Has anyone done an ASN lookup in a query? I tried importing an ASN file and saving it as a lookup table. However I'm facing two issues here.
1. CSV file size is around 19 MB with 426,852 rows so the lookup table gets limited to 104,159 rows.
2. The lookup does not return results where mask is less than 24. The reason being I'm computing for 24 bit. Not sure how do I have achieve this
| getCIDRPrefix(dest_ip, toInt(24)) as dest_ip_CIDR
| lookup network, mask, asn, org from /asn on CIDR=dest_ip_CIDR
Please sign in to leave a comment.