301B: BIG-IP LTM Specialist: Maintain and TroubleshootDemo

Question

A client (10.10.1.30) connecting to an HTTPS virtual server (10.10.1.100) that has a clientssl profile is receiving an SSL error.

Which option will trace this issue?

A tcpdump -i external -X -e -nn -vvv -w /shared/ssl_problem.cap port 443 and host 10.10.1.30 ssldump -r /shared/ssl_problem.cap -n -x
B tcpdump -i external -s 0 -w /shared/ssl_problem.cap port 443 and host 10.10.10.30 and host 10.10.1.100 ssldump -r /shared/ssl_problem.cap -n -x
C tcpdump -i external -X -s 0 -vvv src host 10.10.10.30 and dst host 10.10.1.100 and port 443 > /shared/ssl_problem.cap ssldump -r /shared/ssl_problem.cap -n -x
D tcpdump -i external -X -e -nn -vv port 443 and host 10.10.1.100 and host 10.10.1.30 > /shared/ssl_problem.cap

Explanation

A packet capture of TCP port 443 involving client 10.10.1.30, saved as a pcap file with tcpdump -w, can be analyzed by ssldump to decode the TLS handshake and identify SSL errors. The capture filter includes the affected client and HTTPS port, and the resulting file is in the format ssldump -r expects.

Learn more

301B: BIG-IP LTM Specialist: Maintain and TroubleshootDemo

AstroTutor

Notes

Readiness

QuestionQ1

Community Discussion