Bug ID 763121: Utilizing the AFM Packet Tester tool while a TCP Half Open attack is underway can crash TMM.

Last Modified: Apr 15, 2022

Bug Tracker

Affected Product:  See more info
BIG-IP AFM(all modules)

Known Affected Versions:
13.1.0,,,,,,,,, 13.1.1,,,,, 14.0.0,,,,,, 14.0.1,, 14.1.0,,,,,, 14.1.2,,,,,,,, 15.1.0,,,,,, 15.1.1, 15.1.2,, 15.1.3,, 15.1.4,, 15.1.5,

Fixed In:
15.0.0,, 13.1.3

Opened: Mar 21, 2019
Severity: 2-Critical


TMM crashes and produces a core file. The crash is a SIGFPE accompanied by the following panic string: Assertion "packet must already have an ethernet header" failed.


Traffic disrupted while tmm restarts.


This issue occurs when all of the following conditions are met: - The system is provisioned for AFM. - A TCP Half Open attack to the system is underway. - A BIG-IP Administrator attempts to use the AFM Packet Tester tool, and simulates sending a TCP segment with the SYN flag set.


Do not use the AFM Packet Tester tool while a TCP Half Open attack is underway.

Fix Information

TMM no longer crashes when utilizing the AFM Packet Tester tool.

Behavior Change