For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Ed_Vitale_28327's avatar
Ed_Vitale_28327
Icon for Nimbostratus rankNimbostratus
Nov 18, 2005

uri scheme

What is the best way to extract the uri scheme (http(s))?     im using ssl on nonstandard ports and need to pass the protocol back to the app in with a header insert.     https://app-a.foo...
application delivery
dev
devops
iRules
JRahm's avatar
JRahm
Icon for Admin rankAdmin
Nov 18, 2005
You could also do a TCP::collect and look for the various SSL handshake signatures immediately following the TCP header:

 

 

0x010002 (SSL version 2)

 

0x160300 (SSL version 3)

 

0x160301 (TLS version 1)

 

 

My captures show SSLv2 signature at tcp offset 23 and SSLv3/TLSv1 signatures at tcp offset 21

 

 

HTH