nerdexam
F5

101 · Question #692

ATP administrator recently added a new VLAN and needs to confirm that the BIG IP sees traffic on this VLAN. The VLAN is untagged on interface 1.1 and is named VLAN704 in the BIG IP Configuration…

The correct answer is C. tcpdump. The tcpdump utility is the correct tool on BIG-IP systems to capture live packet traffic on a specific VLAN or interface for traffic analysis.

Section 2: F5 Solutions and Technology

Question

ATP administrator recently added a new VLAN and needs to confirm that the BIG IP sees traffic on this VLAN. The VLAN is untagged on interface 1.1 and is named VLAN704 in the BIG IP Configuration Unity. Which tool should be used to generate a packet capture that shows all traffic on this VLAN?

Options

  • Anetstat
  • Bmap
  • Ctcpdump
  • Difconsfig

How the community answered

(28 responses)
  • B
    4% (1)
  • C
    93% (26)
  • D
    4% (1)

Why each option

The tcpdump utility is the correct tool on BIG-IP systems to capture live packet traffic on a specific VLAN or interface for traffic analysis.

Anetstat

netstat displays active network connections, routing tables, and interface statistics but cannot capture or display actual packet traffic on a VLAN.

Bmap

nmap is a network scanning and host discovery tool, not a packet capture utility, and is not used for monitoring live traffic on a VLAN.

CtcpdumpCorrect

tcpdump is a built-in command-line packet analyzer on BIG-IP that can capture traffic on a named VLAN using the '-i VLAN704' flag, making it the correct tool to verify traffic visibility on the newly added VLAN. It supports filtering by interface name, protocol, host, and port, providing detailed inspection of frames traversing the specified VLAN.

Difconsfig

ifconfig is used to display or configure network interface parameters and IP addresses, not to capture or inspect packet traffic.

Concept tested: BIG-IP packet capture using tcpdump on VLAN

Source: https://support.f5.com/csp/article/K13637

Topics

#tcpdump#VLAN#packet capture#BIG-IP diagnostics

Community Discussion

No community discussion yet for this question.

Full 101 Practice