Forum Discussion
Tim_W_72292
Nimbostratus
NimbostratusChanging an ip address in an RMI connection
Hi,
I am trying to change an ip address within an RMI connection, and I am not really too sure where to start. The data is as follows:
JRMI..KN..10.10.10.141.....
...
Tim_W_72292Nimbostratus
NimbostratusAaron,
So you reckon like this then
rule test_1 {
when CLIENT_ACCEPTED {
if { ( [IP::client_addr] = "10.10.10.152") } {
TCP::collect 30
}
when CLIENT_DATA {
Do a regsub search and replace
set bad-ip {15\15\15\24}
set replace-ip {10\10\10\141}
if { [regsub -all $bad-ip [TCP::payload] $replace-ip new-ip ] > 0} {
TCP::payload replace 0 31 $new-ip
TCP::release
}
}
Cheers
Tim
