Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

Reporting

Show EDNS0 Client Subnet IP on reports

New Member

Posts: 3

‎04-28-2020 04:29 AM

1344

Hi all,

I want to know if is possible to show in reports the EDNS0 Client Subnet Ip address (if it is there) instead the client IP. The reason is because all my Infoblox DNS resolvers are behind a load balancer with SNAT, so the client IP of my reports are always the IP address configured on Load Balancer SNAT.

I don't know if this information is on the database and also I don't know how to modify the search to use the ECS instead client ip. I have used some dashboards templetes from this forums and there are very usefull if I can modify the IP showed there.

Thanks in adcance.

Oscar Nogales.

Recommended for You

Latest Annoucements