Forum Discussion
smp_86112
Cirrostratus
Nov 26, 2008tcpdump of UDP traffic
I'm running 9.3.1HF3. I've got a couple of proxy servers who stream RTSP over UDP from the Internet back to the clients. I'm trying to determine if I can capture this traffic with tcpdump.
...
JRahm
Admin
Nov 26, 2008If the traffic is traversing the LTM, even via a forwarding virtual server, it can be captured by tcpdump. If you look at the tcpdump man page (man tcpdump from the cli) you get a list of all the possibilities. For starters, you can look at the rtsp traffic (assumed default port) on the physical interface, or on a vlan interface:
tcpdump -i 1.1 udp port 554 -s0
tcpdump -i Internal udp port 554 -s0
If you want to capture udp port 554 even on the internal loopbacks, you can use interface 0.0. Any broadcast traffic in a vlan that the LTM participates will also be viewable via tcpdump.
HTH
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects