For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Manuel_108718's avatar
Manuel_108718
Icon for Nimbostratus rankNimbostratus
Dec 02, 2009

NCP -NAT

Hello     We want to use a NCP client through our bigip LTM v9.4, NCP client is located in our Local network, and the NCP Server is in the outside network. we have to use NAT in order to re...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Dec 03, 2009
It looks like you're going to need to account for not just the offset of the ncp header, but where in the data stream, if at all, the ip will be that you are looking to replace. Is the field in a reliable location in every packet/flow, or does it change based on request type? Might have to validate the appropriate request type first, then start searching for the right field to perform your replacements. Sounds doable, but will need further analysis of some packet captures. TCP::collect and TCP::payload, as Bhattman has indicated, will be your friends in this effort. Might wanna look up TCL's binary scan command as well.