Forum Discussion
Brad_Parker_139
Nacreous
your capture only shows one side of the conversation. If the LTM is resetting the connection you would see syn, syn, syn, before a reset is sent with the profile you provided. Try and capture the conversation on both ingress and egress vlans.
Brad_Parker_139
Dec 08, 2015Nacreous
It is definitely not normal for the LTM to send on SYN followed by a RST less than 200ms later.
Using tcpdump on the LTM enable max vebose using "tcpdump -s0 -ni (server vlan):nnn host 172.16.34.101 and host 172.16.33.1 -w /tmp/reset.pcap" where (server vlan) is the name of the vlan used to connect to the pool member. The :nnn should give us a RST cause in the RST packet. You can view this in wireshark using the F5 plugin for wireshark. https://devcentral.f5.com/s/articles/getting-started-with-the-f5-wireshark-plugin-on-windows