Bug ID 1821033: Assertion "packet must already have an ethernet header" when using tcpdump

Last Modified: Jun 28, 2025

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
17.1.2.1, 17.1.2.2

Fixed In:
17.5.1

Opened: Feb 20, 2025

Severity: 3-Major

Symptoms

Tmm crashes when running tcpdump.

Impact

Traffic disrupted while tmm restarts.

Conditions

1. A virtual server references another virtual server with an iRule 2. The destination virtual server has an iRule with reject inside FLOW_INIT 3. Use tcpdump while hitting the reject rule

Workaround

Use either remote tcpdump or avoid using reject rule in FLOW_INIT.

Fix Information

Tmm no longer crashes in this scenario.

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips