For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

jgranieri's avatar
jgranieri
Icon for Nimbostratus rankNimbostratus
Oct 16, 2015

First thing you need to know is what is considered a good connection to the application. Perhaps run a tcpdump/packet capture of a few good flows. Based off the capture you may be able to construct a custom monitor.

 

tcp half open shouldn't cause your app to restart unless it can't handle socket attempts with no relevant payload to the protocol its using.