Forum Discussion
lieweffect_3313
Sep 27, 2018Nimbostratus
How to packet capture the whole traffic flow in VIP by Automap
Hi,
I do have a VIP configured using Automap.
2 nodes on the pool member.
Now, the problem is the log on the nodes member will always show the self IP as a source IP address.
Configure X-fo...
youssef1
Sep 27, 2018Cumulonimbus
Hi,
since you are capturing on the ip address base, keep in mind that capture from F5 to backend you may have several user session if you are not the only one to test (because of snat):
tcpdump -nni 0.0 '(host "clientIP" and host "VipIP")' or '(host "FloatinIP" and host "BackendServer")'
or
tcpdump -nni 0.0 '(src host "clientIP" and dst host "VipIP")' or '(src host "FloatinIP" and dst host "BackendServer")'
In your situation I advise you to capture traffic using an Irule, it allows you to go up to layer 7 and capture traffic end-to-end for a single user.
let me know if you need assistance for irule
Regards
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects