For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Nik's avatar
Nik
Icon for Cirrus rankCirrus
Feb 23, 2015

spaces in http monitor recieve string?

I have an http monitor with the recieve string of "TEST BLAH" (without quotes) - this will fail. If I change the receive string to "TEST" or "BLAH" it will succeed. I've tried these other patterns as well however none of which have worked for me:

 

  • TEST\ BLAH
  • TEST%20BLAH
  • TEST\%20BLAH
  • (TEST\ BLAH)
  • (TEST%20BLAH)
  • (TEST\%20BLAH)

Any ideas?

 

11 Replies

  • yeah not working :\

     

    i also tried \sBLAH and TEST\s with no luck.

     

  • shaggy's avatar
    shaggy
    Icon for Nimbostratus rankNimbostratus

    I apologize for the following "you probably already checked these but i don't know that" questions...

     

    I use a lot of monitors looking for response code strings like "200 OK", which are configured as receive strings and work as expected:

     

    1. Are you sure it's a single space between TEST and BLAH, and not multiple spaces or a different whitespace character?
    2. Have you tried using curl and then copying/pasting the expected response into the receive string?
    3. Have you tried looking for other text on the health check page that contain similar text?
  • The text is in the http body and I copied it, like you said. There may be something in the body that's causing it to be escaped.. or maybe there's a max length that can be searched by a monitor? I'm testing different chunks of the source now to find where it dies.

     

    • shaggy's avatar
      shaggy
      Icon for Nimbostratus rankNimbostratus
      5,120 bytes - https://support.f5.com/kb/en-us/solutions/public/3000/400/sol3451.html
    • Nik's avatar
      Nik
      Icon for Cirrus rankCirrus
      There we go, the string i was querying for was on the bottom of the page, well after the 5k byte limit. Thanks for finding this information for me.