For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Geoff_Littlewoo's avatar
Geoff_Littlewoo
Icon for Nimbostratus rankNimbostratus
Jun 30, 2008

SSL re-direction for Exchange 2003

Using BIG-IP 1500 to manage traffic through to an Exchange 2003 server. It is https traffic with an SSL certificate held on the F5 device. If i create a VS to the Exchange server using http, the stand...
application delivery
dev
devops
iRules
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jul 01, 2008
If you want help diagnosing the issue using tcpdumps, you could contact F5 support. They'll want to see binary formatted traces (you can get this by adding -w /path/to/output.file.dmp to the tcpdump command before the host filter):

 

 

tcpdump -ni 0.0 -s0 -w/var/tmp/`/bin/hostname`.owa.dmp host 167.165.0.22 or host 167.165.0.11

 

 

This will capture traffic on all switch interfaces (0.0) and ensure that the trace contains the full packets. You can use Wireshark to analyze the trace.

 

 

There are a couple of related AskF5 solutions:

 

 

SOL411: Overview of packet tracing with the tcpdump utility

 

https://support.f5.com/kb/en-us/solutions/public/0000/400/sol411.html

 

 

SOL1893: Packet trace analysis

 

https://support.f5.com/kb/en-us/solutions/public/1000/800/sol1893.html

 

 

Aaron