For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

luigi_avella_10's avatar
luigi_avella_10
Icon for Nimbostratus rankNimbostratus
Jun 11, 2014

GTM: https monitor

Hi, I've configured an https control on a BIGIP1600 GTM pool member for a service configured on BIGIP3600 LTM, it fails with the following error:   Jun 11 14:59:05 gtm2 gtmd[1894]: 011ae0f2:1: Mon...
luigi_avella_10's avatar
luigi_avella_10
Icon for Nimbostratus rankNimbostratus
Jun 11, 2014

I've made a capture on the LTM to catch the GTM monitor traffic:

 

tcpdump -i any host yyy.yyy.yyy.161 and port 443 tcpdump: listening on any 15:58:49.443234 802.1Q vlan4093 P0 yyy.yyy.yyy.161.34108 > yyy.yyy.yyy.102.https: S 449817390:449817390(0) win 5840 (DF) 15:58:49.443978 802.1Q vlan4093 P0 yyy.yyy.yyy.102.https > yyy.yyy.yyy.161.34108: S 3570641870:3570641870(0) ack 449817391 win 4380 (DF) 15:58:49.444944 802.1Q vlan4093 P0 yyy.yyy.yyy.161.34108 > yyy.yyy.yyy.102.https: . ack 1 win 5840 (DF) 15:58:49.444950 802.1Q vlan4093 P0 yyy.yyy.yyy.161.34108 > yyy.yyy.yyy.102.https: P 1:119(118) ack 1 win 5840 (DF) 15:58:49.445507 802.1Q vlan4093 P0 yyy.yyy.yyy.102.https > yyy.yyy.yyy.161.34108: P 1:123(122) ack 119 win 4498 (DF) 15:58:49.446407 802.1Q vlan4093 P0 yyy.yyy.yyy.161.34108 > yyy.yyy.yyy.102.https: . ack 123 win 5840 (DF) 15:58:49.446411 802.1Q vlan4093 P0 yyy.yyy.yyy.161.34108 > yyy.yyy.yyy.102.https: P 119:162(43) ack 123 win 5840 (DF) 15:58:49.446903 802.1Q vlan4093 P0 yyy.yyy.yyy.102.https > yyy.yyy.yyy.161.34108: . ack 162 win 4498 (DF) 15:58:49.447872 802.1Q vlan4093 P0 yyy.yyy.yyy.161.34108 > yyy.yyy.yyy.102.https: P 162:190(28) ack 123 win 5840 (DF) 15:58:49.448158 802.1Q vlan4093 P0 yyy.yyy.yyy.102.https > yyy.yyy.yyy.161.34108: R 123:123(0) ack 190 win 4569 (DF)

 

It seems that the LTM sends a reset