Help with an iRule to log RPC activity
I am familiar with HTTP iRules but not so much with TCP/RPC within iRules. I am trying to log RPC traffic. Our F5 proxies RPC traffic over port 60,0000 to a pool of CAS servers. I'm thinking I can setup an iRule on the proxy backend that would use a combination of server_connected, tcp::collect and tcp::payload to generate the logs and push to our Splunk system to present the answer. I'm familiar with HTTP logging but not TCP/RPC logging ... My dashboard in Splunk would probably show a table of client_ip, start of connection, timechart of traffic events/hits since open.