Forum Discussion
What_Lies_Bene1
Nov 19, 2014Cirrostratus
Ahh. The cloned traffic will still have the original destination address specified, not the clone pool member address. Instead the F5 'routes' the traffic to the clone pool member MAC address. Hence the need for the clone pool to be layer two adjacent. \
You'll need to use ether dst 'MAC_Address' in your tcpdump filter expression.