logstash-codec-netflow 4.2.0 → 4.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/CONTRIBUTORS +1 -0
- data/lib/logstash/codecs/netflow.rb +2 -2
- data/lib/logstash/codecs/netflow/ipfix.yaml +14 -17
- data/logstash-codec-netflow.gemspec +1 -1
- data/spec/codecs/netflow_spec.rb +43 -43
- metadata +172 -170
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 5577f3642f1d4136ece8b15c15e94b26718005ce
|
4
|
+
data.tar.gz: 6c539f16ae819a589cbb3b5f16af2e26bce1f550
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: bbe44345d69394da17702b4cb656f2775b960da03ed2f533e23018355e0f89d39b8b64e5de9f1751d21f85b587900a6f4a5e9dbbc370a705f64020b75e6d284d
|
7
|
+
data.tar.gz: 1c441347d6fffc53a28bd5461b003d7a8f6f1c850d53b591788e204c3b6ac1c59b089c3ef55d62499867c4b71b19f59f714c4c9caf65bc39597053423043bf77
|
data/CHANGELOG.md
CHANGED
data/CONTRIBUTORS
CHANGED
@@ -136,7 +136,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
136
136
|
# convert these into absolute times
|
137
137
|
millis = flowset.uptime - v
|
138
138
|
seconds = flowset.unix_sec - (millis / 1000)
|
139
|
-
micros = (flowset.unix_nsec / 1000) - (millis % 1000)
|
139
|
+
micros = (flowset.unix_nsec / 1000) - ((millis % 1000) * 1000)
|
140
140
|
if micros < 0
|
141
141
|
seconds--
|
142
142
|
micros += 1000000
|
@@ -262,7 +262,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
262
262
|
millis = flowset.uptime - v
|
263
263
|
seconds = flowset.unix_sec - (millis / 1000)
|
264
264
|
# v9 did away with the nanosecs field
|
265
|
-
micros = 1000000 - (millis % 1000)
|
265
|
+
micros = 1000000 - ((millis % 1000) * 1000)
|
266
266
|
event[@target][k.to_s] = LogStash::Timestamp.at(seconds, micros).to_iso8601
|
267
267
|
else
|
268
268
|
event[@target][k.to_s] = v.snapshot
|
@@ -2453,37 +2453,34 @@
|
|
2453
2453
|
6876:
|
2454
2454
|
880:
|
2455
2455
|
- :uint8
|
2456
|
-
- :
|
2456
|
+
- :vmwareTenantProtocol
|
2457
2457
|
881:
|
2458
|
-
- :
|
2459
|
-
- :
|
2458
|
+
- :ip4_addr
|
2459
|
+
- :vmwareTenantSourceIPv4
|
2460
2460
|
882:
|
2461
|
-
- :
|
2462
|
-
- :
|
2461
|
+
- :ip4_addr
|
2462
|
+
- :vmwareTenantDestIPv4
|
2463
2463
|
883:
|
2464
|
-
- :
|
2465
|
-
- :
|
2464
|
+
- :ip6_addr
|
2465
|
+
- :vmwareTenantSourceIPv6
|
2466
2466
|
884:
|
2467
|
-
- :
|
2468
|
-
- :
|
2467
|
+
- :ip6_addr
|
2468
|
+
- :vmwareTenantDestIPv6
|
2469
2469
|
886:
|
2470
2470
|
- :uint16
|
2471
|
-
- :
|
2471
|
+
- :vmwareTenantSourcePort
|
2472
2472
|
887:
|
2473
2473
|
- :uint16
|
2474
|
-
- :
|
2474
|
+
- :vmwareTenantDestPort
|
2475
2475
|
888:
|
2476
2476
|
- :uint16
|
2477
|
-
|
2478
|
-
- :vmwareEgressInterfaceTypeID
|
2477
|
+
- :vmwareEgressInterfaceAttr
|
2479
2478
|
889:
|
2480
2479
|
- :uint8
|
2481
|
-
|
2482
|
-
- :vmwareObservationDomainID
|
2480
|
+
- :vmwareVxlanExportRole
|
2483
2481
|
890:
|
2484
2482
|
- :uint16
|
2485
|
-
|
2486
|
-
- :vmwareIngressInterfaceTypeID
|
2483
|
+
- :vmwareIngressInterfaceAttr
|
2487
2484
|
29305:
|
2488
2485
|
1:
|
2489
2486
|
- :uint64
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
|
3
3
|
s.name = 'logstash-codec-netflow'
|
4
|
-
s.version = '4.2.
|
4
|
+
s.version = '4.2.1'
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
6
6
|
s.summary = "Reads Netflow v5, Netflow v9 and IPFIX data"
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
data/spec/codecs/netflow_spec.rb
CHANGED
@@ -48,8 +48,8 @@ describe LogStash::Codecs::Netflow do
|
|
48
48
|
"output_snmp": 0,
|
49
49
|
"in_pkts": 5,
|
50
50
|
"in_bytes": 230,
|
51
|
-
"first_switched": "2015-06-21T11:40:52.
|
52
|
-
"last_switched": "2015-05-02T18:38:08.
|
51
|
+
"first_switched": "2015-06-21T11:40:52.194Z",
|
52
|
+
"last_switched": "2015-05-02T18:38:08.476Z",
|
53
53
|
"l4_src_port": 54435,
|
54
54
|
"l4_dst_port": 22,
|
55
55
|
"tcp_flags": 16,
|
@@ -82,8 +82,8 @@ describe LogStash::Codecs::Netflow do
|
|
82
82
|
"output_snmp": 0,
|
83
83
|
"in_pkts": 4,
|
84
84
|
"in_bytes": 304,
|
85
|
-
"first_switched": "2015-06-21T11:40:52.
|
86
|
-
"last_switched": "2015-05-02T18:38:08.
|
85
|
+
"first_switched": "2015-06-21T11:40:52.194Z",
|
86
|
+
"last_switched": "2015-05-02T18:38:08.476Z",
|
87
87
|
"l4_src_port": 22,
|
88
88
|
"l4_dst_port": 54435,
|
89
89
|
"tcp_flags": 24,
|
@@ -169,8 +169,8 @@ describe LogStash::Codecs::Netflow do
|
|
169
169
|
"flowset_id":1024,
|
170
170
|
"ipv4_src_addr": "172.16.32.100",
|
171
171
|
"ipv4_dst_addr":"172.16.32.248",
|
172
|
-
"last_switched":"2015-10-08T19:03:47.
|
173
|
-
"first_switched":"2015-10-08T19:03:47.
|
172
|
+
"last_switched":"2015-10-08T19:03:47.141Z",
|
173
|
+
"first_switched":"2015-10-08T19:03:47.140Z",
|
174
174
|
"in_bytes":76,
|
175
175
|
"in_pkts":1,
|
176
176
|
"input_snmp":0,
|
@@ -262,9 +262,9 @@ describe LogStash::Codecs::Netflow do
|
|
262
262
|
"l4_src_port": 179,
|
263
263
|
"ipv4_dst_addr": "10.154.231.146",
|
264
264
|
"in_pkts": 2,
|
265
|
-
"first_switched": "2018-10-15T11:28:05.
|
265
|
+
"first_switched": "2018-10-15T11:28:05.019Z",
|
266
266
|
"protocol": 6,
|
267
|
-
"last_switched": "2018-10-15T11:28:24.
|
267
|
+
"last_switched": "2018-10-15T11:28:24.066Z",
|
268
268
|
"ip_protocol_version": 4,
|
269
269
|
"in_bytes": 99,
|
270
270
|
"flow_seq_num": 36,
|
@@ -368,8 +368,8 @@ describe LogStash::Codecs::Netflow do
|
|
368
368
|
"flowset_id":1024,
|
369
369
|
"ipv4_src_addr":"172.16.32.100",
|
370
370
|
"ipv4_dst_addr":"172.16.32.248",
|
371
|
-
"last_switched":"2015-10-08T19:03:47.
|
372
|
-
"first_switched":"2015-10-08T19:03:47.
|
371
|
+
"last_switched":"2015-10-08T19:03:47.141Z",
|
372
|
+
"first_switched":"2015-10-08T19:03:47.140Z",
|
373
373
|
"in_bytes":76,
|
374
374
|
"in_pkts":1,
|
375
375
|
"input_snmp":0,
|
@@ -408,8 +408,8 @@ describe LogStash::Codecs::Netflow do
|
|
408
408
|
"ipv4_next_hop":"0.0.0.0",
|
409
409
|
"src_as":0,
|
410
410
|
"dst_as":0,
|
411
|
-
"last_switched":"2015-10-08T19:05:56.
|
412
|
-
"first_switched":"2015-10-08T19:05:56.
