IP Maven Frequently Asked Questions

1. What is the purpose of combining Zeek logs with netblock information?

   Combining Zeek DNS logs with netblock data provides enhanced visibility into the origin and ownership of IP addresses, allowing for more comprehensive traffic analysis and anomaly detection.

2. Can IP Maven operate in air-gapped environments?

   Yes, IP Maven supports offline operation by allowing you to preload all required data files. Ensure that the netblock data is updated periodically in environments with limited internet access.

3. How often should I update netblock information?

   Netblock data updates depend on your provider's frequency. It is recommended that you update the data monthly or as specified by your licensing agreement.