Forum Discussion
Preet_pk
Aug 22, 2021Cirrus
Investigation/identification of WAF violations from archived F5 ASM security logs
Hi, In our infrastructure, F5 ASM application events are available only for 2 hrs, logs which are older that 2 hrs is getting purged out. Please let me know how to identify/investigate violati...
Daniel_Wolf
Aug 22, 2021MVP
Hi Preet,
I think I figured it out.
<metachar_index>39</metachar_index>
DECIMAL: 39
BINARY: 0010 0111
According to RFC 20 this should be an ' (apostrophe).
Can you confirm?
KR
Daniel
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects