[NIFI-12751] [MiNiFi] Prefer IPv4 address for creating NetworkInfo

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.0.0-M3
• Component/s: MiNiFi
• Assignee: Ferenc Kis
• Reporter: Ferenc Kis
• Created: 07/Feb/24 14:54
• Updated: 08/Feb/24 11:41
• Resolved: 08/Feb/24 11:41

Description

On Windows Server 2019 the agent sends the following 

"networkInfo": \{
      "deviceId": "ethernet_32777",
      "hostname": "fe80:0:0:0:6f46:95b8:1b4d:9ab5%ethernet_32777",
      "ipAddress": "fe80:0:0:0:6f46:95b8:1b4d:9ab5%ethernet_32777"
    },

The same network interface also has an IPv4 address where the hostname matches what the hostname command would give back in the shell.

In such cases when the same network interface has IPv4 and IPv6 addresses, prefer the the IPv4 as it provides more information for the user.

Note: this does not affect anything in terms of network connectivity, only the information which is sent by the agent to the C2 server

Issue Links

• links to: GitHub Pull Request #8370