Reports show IP address as 0.0.0.0

Symptoms

The IP address shows as 0.0.0.0. in Guardium.

Causes

While Guardium is decrypting the traffic, the IP address is initially recorded as 0.0.0.0 because the sniffer does not know what the actual IP address is. After the decryption is completed, a separate thread repopulates the session tables with the correct IP address.

Environment

Any database that encrypts the database traffic is affected.

Resolving the problem

Run the same report after a few minutes. To view the correct client IP for newer traffic, add the field Analyzed Client IP from the client/server domain to the report. It is possible that for some rows, the Analyzed Client IP is blank. If it is blank, the decryption for that piece of traffic is not completed.