Hi,
I am doing a troubleshooting. I see when traffic is over f5 session get disconnected after 5 mins but not when it is dirrect ?
How can I proof from F5 capture that traffic is disconnecting after 5 mins from wireshark
The default idle timeout in a TCP profile on F5 is 300 seconds. So it sounds perfectly logical. You can detect a 300 sec gap in all TCP session with the filter tcp.time_delta > 300 (either as a filter or by using the find function). The F5 may or may not close the session with a TCP RST. If it does, you can check the IP TTL and compare it with other packets from the source behind the F5.
Asked: 2023-07-17 20:47:41 +0000
Seen: 275 times
Last updated: Jul 18 '23
Copyright Wireshark Foundation, 2017-2023 Content on this site is licensed under a Creative Commons Attribution Share Alike 3.0 license.
