For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

steelplate_8766's avatar
steelplate_8766
Icon for Nimbostratus rankNimbostratus
May 25, 2010

sNAT to Windows server and port collision

Hi, I have an F5 doing sNAT, and the problem I face is that the windows server keeps the port in time_wait (currently default 240 seconds windows 2003 server). The F5 will attempt to reuse the client...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jun 18, 2010
You could use an F5 customization of tcpdump and Wireshark to record the connection ID's. This should make it much easier to correlate the client and server side connections without using the source port.

 

 

http://devcentral.f5.com/Forums/tabid/1082223/asg/52/showtab/groupforums/aff/31/aft/31014/afv/topic/Default.aspx

 

 

http://devcentral.f5.com/Wiki/default.aspx/AdvDesignConfig/F5WiresharkPlugin.html

 

 

Aaron