neighbor 4.4.4.4 shutdown bgp command and TCP connection

[sarahr202]

Hi everybody

R1-----199.199.199.0 -R2

R1 (1.1.1.1) and R2( 4.4.4.4) form bgp neighbor relationship  via their loop back addresses.

When I issue the command " neighbor 1.1.1.1 shutdown at R1, R1 cycles back to idle state as expected.  After TCP connection was terminated , I still see  tcp segments flowing between R1 and R4.

My question is what purpose they are serving?

I attached the wireshark-capture file, Please take a look towards the end of the file.

thanks and  merry christmas to everyone.

[Edison Ortiz · Accepted solution]

If you look at the trace under TCP->Flags->Expert Info for 4.4.4.4 to 1.1.1.1, it is sending a connection establish request because R2 does not have the neighbor in shutdown state.

The following sequence R1 is responding back with a connection reset. That's expected as the neighbor is in shutdown state.

That information is also under TCP->Flags-> Expert Info.

Regards,

Edison