QuestionQ52

Identify and Resolve LTM Device Issues

An LTM Specialist needs to perform a packet capture on a virtual server that has a standard FastL4 profile applied. The virtual server, 10.0.0.1:443, is located on vlan301.

Which steps should the LTM Specialist take to successfully capture the data payload while ensuring that no other virtual servers are affected?

  • A The standard FastL4 profile should have PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
  • B The packet capture tcpdump -ni vlan301 should be executed on the command line interface. There is no need to change profiles or PVA acceleration.
  • C A new FastL4 profile should be created and applied to the virtual server with PVA acceleration disabled. Then the packet capture tcpdump -ni vlan301 should be executed on the command line interface.
  • D The LTM device is under light load. The traffic should be mirrored to a dedicated sniffing device. On the sniffing device, the packet capture tcpdump -ni
Explanation

FastL4 traffic may be offloaded to PVA/ePVA hardware, so a TMOS tcpdump can miss the payload after the flow is offloaded. Setting PVA acceleration to none keeps the traffic in software where tcpdump can capture it. Creating a separate FastL4 profile and applying it only to the target virtual server avoids changing every virtual server that inherits or uses the standard profile.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!