For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Eridano_Di_Piet's avatar
Eridano_Di_Piet
Icon for Nimbostratus rankNimbostratus
Oct 21, 2010

Reset from VS

Hi all,   we have a BIG-IP running 9.3.1 and we're experiencing the following problem:   a VS is generating and sending TCP segments to clients from time to time but we can't understand why. ...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Oct 21, 2010
Hi Eridano,

 

 

When you say TCP segments, what do you mean? Is LTM sending a RST to the client? If so, do you see a corresponding RST coming from the serverside? I'd suggest capturing a tcpdump with the client and serverside traffic together to compare what's happening on both sides of LTM. If you need help capturing or analyzing TCP dumps, you can check the following solution or open a case with F5 Support:

 

 

SOL411: Overview of packet tracing with the tcpdump utility

 

http://support.f5.com/kb/en-us/solutions/public/0000/400/sol411.html

 

 

Note that it is not possible to use an iRule to log TCP flags on individual packets.

 

 

Aaron