Analysis filter with subnet list doesn't work properly for overlapping subnets
Information
| Summary: |
The analysis allows using a filter with a subnet list but the query may return invalid results if subnets are overlapping. |
| Environment: |
Product: Flowmon OS Version: 12.1.1 and lower Platform: Any |
| Question/Problem Description: |
I have an analysis filter with a subnet list and analysis results show IPs that do not belong to the filter. For example filter: not net in [10.124.0.0/16 11.0.0.0/2] should cover (filter out) all IPs in the range: 0.0.0.0 - 63.255.255.255 but the result may contain IP 10.10.20.110. |
| Steps to Reproduce: | |
| Error Message: | |
| Defect Number: | FLMON-3160 |
| Enhancement Number: | |
| Cause: | Incorrect subnet filtering and sorting. |
| Resolution: | Upgrade to 12.1.2, 12.2, or newer. |
| Workaround: | Aggregate subnets to avoid overlaps. |
| Notes: | Tool for subnet aggregation https://tehnoblog.org/ip-tools/ip-address-aggregator/. |