How to tcpdump traffic between APM Http Auth AAA object and a layered virtual server

Question

Trying to debug APM http auth traffic to a layered virtual server. I have an APM http auth AAA object which sends custom http post to a layered VS, which in turn converts http to https and forwards the request to an external authentication server. I'm getting 400 Bad request from the external server. CUrl'ing the same content goes ok.&nbsp;
I might be missing something, but haven't been able to tcpdump the traffic between the http auth and the layered VS. Any advice?&nbsp;

gianrico_d_ang1 · Accepted Answer

There was a recent ticket in support open for it so i thought it is worth sharing the solution.&nbsp;
You have to capture on the vlan that traffic to the AAA server leaves through,  and use the :l switch.&nbsp;
Example:&nbsp;
tcpdump -i external:l &nbsp;
thanks&nbsp;
gianrico &nbsp;

what_lies_bene1 · Answer

Hmmm, are you using the [virtual] command? If so I suspect it's not possible.&nbsp;
I can't be 100% sure so it might be worth disabling CMP and PVA for the two VSs and trying again but note this will have a performance impact so not something to do during a busy period.&nbsp;

thi · Answer

Thanks, I think it was my ticket, that I opened a month ago. Got the same reply from support earlier today. Haven't  had time to test it yet. Perhaps tomorrow.

thi · Answer

Now tested and it works

Forum Discussion

How to tcpdump traffic between APM Http Auth AAA object and a layered virtual server

4 Replies

Recent Discussions

F5Access | MacOS Sonoma

Overwriting or adding LTM SSL Traffic cert and key using iControlREST

Enabling AVR and creating Profiles

Get associated pool name from VIP IP using F5-LTM

Disacard SSL::cert mode to ignore when default SSLClient profile is set to request or require

Related Content

Decrypting TLS with the tcpdump sslprovider

fellow traffic

Block traffic

Run tcpdump on event

VS on https , how can i decrypt the traffic - tcpdump taken