Bechara Abou Rahal

ODBC and device.ip

Discussion created by Bechara Abou Rahal on Mar 5, 2017
Latest reply on Jun 20, 2017 by Bechara Abou Rahal



I discovered a bug in parsing device.ip while using odbc collection.



if the database is returning an IP and this IP is mapped to saddr or daddr, then SA is mapping this ip to ip.src and device.ip, which is wrong, should be only mapped to ip.src while getting the device.ip from the odbc configuration.

if the database is not returning an IP, then the device.ip is correct.