April 19, 201610 yr We are getting all these security scans and sometimes they come across an address (like a virtual server) and want to know if its being used. I don't see any way in GUI to tell me if its or not. Any advice?
April 19, 201610 yr I utilize tcpdump often. In the case you are referring to, in wanting to see if a certain virtual server is getting any traffic you have a couple different tcpdump commands you can use. Let's say your virtual server has an IP address of 10.47.195.11 and you want to see if any traffic is coming in or out of this Virtual Server. You would ssh to the LTM and run: tcpdump -nni 0.0 -s0 "host 10.47.195.11" WARNING: Don't run too long on interface 0.0 or you could crash your F5. (Ideally you would choose the interface 10.47.195.11 is on and put that instead of 0.0) run ifconfig to help you determine the correct interface.
Create an account or sign in to comment