How to use traceroute command from F5 to destination

You can't do that, and just to be sure I tested.

 

[root@LABBIGIP1:Active:Disconnected] config traceroute -s 172.16.0.1 8.8.8.8

 

13:41:26.072969 IP 172.16.0.1.54942 > 8.8.8.8.33435: UDP, length 32 out slot1/tmm3 lis= flowtype=130 flowid=56009AFE8780 peerid=56009AFE8680 conflags=626 inslot=63 inport=23 haunit=0 priority=0 peerremote=00000000:00000000:0000FFFF:AC100001 peerlocal=00000000:00000000:0000FFFF:08080808 remoteport=58456 localport=33435 proto=17 vlan=4094

 

172.16.0.1 is my internal self IP, vlan=4094 is my external vlan. I have a forwarding 0.0.0.0/0 virtual server listening on the internal VLAN with automap, and a default gateway via external VLAN.

 

Basically, the traffic is sent out via external VLAN as per default gateway, and using internal source address.

 

When you test from the F5, the unit is just sending the traffic out. When you access from inside, the forward virtual server handles the traffic, and after that routing takes control to send the traffic out.

 

tcpdump -vvnni 0.0:nnnp -s0 host ip_address -w /path/file.pcap

 

This command captures end-to-end packets that can be traced using the F5 plugin for Wireshark.

 

This is also included in a script I published today.