logstash-codec-netflow 3.8.3 → 3.9.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +5 -0
- data/CONTRIBUTORS +1 -0
- data/docs/index.asciidoc +4 -2
- data/lib/logstash/codecs/netflow/ipfix.yaml +47 -0
- data/logstash-codec-netflow.gemspec +1 -1
- data/spec/codecs/ipfix_test_viptela_data257.dat +0 -0
- data/spec/codecs/ipfix_test_viptela_tpl257.dat +0 -0
- data/spec/codecs/netflow_spec.rb +55 -0
- metadata +93 -91
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 92cb1dff0db3b3d3895ec7113d8bb4435eea7569
|
4
|
+
data.tar.gz: 49ac590c5ce5a8709456a877b87c7098d9f751ff
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: fcbefcbcea05d524abd7e80f35b53036f1995609f595b2920445505f35848974d295008c7d0a261f1a2e702762fa5a912598be1c71da19b0dbe9f22fe7e695b4
|
7
|
+
data.tar.gz: df7b3492b75c5b6a78b58bbdd1e3e26ad25f406ab9916b612f0c21a2f780ef198e491531a7ad7235747fa716fce023a1832c6d6e8b65fc7ffe60ac10b9d2dd29
|
data/CHANGELOG.md
CHANGED
data/CONTRIBUTORS
CHANGED
data/docs/index.asciidoc
CHANGED
@@ -37,9 +37,10 @@ The following Netflow/IPFIX exporters are known to work with the most recent ver
|
|
37
37
|
|Netflow exporter | v5 | v9 | IPFIX | Remarks
|
38
38
|
|Barracuda Firewall | | | y |
|
39
39
|
|Cisco ASA | | y | |
|
40
|
-
|Cisco ASR
|
40
|
+
|Cisco ASR 1k | | | n | Fails because of duplicate fields
|
41
|
+
|Cisco ASR 9k | | y | |
|
41
42
|
|Cisco IOS 12.x | | y | |
|
42
|
-
|Cisco ISR w/ HSL | | n | | https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
|
43
|
+
|Cisco ISR w/ HSL | | n | | Fails because of duplicate fields, see: https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
|
43
44
|
|Cisco WLC | | y | |
|
44
45
|
|Citrix Netscaler | | | y | Still some unknown fields, labeled netscalerUnknown<id>
|
45
46
|
|fprobe | y | | |
|
@@ -55,6 +56,7 @@ The following Netflow/IPFIX exporters are known to work with the most recent ver
|
|
55
56
|
|Ubiquiti Edgerouter X | | y | | With MPLS labels
|
56
57
|
|VMware VDS | | | y | Still some unknown fields
|
57
58
|
|YAF | | | y | With silk and applabel, but no DPI plugin support
|
59
|
+
|vIPtela | | | y |
|
58
60
|
|===========================================================================================
|
59
61
|
|
60
62
|
==== Usage
|
@@ -1202,6 +1202,49 @@
|
|
1202
1202
|
433:
|
1203
1203
|
- :uint64
|
1204
1204
|
- :ignoredLayer2FrameTotalCount
|
1205
|
+
9:
|
1206
|
+
8337:
|
1207
|
+
- :uint64
|
1208
|
+
- :ciscoServerBytesNetwork
|
1209
|
+
8338:
|
1210
|
+
- :uint64
|
1211
|
+
- :ciscoClientBytesNetwork
|
1212
|
+
9252:
|
1213
|
+
- :uint8
|
1214
|
+
- :ciscoServicesWaasSegment
|
1215
|
+
9253:
|
1216
|
+
- :uint8
|
1217
|
+
- :ciscoServicesWaasPassthroughReason
|
1218
|
+
9357:
|
1219
|
+
- :string
|
1220
|
+
- :ciscoAppHTTPUriStatistics
|
1221
|
+
12232:
|
1222
|
+
- :string
|
1223
|
+
- :cisoAppCategoryName
|
1224
|
+
12234:
|
1225
|
+
- :string
|
1226
|
+
- :ciscoAppGroupName
|
1227
|
+
12235:
|
1228
|
+
- :string
|
1229
|
+
- :ciscoAppHTTPHost
|
1230
|
+
12236:
|
1231
|
+
- :ip4_addr
|
1232
|
+
- :ciscoClientIPv4Address
|
1233
|
+
12237:
|
1234
|
+
- :ip4_addr
|
1235
|
+
- :ciscoServerIPv4Address
|
1236
|
