For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Michael_Jenkins's avatar
Michael_Jenkins
Icon for Cirrostratus rankCirrostratus
Dec 21, 2014

I would suggest looking at the ltm logs (and apm logs if using the access policy manager module, as well any other modules you're using). One of the best commands I use all the time is 

tail -f /var/log/ltm
. This will show the last 10 log entries of the ltm log file and will 'follow' any changes, showing them on the screen whenever they are added.

tcpdump
is also a very useful tool for troubleshooting network traffic between clients, F5 devices, and backend machines. SOL411: Overview of packet tracing with tcpdump. If you're using HTTPS instead of HTTP, you may need to use 
ssldump
as well to decrypt the captures from the tcpdump. SOL10209: Overview of packet tracing with ssldump.