Deployment Architecture

Indexed IPv6 address from application

bogdan_nicolesc
Communicator

Hi all,

I have an issue with data collected.

I set up Splunk to index "Splunk network monitoring" and I get data in from Google chrome as this:

AddressFamily=ipv6
AddressFamilyId=23
PacketType=connect
PacketTypeId=0
Direction=outbound
Protocol=TCP
ProtocolId=6
LocalAddress=::1
LocalPort=65343
RemoteHostName=50f9:1fe9:ad00:0:3800::
RemoteAddress=::1
RemotePort=9229
ProcessName="c:\program files (x86)\google\chrome\application\chrome.exe"
UserName="ffff.ffff"
UserSid=s-1-5-21.dddd.dddd.dddd.dddd
UserId=0-dddd
HeaderSizeBytes=0
IPsecProtected=0
TransportHeaderSizeBytes=0

I wonder, how do I find what or who or why is RemoteHostName= and who/what/why 50f9:1fe9:ad00:0:3800::

I tried to google, to ping, or other type of means to search that IP to no avail.

Thank you,

Bogdan

Tags (1)
0 Karma
Got questions? Get answers!

Join the Splunk Community Slack to learn, troubleshoot, and make connections with fellow Splunk practitioners in real time!

Meet up IRL or virtually!

Join Splunk User Groups to connect and learn in-person by region or remotely by topic or industry.

Get Updates on the Splunk Community!

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas

Why Splunk Customers Should Attend Cisco Live 2026 Las Vegas     Cisco Live 2026 is almost here, and this ...

What Is the Name of the USB Key Inserted by Bob Smith? (BOTS Hint, Not the Answer)

Hello Splunkers,   So you searched, “what is the name of the usb key inserted by bob smith?”  Not gonna lie… ...

Automating Threat Operations and Threat Hunting with Recorded Future

    Automating Threat Operations and Threat Hunting with Recorded Future June 29, 2026 | Register   Is your ...