For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

1 Reply

  • Michael_Jenkins's avatar
    Michael_Jenkins
    Icon for Cirrostratus rankCirrostratus
    Dec 21, 2014

    I would suggest looking at the ltm logs (and apm logs if using the access policy manager module, as well any other modules you're using). One of the best commands I use all the time is 

    tail -f /var/log/ltm
    . This will show the last 10 log entries of the ltm log file and will 'follow' any changes, showing them on the screen whenever they are added.

    tcpdump
    is also a very useful tool for troubleshooting network traffic between clients, F5 devices, and backend machines. SOL411: Overview of packet tracing with tcpdump. If you're using HTTPS instead of HTTP, you may need to use 
    ssldump
    as well to decrypt the captures from the tcpdump. SOL10209: Overview of packet tracing with ssldump.