2021-11-17 02:28 AM
Hello,
I want to know that, how can i found which ip are currently used in our premises to this particualr IP range.
Such as 192.168.0.92 to 192.168.254.92
Thanks in Advance
2021-11-24 07:00 PM
Hello
In the NetWitness UI, Investigate you can select a Broker or Concentrator and an appropriate time range.
Run a query on the ip.src (Source IP Address) like the following.
For the CIDR equivalent range, 192.168.0.0 - 192.168.255.255
ip.src=192.168.0.0/16
For the given range, 192.168.0.92-192.168.254.92
ip.src=192.168.0.92-192.168.254.92
This will show the range of Source IP Addresses seen by NetWitness in a given time frame.