isReservedIP Search Operator

The isReservedIP operator checks if an IPv4 address is reserved as defined by RFC 5735 and returns a boolean.

Syntax

isReservedIP("<IPv4_string>") as <field>

isReservedIP(<IPv4_string_field>) [as <field>]

Rules

• Returns true if the input is a valid reserved IPv4 address.
• Invalid IPv4 addresses are dropped from the results.

The following warning is shown when results are dropped or an IPv6 address is detected:

  

Examples

| isReservedIP(dest_host)

The following returns true:

| isReservedIP("127.0.0.0") as isReserved

The following returns true:

| isReservedIP("169.254.0.0") as isReserved

The following returns true:

| isReservedIP("192.0.0.0") as isReserved