Forum Discussion
SanYang
Jan 24, 2024Cirrus
How to check the source IP of an "open connection" ?
Hello, Recently, the F5 I manage was suspected to be under attack. There were as many as 650 K "open connections" and I wanted to check the source IP of these connections. I tried "tmsh sho...
Lucas_Thompson
Jan 24, 2024Employee
Luckily BIG-IP is pretty flexible in this area.
- You can filter out connections. "tmsh show sys conn" supports a lot of different filter selectors that you can use: https://my.f5.com/manage/s/article/K53851362
- You can change the limit from 1000 to something else: https://my.f5.com/manage/s/article/K20234023
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects