For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Aan_Kasman_590's avatar
Aan_Kasman_590
Icon for Nimbostratus rankNimbostratus
Mar 22, 2007

Tracking hacker using iRule and Honeypot

Does anybody here had an experience to apply the iRule and Honeypot to tracking hacking/attack activities?     Cheers,     foot|oose
application delivery
dev
devops
iRules
Wes_98712's avatar
Wes_98712
Icon for Nimbostratus rankNimbostratus
Mar 22, 2007
Perhaps investigate mirroring on the F5? At least in v4 you were able to mirror connections on a VIP to a specific port, should still be able to do it with v9, just haven't looked.

 

 

At any rate, in terms of iRules with a Honeypot, I personally have not messed with this, other than checking the URI requests for a few security related issues that could mean a potential attack. Be interested to see what others have done.