For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

khansafdarali1_'s avatar
khansafdarali1_
Icon for Nimbostratus rankNimbostratus
Oct 18, 2016
Solved

TCPDUMP command to check for traffic from the client to the VIP and from VIP to the backend server?

I am looking for one TCPDUMP command to check for traffic from the client to the VIP and from VIP to the backend pool members? client ip is 192.168.2.32 VIP - 192.168.200.122 backend members 1- 192.1...
application delivery
LTM
TMSH
  • Misa_222415's avatar
    Misa_222415
    Oct 18, 2016

    HI khansafdarali1.

    You could try this one:

    tcpdump -nni 0.0:nnnp -s 0 host 192.168.2.32 and host 192.168.200.122 -w /shared/tmp/tcpdump-Khansaf.pcap

    By appling the 0.0:nnnp parameter you can cover both client and server sides.

Vijay_E's avatar
Vijay_E
Icon for Cirrus rankCirrus
Oct 18, 2016

You can do a tcpdump on the VLANs for client and server side. If that is too much information, you can try and utilize the key word "net" with CIDR notation for source and destination traffic in tcpdump.