Just for clarification, is_valid_ip actually does more than run a basic regex against the string. For ipv4 it slices the address and then runs an evaluation against each piece, which is faster than the regex as far as I can tell from my testing. I don’t recall offhand how it determines valid ipv6 addresses offhand, as I don’t have the addrs.bro script handy.
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| string to address issue w/ is_v6_addr | 2 | 140 | April 1, 2015 | |
| Bro Intel Framework - IP Subnet | 0 | 109 | April 22, 2014 | |
| AW: Bro IPv6 | 0 | 97 | July 20, 2004 | |
| net specification in bro | 1 | 122 | November 17, 2000 | |
| Bro IDS IP-based global whitelist for bro scripts | 0 | 109 | February 3, 2019 |