Forum Discussion
AltostratusL7DoS Profile does not show baseline traffic.
Hello everyone,
I have a test environment on my lokal PC with BIG-IP Virtual Edition and its version 15.1.10.7.
I have created dvwa Virtual Server and L7 DoS Profile attached to it. I created network traffic towards my VS which is dvwa_vs. Normally, i have to see baseline traffic in command line with the following command;
admd -s vs./Common/dvwa.app/dvwa_vs+/Common/dvwa_BaDoS.info.learning
But, I can't see any baseline traffic , and nothing appears on the screen. Please note that, my virtual server has been created in iApp. I have no idea this can affect to this issue,
DoS Profile settings;
TPS Based: Transparent and Source-IP Based detection with automatic mode.
Behavioral: Transparent with Standart Protection.
Do you have any idea what is the reason why cannot see the baseline? maybe, i could not create enough traffic to reveal the baseline?
Kind Regards
Seçkin
1 Reply
- Jeff_Granieri
Employee
Hi Seckin,
TMOS 15.x is End of Life TMOS SW its best to get your lab updated to 17.x. Have you tried to create the VS without an iApp and see if that makes a difference. Sometimes with iApp's the way they can be quirky with nested objects in folders.. Can you try the full path with the admd command: admd -s vs./Common/dvwa.app/dvwa_vs+/Common/dvwa.app/dvwa_BaDoS.info.learning
For Traffic Learning have you attempted a good amount of good traffic? Apache Bench can help generate a large number of requests, while you run that can you tail dos log and see if its generating learning entries?
tail -f /var/log/dosl7/dosl7d.log
Might be worth removing/re-adding the Dos Profile to the VS and re-run the admd command, restart if needed. Some things to try
