Forum Discussion

wixxyl_98682's avatar
wixxyl_98682
Icon for Nimbostratus rankNimbostratus
Jun 05, 2014

Looking to capture X-Forwarded-For on Big IP 11.2.1

Dev,   I've got some application owners that are saying they can't see the X-Forwarded-For header on their app server. They have gotten the same treatment as everyone else, X-Forwarded-For, as wel...
application delivery
design
LTM
performance
TMSH
Dali_Chauhan_33's avatar
Dali_Chauhan_33
Icon for Nimbostratus rankNimbostratus
May 29, 2018

Hi,

 

Please use below syntax to get TCPDUMP

 

tcpdump -nni 0.0:nnnp host a.b.c.d or host x.y.z.s -s0 -w /var/tmp/Client.pcap

 

meaning of above lines are :-

 

-nn Do not resolve host or service names -i Interface - can be ifname or vlan name -w Write output to file host - IP address of host(source address/destination address) Client.pcap- file name in pcap format

 

You can add multiple IP address by using OR or AND option .

 

method to get the tcpdump in F-5 LTM

 

login into f-5 cli type bash add below command and capture the file in pcap format. Run that file in wireshark and check the output.