Hi there Rob van der Putten wrote:
I can probably fool Analog and make it think IPv6 addresses are hostnames; Reverse the order of the quad nibbles, replace ':' with '.', prevent '..' and append a string before feeding the logs to Analog; 2001:888:1533:1::1 => 1.z.1.1533.888.2001.ipv6 (which in this context is more practical then ip6.arpa notation).
ipv6 doesn't work. ipvsix does.
In theory Analog should then neatly categorize unresolved IPv6 addresses by /32 and /48.
SUBORG *.*.ipvsix does this.The Analog output is post processed in order the restore the original IPv6 address;
1.z.1.1533.888.2001.ipvsix => 2001:888:1533:1::1 Regards, Rob