Forum Discussion
Brandon_Burns_8
May 23, 2007Historic F5 Account
Also, when I log the TCP::payload length in the CLIENT_ACCEPTED event, I get a 0.
May 23 13:41:55 tmm tmm[1708]: 01220002:6: Rule Non_HTTP_Rule_1 : 0
when CLIENT_ACCEPTED {
if {[TCP::local_port] == 80}{
TCP::collect 5
log "[TCP::payload length]"
}
}
Is this valid or will I get an incorrect response when logging this at the CLIENT_ACCEPTED level?