Also, the same flow ID can be re-used for a different flow within the same TMM at a different time. The same flow ID can be used for different flows in different TMMs.

Flow ID: A number identifying a flow within TMM.

In BIG-IP 11.2.0 and later, the name is limited to 96 characters.

Prior to BIG-IP 11.2.0, the name was limited to 16 characters.

VIP: The name of the virtual server that is handling the connection.

TMM: The number of the TMM that is handling the packet.

Slot: The chassis slot number of the TMM that is handling the packet.

A zero (0) indicates that TMM is sending the packet, while a non-zero number indicates that TMM is receiving the packet.

Ingress: A flag indicating whether TMM is sending or receiving the packet.

The noise levels include the following details: The plugin within Wireshark is able to automatically dissect the noise included and provide it as an additional section within Wireshark allowing for easy use of the new information.Īs can bee seen, there are three new panes provided specifically for F5 Low Details, Medium Details, and High Details.īelow is the explanation of the three levels, this information was pulled directly from an F5 Support Document and I have included screenshots to show each level. This extra noise information is primarily used by F5 support in troubleshooting, it provides great value when attempting to trouble shoot problems on your own. The plugin itself utilizes “noise” information that can be included by the F5 TMM system during a TCPDUMP. I will not be covering installation of this plugin, that can be find on the DevCentral page for the plugin (requires login).

With my first F5 exam coming up very shortly, I figured I’d take a break from studying and do a write-up on this helpful addition. I recently was directed towards a wonderful plugin for Wireshark that helps with troubleshooting F5 TCPDUMPS.

F5 tcpdump wireshark