|
411
|
+
"last_switched":"2015-10-08T19:05:56.015Z",
|
412
|
+
"first_switched":"2015-10-08T19:05:56.010Z"
|
413
413
|
},
|
414
414
|
"@version":"1"
|
415
415
|
}
|
@@ -829,7 +829,7 @@ describe LogStash::Codecs::Netflow do
|
|
829
829
|
|
830
830
|
end
|
831
831
|
|
832
|
-
context "Netflow5
|
832
|
+
context "Netflow5 mikrotik" do
|
833
833
|
let(:data) do
|
834
834
|
packets = []
|
835
835
|
packets << IO.read(File.join(File.dirname(__FILE__), "netflow5_test_microtik.dat"), :mode => "rb")
|
@@ -855,8 +855,8 @@ describe LogStash::Codecs::Netflow do
|
|
855
855
|
"output_snmp": 46,
|
856
856
|
"in_pkts": 13,
|
857
857
|
"in_bytes": 11442,
|
858
|
-
"first_switched": "2016-07-21T13:51:42.
|
859
|
-
"last_switched": "2016-07-21T13:51:42.
|
858
|
+
"first_switched": "2016-07-21T13:51:42.254Z",
|
859
|
+
"last_switched": "2016-07-21T13:51:42.254Z",
|
860
860
|
"l4_src_port": 80,
|
861
861
|
"l4_dst_port": 51826,
|
862
862
|
"tcp_flags": 82,
|
@@ -912,8 +912,8 @@ describe LogStash::Codecs::Netflow do
|
|
912
912
|
"output_snmp": 536,
|
913
913
|
"in_pkts": 2,
|
914
914
|
"in_bytes": 104,
|
915
|
-
"first_switched": "2016-07-21T13:52:34.
|
916
|
-
"last_switched": "2016-07-21T13:52:34.
|
915
|
+
"first_switched": "2016-07-21T13:52:34.936Z",
|
916
|
+
"last_switched": "2016-07-21T13:52:34.936Z",
|
917
917
|
"l4_src_port": 37387,
|
918
918
|
"l4_dst_port": 80,
|
919
919
|
"tcp_flags": 16,
|
@@ -956,7 +956,7 @@ describe LogStash::Codecs::Netflow do
|
|
956
956
|
{
|
957
957
|
"netflow": {
|
958
958
|
"l4_src_port": 443,
|
959
|
-
"last_switched": "2018-02-18T05:46:54.
|
959
|
+
"last_switched": "2018-02-18T05:46:54.992Z",
|
960
960
|
"ingressPhysicalInterface": 7,
|
961
961
|
"in_bytes": 187,
|
962
962
|
"tcpOptions": 2164260864,
|
@@ -972,7 +972,7 @@ describe LogStash::Codecs::Netflow do
|
|
972
972
|
"flow_seq_num": 344481,
|
973
973
|
"ipv4_next_hop": "10.232.5.1",
|
974
974
|
"flowset_id": 260,
|
975
|
-
"first_switched": "2018-02-18T05:46:54.
|
975
|
+
"first_switched": "2018-02-18T05:46:54.800Z",
|
976
976
|
"tcp_flags": 25,
|
977
977
|
"ipv4_dst_addr": "10.233.150.21",
|
978
978
|
"ipv4_src_addr": "2.17.140.47",
|
@@ -1014,7 +1014,7 @@ describe LogStash::Codecs::Netflow do
|
|
1014
1014
|
"src_as": 0,
|
1015
1015
|
"flowset_id": 3281,
|
1016
1016
|
"l4_dst_port": 0,
|
1017
|
-
"last_switched": "2018-05-21T09:25:04.
|
1017
|
+
"last_switched": "2018-05-21T09:25:04.928Z",
|
1018
1018
|
"dst_mask": 24,
|
1019
1019
|
"tcp_flags": 0,
|
1020
1020
|
"src_tos": 0,
|
@@ -1029,7 +1029,7 @@ describe LogStash::Codecs::Netflow do
|
|
1029
1029
|
"src_traffic_index": 0,
|
1030
1030
|
"in_bytes": 5092,
|
1031
1031
|
"ipv4_src_addr": "10.22.166.36",
|
1032
|
-
"first_switched": "2018-05-21T09:24:04.
