tcpdump with route domains

Running tcpdump in a route domain

Recommendations

When you use tcpdump to capture traffic in a non-default route domain, F5 recommends that you run the tcpdump command from the default route domain (route domain 0), and specify interface 0.0. Note: If you specify interface 0.0 when you run tcpdump, it captures traffic traversing all configured VLANs on the BIG-IP system.

For example, the following command captures traffic from all VLANs in all route domains when you invoke it from the default route domain:

tcpdump -ni 0.0

Limitations

The tcpdump utility does not capture traffic when you run it from a non-default route domain. For example, if you use the rdsh utility to change the shell to a non-default route domain and run the tcpdump command, it does not capture any traffic. To capture traffic, use the following command to change back to the default route domain: rdsh 0

You can then run the tcpdump -ni 0.0 command to capture all route domain traffic.