For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Mar 22, 2015

How to prove non-http traffic?

Hello Folks, Customer has approximately 80 HTTP/HTTPs Virtual servers configured on his BIG-IP appliance, and it is showing the following log message under LTM log. http_process_state_prepend -...
application delivery
LTM
non-standard http
swo0sh_gt_13163's avatar
swo0sh_gt_13163
Icon for Altostratus rankAltostratus
Mar 22, 2015

Aww snap! I don't mind using TCPDUMP, the only challenge is, there are many HTTPS VS, in fact almost HTTPs VS. It would be quite tedious to generate PMS one by one for each HTTPs VS (all of them are offloading to F5) and load it to Wireshark for investigation.

 

Any other suggestion?

 

  • nitass's avatar
    nitass
    Icon for Employee rankEmployee
    Mar 22, 2015
    i normally run tcpdump with -C and -W options and hope issue (log) is happening during the capture.