Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add specification for ASN/Autonomous System Number #1663

Open
danielcompton opened this issue Dec 9, 2024 · 0 comments
Open

Add specification for ASN/Autonomous System Number #1663

danielcompton opened this issue Dec 9, 2024 · 0 comments
Labels
area:network enhancement New feature or request experts needed This issue or pull request is outside an area where general approvers feel they can approve triage:needs-triage

Comments

@danielcompton
Copy link

Area(s)

area:network

Is your change request related to a problem? Please describe.

Including the ASN in OpenTelemetry tracing data is helpful when trying to analyze where an attack is coming from. Often attackers use multiple IPs that come from the same ASN. Also, it can be helpful for diagnosing if an issue is specific to one network, or many networks.

Describe the solution you'd like

Add a standard attribute for specifying an ASN, and possibly the ASN name. E.g.

network.as.number
network.as.organization.name

(Borrowing heavily from https://www.elastic.co/guide/en/ecs/current/ecs-as.html).

Describe alternatives you've considered

I can just add this myself, but it seems like a common use.

Additional context

Perhaps this should be available for many different parts of the schema that deal with IP addresses, e.g. client.as.number, destination.as.number.

@danielcompton danielcompton added enhancement New feature or request experts needed This issue or pull request is outside an area where general approvers feel they can approve triage:needs-triage labels Dec 9, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area:network enhancement New feature or request experts needed This issue or pull request is outside an area where general approvers feel they can approve triage:needs-triage
Projects
None yet
Development

No branches or pull requests

1 participant