monocle 1.5.0

A commandline application to search, parse, and process BGP information in public sources.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78

# Monocle Examples

Practical examples demonstrating monocle's lens-based API. Each lens has one example showing its primary use case.

## Quick Start

```bash
cargo run --example <name> --features lib
```

## Lens Examples

| Example | Lens | Description |
|---------|------|-------------|
| `time_lens` | TimeLens | Parse timestamps from various formats |
| `country_lens` | CountryLens | Country code/name lookup |
| `ip_lens` | IpLens | IP address information (ASN, RPKI, geolocation) |
| `parse_lens` | ParseLens | Parse MRT files with filters |
| `only_to_customer` | ParseLens | Filter MRT data by only-to-customer ASN value / presence (RFC 9234) |
| `search_lens` | SearchLens | Search BGP messages via broker |
| `rpki_lens` | RpkiLens | RPKI validation for prefixes |
| `pfx2as_lens` | Pfx2asLens | Prefix-to-ASN mapping lookups |
| `as2rel_lens` | As2relLens | AS-level relationship queries |
| `inspect_lens` | InspectLens | Unified AS/prefix inspection |

## Other Examples

| Example | Description |
|---------|-------------|
| `database` | Low-level database operations |
| `sse_browser_test.html` | Browser-based SSE search streaming test page |

## Usage

All examples use the `lib` feature:

```bash
# Time parsing
cargo run --example time_lens --features lib

# RPKI validation
cargo run --example rpki_lens --features lib

# Unified inspection
cargo run --example inspect_lens --features lib

# Only-to-customer (RFC 9234) filters and display
cargo run --example only_to_customer --features lib
```

## Filtering and displaying only-to-customer (OTC, RFC 9234)

Works in both `monocle parse` (single file) and `monocle search` (broker window).

```bash
# Match a concrete ASN value
monocle parse <mrt-file> --only-to-customer 6777

# Presence / absence wildcards (`*` = attribute present, `!*` = absent)
monocle parse <mrt-file> --only-to-customer '*'
monocle parse <mrt-file> --only-to-customer '!*'

# Select the attribute as an output column (JSON key: only_to_customer)
monocle parse <mrt-file> --fields timestamp,prefix,only-to-customer
```

## Common Pattern

```rust
use monocle::database::MonocleDatabase;
use monocle::lens::rpki::{RpkiLens, RpkiValidationArgs};

let db = MonocleDatabase::open_in_dir("~/.local/share/monocle")?;
let lens = RpkiLens::new(&db);
let result = lens.validate("1.1.1.0/24", 13335)?;
```

See individual example files for complete working code.