cancel
Showing results for 
Search instead for 
Did you mean: 

I Rule to log source_ip , time_stamp, public_ip

Moustafa
Nimbostratus
Nimbostratus

Hello ,

 

i need to develop i rule to log the accepted connections to the VS as following parameters .

 

wan_source_ip address , Geolocation , time stamp

 

Regards,

2 REPLIES 2

Samir
Nacreous
Nacreous

Make sure your BIGIP is having latest GeoDB then you will able to get correct details but it will be CPU intensive.

Thanks

Moustafa
Nimbostratus
Nimbostratus

hi Samir ,

thanks for information . i tried the below I rule i think its working .

 

when CLIENT_ACCEPTED {

  log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"

log local0. "cloc [whereis [IP::client_addr] country]"

log local0. "Geo Client ([IP::client_addr]) detected"

  }