Jump to content
Welcome to our new Citrix community!

Identify inbound IP address


Recommended Posts

I am inexperienced with the Netscaler in general. We are using our Netscaler for load balancing our website. Someone is hitting a single URL on our webserver with thousands of hits per hour. When we attempt to identify the inbound IP address we see the SNIP IP instead of the client IP.  We have X-Forwarded enabled and we are able to see all other inbound clients by client IP addresses.  

Is there another way to identify this IP address?  Is there auditing of inbound URLs?

Thank You

Link to comment
Share on other sites

You can do a network trace on the NetScaler and then look in Wireshark for the top talker.

 

NetScaler can log TCP Connections to syslog.

 

NetScaler can log HTTP requests to NetScaler Web Logging (NSWL).

 

You can add a Responder policy with a User Defined Log Action that goes to syslog.

  • Like 1
Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...