For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Prince_165600's avatar
Prince_165600
Icon for Nimbostratus rankNimbostratus
Mar 27, 2017

Concurrent Connections to GUI of F5

Hi Team,

 

I would like to know if there is any specific way to identify the number of clients currently accessing GUI of F5?

 

If i use below command, it will not be accurate if both management and self IP are being used to access F5 :

 

tmsh show /sys connection cs-server-addr "F5 Management IP"

Is there any better practice for this ?

 

3 Replies

  • meeple_147986's avatar
    meeple_147986
    Icon for Nimbostratus rankNimbostratus
    Mar 27, 2017

    Hi,

     

    I think You can use netstat for this.

     

    So something like this should be OK:

     

    netstat -nt | grep MGMT_IP:443 | grep ESTABLISHED

     

    • Prince_165600's avatar
      Prince_165600
      Icon for Nimbostratus rankNimbostratus
      Mar 28, 2017

      Hi Meeple,

       

      If the F5 device is configured to be accessed both via management and self IP address, i dont think this will give an accurate result on how many concurrent users are connected.

       

    • Prince_165600's avatar
      Prince_165600
      Icon for Nimbostratus rankNimbostratus
      Mar 28, 2017

      Infact as part of test when i compared the output of above two commands, for some reason i dont even see the attempt :

      `@(gtmv111)(cfg-sync Standalone)(Active)(/Common)(tmos) show /sys connection cs-server-addr 10.33.238.171

      Sys::Connections 10.33.238.189:2275 10.33.238.171:22 10.33.238.189:2275 127.0.0.1:22 tcp 0 (tmm: 1) none 10.33.238.189:2313 10.33.238.171:443 10.33.238.189:2313 127.0.0.1:443 tcp 4 (tmm: 0) none 10.33.238.189:2311 10.33.238.171:443 10.33.238.189:2311 127.0.0.1:443 tcp 3 (tmm: 0) none Total records returned: 3 root@(gtmv111)(cfg-sync Standalone)(Active)(/Common)(tmos) q [root@gtmv111:Active:Standalone] config netstat -nt | grep 10.33.238.171:443 | grep ESTABLISHED [root@gtmv111:Active:Standalone] config netstat -nt | grep 10.33.238.171:443 | grep ESTABLISHED [root@gtmv111:Active:Standalone] config `