Could anyone know how to read package contents by iRules?

Hi Bloceanc,

to read RAW packet information, you could either use a combination of

[TCP::collect]

[TCP::payload]

[TCP::release]

when CLIENT_ACCEPTED {
    TCP::collect
}
when CLIENT_DATA {
    log local0.debug "TCP Payload: [TCP::payload]"
    TCP::release
    TCP::collect
}

https://devcentral.f5.com/wiki/iRules.TCP__collect.ashx

... or the

[UDP::payload]

when CLIENT_ACCEPTED {
     No prequisites are required.
}
when CLIENT_DATA {
    log local0.debug "UDP Payload: [UDP::payload]"
}

https://devcentral.f5.com/wiki/iRules.UDP__payload.ashx

... or even a combination of

[SSL::collect]

[SSL::payload]

[SSL::release]

when CLIENTSSL_HANDSHAKE {
    SSL::collect
}
when CLIENTSSL_DATA {
    log local0.debug "SSL Payload: [SSL::payload]"
    SSL::release
    SSL::collect
}   

https://devcentral.f5.com/wiki/iRules.SSL__collect.ashx

Cheers, Kai