Forum Discussion

C_14818's avatar
C_14818
Icon for Nimbostratus rankNimbostratus
Feb 27, 2013

irule to figure out source and destination

Hi,   I am looking for a way to see what is source and destination and VIP/VS that is used for this traffic   tcpdump -ni external:nnn -s0 tcp port 22   I am seeing Self IP of F5 as source a...
application delivery
dev
devops
iRules
nitass's avatar
nitass
Icon for Employee rankEmployee
Feb 28, 2013
you should see 2 packets; one is on client-side (between client and bigip) and the other one is on server-side (between bigip and server). source port number could be same (e.g. 46154).

 

 

e.g.

 

(1) 22:07:04.047446 IP 172.28.20.120.46154 > 172.28.19.252.22: S 2301043389:2301043389(0) win 14600 in slot1/tmm0 lis=

 

...snipped...

 

(4) 22:07:04.050407 IP 200.200.200.10.46154 > 200.200.200.101.22: S 3026268657:3026268657(0) win 4380 out slot1/tmm0 lis=bar

 

 

this sol explains how connection is setup. hope it is helpful.

 

 

sol8082: Overview of TCP connection set-up for BIG-IP LTM virtual server types

 

http://support.f5.com/kb/en-us/solutions/public/8000/000/sol8082.html