For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
May 26, 2010

logging full TCP connection details

In my head, I have this picture of how a TCP connection with a SNAT-enabled Virtual Server looks:     [client_ip]:[client_port] <-> [VIP_ip]:[VIP_port] <-> [LTM_self_ip]:[LTM_port] <-> [Node_ip...
application delivery
dev
devops
iRules
smp_86112's avatar
smp_86112
Icon for Cirrostratus rankCirrostratus
May 27, 2010
Great reference again hoolio. This is what I came up with to give me what I was after:


when CLIENT_ACCEPTED {
  set ext_src [IP::remote_addr]:[TCP::remote_port]
  set ext_dst [IP::local_addr]:[TCP::local_port]
}
when SERVER_CONNECTED {
  set int_src [IP::local_addr]:[TCP::local_port]
  set int_dst [IP::remote_addr]:[TCP::remote_port]
  log local0. "$ext_src->$ext_dst->$int_src->$int_dst"
}