Feature #14770
open
Search for addresses and ports optimization
0%
Description
The search field for source IP addresses requires a bit of optimization.
If you search for source IP 192.168.3.3 then any IP that starts with '3' in the 4th octet will be picked up - see screenshot.
There needs to be a way to force a /32 as its clearly a regex string behind all the search fields. When dealing with networking, its best to be specific and not general. So if i am looking for any log for port 80, then 8080 or 80443 shouldnt come up and the same goes for IPs. If there is a need to include ranges then that should be either a separate field which includes "Range" option OR use the same field but provide a note to the administrator to wrap their queries in quotes ""
Files
Updated by Mike Moore 8 months ago
I understand there is a note for admins to use regex style but there really should be a simplier way....
a seperate source field that matches exactly on whats needed. Perhaps a behind the scene regex expression but the GUI just states "EXACT HOST"