Hi Javier, yes tcpdump is always an option but my question is can tcpdump on eth0 won’t be unencrypted so what more can we get from it than what you already have?
Amol Kedar | Director of IT Infrastructure [email protected] <mailto:[email protected]> Zerion Software Inc., iFormBuilder.com O 866.937.4661 ext 705 | M 704.756.2696 Website <http://www.iformbuilder.com/> | Facebook <https://www.facebook.com/pages/iFormBuilder/143414062370953> | Twitter <https://twitter.com/iformbuilder> | +iFormBuilder <https://plus.google.com/+Iformbuilder/posts> | YouTube <https://www.youtube.com/user/iFormBuildermobile> This e-mail message may contain confidential or legally privileged information and is intended only for the use of the intended recipient(s). Any unauthorized disclosure, dissemination, distribution, copying or the taking of any action in reliance on the information herein is prohibited. > On Oct 27, 2015, at 1:12 PM, Javier Torres <[email protected]> wrote: > > Thanks Andrew. > > Hi Moe, > > Would that solution work for you? > > -----Original Message----- > From: Andrew Hayworth [mailto:[email protected]] > Sent: Tuesday, October 27, 2015 12:11 PM > To: Javier Torres > Cc: Jeff Palmer; HAProxy; Amol Kedar > Subject: Re: HA Proxy - packet capture functionality > > On Tue, Oct 27, 2015 at 10:51 AM, Javier Torres <[email protected]> wrote: >> >> Hi Jeff, >> Does that mean that HA proxy doesn't offer the capability to do this >> functionality at the load balancing level? > > No - it doesn't. There's no inbuilt capability to capture packets via > HAProxy. But, assuming you're running on a linux, this shouldn't be too > difficult. > > Assuming you're bound to eth0, you could do something like 'sudo > tcpdump -Uvw /tmp/capture.pcap -i eth0 host <client ip address>' > If you don't know the interface HAProxy listens on, try using something like > 'sudo netstat -antp | grep LISTEN' > > Hope that helps! > - Andrew
signature.asc
Description: Message signed with OpenPGP using GPGMail
