Forum Discussion

TFleming's avatar
TFleming
Icon for Nimbostratus rankNimbostratus
5 years ago
Solved

Find connection attempts via source IP

Hey guys, I'm fairly new to F5. We have one configured before I started working here. We have a windows terminal server virtual server in our F5 that load balances between 18 different back end termi...
application delivery
BIG-IP
devops
TMSH
  • Beaker's avatar
    Beaker
    5 years ago
    when CLIENT_ACCEPTED {
  set LogString "Client [IP::client_addr]"
  log local0. "==== $LogString (request) ====="
}
 
when SERVER_CONNECTED {
  log local0. "==== $LogString (server connected) - server: [LB::server addr]:[LB::server port] ===="
}

    I have tested that this works

Beaker's avatar
Beaker
Icon for Cirrus rankCirrus
5 years ago

You can accomplish this with an Irule on the VIP that would log the connections and output them into the ltm log.

Something like this should help with troubleshooting. But I would only use while troubleshooting not as a permanent addition:

when HTTP_REQUEST {
  set LogString "Client [IP::client_addr]:[TCP::client_port] -> Requested Host[HTTP::host][HTTP::uri]"
  log local0. "==== $LogString (request) ====="
}
 
when SERVER_CONNECTED {
  log local0. "==== $LogString (server connected) - server: [LB::server addr]:[LB::server port] ===="
}
 
when HTTP_RESPONSE {
  log local0. "==== $LogString (response) - status: [HTTP::status] ===="
}

Recent Discussions