Sentinel: How to use the NumberRange in mapping service

  • 3759354
  • 02-Nov-2006
  • 26-Apr-2012

Environment

Microsoft Windows Server 2003 Standard Edition
Microsoft Windows 2000 Server
RedHat Linux
Solaris 9
Sentinel 5.1.x

Situation

How to use the NumberRange in the mapping service in order to find out if an IP address falls in a subnet?

Resolution

To use the NumberRange in the mapping service with an IP, the SIP and DIP events tags should be used directly as the key. Since those fields are defined internally as IP addresses, they will automatically get converted from an IP to an integer before being looked up in a NumberRange map.

To do range maps and use tags besides s_SIP and s_DIP to store an ip address in the event, printf can be used.

Feedback service temporarily unavailable. For content questions or problems, please contact Support.