For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Feb 11, 2015

tcpdump excluding monitor traffic

Hi,   Probably something obvious but I can't figure it out. Let's say: 1. We have standalone device. 2. There is only selfIP on internal (no floating as it's standalone) 3. Http VS has Automap set...
application delivery
availability
LTM
management
TMOS
dragonflymr's avatar
dragonflymr
Icon for Cirrostratus rankCirrostratus
Feb 11, 2015

Hi,

 

I guess your suggestion about not using automap but rather separate SNAT pool (even with one IP) is most valuable. I was not thinking about it as a way to simplify troubleshooting but it seems to be a way to go - if there are any spare IP's to use.

 

Going back to tcpdump examples. I am quite new in this area so to be sure:

 

First dump is capturing complete flow so both client<->VIP and SNAT<->Server

 

Second is removing all connections on client side

 

Am I right? If so it seems to be quite useful method.

 

Piotr