|
1032
|
+
"first_switched": "2018-05-21T09:24:04.922Z",
|
1033
1033
|
"ipv4_dst_addr": "10.21.75.38",
|
1034
1034
|
"ipv4_next_hop": "10.21.17.78",
|
1035
1035
|
"forwarding_status": {
|
@@ -1206,9 +1206,9 @@ describe LogStash::Codecs::Netflow do
|
|
1206
1206
|
"@timestamp": "2018-07-18T01:35:35.000Z",
|
1207
1207
|
"netflow": {
|
1208
1208
|
"in_pkts": 9,
|
1209
|
-
"last_switched": "2018-07-18T01:35:03.
|
1209
|
+
"last_switched": "2018-07-18T01:35:03.969Z",
|
1210
1210
|
"direction": 0,
|
1211
|
-
"first_switched": "2018-07-18T01:34:34.
|
1211
|
+
"first_switched": "2018-07-18T01:34:34.274Z",
|
1212
1212
|
"ipv4_dst_addr": "20.20.255.255",
|
1213
1213
|
"src_tos": 0,
|
1214
1214
|
"ipv4_src_addr": "20.20.20.20",
|
@@ -1275,7 +1275,7 @@ describe LogStash::Codecs::Netflow do
|
|
1275
1275
|
"xlate_src_port": 45380,
|
1276
1276
|
"in_pkts": 6,
|
1277
1277
|
"ipv4_dst_addr": "182.50.136.239",
|
1278
|
-
"first_switched": "2018-05-11T00:54:10.
|
1278
|
+
"first_switched": "2018-05-11T00:54:10.580Z",
|
1279
1279
|
"flowset_id": 262,
|
1280
1280
|
"l4_src_port": 45380,
|
1281
1281
|
"xlate_dst_port": 0,
|
@@ -1286,7 +1286,7 @@ describe LogStash::Codecs::Netflow do
|
|
1286
1286
|
"in_bytes": 748,
|
1287
1287
|
"protocol": 6,
|
1288
1288
|
"flow_end_reason": 3,
|
1289
|
-
"last_switched": "2018-05-11T00:54:10.
|
1289
|
+
"last_switched": "2018-05-11T00:54:10.990Z",
|
1290
1290
|
"input_snmp": 8,
|
1291
1291
|
"out_pkts": 6,
|
1292
1292
|
"out_bytes": 748,
|
@@ -1611,7 +1611,7 @@ describe LogStash::Codecs::Netflow do
|
|
1611
1611
|
"ip_protocol_version": 4,
|
1612
1612
|
"ipv4_dst_addr": "10.2.0.95",
|
1613
1613
|
"src_tos": 0,
|
1614
|
-
"first_switched": "2016-09-10T15:02:54.
|
1614
|
+
"first_switched": "2016-09-10T15:02:54.375Z",
|
1615
1615
|
"flowset_id": 1025,
|
1616
1616
|
"l4_src_port": 47690,
|
1617
1617
|
"out_dst_mac": "44:d9:e7:be:ef:8e",
|
@@ -1626,7 +1626,7 @@ describe LogStash::Codecs::Netflow do
|
|
1626
1626
|
"label": 0,
|
1627
1627
|
"ttl": 4
|
1628
1628
|
},
|
1629
|
-
"last_switched": "2016-09-10T15:23:45.
|
1629
|
+
"last_switched": "2016-09-10T15:23:45.363Z",
|
1630
1630
|
"input_snmp": 2,
|
1631
1631
|
"flows": 0,
|
1632
1632
|
"tcp_flags": 27,
|
@@ -1735,7 +1735,7 @@ describe LogStash::Codecs::Netflow do
|
|
1735
1735
|
"output_snmp": 3,
|
1736
1736
|
"in_pkts": 3,
|
1737
1737
|
"ipv4_dst_addr": "31.13.87.36",
|
1738
|
-
"first_switched": "2017-07-25T04:44:29.
|
1738
|
+
"first_switched": "2017-07-25T04:44:29.522Z",
|
1739
1739
|
"flowset_id": 257,
|
1740
1740
|
"l4_src_port": 61910,
|
1741
1741
|
"version": 9,
|
@@ -1743,7 +1743,7 @@ describe LogStash::Codecs::Netflow do
|
|
1743
1743
|
"ipv4_src_addr": "192.168.99.7",
|
1744
1744
|
"in_bytes": 152,
|
1745
1745
|
"protocol": 6,
|
1746
|
-
"last_switched": "2017-07-25T04:44:38.
