base/utils/geoip-distance.zeek

Functions to calculate distance between two locations, based on GeoIP data.

Summary

Functions

haversine_distance_ip: function

Returns the distance between two IP addresses using the haversine formula, based on GeoIP database locations.

Detailed Interface

Functions

haversine_distance_ip

Type

function (a1: addr, a2: addr) : double

Returns the distance between two IP addresses using the haversine formula, based on GeoIP database locations. Requires Zeek to be built with GeoIP.

A1

First IP address.

A2

Second IP address.

Returns

The distance between a1 and a2 in miles, or -1.0 if GeoIP data is not available for either of the IP addresses.

See also: haversine_distance, lookup_location