Forum Discussion
Moustafa
Nimbostratus
Jun 08, 2020I Rule to log source_ip , time_stamp, public_ip
Hello , i need to develop i rule to log the accepted connections to the VS as following parameters . wan_source_ip address , Geolocation , time stamp Regards,
Moustafa
Nimbostratus
Jun 09, 2020hi Samir ,
thanks for information . i tried the below I rule i think its working .
when CLIENT_ACCEPTED {
log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"
log local0. "cloc [whereis [IP::client_addr] country]"
log local0. "Geo Client ([IP::client_addr]) detected"
}
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects