Support Center > Search Results > SecureKnowledge Details
TCPdump shows wrong IP addresses for NATed traffic when SecureXL is enabled
Symptoms
  • TCPdump shows wrong IP addresses for NATed traffic when SecureXL is enabled:

    • The incoming traffic is shown after the NAT
    • The outgoing traffic, if it was Forwarded to Kernel (F2F) on the outbound, is shown before the NAT
Cause

The issue is "cosmetic". When SecureXL is enabled and NAT is applied to traffic, TCPdump displays the internal information from Check Point kernel.


Solution
Note: To view this solution you need to Sign In .