For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Dave_95270's avatar
Dave_95270
Icon for Nimbostratus rankNimbostratus
Nov 03, 2009

Multicast traffic logging in /var/log/ltm

I have Ganglia running in my environment to monitor my systems and while looking at the log files on my F5 today I noticed the following being logged on the F5 everytime a multicast brodcast is made: ...
management
monitoring
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Nov 04, 2009
I'm not sure the issue is that packets are matching a disabled VIP. I'm guessing it's the logging of packets that don't match any VIP. If you want to disable logging for this, you could modify the syslog-ng configuration to not log strings matching "UDP: Port closed" or something similar. For details on configuring syslog-ng, you can check this article:

 

 

LTM 9.4.2+: Custom Syslog Configuration

 

http://devcentral.f5.com/Default.aspx?tabid=63&articleType=ArticleView&articleId=155

 

 

Aaron