~/talk

Automating BIG-IP Packet Captures

Talkat F5 Agility 2021 · 2021-04-20..04-22· [networking]
linkedin:jasonrahm
slides:none on file

Automates BIG-IP packet captures end-to-end: a Python iControl REST script creates an iRule to capture SSL session secrets, starts tcpdump remotely with a timeout wrapper for tcpdump (55s by default), saves PCAPs and key files directly into shared images, polls for QuickView completion, downloads and deletes artifacts, and can hand outputs to Wireshark/TShark for decryption. The proof-of-concept runs in the demo despite live-demo setup hiccups and removes iRules after capture to avoid persistent logging.

AI-written summary · about

  1. 0:00Introduction and setup
  2. 4:37Manual packet capture challenges
  3. 11:05Automation requirements and design
  4. 16:23Script implementation and demo
  5. 28:14Wireshark decryption and analysis
  6. 32:05Next steps and roadmap
  7. 37:05Upcoming events and closing
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.