What Is the Meaning of Each Field in the display ip routing-table verbose Command Output?

Question:
I have two WS-C3560V2-48TS-S routers (R1 and R2); R1 has the full BGP table and some local connections to. They are all being advertise to it's iBGP neighour R2. I can't find a command that I can run on R2 that will show the number of prefixes learnt from R1 that are internal to the local AS only. It just says 425~k which is all the Internet routes and the local ones.
What command can I use for this?
Answer:
the local AS originated networks has AS path attribute empty.
So you could define an ip as-path acl matching an empty string
ip as-path access-list 1 permit ^$
then you can invoke the as-path access-list as a filter action on show ip bgp on R2
show ip bgp filter-list 1
see
BGP command reference
http://www.cisco.com/en/US/docs/ios-xml/ios/iproute_bgp/command/bgp-s1.html#GUID-2618748E-42ED-495A-875C-D398A02D79F9

At this point it is enough to count the lines in show ip bgp filter-list 1 output to count the routes that are originated in the local AS at R1 WS-C3560X-24P-L Price and received on R2 and installed on R2.

Original comes from http://switch.blogcindario.com/

Show Routing Table button will open a chart displaying how data is routed through your LAN. Use the example below on how to configure a static routing:

STATIC ROUTING:

192.168.2.2 192.168.1.2
ROUTER C ----------------- ROUTER B ----------------- ROUTER A--------------PUBLIC IP ADDRESS
192.168.3.1 192.168.2.1 192.168.1.1

ROUTER A: Gateway Mode ROUTER C: Router Mode

1STENTRY 1ST ENTRY
DESIP: 192.168.2.0 DES IP: 192.168.2.0
SM: 24 SM: 24
DG: 192.168.1.2 DG: 192.168.2.2
HOP COUNT: 2 HOP COUNT: 3
INTERFACE: LAN INTERFACE: WAN


2NDENTRY 2ND ENTRY
DESIP: 192.168.3.0 DES IP: 192.168.1.0
SM: 24 SM: 24
DG: 192.168.1.2 DG: 192.168.2.2
HOP COUNT: 3 HOP COUNT: 2
INTERFACE: LAN INTERFACE: WAN


*********************************************************************************************************************************************************

ROUTER B: Router Mode


1STENTRY
DESIP: 192.168.1.0 WAN IP: 192.168.1.2
SM: 24 SM: 24
DG: 192.168.1.2 DG: 192.168.1.1
HOP COUNT: 2 DNS: DNS of 1st router
INTERFACE: WAN


2NDENTRY
DESIP: 192.168.3.0
SM: 24
DG: 192.168.2.2
HOP COUNT: 2
INTERFACE: LAN


*********************************************************************************************************************************************************
1stRouter must be set on Gateway Mode
2ndRouter must be on Router Mode
Use Static Routing
Select Entry
Destination IP = IP Subnet of the 1st Router
Subnet Mask = Subnet Mask of the 1st Router
Default Gateway = Interface IP
Hop Count = 1 + n
Interface= Connection to the 1st Router

Hope this help everyone.

When you first turn on your computer (BEFORE DIALING INTO YOUR ISP), open a MS-DOS Prompt windows (start/programs MS-DOS Prompt).
Then type netstat -arn and press the Enter key.
Your screen should display the following (without the dotted lines which I added for clarification).
-----------------------------------------------------------------------------
Active Routes:

Network Address Netmask Gateway Address Interface Metric
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
255.255.255.255 255.255.255.255 255.255.255.255 0.0.0.0 1

Route Table

Active Connections

Proto Local Address Foreign Address State

--------------------------------------------------------------------------------

If you see anything else, there might be a problem (more on that later). Now dial into your ISP, once you are connected; go back to the MS-DOS Prompt and run the same command as before netstat -arn, this time it will look similar to the following (without dotted lines).

