Discuss F5 Networks 301b Exam Topic 8 Question 116

An application is configured on an LTM device:

Virtual server: 10.0.0.1:80 (VLAN vlan301)

SNAT IP: 10.0.0.1

Pool members: 10.0.1.1:8080, 10.0.1.2:8080, 10.0.1.3:8080 (VLAN vlan302)

Which packet capture should the LTM Specialist perform on the LTM device command line interface to capture only client traffic specifically for this virtual server?

Atcpdump -ni 0.0:nnn -s 0 'host 10.0.0.1' -w /var/tmp/trace.cap

Btcpdump -ni vlan301 -s 0 'port 80 and host 10.0.0.1' -w /var/tmp/trace.cap

Ctcpdump -ni vlan301 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/trace.cap

Dtcpdump -ni vlan302 -s 0 'port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3' -w /var/tmp/trace.cap

Etcpdump -ni 0.0:nnn -s 0 '(port 80 and host 10.0.0.1) or (port 8080 and host 10.0.1.1 or host 10.0.1.2 or host 10.0.1.3)' -w /var/tmp/trace.cap

Suggested Answer: B

Get Premium 301b Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

20 comments · newest first

Paris 10 months ago

I’m surprised they didn’t mention filtering by source IP too!

Dong 10 months ago

Wait, why would you use vlan302? That seems off.

Florinda 10 months ago

Definitely going with B, it’s straightforward!

Eden 10 months ago

I think E could work too, but it seems a bit overkill.

Truman 11 months ago

B is the right choice for capturing client traffic on port 80.

Mona 11 months ago

I’m not completely confident, but I feel like we shouldn't be capturing on vlan302 since that’s for the pool members, not the client traffic.

Georgiana 11 months ago

I practiced a similar question, and I believe option B is correct because it filters for traffic on port 80 for the virtual server.

Samira 12 months ago

I'm a bit unsure, but I remember something about using 'port 80' for the virtual server and 'port 8080' for the pool members.

Owen 12 months ago

I think we need to capture traffic specifically on vlan301 since that's where the virtual server is configured.

Angelica 12 months ago

Hmm, this is a tricky one. I'm not sure if I should focus on the virtual server IP or the pool member IPs. I think I'll go with option C just to be safe.

Vernell 1 year ago

I'm feeling pretty confident about this one. The key is to capture the traffic to the virtual server IP address on port 80, as well as the traffic to the pool member IPs on port 8080. Option E looks like it covers all of that.

Cherelle 1 year ago

Okay, let's see. The virtual server is on VLAN 301, and the pool members are on VLAN 302. So I think option D might be the best choice to capture the traffic to the pool members.

Elbert 1 year ago

Hmm, I'm a bit unsure about this one. There are a lot of details to consider, like the VLAN information and the SNAT IP. I'll need to think this through carefully.

Erinn 1 year ago

This looks like a pretty straightforward tcpdump question. I think I'll go with option B - that seems to capture the client traffic specifically for the virtual server.

Carlene 1 year ago

I'm leaning towards Option E. It covers both the virtual server and the pool members, which seems more comprehensive.

Clorinda 9 months ago

↳ replying to Carlene

E might be overkill, but it could help in troubleshooting later.

Kaitlyn 10 months ago

↳ replying to Carlene

Option E does seem comprehensive, but is it necessary to capture both?

Fausto 10 months ago

↳ replying to Carlene

I think Option B is more focused on the virtual server.

Golda 11 months ago

↳ replying to Carlene

I agree with Fausto. B is cleaner for just client traffic.

Barrett 1 year ago

Option B looks like the right choice to me. It's capturing traffic on the VLAN where the virtual server is configured and filtering for the specific virtual server IP and port.

F5 Networks 301b Exam - Topic 8 Question 116 Discussion