Forum Discussion
Matt_59095
Nimbostratus
Aug 18, 2011IP to DNS reverse lookup + Geo location? Delimitted format?
LTM 1500 9.4.8
Hi - we'd like to see where our website traffic is coming from, and by which companies. I'd prefer to log that into a format that i can read into a database table, so that i ...
hoolio
Cirrostratus
Aug 19, 2011You'd need to track which IP's you've already logged. This could eat up considerable memory on LTM just for logging.
If you're on 9.4.8 you can use the remote logging option on the log command to log all connections to the VS. This should have a much lower impact than trying to write to LTM disk.
http://devcentral.f5.com/wiki/iRules.log.ashx
log [-noname] < remote_ip >[:< remote_port>] < facility>.[< level>] < message>
* (LTM only) Logs the specified message directly to the specified IP address (and optional alternate port when specified) via UDP. Facility and/or level are required. The iRule name prefixing the message text may optionally suppressed by including the -noname option. < remote_ip> must be a TMM-routed address. If you must route specific messages to a remote address via the management interface, you must log locally. syslog-ng is able to route messages via both TMM and management interfaces using the standard syntax. You can define an appropriate filter and remote log destination in LTM's syslog-ng service.
Aaron
Recent Discussions
Related Content
DevCentral Quicklinks
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com
Discover DevCentral Connects