I need to understand the OOB transparency scenarios in terms of Wireshark packet analysis. I have read SH deployment guide , KB's on OOB but still not grasping the concept completely as I am finding contradiction in the wireshark in a lab setup. This has increased my confusion.
Note that below Scenarios are isolated.
Scenario 1.) The case is that FT is ON and OOB Transparency mode is set to None and default OOB port is set to 708. When I see the splice setup packet in wireshark I never see the source port as 708 in the inner channel. Although, I see correct IP's ( SIP is Client IP, Source Port is Random port NOT 708, DIP is server IP and Dest. Port is actual destination port in header). Why I never see 708 port as source in Splice setup packet.In this setup I changed the OOB transparency to FULL and still source port is not seen as 708 in inner channel splice. Note that this is a lab setup.
Scenario 2.) In Full transparency I am not seeing the splice setup packet. Just the S+, SA++ and SA+ , Syn/Syn/Ack and Ack.
Usually, as soon as inner channel is setup OOB splice setup connection forms but , It is missing in the capture in this case and the connection never appears in the current connection list. I believe this is not normal.
When we say that oob splice forms after the first optimized connection , which optimized connection we refer ? Connection pooling will not work in FT mode so no pooling of connections . So, why I never see splice connection in this case , I believe this is the first connection and also please note that the connection never appears in current connections. Note that this is actual issue in the network.
The Riverbed Splash community is a network of users and a set of tools for connecting, sharing, and collaborating. Whether you're here to troubleshoot a technical problem,
get best practices on your Riverbed product deployment, or want to learn how to leverage Riverbed's developer tools, you'll find it here in our community.