Has anyone been able to make a label that will only have hos

Question

Has anyone been able to make a label that will only have hosts from a specific vlan

zwass · Answer

Would it be possible to detect via IP address in `interface addresses`

benbass · Answer

It should be I am just not sure how to build the query to focus on a 24

zwass · Answer

I m not great at CIDR but seems like a 24 could be targeted like `select address from interface addresses where address like 10 0 0 `

zwass · Answer

Seems like osquery could use some sqlite utility functions for CIDR though it just happens to work well with `LIKE` and 24 ranges because it s anything after the last dot if I m understanding correctly

benbass · Answer

That is what I was thinking CIDR functionality would be ideal but that isn t there I ll play around and test with the like 10 0 0 and see if that works for me

benbass · Answer

Thank you