F5 Low Details

  1. Apply a new display filter of 'tcp.port == 80' to the capture.

  2. Select the packet with the GET request in the info field.

  3. In the middle section Expand F5 Ethernet Trailer.

  4. Then expand F5 Low Details.

    ../../_images/low-details.png

  5. Notice the Ingress value is True (IN). This is from the perspective of the F5. The traffic is inbound to the F5.

  6. The low details also gives the Slot value (always be 1 for an appliance). The TMM number in the image is 3.

  7. The most important value here is the VIP. In this case it is /Sample_04/A1/serviceMain-Redirect-. Notice this is the port 80 VIP for this particular destination IP. The VIP is configured with a redirect to SSL.

  8. The next packet in the capture is a HTTP 302 redirect to the SSL vip.