Forum Discussion
iRule for non http services
One thing to note about the pcap, this MAY still actually be HTTP traffic. However, because this is running on a non-standard port for HTTP, Wireshark will not automatically decode it as such. In Wireshark you can right click on one of the packets in question and select "Decode As.." and select HTTP. If that doesn't work, then I would try decoding as SSL/TLS.
Let us know the results of that.
- Joseph_MartinJan 03, 2024Employee
Actually, a quick review of the Proficy Webspace Server documentation (https://www.ge.com/digital/documentation/webspace/oxy_ex-1/topics/t_ifix_web_space_modifying_the_host_port.html ) suggests that this is indeed web traffic (since this same server/application is accessible via a browser client) and almost defintely SSL traffic.
If that is indeed the case, you can likely still use an iRule with the HTTP events/commands but you will need install the Webspace server SSL certificate and key on the BIGIP so you can decrypt there. - ndubey2Jan 04, 2024Altostratus
Hello Joseph_Martin, Thanks for the response !
I am unable to decode any of the packet either in http or SSL/TLS. It is not giving me option to decode.
Thanks,
- Joseph_MartinJan 05, 2024Employee
So when you right-click on a packet you don't have the "Decode As..." option like this?
Recent Discussions
Related Content
* Getting Started on DevCentral
* Community Guidelines
* Community Terms of Use / EULA
* Community Ranking Explained
* Community Resources
* Contact the DevCentral Team
* Update MFA on account.f5.com