Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

Reporting

Reply

Show EDNS0 Client Subnet IP on reports

New Member
Posts: 3
1295     0

Hi all,

 

I want to know if is possible to show in reports the EDNS0 Client Subnet Ip address (if it is there) instead the client IP. The reason is because all my Infoblox DNS resolvers are behind a load balancer with SNAT, so the client IP of my reports are always the IP address configured on Load Balancer SNAT. 

 

I don't know if this information is on the database and also I don't know how to modify the search to use the ECS instead client ip. I have used some dashboards templetes from this forums and there are very usefull if I can modify the IP showed there.

 

Thanks in adcance.

 

Oscar Nogales.

Showing results for 
Search instead for 
Did you mean: 

Recommended for You