Forum Discussion

Mariusz_B's avatar
Mariusz_B
Icon for Nimbostratus rankNimbostratus
Feb 09, 2015

Logging all traffic iRule.

Hello, I have the following iRule for logging all traffic: when CLIENT_ACCEPTED { set vip [IP::local_addr]:[TCP::local_port] } when SERVER_CONNECTED { set client "[IP::client_addr]:[T...
application delivery
devops
iRules
LTM
management
Mariusz_B's avatar
Mariusz_B
Icon for Nimbostratus rankNimbostratus
Feb 10, 2015

Thank you Michael.

I have done something like this, and I am about to test it in next few days:

when CLIENT_ACCEPTED {
   set client "[IP::client_addr]:[TCP::client_port]"
   set vip "[IP::local_addr]:[TCP::local_port]"
   set snat "unknown"
   set node "unknown"
}

when SERVER_CONNECTED {
   set snat "[IP::local_addr]:[TCP::local_port]"
   set node "[IP::server_addr]:[TCP::server_port]"
}

when CLIENT_CLOSED {
    log connection info
   log local0.info "Client $client -> VIP: $vip -> SNAT: $snat -> Node: $node"
}
Snl's avatar
Snl
Icon for Cirrostratus rankCirrostratus
Aug 24, 2017

I have a similar requirement , were customer is using automap and want to enable logging for specific virtual server to capture all sessions , its not working since unknown keyword matching in snat & node side , also virtual server is running on port smtp so i cannot add http profile

 

Code

when CLIENT_ACCEPTED {
   set client "[IP::client_addr]:[TCP::client_port]"
      set vip "[IP::local_addr]:[TCP::local_port]"
         set snat "unknown"
            set node "unknown"
            }
   when SERVER_CONNECTED {  
     set snat "[IP::local_addr]:[TCP::local_port]"
      set node "[IP::server_addr]:[TCP::server_port]"
                }
    when CLIENT_CLOSED {
        log connection info
          log local0.info "Client $client -> VIP: $vip -> SNAT: $snat -> Node: $node"
          }

any help appreciated

 

/snl