Exceeding IPs in one list

cancel
Showing results for 
Search instead for 
Did you mean: 

Exceeding IPs in one list

L3 Networker

Hi,

 

The miner Ransomware IP has > 10000 so I'am wondering how I could solve this issue. Should have some output feed that you can define to take a certain amount of IP's so you can map that on your hardware. And then create a second output that is skippen a defined amount of IPs an creating output feed with next range of IPs

Something like:

miner => processor aggregator => output A en output B.

=> output A : IP = 1 - 5000

=> output B: IP = 5001 till 10000

...

Maybe any idea?

 

Regards,

Kevin

1 REPLY 1

L3 Networker

you can use QUERY_STRING on feed URL of s=start, n=num as discussed here:

 

https://live.paloaltonetworks.com/t5/MineMeld-Discussions/Confused-over-EBL-size-limit/m-p/104038/

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!