logstash-codec-netflow 3.1.0 → 3.1.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +16 -0
- data/lib/logstash/codecs/netflow.rb +2 -2
- data/lib/logstash/codecs/netflow/util.rb +2 -2
- data/logstash-codec-netflow.gemspec +2 -2
- metadata +5 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 8238fad0b560a5311bdb38f38347a787ec707f1f
|
4
|
+
data.tar.gz: 7888b221ce1eaf08ea72748b6d846843095b35b5
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1fbcbace10032828575f758811be68f0c647ab86f0c9640a726343dc8924aafafbd936d20367176a87a0fa8cb649627b2bc775bb7c805c703e2f2c26280144f7
|
7
|
+
data.tar.gz: f81b2d77b36c9f6205206ca89c2fb6cfc841033b87105305f3f4a705fd10f00e944c2bc1c6f5f07cb586271d594569ed0d4c16974b038c404cf334c8896de9f4
|
data/CHANGELOG.md
CHANGED
@@ -1,22 +1,38 @@
|
|
1
|
+
## 3.1.1
|
2
|
+
|
3
|
+
- Small update due to breaking change in BinData gem (issue #41)
|
4
|
+
|
1
5
|
## 3.1.0
|
6
|
+
|
2
7
|
- Added IPFIX support
|
8
|
+
|
3
9
|
## 3.0.1
|
10
|
+
|
4
11
|
- Republish all the gems under jruby.
|
12
|
+
|
5
13
|
## 3.0.0
|
14
|
+
|
6
15
|
- Update the plugin to the version 2.0 of the plugin api, this change is required for Logstash 5.0 compatibility. See https://github.com/elastic/logstash/issues/5141
|
7
16
|
- Fixed exception if Netflow data contains MAC addresses (issue #26, issue #34)
|
8
17
|
- Fixed exceptions when receiving invalid Netflow v5 and v9 data (issue #17, issue 18)
|
9
18
|
- Fixed decoding Netflow templates from multiple (non-identical) exporters
|
10
19
|
- Add support for Cisco ASA fields
|
11
20
|
- Add support for Netflow 9 options template with scope fields
|
21
|
+
|
12
22
|
# 2.0.5
|
23
|
+
|
13
24
|
- Depend on logstash-core-plugin-api instead of logstash-core, removing the need to mass update plugins on major releases of logstash
|
25
|
+
|
14
26
|
# 2.0.4
|
27
|
+
|
15
28
|
- New dependency requirements for logstash-core for the 5.0 release
|
29
|
+
|
16
30
|
## 2.0.3
|
31
|
+
|
17
32
|
- Fixed JSON compare flaw in specs
|
18
33
|
|
19
34
|
## 2.0.0
|
35
|
+
|
20
36
|
- Plugins were updated to follow the new shutdown semantic, this mainly allows Logstash to instruct input plugins to terminate gracefully,
|
21
37
|
instead of using Thread.raise on the plugins' threads. Ref: https://github.com/elastic/logstash/pull/3895
|
22
38
|
- Dependency on logstash-core update to 2.0
|
@@ -217,7 +217,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
217
217
|
record.flowset_data.templates.each do |template|
|
218
218
|
catch (:field) do
|
219
219
|
fields = []
|
220
|
-
template.
|
220
|
+
template.record_fields.each do |field|
|
221
221
|
entry = netflow_field_for(field.field_type, field.field_length)
|
222
222
|
throw :field unless entry
|
223
223
|
fields += entry
|
@@ -333,7 +333,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
333
333
|
record.flowset_data.templates.each do |template|
|
334
334
|
catch (:field) do
|
335
335
|
fields = []
|
336
|
-
template.
|
336
|
+
template.record_fields.each do |field|
|
337
337
|
field_type = field.field_type
|
338
338
|
field_length = field.field_length
|
339
339
|
enterprise_id = field.enterprise ? field.enterprise_id : 0
|
@@ -110,7 +110,7 @@ class NetflowTemplateFlowset < BinData::Record
|
|
110
110
|
array :templates, :read_until => lambda { array.num_bytes == flowset_length - 4 } do
|
111
111
|
uint16 :template_id
|
112
112
|
uint16 :field_count
|
113
|
-
array :
|
113
|
+
array :record_fields, :initial_length => :field_count do
|
114
114
|
uint16 :field_type
|
115
115
|
uint16 :field_length
|
116
116
|
end
|
@@ -159,7 +159,7 @@ class IpfixTemplateFlowset < BinData::Record
|
|
159
159
|
array :templates, :read_until => lambda { flowset_length - 4 - array.num_bytes <= 2 } do
|
160
160
|
uint16 :template_id
|
161
161
|
uint16 :field_count
|
162
|
-
array :
|
162
|
+
array :record_fields, :initial_length => :field_count do
|
163
163
|
bit1 :enterprise
|
164
164
|
bit15 :field_type
|
165
165
|
uint16 :field_length
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
|
3
3
|
s.name = 'logstash-codec-netflow'
|
4
|
-
s.version = '3.1.
|
4
|
+
s.version = '3.1.1'
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
6
6
|
s.summary = "The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows."
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
@@ -22,6 +22,6 @@ Gem::Specification.new do |s|
|
|
22
22
|
# Gem dependencies
|
23
23
|
s.add_runtime_dependency "logstash-core-plugin-api", "~> 2.0"
|
24
24
|
s.add_runtime_dependency 'bindata', ['>= 1.5.0']
|
25
|
-
s.add_development_dependency 'logstash-devutils'
|
25
|
+
s.add_development_dependency 'logstash-devutils', ['>= 1.0.0']
|
26
26
|
end
|
27
27
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-codec-netflow
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.1.
|
4
|
+
version: 3.1.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Elastic
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2016-
|
11
|
+
date: 2016-07-08 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|
@@ -43,7 +43,7 @@ dependencies:
|
|
43
43
|
requirements:
|
44
44
|
- - '>='
|
45
45
|
- !ruby/object:Gem::Version
|
46
|
-
version:
|
46
|
+
version: 1.0.0
|
47
47
|
name: logstash-devutils
|
48
48
|
prerelease: false
|
49
49
|
type: :development
|
@@ -51,7 +51,7 @@ dependencies:
|
|
51
51
|
requirements:
|
52
52
|
- - '>='
|
53
53
|
- !ruby/object:Gem::Version
|
54
|
-
version:
|
54
|
+
version: 1.0.0
|
55
55
|
description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
|
56
56
|
email: info@elastic.co
|
57
57
|
executables: []
|
@@ -106,7 +106,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
106
106
|
version: '0'
|
107
107
|
requirements: []
|
108
108
|
rubyforge_project:
|
109
|
-
rubygems_version: 2.4.
|
109
|
+
rubygems_version: 2.4.8
|
110
110
|
signing_key:
|
111
111
|
specification_version: 4
|
112
112
|
summary: The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows.
|