%BGP-5-ADJCHANGE:

[NetworkGhost]

Is the %BGP-5-ADJCHANGE: mean that the neighbor has sent the message or does it mean the router is generating the message itself?

Here are the 2 messages:

Oct 24 20:14:00.519: %BGP-5-ADJCHANGE: neighbor xxx.xxx.xxx.xxx vpn vrf VRF269 Down BGP Notification sent
Oct 24 20:14:00.519: %BGP-3-NOTIFICATION: sent to neighbor
xxx.xxx.xxx.174 4/0 (hold time expired) 0 bytes

 

[KiscoKid]

That message is the result of the BGP hold timer expiring. The hold timer defaults to 180 seconds typically.

When the BGP hold timer expires like this, both BGP peers generate a notification message (line 1) and send it to its neighbor (line 2)