Forum Discussion
jgranieri
Feb 11, 2014Nimbostratus
can someone advise if this is the right logic, forgive the coding syntax:
when CLIENT_ACCEPTED { log local0. "Entity ID parsing irule - collecting tcp payload" TCP::collect 400 } when CLIENT_DATA { set clientip [IP::client_addr] log local0. "TCP payload collected for $cl
switch -glob [TCP::payload] { "UserID