A routing monitor is disclosed comprising at least one communication tap, wherein each of the at least one communication taps is positioned in a line of communication between two routers and a protocol emulator for reassembling routing protocol messages captured by the at least one communication tap and opening a routing protocol connection with a network device using the reassembled routing protocol messages in response to a request for connection received from the network device.