The EXCSATRD (Exchange Server Attribute Reply Data) packet is sent by the server as part of the authentication process, in response to an EXCSAT request.
SRVNAM (string): the name of the server machine. Can be an IP address or a host name, or a process name.
EXTNAM (object): an object describing various aspects of the connection, with the properties:
clientName (string): the name of the server application
clientProductId (string): an ID for the product
SRVRLSLV (string): the release level of the server, e.g. SQL11058
SRVCLSNM (string): the server class of the client, e.g. QDB2/LINUXX8664 for a Linux server
This packet type often contains other properties, but they are usually not relevant, except for advanced cases.
When this packet is received, the name of the database user is not yet known, therefore filters will not have access to it for this type of packet.
You could change the release level with
context.packet.SRVRLSLV = 'SQL11056';
Keep in mind that such changes may confuse some clients.