MS Moss2007 and HTTP Profile

I used tcpdump on my external interface and saved it as a .cap file (tcpdump -s0 -nni vlan_Public -w /var/temp/ssl_ldap_profile.cap) Since I only had the one virtual server on the LTM I did not need to add a filter. I then used wireshark to view the traffic. I took a close look at all the TLSv1 protocol frames and found one that had Alert unknown CA in the info portion. Following the TCP stream showed the actual LDAP packet that had the cert info in it.

 

 

Hope this helps