For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Anesh's avatar
Anesh
Icon for Cirrostratus rankCirrostratus
May 27, 2014

Connection table entry removed after idle timer reaches tcp keep alive value

Problem: i am doing a telnet to a VIP configured on an LTM and the Connection table entry removed after idle timer reaches tcp keep alive value configured which is 60 seconds and also the i see the i...
application delivery
deployment
design
LTM
nitass's avatar
nitass
Icon for Employee rankEmployee
May 28, 2014

How do i find out from the pcap if the server is sending it first, any specific filter i can apply on the wireshark to see it

 

you may run tcpdump with FIN and RST filter but i think it is good to capture all and filter in wireshark. anyway, there are some filter example here in case if you are interested.

 

A tcpdump Tutorial and Primer

 

http://www.danielmiessler.com/study/tcpdump/

 

in the frames before the LTM VIP sends a FIN, i do see the server sending a RST packet, could this be the cause??

 

may be. can you find out why serer sends reset?