We have log files with a mixture of IP Address formats (IPV4, IPV4in6, IPV6). cidrmatch seems to be misbehaving, in that it isn't matching an IPV4 address against an IPV4in6 subnet definition, or vice-versa.
Has anyone else seen this?
Does anyone have a solution (apart from writing messy calculated fields to "normalise" IPV4 addresses to IPV4in6)?
I haven't tested IPV4in6 addresses against IPV6 subnets (and v-v) but assume they are also defective.
↧