Forum Discussion

Kiran_145850's avatar
Kiran_145850
Icon for Nimbostratus rankNimbostratus
Feb 28, 2014

irlue to send the logs to remote server using port number will use which protocol by default TCP/UDP

Hi,   I am using an irule to send the logs to remote server . Just wanted to know th eport number mentioned in irule will use UDP or TCP .   I belive its UDP , but requesting someone to please ...
application delivery
devops
iRules
LTM
Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Feb 28, 2014

The difference between "ntalk" and "syslog" in the captures is based on tcpdump's internal understanding of specific port-protocol mappings. You can disable that visual mapping with the following:

tcpdump -lnni 0.0 udp and host x.x.x.x and port 518

In any case, it does look like the port 518 traffic is leaving the box. The next step might be to ensure the remote port 518 syslog server is receiving it. If you can do a tcpdump on that server, look for the packets from the F5.