Forum Discussion

rodrigo_Benzaqu's avatar
rodrigo_Benzaqu
Icon for Nimbostratus rankNimbostratus
Jul 13, 2007

Irule to Analize traffic

 

I have a vip with a relevant amount of traffic and many developers creating new functionts to the site.

 

 

We found an internal vulnerability that a user can access to internal information using a web page on our site, so we fixed but was really hard to understand the URL.

 

 

Since the LTM has all the traffic, will be possible to create an IRule to isolate some specifics patterns from the URL.

 

 

Example: www.mercadolibre.com.ar/jm/rodrigo.html

 

 

Show all the urls that match with "rodrigo".

 

 

application delivery
dev
devops
iRules
  • Joe_Pruitt's avatar
    Joe_Pruitt
    Jul 13, 2007
    Can you be a bit more specific on what you want the iRule to do? If all you want to do is look for URI's that contain rodrigo you could do so with a simple string comparison and log the results to the system log

    when HTTP_REQUEST {
  if { [HTTP::uri] contains "rodrigo" } {
    log local0. "URI rodrigo match: '[HTTP::uri]'"
  }
}

    This will put a timestamped entry in the log file with the full URI of each request that has a rodrigo in it.

    If you were looking for more than this, let me know more details and we'll see what we can come up with.

    -Joe