Forum Discussion
NimbostratusWhat is comman equivalent to "Show connection" in Cisco ACE loadbalancer ?
Show Connection command in CISCO ACE lb gives following results. What is the equivalent command in BigIP ltm through tmsh or any other way please ?
conn-id np dir proto vlan source destination state ----------+--+---+-----+----+---------------------+---------------------+------+ 63064 1 in TCP 635 157.56.253.69:17257 164.38.31.63:443 ESTAB 540621 1 out TCP 645 172.17.34.12:443 157.56.253.69:17257 ESTAB 1179029 1 in TCP 635 132.245.193.133:9245 164.38.31.63:443 ESTAB
Addtional Info of F5 LTM. Sys::Version Main Package Product BIG-IP Version 10.2.4 Build 591.0 Edition Hotfix HF2
7 Replies
Approxeeshow sys conn | grep tcp
Srijana_137175Thanks however this commands gives me a sort of list MAc addresses (i believe) and the output is hardly understandable. Would you suggest me any other commands which can possibly gives me IP address details of TCP connection. :.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 2 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 1 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 3 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 3 2620:0:c10:f501:0:7b:a0e:12e:41375 2620:0:c10:f501:0:7b:a07:7b32:80 ::.0 tcp 2 2620:0:c10:f501:0:7b:a0e:12e:41376 2620:0:c10:f501:0:7b:a07:7b32:80 ::.0 tcp 2 2620:0:c10:f501:0:7b:a0e:12e:41377 2620:0:c10:f501:0:7b:a07:7b32:80 ::.0 tcp 3 2620:0:c10:f501:0:7b:a0e:127:64816 2620:0:c10:f501:0:7b:a07:7b3b:80 ::.0 tcp 0 ::.0 ::.0 2620:0:c10:f501:0:28:a07:28 04:80 tcp 2 2620:0:c10:f501:0:28:a07:28fa:60902 2620:0:c10:f501:0:28:a07:281b:443 2620:0:c10:f501:0:28:a07:28 1b:443 tcp 1 ::.0 ::.0 2620:0:c10:f501:0:28:a07:28 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 2 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 1 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 3 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 3
What_Lies_Bene1Cirrostratus
What you're seeing are actually IPv6 addresses. Try using just
to start with and then use grep to narrow things down. You could also use ? to see the available options so you can filter (without grep) on client IP address etc. etc.[tmsh] show sys conn- What_Lies_Bene1
Hmmm, I think you've misunderstood. The
command should amply meet your needs. In your case, you'd want to use thetmsh show sys conn
parameter, so if the client IP was 1.1.1.1 the full command would be:cs-client-addr
. This will show you all entries in the connection table where 1.1.1.1 is the client side client. The output will show you the Virtual Server IP address and the associated Pool Member IP address for each connection.tmsh show sys conn cs-client-addr 1.1.1.1Does that make sense?
- What_Lies_Bene1
Can't find any bugs for your version. Are you using route domains by any chance? Are you sure you're on the primary device, if you have a HA Pair?
Could you post some example output that contains IPv4 addresses or is there none?
- What_Lies_Bene1
Why are you not entering the full command? Can you please enter
and provide an example of some output from that showing IPv4 addresses.show sys conn - What_Lies_Bene1
OK, seems you are suffering from this bug: http://support.f5.com/kb/en-us/solutions/public/12000/100/sol12151.html despite your version not being listed in the 'Applies Too' area. Looks like this SOL has been sorely neglected.
I'd suggest you get in touch with F5 support and confirm. Please do post back if there is a solution other than upgrading.
