Forum Discussion
paulpatriot_129
Nimbostratus
NimbostratusLog SSLv3 TRAFFIC
Does anyone know an IRULE that captures clients using SSLv3 and sends it to the log?
shaggy_121467
Cumulonimbus
CumulonimbusThis locally logs SSLv3 handshakes and the associated client-IP
when CLIENTSSL_HANDSHAKE {
if {[SSL::cipher version] eq "SSLv3"}{
log local0. "[IP::client_addr] [SSL::cipher version]"
}
}
David_Jones_227Nimbostratus
NimbostratusI used this for identifying TLSv1 clients, just replaced SSLv3 with TLSv1 and it works great. Logs to /var/log/ltm.
