Forum Discussion
Chad_Roberts_21
Nimbostratus
NimbostratusLog IMAP user name
Any ideas on how I might go about writing an iRule which would log the user name given each time a user authenticates? I need to log the source IP and the username for correlating connections later. O...
Eric_van_WiltenNimbostratus
NimbostratusThanks Colin, but for whatever reason, that doesn't appear to be happening. I am, indeed, terminating the SSL at the LTM with a plain-text connection to the server pool. I'm using a very basic iRule:
when CLIENT_ACCEPTED {
TCP::collect
}
when CLIENT_DATA {
set data [TCP::payload]
if { $data contains "LOGIN" } {
log local0. "User LOGIN <$data>"
}
debug
log local0. "Payload: <$data>"
TCP::release
TCP::collect
}
And all that gets logged are lines like this:
Jul 18 12:26:42 tmm tmm[1301]: Rule IMAP_User_Logging : Payload: Ú.ñ"ÊÈ»\¡¸OW÷ÛÇlé×Öuýc«îóDgyþ®QªËúmD üê;éoÁcò^E\Iuw>
If I change CLIENT to SERVER in this case, I do log the server responses, but then again, they're not encrypted to start begin with.
I must be missing something.
E.
