Forum Discussion
Moustafa
Nimbostratus
NimbostratusI Rule to log source_ip , time_stamp, public_ip
Hello , i need to develop i rule to log the accepted connections to the VS as following parameters . wan_source_ip address , Geolocation , time stamp Regards,
MoustafaNimbostratus
Nimbostratushi Samir ,
thanks for information . i tried the below I rule i think its working .
when CLIENT_ACCEPTED {
log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"
log local0. "cloc [whereis [IP::client_addr] country]"
log local0. "Geo Client ([IP::client_addr]) detected"
}
