For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Femi_132696's avatar
Femi_132696
Icon for Nimbostratus rankNimbostratus
Jul 30, 2015

Debugging Health Monitor - Node being randomly marked down and then up.

Hi,   I have a strange situation where 2 nodes in a pool are being randomly marked down and then up. But the server logs show no evidence that there were any errors.   The monitor URL always re...
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 06, 2015

So is this unencrypted traffic on the server side of the BIG-IP? If it is, your best first step is to do a wire capture to look at the request and response traffic:

tcpdump -lnni [server side vlan name] -Xs0 port [web server port] and host [web server IP]

Without any application traffic going to the VIP, you should see the monitor traffic coming from the BIG-IP self-IP. You're then looking for what the request looks like and what the response looks like. You also stated that you always receive a 200 response. How are you testing when you see this response?