For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

genseek_32178's avatar
genseek_32178
Icon for Nimbostratus rankNimbostratus
Aug 28, 2013

F5 TCP Issue

Hi,   We have a destination IP - 1.1.1.1 being accessed via an application from src-172.20.20.1, and there is no delay in response.   Now the destination is a VIP behind the LB with 10 pool mem...
load balancer
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 28, 2013

You're looking specifically at timing - when the packet goes in, when it comes out, when the server returns a response, and when the proxy releases it.

Assuming you have VLANs labeled "internal" and "external", the following minimal TCPDUMP syntax should get you what you need:

tcpdump -lnni internal:nnn host [host IP filter] [and other filters]

tcpdump -lnni external:nnn host [host IP filter] [and other filters]

With the differences you're seeing, the source of the delay should be fairly observable in the captures.