Running tcpdump in a route domain
Recommendations
When you use tcpdump to capture traffic in a non-default route domain, F5 recommends that you run the tcpdump command from the default route domain (route domain 0), and specify interface 0.0.
Note: If you specify interface 0.0 when you run tcpdump, it captures traffic traversing all configured VLANs on the BIG-IP system.
For example, the following command captures traffic from all VLANs in all route domains when you invoke it from the default route domain:
tcpdump -ni 0.0
Limitations
The tcpdump utility does not capture traffic when you run it from a non-default route domain. For example, if you use the rdsh utility to change the shell to a non-default route domain and run the tcpdump command, it does not capture any traffic. To capture traffic, use the following command to change back to the default route domain:
rdsh 0
You can then run the tcpdump -ni 0.0 command to capture all route domain traffic.