So, there is no equivalent to the HTTP_REQUEST event for SMB (I'm assuming SMBv2). The only way I could think to do this is to implement an iRule using TCP::collect and the CLIENT_DATA event. You'd basically have to deconstruct the message format, and figure out the routing. Keep in mind, SMB isn't a single request/response like HTTP. There are 3 or 4 messages exchanges for security credentials before you even get to a message containing the UNC path. Sounds like an interesting challenge, but to be honest sounds more like ARX territory to me, unless you start making a bunch of assumptions and overhead.