For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Mahi's avatar
Mahi
Icon for Cirrus rankCirrus
Nov 20, 2019

Why ping from f5 is coming encrypted?

I can ping from my laptop to a F5 device's self-IP and see them as valid ICMP traffic in the wireshark.   When I ping form F5 device to the laptop IP, I see them as encrypted traffic over port 2...
BIG-IP
devops
iControl
Simon_Blakely's avatar
Simon_Blakely
Icon for Employee rankEmployee
Nov 20, 2019

Your incoming capture filter is probably missing the incoming ICMP packets.

Add a specific filter for icmp.

 

On port 22 you are seeing the SSH traffic for your console as the ping command writes to the console and then sends it over SSH back to the laptop for Putty to display. It will happen at exactly the same time as the ICMP packets are being sent ...

  • Mahi's avatar
    Mahi
    Icon for Cirrus rankCirrus
    Nov 22, 2019

    Wow, I didn't think about that. The ICMP packets are indeed missing and therefore I couldn't see them in the capture. Thank