For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Joseph_Lindsly's avatar
Joseph_Lindsly
Feb 25, 2020

Issues applying HTTP/2 protocol to Virtual Server

We have a request by an application team to enable HTTP/2 protocol to their Virtual Servers. We were able to configure and apply it to the Non-Production Virtual servers, but when I attempted to app...
application delivery
LTM
Joseph_Lindsly's avatar
Joseph_Lindsly
Feb 27, 2020

I check the content length/type for both environments and they are the same. I will run a capture tonight. Is there a recommended syntax to add to the tcpdump command to get the most insight to the traffic?

NAG's avatar
NAG
Icon for Cirrostratus rankCirrostratus
Feb 27, 2020

 

1) You have to use a iRule to collect SSL session secrets to be used in wire-shark to decrypt the SSL traffic in captures.

 

Decrypting SSL traffic using the SSL::sessionsecret iRules command

https://support.f5.com/csp/article/K12783074

 

2) command for captures::

tcpdump -vvni 0.0:nnnp -s0 host <Client_IP>-w /var/tmp/file_name.pcap