I Rule to log source_ip , time_stamp, public_ip

[Moustafa]

Hello ,

i need to develop i rule to log the accepted connections to the VS as following parameters .

wan_source_ip address , Geolocation , time stamp

Regards,

[Samir]

Make sure your BIGIP is having latest GeoDB then you will able to get correct details but it will be CPU intensive.

Thanks

[Moustafa]

hi Samir ,

thanks for information . i tried the below I rule i think its working .

when CLIENT_ACCEPTED {

  log local0. "Source IP address and Port is [IP::client_addr]:[TCP::client_port]"

log local0. "cloc [whereis [IP::client_addr] country]"

log local0. "Geo Client ([IP::client_addr]) detected"

  }