For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Remco's avatar
Remco
Icon for Nimbostratus rankNimbostratus
Aug 11, 2020

tcpdump not capturing server-side traffic when http/2 is used

Hi,

 

I am trying to debug an issue we have and tried to make a packet capture with the -p option to also capture server-side traffic, but I only see servers-side packets for some flows. I have used the following tcpdump options:

 

tcpdump -nnvi 0.0:nnnp -s0 host <virtual IP>

 

What I did notice in the capture is that for the flows were I only have client-side packets it looks like the user is using HTTP/2:

 

  TLSv1.2 Record Layer: Application Data Protocol: http2

 

While for the flows I have both client and server-side, it is showing:

 

TLSv1.2 Record Layer: Application Data Protocol: http-over-tls

 

Is this a known issue when using HTTP/2 profiles?

 

We are running version 12.1.5.2.

 

 

No RepliesBe the first to reply