IP to DNS reverse lookup + Geo location? Delimitted format?

You'd need to track which IP's you've already logged. This could eat up considerable memory on LTM just for logging.

 

 

If you're on 9.4.8 you can use the remote logging option on the log command to log all connections to the VS. This should have a much lower impact than trying to write to LTM disk.

 

 

 

http://devcentral.f5.com/wiki/iRules.log.ashx

 

 

log [-noname] < remote_ip >[:< remote_port>] < facility>.[< level>] < message>

 

 

* (LTM only) Logs the specified message directly to the specified IP address (and optional alternate port when specified) via UDP. Facility and/or level are required. The iRule name prefixing the message text may optionally suppressed by including the -noname option. < remote_ip> must be a TMM-routed address. If you must route specific messages to a remote address via the management interface, you must log locally. syslog-ng is able to route messages via both TMM and management interfaces using the standard syntax. You can define an appropriate filter and remote log destination in LTM's syslog-ng service.

 

 

 

Aaron