Active Routes:

Network Address Netmask Gateway Address Interface Metric
0.0.0.0 0.0.0.0 216.1.104.70 216.1.104.70 1
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
216.1.104.0 255.255.255.0 216.1.104.70 216.1.104.70 1
216.1.104.70 255.255.255.255 127.0.0.1 127.0.0.1 1
216.1.104.255 255.255.255.255 216.1.104.70 216.1.104.70 1
224.0.0.0 224.0.0.0 216.1.104.70 216.1.104.70 1
255.255.255.255 255.255.255.255 216.1.104.70 216.1.104.70 1

Route Table

Active Connections

Proto Local Address Foreign Address State
TCP 0.0.0.0:0 0.0.0.0:0 LISTENING
TCP 216.1.104.70:137 0.0.0.0:0 LISTENING
TCP 216.1.104.70:138 0.0.0.0:0 LISTENING
TCP 216.1.104.70:139 0.0.0.0:0 LISTENING
UDP 216.1.104.70:137 *:*

--------------------------------------------------------------------------------

What you are seeing in the first section (Active Routes) under the heading of Network Address are some additional lines. The only ones that should be there are ones belonging to your ISP (more on that later). In the second section (Route Table) under Local Address you are seeing the IP address that your ISP assigned you (in this example 216.1.104.70).

The numbers are divided into four dot notations, the first three should be the same for both sets, while in this case the .70 is the unique number assigned for THIS session. Next time you dial in that number will more than likely be different.

To make sure that the first three notation are as they should be, we will run one more command from the MS-DOS windows.
From the MS-DOS Prompt type tracert/www.yourispwebsite.com or .net or whatever it ends in. Following is an example of the output you should see.

---------------------------------------------------------------------------------------

Tracing route to /www.motion.net [207.239.117.112]over a maximum of 30 hops:
1 128 ms 2084 ms 102 ms chat-port.motion.net [216.1.104.4]
2 115 ms 188 ms 117 ms chat-core.motion.net [216.1.104.1]
3 108 ms 116 ms 119 ms www.motion.net [207.239.117.112]
Trace complete.

------------------------------------------------------------------------------------------

You will see that on lines with the 1 and 2 the first three notations of the address match with that we saw above, which is a good thing. If it does not, then some further investigation is needed.

If everything matches like above, you can almost breath easier. Another thing which you should check is programs launched during startup. To find these, Click start/programs/startup look at what shows up. You should be ableto recognize everything there, if not, once again more investigation is needed.

------------------------------------------------------------------------------------------

Now just because everything reported out like we expected (and demonstrated above) we still are not out of the woods. How is this so, you ask? Do you Netmeeting? Do you get on IRC (Internet Relay Chat)? Or any other program that makes use of the Internet. Have you every received an email with an attachment that ended in .exe? The list goes on and on, basically anything that you run could have become infected with a trojan. What this means, is the program appears to do what you expect, but also does just a little more. This little more could be blasting ebay.com or one of the other sites that CNNline was talking about.

What can you do? Well some anti-virus software will detect some trojans. Another (tedious) this is to start each of these "extra" Internet programs one at a time and go through the last two steps above, looking at the routes and connection the program uses. However, the tricky part willbe figuring out where to tracert to in order to find out if the addresses you see in step 2 are "safe" or not. I should forewarn you, that running tracert after tracert, after tracert might be considered "improper" by your ISP. The steps outlined above may not work exactly as I have stated depending upon your ISP, but wuth a true ISP it should work. Finally, this advise comes with NO warrante and by following my "hints" you implicitly release me from ANY and ALL liability which you may incur.

Other options

Display protocol statistics and current TCP/IP network connections.
Netstat [-a] [-e] [-n] [-s] [-p proto] [-r] [intervals]

-a.. Display all connections and listening ports.
-e.. Display Ethernet statistics. This may be combined with the -s option.
-n.. Diplays address and port numbers in the numerical form.
-p proto..Shows connections for the protocol specified by proto; proto may be
TCP or UDP. If used with the -s option to display per-protocol statistics,
proto may be TCP, UDP, of IP.
-r.. Display the routing table.
-s.. Display per-protocol statistics. By default, statistics are shown for TCP
UDP and IP; the -p option may be used to specify a subset of the default
interval..Redisplay selected statistics, pausing intervals seconds between each
display. If omitted. netstat will print the current configuration information
once

Good luck!