Forum Discussion

C_14818's avatar
C_14818
Icon for Nimbostratus rankNimbostratus
Feb 27, 2013

irule to figure out source and destination

Hi,   I am looking for a way to see what is source and destination and VIP/VS that is used for this traffic   tcpdump -ni external:nnn -s0 tcp port 22   I am seeing Self IP of F5 as source a...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 28, 2013
Can you please give more info on troubleshooting? what tcpdump should i run for this?you may run tcpdump on f5 special interface 0.0. interface 0.0 will capture packet from all vlan. normally bigip tries to use same source port number if it is available.

 

 

e.g.

 

tcpdump -nni 0.0 -s0 tcp port 22

 

 

or you may use irule similiar to the one i posted to log ip address.

 

 

Anyways to find out which VS is used for that specific traffic?virtual server name should be displayed in tcpdump output (e.g. lis=bar).