 | 1 | initial version |
The default idle timeout in a TCP profile on F5 is 300 seconds. So it sounds perfectly logical. You can detect a 300 sec gap in all TCP session with the filter tcp.time_delta > 300 (either as a filter or by using the find function). The F5 may or may not close the session with a TCP RST. If it does, you can check the IP TTL and compare it with other packets from the source behind the F5.
