ipv4.mode

Selects the IPv4 anonymization mode used by the mmanon action.

This parameter applies to IP Address Anonymization Module (mmanon).

Name:

ipv4.mode

Scope:

input

Type:

string

Default:

input=zero

Required?:

no

Introduced:

7.3.7

Description

The available modes are simple, random, random-consistent, and zero. In simple mode, only octets as a whole can be anonymized and the length of the message is never changed. This means that when the last three octets of the address 10.1.12.123 are anonymized, the result will be 10.x.xx.xxx. The replacement character is configurable via ipv4.replaceChar. This means that the length of the original octets is still visible and may be used to draw some privacy-evasive conclusions. This mode is slightly faster than the other modes, and this may matter in high throughput environments.

The modes random and random-consistent are very similar, in that they both anonymize IP addresses by randomizing the last bits (any number) of a given address. However, while random mode assigns a new random IP address for every address in a message, random-consistent will assign the same randomized address to every instance of the same original address.

The default zero mode will do full anonymization of any number of bits. It will also normalize the address, so that no information about the original IP address is available. For example, if 24 bits are anonymized, 10.1.12.123 would be anonymized to 10.0.0.0.

Input usage

module(load="mmanon")
action(type="mmanon" ipv4.mode="random-consistent")

Legacy names (for reference)

Historic names/directives for compatibility. Do not use in new configs.

  • mode — maps to ipv4.mode (status: legacy)

See also

IP Address Anonymization Module (mmanon)


Support: rsyslog Assistant | GitHub Discussions | GitHub Issues: rsyslog source project

Contributing: Source & docs: rsyslog source project

© 2008–2025 Rainer Gerhards and others. Licensed under the Apache License 2.0.