|
1746
|
+
"last_switched": "2017-07-25T04:44:38.522Z",
|
1747
1747
|
"input_snmp": 9,
|
1748
1748
|
"out_pkts": 0,
|
1749
1749
|
"out_bytes": 0,
|
@@ -1781,7 +1781,7 @@ describe LogStash::Codecs::Netflow do
|
|
1781
1781
|
{
|
1782
1782
|
"netflow": {
|
1783
1783
|
"in_pkts": 3,
|
1784
|
-
"first_switched": "2017-01-11T11:47:23.
|
1784
|
+
"first_switched": "2017-01-11T11:47:23.867Z",
|
1785
1785
|
"flowset_id": 256,
|
1786
1786
|
"l4_src_port": 8080,
|
1787
1787
|
"streamcore_id_rule_1": 1171,
|
@@ -1803,7 +1803,7 @@ describe LogStash::Codecs::Netflow do
|
|
1803
1803
|
"flow_seq_num": 2143054578,
|
1804
1804
|
"ipv4_src_addr": "100.78.40.201",
|
1805
1805
|
"input_snmp": 1152,
|
1806
|
-
"last_switched": "2017-01-11T11:47:29.
|
1806
|
+
"last_switched": "2017-01-11T11:47:29.879Z",
|
1807
1807
|
"streamcore_wan_rtt": 0,
|
1808
1808
|
"streamcore_total_app_resp_time": 0
|
1809
1809
|
},
|
@@ -1894,7 +1894,7 @@ describe LogStash::Codecs::Netflow do
|
|
1894
1894
|
"netflow": {
|
1895
1895
|
"streamcore_id_rule_10": 0,
|
1896
1896
|
"in_pkts": 11,
|
1897
|
-
"first_switched": "2017-01-11T11:22:44.
|
1897
|
+
"first_switched": "2017-01-11T11:22:44.939Z",
|
1898
1898
|
"flowset_id": 260,
|
1899
1899
|
"l4_src_port": 53483,
|
1900
1900
|
"streamcore_id_rule_1": 1171,
|
@@ -1921,7 +1921,7 @@ describe LogStash::Codecs::Netflow do
|
|
1921
1921
|
"flow_seq_num": 2142545188,
|
1922
1922
|
"ipv4_src_addr": "10.27.8.20",
|
1923
1923
|
"input_snmp": 1148,
|
1924
|
-
"last_switched": "2017-01-11T11:23:35.
|
1924
|
+
"last_switched": "2017-01-11T11:23:35.954Z",
|
1925
1925
|
"streamcore_url": "\/mux.json",
|
1926
1926
|
"streamcore_wan_rtt": 0,
|
1927
1927
|
"streamcore_total_app_resp_time": 19
|
@@ -2134,7 +2134,7 @@ describe LogStash::Codecs::Netflow do
|
|
2134
2134
|
"destinationIPv4Address": "172.18.65.211",
|
2135
2135
|
"destinationTransportPort": 5985,
|
2136
2136
|
"tcpControlBits": 2,
|
2137
|
-
"
|
2137
|
+
"vmwareIngressInterfaceAttr": 1,
|
2138
2138
|
"sourceIPv4Address": "172.18.65.21",
|
2139
2139
|
"ingressInterface": 3,
|
2140
2140
|
"ipClassOfService": 0,
|
@@ -2149,9 +2149,9 @@ describe LogStash::Codecs::Netflow do
|
|
2149
2149
|
"sourceTransportPort": 61209,
|
2150
2150
|
"flowEndMilliseconds": "2016-12-22T12:17:37.000Z",
|
2151
2151
|
"maximumTTL": 128,
|
2152
|
-
"
|
2152
|
+
"vmwareEgressInterfaceAttr": 2,
|
2153
2153
|
"flowStartMilliseconds": "2016-12-22T12:17:37.000Z",
|
2154
|
-
"
|
2154
|
+
"vmwareVxlanExportRole": 0
|
2155
2155
|
},
|
2156
2156
|
"@timestamp": "2016-12-22T12:17:52.000Z",
|
2157
2157
|
"@version": "1"
|
@@ -2342,7 +2342,7 @@ describe LogStash::Codecs::Netflow do
|
|
2342
2342
|
"dst_mask":32,
|
2343
2343
|
"in_pkts":0,
|
2344
2344
|
"ipv4_dst_addr":"239.255.255.250",
|
2345
|
-
"first_switched":"2016-12-23T01:34:52.
