TCPdump shows wrong IP addresses for NATed traffic when SecureXL is enabled

Support Center > Search Results > SecureKnowledge Details

Technical Level

Solution ID	sk100194
Technical Level
Product	Quantum Security Gateways, SecureXL
Version	R75 (EOL), R76 (EOL), R77 (EOL), R77.10 (EOL), R77.20 (EOL), R77.30 (EOL)
OS	Gaia, SecurePlatform 2.6
Platform / Model	All
Date Created	09-Apr-2014
Last Modified	21-May-2019

Symptoms

TCPdump shows wrong IP addresses for NATed traffic when SecureXL is enabled:
- The incoming traffic is shown after the NAT
- The outgoing traffic, if it was Forwarded to Kernel (F2F) on the outbound, is shown before the NAT

Cause

The issue is "cosmetic". When SecureXL is enabled and NAT is applied to traffic, TCPdump displays the internal information from Check Point kernel.

Solution

Note: To view this solution you need to Sign In .