decimal_to_ipv4

Syntax

decimal_to_ipv4variable_name

decimal_to_ipv4source_variable_nameasdestination_variable_name

Details

The decimal_to_ipv4 statement will convert a decimal value to an IPv4 address in conventional dotted-quad notation (such as 192.168.0.10 ).

The statement will verify that the format of the value to be converted is a valid decimal integer. If not, then the Extractor script will stop with an error.

The statement operates on the value of a variable and can be used in either of the ways illustrated in the Syntax section above. In the first case, the value to be converted is replaced with an ASCII representation of the decimal value and in the second case the value to be converted remains unmodified, the result being placed into the variable named after the 'as' keyword.

If the first variable does not exist, this will cause an error and the Extractor will terminate. If the second variable does not exist then it will be created automatically. If the second variable does exist then its value will be overwritten with the converted value.

The textual IP address generated by the ipv4_to_decimal statement is identical to that represented by the same decimal value in the protocol headers of a network packet.

Example

This Extractor script snippet ...

var x = 3232235530
print Example 1 Original: ${x}
decimal_to_ipv4 x
print Example 1 as dotted-quad: ${x}

var y = 3232235530
decimal_to_ipv4 y as converted
print Example 2 Original: ${y}
print Example 2 as dotted-quad: ${converted}

... will produce the following output:

Example 1 Original: 3232235530
Example 1 as dotted-quad: 192.168.0.10
Example 2 Original: 3232235530
Example 2 as dotted-quad: 192.168.0.10