+
12240:
|
1237
|
+
- :uint16
|
1238
|
+
- :ciscoClientL4Port
|
1239
|
+
12241:
|
1240
|
+
- :uint16
|
1241
|
+
- :ciscoServerL4Port
|
1242
|
+
12242:
|
1243
|
+
- :uint32
|
1244
|
+
- :ciscoConnectionId
|
1245
|
+
12244:
|
1246
|
+
- :string
|
1247
|
+
- :ciscoAppBusiness
|
1205
1248
|
5951:
|
1206
1249
|
128:
|
1207
1250
|
- :uint32
|
@@ -3555,3 +3598,7 @@
|
|
3555
3598
|
433:
|
3556
3599
|
- :uint64
|
3557
3600
|
- :reverseIgnoredLayer2FrameTotalCount
|
3601
|
+
41916:
|
3602
|
+
4321:
|
3603
|
+
- :uint64
|
3604
|
+
- :viptelaVPNId
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
|
3
3
|
s.name = 'logstash-codec-netflow'
|
4
|
-
s.version = '3.
|
4
|
+
s.version = '3.9.0'
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
6
6
|
s.summary = "Reads Netflow v5 and Netflow v9 data"
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
Binary file
|
Binary file
|
data/spec/codecs/netflow_spec.rb
CHANGED
@@ -2020,6 +2020,61 @@ describe LogStash::Codecs::Netflow do
|
|
2020
2020
|
end
|
2021
2021
|
end
|
2022
2022
|
|
2023
|
+
context "IPFIX vIPtela with VPN id" do
|
2024
|
+
let(:data) do
|
2025
|
+
packets = []
|
2026
|
+
packets << IO.read(File.join(File.dirname(__FILE__), "ipfix_test_viptela_tpl257.dat"), :mode => "rb")
|
2027
|
+
packets << IO.read(File.join(File.dirname(__FILE__), "ipfix_test_viptela_data257.dat"), :mode => "rb")
|
2028
|
+
end
|
2029
|
+
|
2030
|
+
let(:json_events) do
|
2031
|
+
events = []
|
2032
|
+
events << <<-END
|
2033
|
+
{
|
2034
|
+
"@version": "1",
|
2035
|
+
"netflow": {
|
2036
|
+
"destinationTransportPort": 443,
|
2037
|
+
"icmpTypeCodeIPv4": 0,
|
2038
|
+
"sourceIPv4Address": "10.113.7.54",
|
2039
|
+
"ipClassOfService": 48,
|
2040
|
+
"ipPrecedence": 1,
|
2041
|
+
"maximumIpTotalLength": 277,
|
2042
|
+
"egressInterface": 3,
|
2043
|
+
"octetDeltaCount": 775,
|
2044
|
+
"ipNextHopIPv4Address": "10.0.0.1",
|
2045
|
+
"sourceTransportPort": 41717,
|
2046
|
+
"viptelaVPNId": 100,
|
2047
|
+
"destinationIPv4Address": "172.16.21.27",
|
2048
|
+
"octetTotalCount": 775,
|
2049
|
+
"minimumIpTotalLength": 70,
|
2050
|
+
"ipDiffServCodePoint": 12,
|
2051
|
+
"tcpControlBits": 16,
|
2052
|
+
"ingressInterface": 11,
|
2053
|
+
"version": 10,
|
2054
|
+
"packetDeltaCount": 8,
|
2055
|
+
"flowEndReason": 3,
|
2056
|
+
"protocolIdentifier": 6,
|
2057
|
+
"flowEndSeconds": "2017-11-21T14:32:15.000Z",
|
2058
|
+
"flowStartSeconds": "2017-11-21T14:32:15.000Z",
|
2059
|
+
"packetTotalCount": 8
|
2060
|
+
},
|
2061
|
+
"@timestamp": "2017-11-21T14:32:15.000Z"
|
2062
|
+
}
|
2063
|
+
END
|
2064
|
+
events.map{|event| event.gsub(/\s+/, "")}
|
2065
|
+
end
|
2066
|
+
|
2067
|
+
it "should decode raw data" do
|
2068
|
+
expect(decode.size).to eq(1)
|
2069
|
+
expect(decode[0].get("[netflow][viptelaVPNId]")).to eq(100)
|
2070
|
+
end
|
2071
|
+
|
2072
|
+
it "should serialize to json" do
|
2073
|
+
expect(JSON.parse(decode[0].to_json)).to eq(JSON.parse(json_events[0]))
|
2074
|
+
end
|
2075
|
+
end
|
2076
|
+
|
2077
|
+
|
2023
2078
|
|
2024
2079
|
context "IPFIX Barracuda firewall" do
|
2025
2080
|
let(:data) do
|
metadata
CHANGED
