For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kiran_145850's avatar
Kiran_145850
Icon for Nimbostratus rankNimbostratus
Feb 28, 2014

irlue to send the logs to remote server using port number will use which protocol by default TCP/UDP

Hi,   I am using an irule to send the logs to remote server . Just wanted to know th eport number mentioned in irule will use UDP or TCP .   I belive its UDP , but requesting someone to please ...
application delivery
devops
iRules
LTM
Kiran_145850's avatar
Kiran_145850
Icon for Nimbostratus rankNimbostratus
Feb 28, 2014

Port 518 traffic leaving F5 .

 

Below is the output .

 

tcpdump -i 0.0 udp and host x.x.x.x and port 518 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes 07:36:08.604991 IP x.x.x.x.59295 > .ntalk: UDP, length 144 07:36:25.769255 IP x.x.x.x.59187 > .ntalk: UDP, length 144 07:36:25.820978 IP x.x.x.x.42418 > .ntalk: UDP, length 144

 

Below is the o/p using port 514

 

tcpdump -i 0.0 udp and host x.x.x.x and port 514 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on 0.0, link-type EN10MB (Ethernet), capture size 108 bytes 07:36:25.510570 IP x.x.x.x.12255 > .syslog: SYSLOG local0.info, length: 144 07:36:25.769255 IP x.x.x.x.59187 > .syslog: SYSLOG local0.info, length: 144 07:36:25.820978 IP x.x.x.x.42418 > .syslog: SYSLOG local0.info, length: 143