Forum Discussion

Fantas's avatar
Fantas
Icon for Nimbostratus rankNimbostratus
Oct 02, 2020

F5 Sending Traffic to Port 5051

Hi,   I have noticed on one of our f5 sending traffic to one of the internal server destination port 5051. Captured wireshark , I noticed that traffic is initiated by f5 inside interface to serv...
BIG-IP
cloud
LTM
Fantas's avatar
Fantas
Icon for Nimbostratus rankNimbostratus
Oct 04, 2020

Hi,

 

I have done packet capture on f5 and can see traffic initiated from inside interface for port 5051 for one of the destination sever. this port doesn't exist on f5 but still inside interface initiating traffic to one of the internal server.

 

Initially I thought , f5 might be sending this traffic on behalf of other server that might have hit on f5 vip and its redirecting traffic but after capturing traffic i noticed that its initiated by inside interface/lan.

 

No pool member configured with this port.

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Oct 04, 2020

    im still a little confused with you mean with initiated by the inside interface? how do you determine this, based on the IP address?

     

    how you done a tcpdump with the extra :nnn flags to see if you can find the possible associated virtual server?

     

    https://support.f5.com/csp/article/K13637

     

    can you share that output?