|
2345
|
+
"first_switched":"2016-12-23T01:34:52.569Z",
|
2346
2346
|
"flowset_id":256,
|
2347
2347
|
"l4_src_port":0,
|
2348
2348
|
"src_mask":32,
|
@@ -2352,7 +2352,7 @@ describe LogStash::Codecs::Netflow do
|
|
2352
2352
|
"in_bytes":0,
|
2353
2353
|
"protocol":2,
|
2354
2354
|
"input_snmp":2,
|
2355
|
-
"last_switched":"2016-12-23T01:34:52.
|
2355
|
+
"last_switched":"2016-12-23T01:34:52.569Z",
|
2356
2356
|
"tcp_flags":0,
|
2357
2357
|
"engine_id":1,
|
2358
2358
|
"out_pkts":1,
|
@@ -2434,7 +2434,7 @@ describe LogStash::Codecs::Netflow do
|
|
2434
2434
|
"status": 0
|
2435
2435
|
},
|
2436
2436
|
"in_pkts": 4,
|
2437
|
-
"first_switched": "2018-01-29T02:56:52.
|
2437
|
+
"first_switched": "2018-01-29T02:56:52.940Z",
|
2438
2438
|
"flowset_id": 1315,
|
2439
2439
|
"ipv4_next_hop": "10.108.252.41",
|
2440
2440
|
"l4_src_port": 45587,
|
@@ -2541,7 +2541,7 @@ describe LogStash::Codecs::Netflow do
|
|
2541
2541
|
"status": 1
|
2542
2542
|
},
|
2543
2543
|
"in_pkts": 2,
|
2544
|
-
"first_switched": "2016-12-06T10:08:53.
|
2544
|
+
"first_switched": "2016-12-06T10:08:53.377Z",
|
2545
2545
|
"flowset_id": 260,
|
2546
2546
|
"l4_src_port": 443,
|
2547
2547
|
"in_bytes": 112,
|
@@ -2561,7 +2561,7 @@ describe LogStash::Codecs::Netflow do
|
|
2561
2561
|
"ipv4_src_addr": "10.0.29.46",
|
2562
2562
|
"egressVRFID": 1610612736,
|
2563
2563
|
"input_snmp": 75,
|
2564
|
-
"last_switched": "2016-12-06T10:08:54.
|
2564
|
+
"last_switched": "2016-12-06T10:08:54.964Z",
|
2565
2565
|
"flow_sampler_id": 1,
|
2566
2566
|
"bgp_ipv4_next_hop": "10.0.14.27"
|
2567
2567
|
},
|
@@ -2632,7 +2632,7 @@ describe LogStash::Codecs::Netflow do
|
|
2632
2632
|
"dst_as": 0,
|
2633
2633
|
"in_pkts": 36,
|
2634
2634
|
"ipv4_src_prefix": "0.0.0.0",
|
2635
|
-
"first_switched": "2017-02-14T11:10:20.
|
2635
|
+
"first_switched": "2017-02-14T11:10:20.936Z",
|
2636
2636
|
"flowset_id": 262,
|
2637
2637
|
"l4_src_port": 45269,
|
2638
2638
|
"ipv4_next_hop": "0.0.0.0",
|
@@ -2656,7 +2656,7 @@ describe LogStash::Codecs::Netflow do
|
|
2656
2656
|
"ipv4_src_addr": "10.10.172.60",
|
2657
2657
|
"in_src_mac": "00:18:19:9e:6c:01",
|
2658
2658
|
"input_snmp": 1,
|
2659
|
-
"last_switched": "2017-02-14T11:10:21.
|
2659
|
+
"last_switched": "2017-02-14T11:10:21.008Z",
|
2660
2660
|
"flow_sampler_id": 0
|
2661
2661
|
},
|
2662
2662
|
"@timestamp": "2017-02-14T11:10:36.000Z",
|
metadata
CHANGED
@@ -1,135 +1,107 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-codec-netflow
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 4.2.
