Forum Discussion
paulpatriot_129
Nimbostratus
NimbostratusLog SSLv3 TRAFFIC
Does anyone know an IRULE that captures clients using SSLv3 and sends it to the log?
shaggyNimbostratus
NimbostratusThis locally logs SSLv3 handshakes and the associated client-IP
when CLIENTSSL_HANDSHAKE {
if {[SSL::cipher version] eq "SSLv3"}{
log local0. "[IP::client_addr] [SSL::cipher version]"
}
}
- David_Jones_227I used this for identifying TLSv1 clients, just replaced SSLv3 with TLSv1 and it works great. Logs to /var/log/ltm.
