session offfload and flow basic

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements
Please sign in to see details of an important advisory in our Customer Advisories area.

session offfload and flow basic

Cyber Elite
Cyber Elite

 

When we do session offload then PCAP can not capture the session offload traffic .

if i am also doing flow basic on that then flow basic will not be impacted by session offload?

 

Regards

Mike

MP

Help the community: Like helpful comments and mark solutions.
2 accepted solutions

Accepted Solutions

L5 Sessionator

Hey @MP18

 

Correct. A flow basic will not be able to capture any traffic if it has been offloaded so if you're wanting to do a flow basic for any SSL traffic, for example, then it is important to disable session offloading for the duration of your capture/testing.

 

Disabling session offloading is a global setting and will add some additional overhead processing to the dataplane so it is important to remember not to run a flow basic if the dataplane CPU is high.  The traffic itself will not be impacted by session offloading being disabled. Other important factors to remember are:

 

- Always apply filters when doing any sort of traffic capturing

- Do not attempt to modify the filters whilst logging is enabled; first, disable logging then modify your filters.

 

Cheers,

Luke.

View solution in original post

Hey @MP18


Session offloading is a global setting meaning it will take effect on all traffic.

 

Thanks,

Luke.

View solution in original post

4 REPLIES 4

L5 Sessionator

Hey @MP18

 

Correct. A flow basic will not be able to capture any traffic if it has been offloaded so if you're wanting to do a flow basic for any SSL traffic, for example, then it is important to disable session offloading for the duration of your capture/testing.

 

Disabling session offloading is a global setting and will add some additional overhead processing to the dataplane so it is important to remember not to run a flow basic if the dataplane CPU is high.  The traffic itself will not be impacted by session offloading being disabled. Other important factors to remember are:

 

- Always apply filters when doing any sort of traffic capturing

- Do not attempt to modify the filters whilst logging is enabled; first, disable logging then modify your filters.

 

Cheers,

Luke.

Great reply!

One last thing if i enable PCAP filters and do session  offload will it offload only sessions filterd in pcap 

 

or it will offload all the traffic?

MP

Help the community: Like helpful comments and mark solutions.

Hey @MP18


Session offloading is a global setting meaning it will take effect on all traffic.

 

Thanks,

Luke.

Many Many Thanks !

MP

Help the community: Like helpful comments and mark solutions.
  • 2 accepted solutions
  • 3170 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!