@@ -1,17 +1,16 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-codec-netflow
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.
|
4
|
+
version: 3.9.0
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Elastic
|
8
|
-
autorequire:
|
8
|
+
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2017-
|
11
|
+
date: 2017-12-03 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
|
-
name: logstash-core-plugin-api
|
15
14
|
requirement: !ruby/object:Gem::Requirement
|
16
15
|
requirements:
|
17
16
|
- - '>='
|
@@ -20,8 +19,9 @@ dependencies:
|
|
20
19
|
- - <=
|
21
20
|
- !ruby/object:Gem::Version
|
22
21
|
version: '2.99'
|
23
|
-
|
22
|
+
name: logstash-core-plugin-api
|
24
23
|
prerelease: false
|
24
|
+
type: :runtime
|
25
25
|
version_requirements: !ruby/object:Gem::Requirement
|
26
26
|
requirements:
|
27
27
|
- - '>='
|
@@ -31,81 +31,88 @@ dependencies:
|
|
31
31
|
- !ruby/object:Gem::Version
|
32
32
|
version: '2.99'
|
33
33
|
- !ruby/object:Gem::Dependency
|
34
|
-
name: bindata
|
35
34
|
requirement: !ruby/object:Gem::Requirement
|
36
35
|
requirements:
|
37
36
|
- - '>='
|
38
37
|
- !ruby/object:Gem::Version
|
39
38
|
version: 1.5.0
|
40
|
-
|
39
|
+
name: bindata
|
41
40
|
prerelease: false
|
41
|
+
type: :runtime
|
42
42
|
version_requirements: !ruby/object:Gem::Requirement
|
43
43
|
requirements:
|
44
44
|
- - '>='
|
45
45
|
- !ruby/object:Gem::Version
|
46
46
|
version: 1.5.0
|
47
47
|
- !ruby/object:Gem::Dependency
|
48
|
-
name: logstash-devutils
|
49
48
|
requirement: !ruby/object:Gem::Requirement
|
50
49
|
requirements:
|
51
50
|
- - '>='
|
52
51
|
- !ruby/object:Gem::Version
|
53
52
|
version: 1.0.0
|
54
|
-
|
53
|
+
name: logstash-devutils
|
55
54
|
prerelease: false
|
55
|
+
type: :development
|
56
56
|
version_requirements: !ruby/object:Gem::Requirement
|
57
57
|
requirements:
|
58
58
|
- - '>='
|
59
59
|
- !ruby/object:Gem::Version
|
60
60
|
version: 1.0.0
|
61
|
-
description: This gem is a Logstash plugin required to be installed on top of the
|
62
|
-
Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
|
63
|
-
gem is not a stand-alone program
|
61
|
+
description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
|
64
62
|
email: info@elastic.co
|
65
63
|
executables: []
|
66
64
|
extensions: []
|
67
65
|
extra_rdoc_files: []
|
68
66
|
files:
|
67
|
+
- CHANGELOG.md
|
68
|
+
- CONTRIBUTORS
|
69
|
+
- Gemfile
|
70
|
+
- LICENSE
|
71
|
+
- NOTICE.TXT
|
72
|
+
- README.md
|
73
|
+
- RFC_COMPLIANCE_IPFIX.md
|
74
|
+
- RFC_COMPLIANCE_NETFLOW_v9.md
|
75
|
+
- docs/index.asciidoc
|
76
|
+
- lib/logstash/codecs/netflow.rb
|
69
77
|
- lib/logstash/codecs/netflow/iana2yaml.rb
|
70
78
|
- lib/logstash/codecs/netflow/ipfix.yaml
|
71
79
|
- lib/logstash/codecs/netflow/netflow.yaml
|
72
80
|
- lib/logstash/codecs/netflow/util.rb
|
73
|
-
-
|
81
|
+
- logstash-codec-netflow.gemspec
|
74
82
|
- spec/codecs/ipfix.dat
|
83
|
+
- spec/codecs/ipfix_test_barracuda_data256.dat
|
84
|
+
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
85
|
+
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
86
|
+
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
87
|
+
