wanna record user_agent from specific client ip

ok,thanks ,everyone

 

So it is more efficiency to use

 

when CLIENT_ACCEPTED {

 

if { [IP::addr [IP::client_addr] equals 174.76.19.40] } {

 

set log_ua 1

 

} else {

 

set log_ua 0

 

}

 

}

 

when HTTP_REQUEST {

 

if { $log_ua == 1 } {

 

log local0. " 174.76.19.40 uses [HTTP::header value user_agent]"

 

}

 

}

 

 

right?

 

I will delete

 

else {

 

set log_ua 0

 

}

 

because I only want to record these who belong to 174.76.19.40

 

.

 

it will be great help in my case

 

I will try this and post the reult here.