For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

nov1ce_120072's avatar
nov1ce_120072
Icon for Nimbostratus rankNimbostratus
Jul 16, 2018

010c005b:5: Dropping a packet that is not a failover packet.

Hi, A pair of BIG-IP LTM 3900 appliances running 12.1.2 build 0.0.249. This morning, for around a minute, /var/log/ltm was populated with: Jul 16 08:00:46 F5-NODE01 notice sod[4940]: 010c005b:5:...
application delivery
BIG-IP
LTM
youssef1's avatar
youssef1
Icon for Cumulonimbus rankCumulonimbus
Jul 16, 2018

Hi,

 

You encountered this behaviour when The sod process detects and discards a malformed packet on a network failover interface or when you receives a packet that is not a failover packet. But in your case I thing it's du to malformed packet (especially if you have a dedicated vlan).

 

As you know FTP and SSH (who put you in trouble too) are very sensitive in case of network problem (the slightest problem on the connection tcp can make you lose your session). did you check that there was no network problem during this time laps? Firewall/switch, ...