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
88
|
+
- spec/codecs/ipfix_test_netscaler_data.dat
|
89
|
+
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
75
90
|
- spec/codecs/ipfix_test_openbsd_pflow_data.dat
|
76
91
|
- spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
|
92
|
+
- spec/codecs/ipfix_test_viptela_data257.dat
|
93
|
+
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
94
|
+
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
95
|
+
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
96
|
+
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
97
|
+
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
98
|
+
- spec/codecs/ipfix_test_yaf_data45841.dat
|
99
|
+
- spec/codecs/ipfix_test_yaf_data45873.dat
|
100
|
+
- spec/codecs/ipfix_test_yaf_data53248.dat
|
101
|
+
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
102
|
+
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
77
103
|
- spec/codecs/netflow5.dat
|
78
104
|
- spec/codecs/netflow5_test_invalid01.dat
|
79
105
|
- spec/codecs/netflow5_test_invalid02.dat
|
80
106
|
- spec/codecs/netflow5_test_juniper_mx80.dat
|
81
107
|
- spec/codecs/netflow5_test_microtik.dat
|
108
|
+
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
109
|
+
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
110
|
+
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
82
111
|
- spec/codecs/netflow9_test_cisco_asa_1_data.dat
|
83
112
|
- spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
|
84
113
|
- spec/codecs/netflow9_test_cisco_asa_2_data.dat
|
85
114
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
|
86
115
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
|
87
|
-
- spec/codecs/netflow9_test_invalid01.dat
|
88
|
-
- spec/codecs/netflow9_test_macaddr_data.dat
|
89
|
-
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
90
|
-
- spec/codecs/netflow9_test_nprobe_data.dat
|
91
|
-
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
92
|
-
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
93
|
-
- spec/codecs/netflow9_test_valid01.dat
|
94
|
-
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
95
|
-
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
96
|
-
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
97
|
-
- spec/codecs/ipfix_test_netscaler_data.dat
|
98
|
-
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
99
|
-
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
100
|
-
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
101
|
-
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
102
|
-
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
103
|
-
- spec/codecs/ipfix_test_barracuda_data256.dat
|
104
|
-
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
105
|
-
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
106
|
-
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
107
|
-
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
108
|
-
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
109
116
|
- spec/codecs/netflow9_test_cisco_asr9k_data256.dat
|
110
117
|
- spec/codecs/netflow9_test_cisco_asr9k_data260.dat
|
111
118
|
- spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
|
@@ -116,44 +123,37 @@ files:
|
|
116
123
|
- spec/codecs/netflow9_test_cisco_nbar_data262.dat
|
117
124
|
- spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
|
118
125
|
- spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
|
126
|
+
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
119
127
|
- spec/codecs/netflow9_test_cisco_wlc_data261.dat
|
120
128
|
- spec/codecs/netflow9_test_cisco_wlc_tpl.dat
|
121
129
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
|
122
130
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
|
123
131
|
- spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
|
132
|
+
- spec/codecs/netflow9_test_invalid01.dat
|
124
133
|
- spec/codecs/netflow9_test_juniper_srx_tplopt.dat
|
134
|
+
- spec/codecs/netflow9_test_macaddr_data.dat
|
135
|
+
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
136
|
+
- spec/codecs/netflow9_test_nprobe_data.dat
|
125
137
|
- spec/codecs/netflow9_test_nprobe_dpi.dat
|
126
|
-
- spec/codecs/
|
127
|
-
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
128
|
-
- spec/codecs/ipfix_test_yaf_data45841.dat
|
129
|
-
- spec/codecs/ipfix_test_yaf_data45873.dat
|
130
|
-
- spec/codecs/ipfix_test_yaf_data53248.dat
|
131
|
-
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
132
|
-
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
133
|
-
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
134
|
-
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
135
|
-
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
138
|
+
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
136
139
|
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
137
140
|
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
141
|
+
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
142
|
+
- spec/codecs/netflow9_test_streamcore_tpl_data256.dat
|
143
|
+
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
144
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
145
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
146
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
147
|
+
- spec/codecs/netflow9_test_valid01.dat
|
138
148
|
- spec/codecs/netflow_spec.rb
|
139
149
|
- spec/codecs/netflow_stress.py
|
140
|
-
- logstash-codec-netflow.gemspec
|
141
|
-
- RFC_COMPLIANCE_NETFLOW_v9.md
|
142
|
-
- README.md
|
143
|
-
- RFC_COMPLIANCE_IPFIX.md
|
144
|
-
- CHANGELOG.md
|
145
|
-
- CONTRIBUTORS
|
146
|
-
- Gemfile
|
147
|
-
- LICENSE
|
148
|
-
- NOTICE.TXT
|
149
|
-
- docs/index.asciidoc
|
150
150
|
homepage: http://www.elastic.co/guide/en/logstash/current/index.html
|
151
151
|
licenses:
|
152
152
|
- Apache License (2.0)
|
153
153
|
metadata:
|
154
154
|
logstash_plugin: 'true'
|
155
155
|
logstash_group: codec
|
156
|
-
post_install_message:
|
156
|
+
post_install_message:
|
157
157
|
rdoc_options: []
|
158
158
|
require_paths:
|
159
159
|
- lib
|
@@ -168,47 +168,46 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
168
168
|
- !ruby/object:Gem::Version
|
169
169
|
version: '0'
|
170
170
|
requirements: []
|
171
|
-
rubyforge_project:
|
172
|
-
rubygems_version: 2.
