The ipv4_to_decimal statement will convert an IPv4 address in conventional dotted-quad notation (such as ) to a decimal value.

The statement will verify that the format of the value to be converted is a valid IPv4 address. If not, then the Extractor script will stop with an error.

The statement operates on the value of a variable and can be used in either of the ways illustrated in the Syntax section above. In the first case, the value to be converted is replaced with an ASCII representation of the decimal value and in the second case the value to be converted remains unmodified, the result being placed in to the variable named after the 'as' keyword.

If the first variable does not exist, this will cause an error and the Extractor will terminate. If the second variable does not exist then it will be created automatically. If the second variable does exist then its value will be overwritten with the converted value.

The decimal value generated by the ipv4_to_decimal statement is identical to the value that represents the IP address in the protocol headers of a network packet.


This Extractor script snippet ...

var x =
print Example 1 Original: ${x}
ipv4_to_decimal x
print Example 1 as decimal: ${x}

var y =
ipv4_to_decimal y as converted
print Example 2 Original: ${y}
print Example 2 as decimal: ${converted}

... will produce the following output:

Example 1 Original:
Example 1 as decimal: 3232235530
Example 2 Original:
Example 2 as decimal: 3232235530

Last updated