Forum Discussion
paulpatriot_129
Nimbostratus
NimbostratusLog SSLv3 TRAFFIC
Does anyone know an IRULE that captures clients using SSLv3 and sends it to the log?
5 Replies
shaggyThis locally logs SSLv3 handshakes and the associated client-IP
when CLIENTSSL_HANDSHAKE { if {[SSL::cipher version] eq "SSLv3"}{ log local0. "[IP::client_addr] [SSL::cipher version]" } }- David_Jones_227I used this for identifying TLSv1 clients, just replaced SSLv3 with TLSv1 and it works great. Logs to /var/log/ltm.
shaggy_121467Cumulonimbus
This locally logs SSLv3 handshakes and the associated client-IP
when CLIENTSSL_HANDSHAKE { if {[SSL::cipher version] eq "SSLv3"}{ log local0. "[IP::client_addr] [SSL::cipher version]" } }- David_Jones_227I used this for identifying TLSv1 clients, just replaced SSLv3 with TLSv1 and it works great. Logs to /var/log/ltm.
- paulpatriot_129
That worked Thanks for the Info.
