Forum Discussion
1 Reply
Sort By
- RyannnnnnnnnAltocumulus
Wouldn't the monitor traffic be coming from the self ip addresses, whereas client traffic would be coming from the SNAT ip address(es)?
Hi All,
I am trying to investigate a monitor flap issue.
Monitor used is tcp_half_open
SNAT automap is being used on VS.
Packet capture during issue is around 200 MB.
Checking the capture file i see lot of SYN packets, is there any way i can identify the specific monitoring traffic ?
Wouldn't the monitor traffic be coming from the self ip addresses, whereas client traffic would be coming from the SNAT ip address(es)?