Difference between revisions of "Flow/Reporting"

Revision as of 14:12, 14 September 2017

SQL Reporting Page

Available field manipulators

Fields can be converted by appending the following to the table column name
"__btoip" Converts the bytearray value to textual IP address
"__ltomac" Converts the long value to the textual MAC address
"__itoflags" Converts the integer value to the textual Flags Value
"__ltotime" Converts the long value to the textual Date/Time value
"__itoappid" Converts the integer value to the textual Application Name
"__itofwextcode" Converts the integer value to the textual FW Ext Code Name
"__itofwevent" Converts the integer  value to the textual FWEvent Name

Example

select device as device__btoip,srcadd as srcadd__btoip,dstmac as dstmac__ltomac,flags as flags__itoflags,appid as appid__itoappid,* from netflow where srcmac!=0 and flags!=0 limit 10