For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

asayer_6572's avatar
asayer_6572
Icon for Nimbostratus rankNimbostratus
Jan 21, 2010

LDAP - Tracking Heavy Clients

Hi all,   we have are using a pair of LTM1500's(v9.4.7) to LB LDAP 389 and 636.     I am trying to get stats on client usage.   For example what client IP's have the highest tra...
config
design
hoolio's avatar
hoolio
Icon for Cirrostratus rankCirrostratus
Jan 22, 2010
If the connections through LTM are less then ~7k (Click here), you could dump out the connection table using 'b conn all show all' and parse the output to find out which are the top clients.

This would be considerably more efficient than the alternatives of trying to track all client connections. If you did want to try that route, you could use an iRule which logs (ideally remotely) all client connections. One example using a remote UDP syslog server is: 

  
  when SERVER_CONNECTED {  
    
      Log the connection details to a remote syslog server  
     log 1.1.1.1:514 local0.debug "client IP:port=[IP::client_addr]:[TCP::client_port],\  
        SNAT IP:port=[IP::local_addr]:[TCP::local_port], server IP:port=[IP::server_addr]:[TCP::server_port]"  
  }

Aaron