Forum Discussion

Remco's avatar
Remco
Icon for Nimbostratus rankNimbostratus
Aug 11, 2020

tcpdump not capturing server-side traffic when http/2 is used

Hi,

 

I am trying to debug an issue we have and tried to make a packet capture with the -p option to also capture server-side traffic, but I only see servers-side packets for some flows. I have used the following tcpdump options:

 

tcpdump -nnvi 0.0:nnnp -s0 host <virtual IP>

 

What I did notice in the capture is that for the flows were I only have client-side packets it looks like the user is using HTTP/2:

 

  TLSv1.2 Record Layer: Application Data Protocol: http2

 

While for the flows I have both client and server-side, it is showing:

 

TLSv1.2 Record Layer: Application Data Protocol: http-over-tls

 

Is this a known issue when using HTTP/2 profiles?

 

We are running version 12.1.5.2.

 

 

No RepliesBe the first to reply