For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

keving9012_2467's avatar
keving9012_2467
Icon for Nimbostratus rankNimbostratus
Apr 13, 2016

STREAM Max Matchsize logging

Hello F5 community! I'm trying to log headers from requests that hit our Stream Max Matchsize that we have specified in an iRule. Is there anyway to do this? Another option I've been looking into is logging the header when HTTP_RESPONSE is > the STREAM max matchsize. I've seen examples of people logging the header when the header itself is above a certain value. Is there anyway to do this on STREAM Size?

 

Thank you for your time and for reading this.

 

BIG-IP
devops
iRules

1 Reply

  • Yann_Desmarest's avatar
    Yann_Desmarest
    Icon for Cirrus rankCirrus
    May 29, 2016

    Hi,

    Not sure to fully understand your problem, here an irule developed to log headers exceeding a defined size :

    when HTTP_REQUEST {

    set LogHttpHeader " "
    set max_size 4096 

    foreach aHeader [HTTP::header names] {
        if { [string length [HTTP::header $aHeader]] >= $max_size } {
            append LogHttpHeader "header $aHeader exceed the defined max size;"
        }       
    }    

    log local0. "$LogHttpHeader"
}

    If this is not what you are looking for, can you elaborate a bit your need ?