Open e3rd opened 5 years ago
Also possible for ASNs: https://github.com/certtools/intelmq/issues/543 And reverse DNS: https://github.com/certtools/intelmq/issues/877 See also https://github.com/certtools/intelmq/issues/373
Thanks for sources! It's a though question, hope there will exist a good solution for IntelMQ. Here, I was stuck in design pattern for a long time too. Finally, I've implemented a global config/CLI flag that user can on/off when processing for hostname→IP conversion.
(The rest are awaiting to be implemented.)
Hostname can have multiple IPs, we must have the possibility to duplicate the row for every record.
But how.
Alternative conversion method?
Global flag? (Are there any similar conversions that can output multiple values?)