On Big-IP pcap, server sends the RST; On server pcap, self-IP sends the RST.

Question

Hi!&nbsp;
Just wondering if you guys ever encountered this issue before. We gathered packet captures on the Big-IP LTM, and on the server to troubleshoot an issue. We have configured SNAT automap so the floating self-IP serves as the client/source on the server-side connection.&nbsp;
Upon inspection, I noticed that when I take a look at the Big-IP LTM pcap and filter for a particular stream, the server ends the connection by sending a reset. However, when I check the same stream on the server pcap, it is the Big-IP floating self-IP sending the reset on the connection.&nbsp;
Any ideas on the cause of this?&nbsp;

dariogb_339840 · Answer

Could you attach snapshots from both pcaps?
show sys version?
KR,
Dario.

aries22 · Answer

Hi! I've attached a screenshot of both pcaps but I intentionally ommitted the IP addresses and URI Path:
Sys::Version
Main Package
  Product     BIG-IP
  Version     12.1.2
  Build       2.0.276
  Edition     Hotfix HF2
  Date        Sat Nov 11 04:32:09 PST 2017

Kernel
  Type        Linux
  Release     2.6.32-431.56.1.el6.f5.x86_64

dariogb_339840 · Answer

I recommend you to repeat the capture in the F5 using 'nnn' noise amplitude and 'h' to capture traffic from client-side and server-side in the same session.&nbsp;
REF - https://support.f5.com/csp/article/K13637&nbsp;
KR,
Dario.&nbsp;

Forum Discussion

On Big-IP pcap, server sends the RST; On server pcap, self-IP sends the RST.

3 Replies

Recent Discussions

What are the different phases in DevOps?

Create a CSR and Key using the BigIP LTM GUI when renewing a certificate

F5 Rseries HA

Error when running bigip_command Playbook against LTM : Syntax Error: unexpected argument /bin/sh\n

Can iRule be used to perform exception of IPI category based on Geolocation

Related Content

BIG-IP self-certificate browser warning

How to install lets encrypt on BIG IP

BIG IP VE FastL4

BIG IP 201 Cert

BIG IP APM CCU perpetual