base/utils/geoip-distance.zeek

Functions to calculate distance between two locations, based on GeoIP data.

Summary

Functions

haversine_distance_ip: function

Returns the distance between two IP addresses using the haversine formula, based on GeoIP database locations.

Detailed Interface

Functions

haversine_distance_ip

Type

function (a1: addr, a2: addr) : double

Returns the distance between two IP addresses using the haversine formula, based on GeoIP database locations. Requires Zeek to be built with GeoIP.

Parameters

• a1 – First IP address.

• a2 – Second IP address.

Returns

The distance between a1 and a2 in miles, or -1.0 if GeoIP data is not available for either of the IP addresses.

See also: haversine_distance, lookup_location