find anonymous sftp user with iRule

Some fields below contain errors. Correct them before continuing. Can someone identify an error in this iRULE

 

rule anon_ip { when CLIENT_ACCEPTED { log local0. "-" TCP::collect 0 0 } when CLIENT_DATA { if { [TCP::payload] contains "anonymous" } { log local0. "-" log local0. [TCP::payload] log local0. [IP::local_addr] } TCP::release TCP::collect } }