Skip to main content
Panther Knowledge Base

How are IP Addresses normalized and stored in Panther?

QUESTION

 How would Panther normalize these identical IPv6 addresses?
• 1234:1234:1234:0000:0000:1234:1234:1234
• 1234:1234:1234::1234:1234:1234
• 1234:1234:1234:0::1234:1234:1234

ANSWER

 

Panther does not change incoming data, but the IPv6 addresses are expanded fully (e.g., 1234:1234:1234:0000:0000:1234:1234:1234) when putting them into p_any_ip_addresses, which is what is used for searching.

 

 

  • Was this article helpful?