search

doksu / TA-asngen

ASN Lookup Generator for Splunk
MIT License
10 stars 7 forks source link

Lookup for overlapping networks #12

Open seiimonn opened 5 years ago

seiimonn commented 5 years ago

You state that the lookup matches on the longest netmask. In my testing this does not work. If there are multiple CIDR networks matching there is no result.

doksu commented 5 years ago

Thanks for letting me know. The behaviour of CIDR lookups isn't clearly documented; through testing at the time of development this was the behaviour exhibited, so I suspect it may have been changed in recent versions of Splunk. Will investigate further.