Forum Discussion
2 Replies
Sort By
Can you clarify your question?
Hi Bloceanc,
to read RAW packet information, you could either use a combination of
,[TCP::collect]
and[TCP::payload]
...[TCP::release]
when CLIENT_ACCEPTED { TCP::collect } when CLIENT_DATA { log local0.debug "TCP Payload: [TCP::payload]" TCP::release TCP::collect }
https://devcentral.f5.com/wiki/iRules.TCP__collect.ashx
... or the
command ...[UDP::payload]
when CLIENT_ACCEPTED { No prequisites are required. } when CLIENT_DATA { log local0.debug "UDP Payload: [UDP::payload]" }
https://devcentral.f5.com/wiki/iRules.UDP__payload.ashx
... or even a combination of
,[SSL::collect]
and[SSL::payload]
...[SSL::release]
when CLIENTSSL_HANDSHAKE { SSL::collect } when CLIENTSSL_DATA { log local0.debug "SSL Payload: [SSL::payload]" SSL::release SSL::collect }
https://devcentral.f5.com/wiki/iRules.SSL__collect.ashx
Cheers, Kai