We have log files with a mixture of IP Address formats (IPV4, IPV4in6, IPV6). cidrmatch seems to be misbehaving, in that it isn't matching an IPV4 address against an IPV4in6 subnet definition, or vice versa.
Has anyone else seen this?
Does anyone have a solution (apart from writing messy calculated fields to "normalise" IPV4 addresses to IPV4in6)?
I haven't tested IPV4in6 addresses against IPV6 subnets (and v-v), but assume they are also defective.
↧