SANS.ASN.Detail: Retrieves SANS ASN intel currently tracked IP detail

In hrbrmstr/netintel: Various network intelligence routines

Description

Retrieves SANS ASN intel currently tracked IP detail

Usage

SANS.ASN.Detail(asn,
  sans.base.url = "http://isc.sans.edu/asdetailsascii.html?as=")

Arguments

asn	ASN to lookup (character) - no AS prefix
sans.base.url	SANS server base URL (chr) - defaults to http://isc.sans.edu/asdetailsascii.html?as=

Value

data frame of SANS ASN IP data

• Source.IP is 0 padded so each byte is three digits long

• Reports.Count number of packets received

• Targets.Count number of target IPs that reported packets from this source

• First.Seen First time we saw a packet from this source

• Last.Seen Last time we saw a packet from this source

• Updated.Date.Time Last date+time the record was updated

Note

IPs are removed if they have not been seen in 30 days.

See Also

https://isc.sans.edu/as.html

hrbrmstr/netintel documentation built on May 17, 2019, 5:11 p.m.