Forum Discussion

Srijana_137175's avatar
Srijana_137175
Icon for Nimbostratus rankNimbostratus
Nov 11, 2013

What is comman equivalent to "Show connection" in Cisco ACE loadbalancer ?

Show Connection command in CISCO ACE lb gives following results. What is the equivalent command in BigIP ltm through tmsh or any other way please ?

 

conn-id np dir proto vlan source destination state ----------+--+---+-----+----+---------------------+---------------------+------+ 63064 1 in TCP 635 157.56.253.69:17257 164.38.31.63:443 ESTAB 540621 1 out TCP 645 172.17.34.12:443 157.56.253.69:17257 ESTAB 1179029 1 in TCP 635 132.245.193.133:9245 164.38.31.63:443 ESTAB

 

Addtional Info of F5 LTM. Sys::Version Main Package Product BIG-IP Version 10.2.4 Build 591.0 Edition Hotfix HF2

 

APM
availability
management
security
TMSH

7 Replies

Sort By
    • Srijana_137175's avatar
      Srijana_137175
      Icon for Nimbostratus rankNimbostratus
      Nov 11, 2013
      Thanks however this commands gives me a sort of list MAc addresses (i believe) and the output is hardly understandable. Would you suggest me any other commands which can possibly gives me IP address details of TCP connection. :.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 2 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 1 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 3 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 3 2620:0:c10:f501:0:7b:a0e:12e:41375 2620:0:c10:f501:0:7b:a07:7b32:80 ::.0 tcp 2 2620:0:c10:f501:0:7b:a0e:12e:41376 2620:0:c10:f501:0:7b:a07:7b32:80 ::.0 tcp 2 2620:0:c10:f501:0:7b:a0e:12e:41377 2620:0:c10:f501:0:7b:a07:7b32:80 ::.0 tcp 3 2620:0:c10:f501:0:7b:a0e:127:64816 2620:0:c10:f501:0:7b:a07:7b3b:80 ::.0 tcp 0 ::.0 ::.0 2620:0:c10:f501:0:28:a07:28 04:80 tcp 2 2620:0:c10:f501:0:28:a07:28fa:60902 2620:0:c10:f501:0:28:a07:281b:443 2620:0:c10:f501:0:28:a07:28 1b:443 tcp 1 ::.0 ::.0 2620:0:c10:f501:0:28:a07:28 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 2 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 1 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281d:80 tcp 3 ::.0 ::.0 2620:0:c10:f501:0:28:a07:281c:80 tcp 3
  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 11, 2013

    What you're seeing are actually IPv6 addresses. Try using just 

    [tmsh] show sys conn
    to start with and then use grep to narrow things down. You could also use ? to see the available options so you can filter (without grep) on client IP address etc. etc.

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 11, 2013

    Hmmm, I think you've misunderstood. The 

    tmsh show sys conn
    command should amply meet your needs. In your case, you'd want to use the 
    cs-client-addr
    parameter, so if the client IP was 1.1.1.1 the full command would be: 
    tmsh show sys conn cs-client-addr 1.1.1.1
    . This will show you all entries in the connection table where 1.1.1.1 is the client side client. The output will show you the Virtual Server IP address and the associated Pool Member IP address for each connection.

    Does that make sense?

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 11, 2013

    Can't find any bugs for your version. Are you using route domains by any chance? Are you sure you're on the primary device, if you have a HA Pair?

     

    Could you post some example output that contains IPv4 addresses or is there none?

     

  • What_Lies_Bene1's avatar
    What_Lies_Bene1
    Icon for Cirrostratus rankCirrostratus
    Nov 12, 2013

    Why are you not entering the full command? Can you please enter 

    show sys conn
    and provide an example of some output from that showing IPv4 addresses.