Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

updated log parser #1

Open
wants to merge 3 commits into
base: master
Choose a base branch
from
Open

Conversation

scott1138
Copy link

@scott1138 scott1138 commented Feb 10, 2021

Hi! I was looking for something to parse a rather large file and came across your script. It didn't do exactly what I wanted but it gave me an idea on what I would want to do. Check it out and see what you think. Here is what the output looks like and how you can call the script:

PS C:\> .\Get-AzureNSGData.ps1 -SrcIPFilter 10.2.8.6 -DstIPFilter 40.112.242.1
File Location: svcconn.json
Processing 1377 flows...
Execution Time: 00:12

TimeStamp    SourceIP SourcePort DestinationIP DestinationPort Protocol TrafficFlow Action Rule
---------    -------- ---------- ------------- --------------- -------- ----------- ------ ----
14:07:31.000 10.2.8.6 53048      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:07:54.000 10.2.8.6 53048      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:27:28.000 10.2.8.6 53345      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:27:51.000 10.2.8.6 53345      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:37:31.000 10.2.8.6 53501      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:37:54.000 10.2.8.6 53501      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:57:28.000 10.2.8.6 53845      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound
14:57:50.000 10.2.8.6 53845      40.112.242.1  443             TCP      Inbound     Allow  UserRule_Allow-All-Inbound

@scott1138 scott1138 marked this pull request as ready for review February 10, 2021 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant