Mar 27, 2026 - For details about updated CVE-2025-53521 (BIG-IP APM vulnerability), refer to K000156741.

Forum Discussion

Nicholas_Zurfl1's avatar
Nicholas_Zurfl1
Icon for Nimbostratus rankNimbostratus
Nov 03, 2005

How to ignore case

Greetings,

 

I am a frequent lurker of the devcentral forums.

 

 

Does anyone know of a way to parse a payload and ignore case? My challange is that I am dealing with a proprietary protocol and the developers could care less if their commands are "update" "Update" "UPDATE" "uPdAtE" etc...

 

 

Collect the TCP data from the session

 

when CLIENT_ACCEPTED {

 

log local0. "TCP client accepted..."

 

}

 

when CLIENT_DATA

 

Parse the payload for UPDATE

 

if { [TCP:payload] contains "UPDATE" <--- make this case insensitive

 

} {

 

log local0. "found UPDATE"

 

}

 

TCP::release

 

TCP::collect

 

TCP::notify response

 

log local0. "notify response"

 

}

 

8 Replies

No RepliesBe the first to reply