For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Marian_A_142180's avatar
Marian_A_142180
Icon for Nimbostratus rankNimbostratus
Jan 29, 2014

Cory, With the MSS

 

12:09:50.900397, ethertype 802.1Q (0x8100), length 70: vlan 80, p 0, ethertype IPv4, 10.190.8.10.80 > 10.190.100.185.54688: S 301435182:301435182(0) ack 3658454735 win 4014

 

I'm checking the pcap and I have this

 

10.190.23.1 is the server production and the 10.190.23.5 ip the self ip for standby ltm

 

 

  • Cory_50405's avatar
    Cory_50405
    Icon for Noctilucent rankNoctilucent
    Jan 29, 2014
    That looks to be http keepalive traffic from your standby LTM. I would guess based on that 403 error that the node 23.1 does not show as active in your standby LTM. I don't see the MSS specified in that tcpdump line. It should come after the window size. I think specifying -e will omit the MSS. Please try the tcpdump again without the -e