Forum Discussion
hooleylist
Apr 29, 2009Cirrostratus
You can capture multiple server IP addresses by adding them to the tcpdump filters:
tcpdump -ni SERVER_VLAN -s0 -w/var/tmp/`/bin/hostname`.monitor.dmp "host LTM_STATIC_IP and ((host SERVER_IP1 and port SERVER_PORT1) or (host SERVER_IP2 and port SERVER_PORT2) or (host SERVER_IP3 and port SERVER_PORT3))"
Of you could just capture all traffic from the static self IP address and filter the tcpdump once you're analyzing it in Wireshark:
tcpdump -ni SERVER_VLAN -s0 -w/var/tmp/`/bin/hostname`.monitor.dmp "host LTM_STATIC_IP"
Aaron