Environment
Microsoft Windows Server 2003 Standard Edition
Microsoft Windows 2000 Server
RedHat Linux
Solaris 9
Sentinel 5.1.x
Situation
How to use the NumberRange in the mapping service in order to
find out if an IP address falls in a subnet?
Resolution
To use the NumberRange in the mapping service with an IP, the SIP and DIP events tags should be used directly as the key. Since those fields are defined internally as IP addresses, they will automatically get converted from an IP to an integer before being looked up in a NumberRange map.
To do range maps and use tags besides s_SIP and s_DIP to store an ip address in the event, printf can be used.