Forum Discussion

Adidasn2019_247's avatar
Adidasn2019_247
Icon for Nimbostratus rankNimbostratus
Jul 23, 2017

Not seeing SNAT Via TCPDump

Hi Guys

 

i'm not seeing my traffic being snatted, i'm using a standard virtual server along with a snat ip, however not seeing the snat taking place.

 

Ive used the 0.0:p to signify the snat traffice. Thanks

 

4 Replies

  • What is the whole command that you are using ? Can you check if the Snatpool is having an IP address and is referenced to the virtual server ?

     

  • Hi

     

    tcpdump -ni 0.0:p host x.x.x.x.

     

    its in the virtual server config and referenced in the pool.

     

    Thanks

     

  • Hello,

    Try the following command :

    tcpdump -nni 0.0 'host self_ip and host pool_member_ip'  
    

    Note: If you are in HA mode, use the floating_self_ip

    Hope it helps

    Regards

  • i see you add :p, which you probably want to do to combine the client and server side flow right?

     

    i think you need to also do the :nnn before the p

     

    see the example from this K article: https://support.f5.com/csp/article/K13637

     

    tcpdump -nni 0.0:nnnp -s0 -c 100000 -w /var/tmp/capture.dmp host 10.0.0.1

     

    the -nni means doesn't translate IPs to hostname, don't translate port numbers to names and select interface X