logstash-codec-netflow 3.6.0 → 3.7.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: c7f0d6772017820e36296cf42defff63a59297ae
-  data.tar.gz: 029c09b6f7a1bf8d55a35fcbf3463be618584c04
+  metadata.gz: 6ec64d7b15d22507520ad309db31e16ba1b8a7e8
+  data.tar.gz: 220897f720240a8661433ed02bd7636a1df2da9a
 SHA512:
-  metadata.gz: f24188a8b785b89544fa711a531988761138ca42bd73f2900765bad3157adc927e76754b20f44f8aef853ebe7ea6ce8c286366fa42e9e0023a0d63d5740ecd3e
-  data.tar.gz: e3e67cd8db7fa5bd111024bfc33a2e3cb7b004bd009610d11580737753540ada6de5c1d9ef5286fadf94d6c1856829897810a9c60b51f6a30264f3b491a615e8
+  metadata.gz: 2c2eee6eaf70600ff45c849e9ba8dee0dbef471dfa671bf76492b55e584d7563c06d7937995a9749147ebe4202c0c29b6dc8e3c51628bec68214e1367a54b108
+  data.tar.gz: 695f58fc390c7dfd0860d1ef4134e3f580e1a06a0d7f69bac3b9b3a548320109be38628d6541be05718c7a9ccb20b163592956d5ceda299a93262389bdadaa04

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 3.7.0
+
+  - Added support for Cisco WLC 8510 software 8.2
+
 ## 3.6.0
 
   - Added support for nprobe L7 DPI

data/CONTRIBUTORS

@@ -16,6 +16,7 @@ Contributors:
 * Jordan Sissel (jordansissel)
 * Jorrit Folmer (jorritfolmer)
 * Keenan Tims (ktims)
+* Marian Craciunescu
 * Matt Dainty (bodgit)
 * Paul Warren (pwarren)
 * Philipp Kahr

data/lib/logstash/codecs/netflow/netflow.yaml

@@ -340,6 +340,9 @@
 367:
 - :mac_addr
 - :wtpMacAddress
+371:
+- :string
+- :userName
 372:
 - :string
 - :applicationCategoryName
@@ -427,6 +430,9 @@
 8393:
 - :uint32
 - :streamcore_id_rule_10
+20000:
+- :uint16
+- :wlan_id
 33000:
 - :acl_id_asa
 - :ingress_acl_id

data/logstash-codec-netflow.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-codec-netflow'
-  s.version         = '3.6.0'
+  s.version         = '3.7.0'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows."
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"

data/spec/codecs/netflow_spec.rb

@@ -1934,6 +1934,17 @@ describe LogStash::Codecs::Netflow do
     end
   end
 
+  context "Netflow 9 Cisco WLC 8500 release 8.2 " do
+    let(:data) do
+      data = []
+      data << IO.read(File.join(File.dirname(__FILE__), "netflow9_test_cisco_wlc_8510_tpl_262.dat"), :mode => "rb")
+    end
+
+    it "should not raise_error" do
+      expect{decode.size}.not_to raise_error
+    end
+  end
+
   context "IPFIX Barracuda firewall" do
     let(:data) do
       packets = []

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-codec-netflow
 version: !ruby/object:Gem::Version
-  version: 3.6.0
+  version: 3.7.0
 platform: ruby
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2017-09-28 00:00:00.000000000 Z
+date: 2017-09-29 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement
@@ -114,6 +114,7 @@ files:
 - spec/codecs/netflow9_test_cisco_nbar_data262.dat
 - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
 - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
+- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
 - spec/codecs/netflow9_test_cisco_wlc_data261.dat
 - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
 - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
@@ -196,6 +197,7 @@ test_files:
 - spec/codecs/netflow9_test_cisco_nbar_data262.dat
 - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
 - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
+- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
 - spec/codecs/netflow9_test_cisco_wlc_data261.dat
 - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
 - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat