Forum Discussion

jack_39736's avatar
jack_39736
Icon for Nimbostratus rankNimbostratus
Nov 20, 2009

tcpdump not showing all data

I have a test VIP that load balances to a single web server which I can connect to with no problem over port 80...I'm running version 10.0.1.     I turned up tcpdump to watch the traffic oo...
management
monitoring
jack_39736's avatar
jack_39736
Icon for Nimbostratus rankNimbostratus
Nov 23, 2009
On this particular VIP, I am not using FastL4 but that's good to know that I won't see all packets when doing so. I am using the "tcp" profile for this VIP.

 

 

Here is my command and some of the output. I never see the "dropped packet" counter increment and I have tried several different swithces in tcpdump command line and all of them give me the same thing:

 

 

[admin@ct1-f51600corp-01:Active] ~ tcpdump -i 1.1 host 172.21.61.3 -s 1514 -l

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.61.3.http > 172.21.73.42.4436: F 149:149(0) ack 477 win 4856 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.61.3.http > 172.21.73.42.4437: P 1:149(148) ack 480 win 4859 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.61.3.http > 172.21.73.42.4437: F 149:149(0) ack 480 win 4859 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.73.42.4436 > 172.21.61.3.http: . ack 150 win 64364 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.73.42.4437 > 172.21.61.3.http: . ack 150 win 64364 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.73.42.4436 > 172.21.61.3.http: F 477:477(0) ack 150 win 64364 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.61.3.http > 172.21.73.42.4436: . ack 478 win 4856 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.73.42.4437 > 172.21.61.3.http: F 480:480(0) ack 150 win 64364 (DF)

 

00:33:28.295468 802.1Q vlan4094 P0 172.21.61.3.http > 172.21.73.42.4437: . ack 481 win 4859 (DF)

 

 

177 packets received by filter

 

0 packets dropped by kernel