|
4
|
+
version: 4.2.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Elastic
|
8
|
-
autorequire:
|
8
|
+
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2018-
|
11
|
+
date: 2018-12-30 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
|
+
name: logstash-core-plugin-api
|
14
15
|
requirement: !ruby/object:Gem::Requirement
|
15
16
|
requirements:
|
16
17
|
- - ~>
|
17
18
|
- !ruby/object:Gem::Version
|
18
19
|
version: '2.0'
|
19
|
-
name: logstash-core-plugin-api
|
20
|
-
prerelease: false
|
21
20
|
type: :runtime
|
21
|
+
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - ~>
|
25
25
|
- !ruby/object:Gem::Version
|
26
26
|
version: '2.0'
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
|
+
name: bindata
|
28
29
|
requirement: !ruby/object:Gem::Requirement
|
29
30
|
requirements:
|
30
31
|
- - '>='
|
31
32
|
- !ruby/object:Gem::Version
|
32
33
|
version: 1.5.0
|
33
|
-
name: bindata
|
34
|
-
prerelease: false
|
35
34
|
type: :runtime
|
35
|
+
prerelease: false
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
37
37
|
requirements:
|
38
38
|
- - '>='
|
39
39
|
- !ruby/object:Gem::Version
|
40
40
|
version: 1.5.0
|
41
41
|
- !ruby/object:Gem::Dependency
|
42
|
+
name: logstash-devutils
|
42
43
|
requirement: !ruby/object:Gem::Requirement
|
43
44
|
requirements:
|
44
45
|
- - '>='
|
45
46
|
- !ruby/object:Gem::Version
|
46
47
|
version: 1.0.0
|
47
|
-
name: logstash-devutils
|
48
|
-
prerelease: false
|
49
48
|
type: :development
|
49
|
+
prerelease: false
|
50
50
|
version_requirements: !ruby/object:Gem::Requirement
|
51
51
|
requirements:
|
52
52
|
- - '>='
|
53
53
|
- !ruby/object:Gem::Version
|
54
54
|
version: 1.0.0
|
55
|
-
description: This gem is a Logstash plugin required to be installed on top of the
|
55
|
+
description: This gem is a Logstash plugin required to be installed on top of the
|
56
|
+
Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
|
57
|
+
gem is not a stand-alone program
|
56
58
|
email: info@elastic.co
|
57
59
|
executables: []
|
58
60
|
extensions: []
|
59
61
|
extra_rdoc_files: []
|
60
62
|
files:
|
61
|
-
- CHANGELOG.md
|
62
|
-
- CONTRIBUTORS
|
63
|
-
- Gemfile
|
64
|
-
- LICENSE
|
65
|
-
- NOTICE.TXT
|
66
|
-
- README.md
|
67
|
-
- RFC_COMPLIANCE_IPFIX.md
|
68
|
-
- RFC_COMPLIANCE_NETFLOW_v9.md
|
69
|
-
- docs/index.asciidoc
|
70
|
-
- lib/logstash/codecs/netflow.rb
|
71
63
|
- lib/logstash/codecs/netflow/iana2yaml.rb
|
72
|
-
- lib/logstash/codecs/netflow/ipfix.yaml
|
73
64
|
- lib/logstash/codecs/netflow/netflow.yaml
|
74
65
|
- lib/logstash/codecs/netflow/util.rb
|
75
|
-
- logstash
|
76
|
-
-
|
77
|
-
- spec/codecs/benchmarks/IP6Addr.rb
|
78
|
-
- spec/codecs/benchmarks/IPAddr.rb
|
79
|
-
- spec/codecs/benchmarks/MacAddr.rb
|
80
|
-
- spec/codecs/benchmarks/benchmark_fields.rb
|
81
|
-
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
82
|
-
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
83
|
-
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
84
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
85
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
66
|
+
- lib/logstash/codecs/netflow/ipfix.yaml
|
67
|
+
- lib/logstash/codecs/netflow.rb
|
86
68
|
- spec/codecs/ipfix.dat
|
87
|
-
- spec/codecs/ipfix_stress.py
|
88
|
-
- spec/codecs/ipfix_test_barracuda_data256.dat
|
89
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
90
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
91
|
-
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
92
|
-
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
93
|
-
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
94
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
95
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
96
|
-
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
97
|
-
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
98
|
-
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
99
|
-
- spec/codecs/ipfix_test_netscaler_data.dat
|
100
|
-
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
101
|
-
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
102
|
-
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
103
69
|
- spec/codecs/ipfix_test_openbsd_pflow_data.dat
|
104
70
|
- spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
|
105
|
-
- spec/codecs/ipfix_test_procera_data52935.dat
|
106
|
-
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
107
|
-
- spec/codecs/ipfix_test_viptela_data257.dat
|
108
|
-
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
109
|
-
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
110
|
-
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
111
|
-
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
112
|
-
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
113
|
-
- spec/codecs/ipfix_test_yaf_data45841.dat
|
114
|
-
- spec/codecs/ipfix_test_yaf_data45873.dat
|
115
|
-
- spec/codecs/ipfix_test_yaf_data53248.dat
|
116
|
-
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
117
|
-
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
118
71
|
- spec/codecs/netflow5.dat
|
119
72
|
- spec/codecs/netflow5_test_invalid01.dat
|
120
73
|
- spec/codecs/netflow5_test_invalid02.dat
|
121
74
|
- spec/codecs/netflow5_test_juniper_mx80.dat
|
122
75
|
- spec/codecs/netflow5_test_microtik.dat
|
123
|
-
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
