Forum Discussion
Cory_50405
Oct 09, 2013Noctilucent
Yes, this is a simple one:
rule TCP_logging {
when CLIENT_ACCEPTED {
set remote [IP::remote_addr]:[TCP::remote_port]
set vip [IP::local_addr]:[TCP::local_port]
log "Rule TCP_logging fired, from $remote to vip $vip"
}
}