Malcolm is a powerful, easily deployable network traffic analysis tool suite for full packet capture artifacts (PCAP files), Zeek logs and Suricata alerts.
This is probably not that practically useful. Instead, what if we did something like this: similar to what we do with netbox device autopopulation (probably as another question/setting that's not dependent on the existing autopopulation setting) we also give them a "do you want to autocreate/autopopulate creation of RFC1918 subnets?" option. Essentially, it would do this:
The RFC1918 address space includes the following networks:
The
NETBOX_PRELOAD_PREFIXES
environment variable right now causes Malcolm to create three catch-all prefixes in NetBox:This is probably not that practically useful. Instead, what if we did something like this: similar to what we do with netbox device autopopulation (probably as another question/setting that's not dependent on the existing autopopulation setting) we also give them a "do you want to autocreate/autopopulate creation of RFC1918 subnets?" option. Essentially, it would do this:
The RFC1918 address space includes the following networks:
I'm thinking what we would do would autocreate subnets one level down from those top-level blocks. Ie.,
FWIW I think this would replace the NETBOX_PRELOAD_PREFIXES code completely.