My IPS spits out integers and IP addresses in the same field. Some times src_ip may contain “220.127.116.11” or “2078174999”
I need to figure out a way to use extractors or pipelines to determine if the IP address is an integer, and if so convert it to the dotted ip address string.
Can someone help me out here? Is there are function I can use? Write? I tried doing this though rules, but so far not very effective.
If you are not familiar with this practice you can read more here: https://www.norbauer.com/rails-consulting/notes/storing-ip-addresses-as-integers.html