GTM Packet Capture command

Hi Aditya,

You can try using the following formats by changing the host IP as per your configuration.

tcpdump -vvv -s0  -nni 0.0:nnnp udp port 53 and host 1.2.3.4 -w /var/tmp/$(/bin/hostname)_$(date +%Y-%m-%d)_$(date +%H:%M).pcap

First, find out which interface you want to sniff with the "ifconfig" command. If the destination server is located on an interface called "vlan1275" you can dump all DNS traffic to a specific IP address thus

tcpdump -i vlan1275 udp port 53 and host 1.2.3.4 -w /var/tmp/$(/bin/hostname)_$(date +%Y-%m-%d)_$(date +%H:%M).pcap

You can refer following articles 

K411: Overview of packet tracing with the tcpdump utility
https://my.f5.com/manage/s/article/K411

K00463541: A breakdown of the tcpdump utility, recommended actions, and information to help you use and apply it to the BIG-IP.
https://my.f5.com/manage/s/article/K00463541

HTH

🙏