For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

kridsana's avatar
kridsana
Icon for Cirrocumulus rankCirrocumulus
Oct 03, 2012

can you help me see this log?

  Oct 2 10:45:49 local/sccp info bcm56xxd[406]: 012c0012:6: enable port mirror (tcpdump) from 1.2 to CPU.   Oct 2 10:45:49 local/sccp info bcm56xxd[406]: 012c0012:6: tcpdump limit: 200 p...
config
design
nitass's avatar
nitass
Icon for Employee rankEmployee
Oct 03, 2012
i guess you run tcpdump on physical interface, didn't you?

 

 

Running tcpdump on a switch interface is rate-limited to 200 packets per second. Therefore, if you run tcpdump on an interface that is processing more than 200 packets per second, the captured tcpdump file will not include all of the packets.sol6546: Recommended methods and limitations for running tcpdump on a BIG-IP system

 

https://support.f5.com/kb/en-us/solutions/public/6000/500/sol6546.html?sr=24293758

 

 

anyway, what was the problem?