F5 BIG-IP LTM Specialist: Maintain and Troubleshoot — Question 71

There is a fault with an LTM device load balanced trading application that resides on directly connected VLAN vlan-301. The application virtual server is
10.0.0.1:80 with trading application backend servers on subnet 192.168.0.0/25. The LTM Specialist wants to save a packet capture with complete payload for external analysis.
Which command should the LTM Specialist execute on the LTM device command line interface?

Answer options

• A. tcpdump -vvv -w /var/tmp/trace.cap 'net 192.168.0.0/25'
• B. tcpdump -vvv -s 0 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
• C. tcpdump -vvv -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'
• D. tcpdump -vvv -s 0 -nni vlan-301 -w /var/tmp/trace.cap 'net 192.168.0.0/25'

Correct answer: D

Explanation

The correct command is D because it includes the -s 0 option, which captures the entire packet, and -nni vlan-301 specifies the interface to listen on while also preventing DNS lookups. Options A and B fail to specify the correct interface, and option C captures only the packet headers, not the full payload.