7170 1455|IGP|128.119.3.248|0|0||NAG||

 

  1. File format for "SH IP BGP"
    2.  

    In this part, we use script-program to login the BGP router, show current routing table and record all routes into a file. It contains the best path in routing table.
    The filename looks like BgpEcsUmass.20030320.1000.1048172400

    The format of this file is shown as below: 

    Hello, this is zebra (version 0.92a).
Copyright 1996-2001 Kunihiro Ishiguro.

User Access Verification

?????t"?yPassword:
BgpMonitorEcsKeb202>
BgpMonitorEcsKeb202> term len 0
BgpMonitorEcsKeb202>
BgpMonitorEcsKeb202> show ip bgp
BGP table version is 0, local router ID is 192.168.200.1
Status codes: s suppressed, d damped, h history, * valid, > best, i - internal
Origin codes: i - IGP, e - EGP, ? - incomplete

Network Next Hop Metric LocPrf Weight Path
* 0.0.0.0/0 128.119.3.248 0 1249 3561 i
* 4.17.88.0/21 128.119.3.248 0 1249 10578 11537 10886 6059 i
* 6.1.0.0/16 128.119.3.248 0 1249 10578 11537 7170 1455 i
* 6.2.0.0/22 128.119.3.248 0 1249 10578 11537 7170 1455 i