Forum Discussion
Jake_39981
May 03, 2012Nimbostratus
I concur with John. I always trap to /var/tmp. I also run my dump just as you do except I cap the size at 1600 usually. Other than at the server, you could trap on your switch. You should see everything between the LTM and the server. If you're using Wireshark, they have good debug tools built in; I usually right click a packet and choose to 'trace conversation' to get just that communication stream broken out. I hope that helps?