Bug ID 652977: The TCP RST stats may show a high number of resets when using passive SPAN mode

Last Modified: Sep 14, 2023

Affected Product(s):
BIG-IP LTM(all modules)

Known Affected Versions:
13.1.0, 13.1.0.1, 13.1.0.2, 13.1.0.3, 13.1.0.4, 13.1.0.5, 13.1.0.6, 13.1.0.7, 13.1.0.8, 13.1.1, 13.1.1.2, 13.1.1.3, 13.1.1.4, 13.1.1.5, 13.1.3, 13.1.3.1, 13.1.3.2, 13.1.3.3, 13.1.3.4, 13.1.3.5, 13.1.3.6, 13.1.4, 13.1.4.1, 13.1.5, 13.1.5.1, 14.0.0, 14.0.0.1, 14.0.0.2, 14.0.0.3, 14.0.0.4, 14.0.0.5, 14.0.1, 14.0.1.1, 14.1.0, 14.1.0.1, 14.1.0.2, 14.1.0.3, 14.1.0.5, 14.1.0.6, 14.1.2, 14.1.2.1, 14.1.2.2, 14.1.2.3, 14.1.2.4, 14.1.2.5, 14.1.2.6, 14.1.2.7, 14.1.2.8, 14.1.3, 14.1.3.1, 14.1.4, 14.1.4.1, 14.1.4.2, 14.1.4.3, 14.1.4.4, 14.1.4.5, 14.1.4.6, 14.1.5, 14.1.5.1, 14.1.5.2, 14.1.5.3, 14.1.5.4, 14.1.5.6

Opened: Mar 23, 2017

Severity: 3-Major

Symptoms

A high number of 'No flow found for ACK' TCP resets will be seen in the reset-cause statistics.

Impact

A high number of TCP RSTs will be seen in the stats. These resets will not be sent out on the wire.

Conditions

This can occur when passive SPAN mode is enabled and a virtual server is configured with fastL4 and one or more additional profiles (e.g., fastL4 and HTTP).

Workaround

This issue exists only when configuring a virtual server with type set to 'Performance (Layer 4)' and adding additional profiles. You can workaround this issue by removing those additional profiles or changing the virtual server type field to 'Standard'.

Fix Information

None

Behavior Change

Guides & references

K10134038: F5 Bug Tracker Filter Names and Tips