I've used ESI Tool 1.0 Beta 3 to parse Free Radius but in the log MAC
format is 4C-7C-5F-B0-E3-ED or 4C7C5FB0E3ED which cannot parse into the
variable "maddr". There are also some products that use the format
4c7c.5fb0.e3ed.How can I parse it?
I've already uploaded to /etc/netwitness/ng/parsers/ and reloaded
parsers but it's not even shown in Parsers Configuration.The way I
reloaded was go to Explore>decoder>parsers>properties>reload>SendIs it
correct?
Thank you for you reply. Sorry to post uncomplete lua code. This is the
complete
code.---------------------------------------------------------------------------------------------------------------------------------------Step
1 Create Parserlocal mac...
1. I've already used NW LPT 1.0 to parse mac address to a temporary
value (hardware.id) to hold the wrong format and keep it transient.2.
I've tried to use LUA to extract the value from that temp key to eth.src
key as
below:--------------------------...