Forum Discussion

qaism02_374586's avatar
qaism02_374586
Icon for Nimbostratus rankNimbostratus
Oct 16, 2018

how to check which clients are generating most traffic to a particular VIP?

Hi,

 

i have mainly worked riverbed load balancers so new to F5s. I am troubleshooting an over subscription issue with one of the web services and struggling to check who's generating more traffic. can you please show me how to check which clients are generating most traffic to a particular VIP?

 

I will really appreciate your help with this.

 

Kind regards,

 

application delivery
BIG-IP
LTM
Super-NetOps
  • tiziano_rosato's avatar
    tiziano_rosato
    Icon for Cirrus rankCirrus
    Oct 16, 2018

    Hi,

     

    Which F5 tmos version are you using?

     

    In general AVR/Analytics (if in use) can give you a lot of infos.

     

  • F5_Learner_3295's avatar
    F5_Learner_3295
    Icon for Nimbostratus rankNimbostratus
    Oct 16, 2018

    Hi, Can you be more specific about the client here ?

     

    • If the VIP is getting accessed by the users who are behind the proxy then we are not able to identify specific Client which you are looking? If possible give more info about how the architecture is .

    Regards

     

  • qaism02_374586's avatar
    qaism02_374586
    Icon for Nimbostratus rankNimbostratus
    Oct 16, 2018

    Hi clients are not behind a proxy. they call this VIP which has webservers in a pool attached to this VIP.

     

    Clients --> VIP->Webservers

     

    Regards,

     

    • F5_Learner_3295's avatar
      F5_Learner_3295
      Icon for Nimbostratus rankNimbostratus
      Oct 16, 2018

      Thanks for the details .

      we can achieve this by using tcpdump command during the peak session.

      tcpdump -nn dst host VIP_IP and dst port VIP_PORT -w /var/tmp/test.pcap

      https://support.f5.com/csp/article/K411

      Check the output in wireshark and analysis it. text hope you will get some results.

      Regards