Hi Javier,
yes tcpdump is always an option but my question is can tcpdump on eth0 won’t be unencrypted so what more can we get from it than what you already have?
Amol Kedar | Director of IT Infrastructure
akedar@zerionsoftware.com <mailto:akedar@zerionsoftware.com>
Zerion Software Inc., iFormBuilder.com
O 866.937.4661 ext 705 | M 704.756.2696
Website http://www.iformbuilder.com/ | Facebook https://www.facebook.com/pages/iFormBuilder/143414062370953 | Twitter https://twitter.com/iformbuilder | +iFormBuilder https://plus.google.com/+Iformbuilder/posts | YouTube https://www.youtube.com/user/iFormBuildermobile
This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited.
> On Oct 27, 2015, at 1:12 PM, Javier Torres <jtorres@almod.com> wrote:
>
> Thanks Andrew.
>
> Hi Moe,
>
> Would that solution work for you?
>
> -----Original Message-----
> From: Andrew Hayworth [mailto:andrew.hayworth@getbraintree.com]
> Sent: Tuesday, October 27, 2015 12:11 PM
> To: Javier Torres
> Cc: Jeff Palmer; HAProxy; Amol Kedar
> Subject: Re: HA Proxy - packet capture functionality
>
> On Tue, Oct 27, 2015 at 10:51 AM, Javier Torres <jtorres@almod.com> wrote:
>>
>> Hi Jeff,
>> Does that mean that HA proxy doesn't offer the capability to do this
>> functionality at the load balancing level?
>
> No - it doesn't. There's no inbuilt capability to capture packets via
> HAProxy. But, assuming you're running on a linux, this shouldn't be too
> difficult.
>
> Assuming you're bound to eth0, you could do something like 'sudo
> tcpdump -Uvw /tmp/capture.pcap -i eth0 host <client ip address>'
> If you don't know the interface HAProxy listens on, try using something like
> 'sudo netstat -antp | grep LISTEN'
>
> Hope that helps!
> - Andrew
yes tcpdump is always an option but my question is can tcpdump on eth0 won’t be unencrypted so what more can we get from it than what you already have?
Amol Kedar | Director of IT Infrastructure
akedar@zerionsoftware.com <mailto:akedar@zerionsoftware.com>
Zerion Software Inc., iFormBuilder.com
O 866.937.4661 ext 705 | M 704.756.2696
Website http://www.iformbuilder.com/ | Facebook https://www.facebook.com/pages/iFormBuilder/143414062370953 | Twitter https://twitter.com/iformbuilder | +iFormBuilder https://plus.google.com/+Iformbuilder/posts | YouTube https://www.youtube.com/user/iFormBuildermobile
This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited.
> On Oct 27, 2015, at 1:12 PM, Javier Torres <jtorres@almod.com> wrote:
>
> Thanks Andrew.
>
> Hi Moe,
>
> Would that solution work for you?
>
> -----Original Message-----
> From: Andrew Hayworth [mailto:andrew.hayworth@getbraintree.com]
> Sent: Tuesday, October 27, 2015 12:11 PM
> To: Javier Torres
> Cc: Jeff Palmer; HAProxy; Amol Kedar
> Subject: Re: HA Proxy - packet capture functionality
>
> On Tue, Oct 27, 2015 at 10:51 AM, Javier Torres <jtorres@almod.com> wrote:
>>
>> Hi Jeff,
>> Does that mean that HA proxy doesn't offer the capability to do this
>> functionality at the load balancing level?
>
> No - it doesn't. There's no inbuilt capability to capture packets via
> HAProxy. But, assuming you're running on a linux, this shouldn't be too
> difficult.
>
> Assuming you're bound to eth0, you could do something like 'sudo
> tcpdump -Uvw /tmp/capture.pcap -i eth0 host <client ip address>'
> If you don't know the interface HAProxy listens on, try using something like
> 'sudo netstat -antp | grep LISTEN'
>
> Hope that helps!
> - Andrew