Forum Discussion

jhonyy_rg's avatar
jhonyy_rg
Icon for Altostratus rankAltostratus
Aug 23, 2023
Solved

monitor does not work https

The custom https monitor that we have created does not work, before uploading the f5 version, it worked correctly, We don't know if there may be any syntax error, due to this version, or another para...
application delivery
  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Aug 24, 2023

    Hi jhonyy_rg , 
    I played around your current version on F5 Bug tracker ,

    and I think you are hiting in this bug >>>  https://cdn.f5.com/product/bugtracker/ID1026781.html 

    > in your send string I see \r\n\r\n so it's doubled , try to remove one  "\r\n" to make your send sring has singe "\r\n" not doubled. 

    > Or try one workaround that are in the bug article which i sent above. 

    >> To capture monitor traffic : 

    tcpdump -s0 -nni 0.0:nnnp src host <Self_IP address> and dst host <Backeend_server_IP> and dst port 443 -vw /var/tmp/HTTPs_monitor.pcap


# if you don't know which selfip address monitor your server use ip route get utility on bash like below : 

bash#ip route get < Backend_server_IP > 

This command will give you which self IP on your bigip monitor your server. 

Note : if your appliace in HA group ( you have active and standby ) this Capture will work efficient with you as , F5 bigip monitor the backend servers using selfip address and send real data traffic using Floating ip address on HA deployment. 
So if you run standalone not HA , This Capture command will capture ( Real data traffic and monitor traffic too ) because standalone systems use selfip address to handle users data traffic as well as bigd or monitor traffic.


    Check this and let me know 🙂 

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Aug 23, 2023

Hi jhonyy_rg , 

What is the new version that you have upgraded to or the current running version. 

Also , it will be good to take a packet capture for this https monitor traffic from bigip selfip and backend server. 

  • jhonyy_rg's avatar
    jhonyy_rg
    Icon for Altostratus rankAltostratus
    Aug 24, 2023

    hellow mohamed

    thanks for you answer

    the version of f5 is 

    BIG IP 15.1.7

    How do I capture packets, could you give me an example?

    • Mohamed_Ahmed_Kansoh's avatar
      Mohamed_Ahmed_Kansoh
      Icon for MVP rankMVP
      Aug 24, 2023

      Hi jhonyy_rg , 
      I played around your current version on F5 Bug tracker ,

      and I think you are hiting in this bug >>>  https://cdn.f5.com/product/bugtracker/ID1026781.html 

      > in your send string I see \r\n\r\n so it's doubled , try to remove one  "\r\n" to make your send sring has singe "\r\n" not doubled. 

      > Or try one workaround that are in the bug article which i sent above. 

      >> To capture monitor traffic : 

      tcpdump -s0 -nni 0.0:nnnp src host <Self_IP address> and dst host <Backeend_server_IP> and dst port 443 -vw /var/tmp/HTTPs_monitor.pcap


# if you don't know which selfip address monitor your server use ip route get utility on bash like below : 

bash#ip route get < Backend_server_IP > 

This command will give you which self IP on your bigip monitor your server. 

Note : if your appliace in HA group ( you have active and standby ) this Capture will work efficient with you as , F5 bigip monitor the backend servers using selfip address and send real data traffic using Floating ip address on HA deployment. 
So if you run standalone not HA , This Capture command will capture ( Real data traffic and monitor traffic too ) because standalone systems use selfip address to handle users data traffic as well as bigd or monitor traffic.


      Check this and let me know 🙂