|
173
|
-
signing_key:
|
171
|
+
rubyforge_project:
|
172
|
+
rubygems_version: 2.4.8
|
173
|
+
signing_key:
|
174
174
|
specification_version: 4
|
175
175
|
summary: Reads Netflow v5 and Netflow v9 data
|
176
176
|
test_files:
|
177
177
|
- spec/codecs/ipfix.dat
|
178
|
+
- spec/codecs/ipfix_test_barracuda_data256.dat
|
179
|
+
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
180
|
+
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
181
|
+
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
182
|
+
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
183
|
+
- spec/codecs/ipfix_test_netscaler_data.dat
|
184
|
+
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
178
185
|
- spec/codecs/ipfix_test_openbsd_pflow_data.dat
|
179
186
|
- spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
|
187
|
+
- spec/codecs/ipfix_test_viptela_data257.dat
|
188
|
+
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
189
|
+
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
190
|
+
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
191
|
+
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
192
|
+
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
193
|
+
- spec/codecs/ipfix_test_yaf_data45841.dat
|
194
|
+
- spec/codecs/ipfix_test_yaf_data45873.dat
|
195
|
+
- spec/codecs/ipfix_test_yaf_data53248.dat
|
196
|
+
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
197
|
+
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
180
198
|
- spec/codecs/netflow5.dat
|
181
199
|
- spec/codecs/netflow5_test_invalid01.dat
|
182
200
|
- spec/codecs/netflow5_test_invalid02.dat
|
183
201
|
- spec/codecs/netflow5_test_juniper_mx80.dat
|
184
202
|
- spec/codecs/netflow5_test_microtik.dat
|
203
|
+
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
204
|
+
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
205
|
+
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
185
206
|
- spec/codecs/netflow9_test_cisco_asa_1_data.dat
|
186
207
|
- spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
|
187
208
|
- spec/codecs/netflow9_test_cisco_asa_2_data.dat
|
188
209
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
|
189
210
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
|
190
|
-
- spec/codecs/netflow9_test_invalid01.dat
|
191
|
-
- spec/codecs/netflow9_test_macaddr_data.dat
|
192
|
-
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
193
|
-
- spec/codecs/netflow9_test_nprobe_data.dat
|
194
|
-
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
195
|
-
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
196
|
-
- spec/codecs/netflow9_test_valid01.dat
|
197
|
-
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
198
|
-
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
199
|
-
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
200
|
-
- spec/codecs/ipfix_test_netscaler_data.dat
|
201
|
-
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
202
|
-
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
203
|
-
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
204
|
-
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
205
|
-
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
206
|
-
- spec/codecs/ipfix_test_barracuda_data256.dat
|
207
|
-
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
208
|
-
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
209
|
-
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
210
|
-
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
211
|
-
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
212
211
|
- spec/codecs/netflow9_test_cisco_asr9k_data256.dat
|
213
212
|
- spec/codecs/netflow9_test_cisco_asr9k_data260.dat
|
214
213
|
- spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
|
@@ -219,24 +218,27 @@ test_files:
|
|
219
218
|
- spec/codecs/netflow9_test_cisco_nbar_data262.dat
|
220
219
|
- spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
|
221
220
|
- spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
|
221
|
+
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
222
222
|
- spec/codecs/netflow9_test_cisco_wlc_data261.dat
|
223
223
|
- spec/codecs/netflow9_test_cisco_wlc_tpl.dat
|
224
224
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
|
225
225
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
|
226
226
|
- spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
|
227
|
+
- spec/codecs/netflow9_test_invalid01.dat
|
227
228
|
- spec/codecs/netflow9_test_juniper_srx_tplopt.dat
|
229
|
+
- spec/codecs/netflow9_test_macaddr_data.dat
|
230
|
+
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
231
|
+
- spec/codecs/netflow9_test_nprobe_data.dat
|
228
232
|
- spec/codecs/netflow9_test_nprobe_dpi.dat
|
229
|
-
- spec/codecs/
|
230
|
-
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
231
|
-
- spec/codecs/ipfix_test_yaf_data45841.dat
|
232
|
-
- spec/codecs/ipfix_test_yaf_data45873.dat
|
233
|
-
- spec/codecs/ipfix_test_yaf_data53248.dat
|
234
|
-
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
235
|
-
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
236
|
-
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
237
|
-
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
238
|
-
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
233
|
+
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
239
234
|
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
240
235
|
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
236
|
+
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
237
|
+
- spec/codecs/netflow9_test_streamcore_tpl_data256.dat
|
238
|
+
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
239
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
240
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
241
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
242
|
+
- spec/codecs/netflow9_test_valid01.dat
|
241
243
|
- spec/codecs/netflow_spec.rb
|
242
244
|
- spec/codecs/netflow_stress.py
|