For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Francois_Dumais's avatar
Francois_Dumais
Icon for Nimbostratus rankNimbostratus
Mar 11, 2014

MONITORS THAT IDENTIFIES A SPECIFIC KEYWORD SOMEWHERE WITHIN AN HTML REPORT PAGE TO MARK IT UP

Version : BIG-IP 11.3.0 Build 2806.0 Final LTM (Virtual Edition) SUBJECT : MONITORS THAT IDENTIFIES A SPECIFIC KEYWORD SOMEWHERE WITHIN AN HTML REPORT PAGE TO MARK IT UP REFERENCE : SEE AT THE VERY END DOWN HERE, THE HTML REPORT PAGE RESULTING FROM IT BEING MONITORED : http://host1234.domain.com/ha/UpServer.html

 

QUESTION : I am trying to monitor the following html page for the keyword "ABCDEF=host1234" to appear somewhere in the page : - it shows like the following five lines in the browser (3 content lines, and 2 empty lines) :

 

line 1 shows: ABCAcronym=ABCHostname line 2 shows: (here empty line) line 3 shows: ABCDEF=host1234 line 4 shows: (here empty line) line 5 shows: ABCDEG=host5678

 

The monitor I have written seems to be flaky, and I am far from being sure it will always be correctly reponsive - sometimes its up sometimes its down.

 

Here is the send string I used in my monitor: GET /ha/UpServer.html HTTP/1.1\r\nHost: host1234.domain.com\r\nConnection: Close\r\n\r\n Here is the receive string I used in that monitor: ABCDEF=host1234

 

*** THE REAL HTML SOURCE PAGE RESULTING FROM THE MONITOR URI /ha/UpServer.html *** QUERY : UNIX > echo -e "GET /ha/UpServer.html HTTP/1.1\r\nConnection: Close\r\nHost: \r\n\r\n" | nc xxx.xxx.xxx.xxx 80 RESPONSE : HTTP/1.1 200 OK Date: Tue, 11 Mar 2014 19:11:33 GMT Server: Apache/2.2.1 (Unix) Last-Modified: Mon, 24 Feb 2014 23:05:24 GMT ETag: "xxxx-xxxx-xxxx" Accept-Ranges: bytes Content-Length: xxx Connection: close Content-Type: text/html

 

 

ABCAcronym=ABCHostname

 

 

ABCDEF=host1234

 

 

ABCDEG=host5678

 

 

 

 

2 Replies

  • gbbaus_104974's avatar
    gbbaus_104974
    Historic F5 Account

    Would that page "/ha/UpServer.html" ever give you a '200 OK' but server a different response ? ... ie something other than ABCDEF=host1234 ?

     

    If not the cant you just look for the 200 OK ?

     

    Or if you have the ability to tweak the page html on "/ha/UpServer.html" maybe try removing the "=" sign or looking for the equal sign in the response. My thoughts are that the equal sign might need special escaping (not sure?)

     

  • "/ha/UpServer.html" gives which server of two server is the active server. Each server has its own monitor to check if its name appears in the page as being an ABCDEF or as being an ABCDEG. We have two servers : host1234 and host5678. Each can be an instance of either ABCDEF or ABCDEG. The server monitor detects if he sees his name as a ABCDEF in the status report page. There is a CORBA architecture involved.