124
|
-
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
125
|
-
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
126
|
-
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
127
|
-
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|
128
76
|
- spec/codecs/netflow9_test_cisco_asa_1_data.dat
|
129
77
|
- spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
|
130
78
|
- spec/codecs/netflow9_test_cisco_asa_2_data.dat
|
131
79
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
|
132
80
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
|
81
|
+
- spec/codecs/netflow9_test_invalid01.dat
|
82
|
+
- spec/codecs/netflow9_test_macaddr_data.dat
|
83
|
+
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
84
|
+
- spec/codecs/netflow9_test_nprobe_data.dat
|
85
|
+
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
86
|
+
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
87
|
+
- spec/codecs/netflow9_test_valid01.dat
|
88
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
89
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
90
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
91
|
+
- spec/codecs/ipfix_test_netscaler_data.dat
|
92
|
+
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
93
|
+
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
94
|
+
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
95
|
+
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
96
|
+
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
97
|
+
- spec/codecs/ipfix_test_barracuda_data256.dat
|
98
|
+
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
99
|
+
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
100
|
+
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
101
|
+
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
102
|
+
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
103
|
+
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
104
|
+
- spec/codecs/netflow_spec.rb
|
133
105
|
- spec/codecs/netflow9_test_cisco_asr9k_data256.dat
|
134
106
|
- spec/codecs/netflow9_test_cisco_asr9k_data260.dat
|
135
107
|
- spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
|
@@ -140,51 +112,81 @@ files:
|
|
140
112
|
- spec/codecs/netflow9_test_cisco_nbar_data262.dat
|
141
113
|
- spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
|
142
114
|
- spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
|
143
|
-
- spec/codecs/
|
115
|
+
- spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
|
144
116
|
- spec/codecs/netflow9_test_cisco_wlc_data261.dat
|
145
117
|
- spec/codecs/netflow9_test_cisco_wlc_tpl.dat
|
146
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
147
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
148
118
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
|
149
119
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
|
150
120
|
- spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
|
151
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
152
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
153
|
-
- spec/codecs/netflow9_test_h3c_data3281.dat
|
154
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
155
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
156
|
-
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
157
|
-
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
158
|
-
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
159
|
-
- spec/codecs/netflow9_test_invalid01.dat
|
160
|
-
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
161
121
|
- spec/codecs/netflow9_test_juniper_srx_tplopt.dat
|
162
|
-
- spec/codecs/netflow9_test_macaddr_data.dat
|
163
|
-
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
164
|
-
- spec/codecs/netflow9_test_nprobe_data.dat
|
165
122
|
- spec/codecs/netflow9_test_nprobe_dpi.dat
|
166
|
-
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
167
|
-
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
168
|
-
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
169
|
-
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
170
|
-
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
171
|
-
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
172
123
|
- spec/codecs/netflow9_test_streamcore_tpl_data256.dat
|
173
124
|
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
174
|
-
- spec/codecs/
|
175
|
-
- spec/codecs/
|
176
|
-
- spec/codecs/
|
177
|
-
- spec/codecs/
|
178
|
-
- spec/codecs/
|
179
|
-
- spec/codecs/
|
125
|
+
- spec/codecs/ipfix_test_yaf_data45841.dat
|
126
|
+
- spec/codecs/ipfix_test_yaf_data45873.dat
|
127
|
+
- spec/codecs/ipfix_test_yaf_data53248.dat
|
128
|
+
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
129
|
+
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
130
|
+
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
131
|
+
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
132
|
+
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
133
|
+
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
134
|
+
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
180
135
|
- spec/codecs/netflow_stress.py
|
136
|
+
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
137
|
+
- spec/codecs/ipfix_test_viptela_data257.dat
|
138
|
+
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
139
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
140
|
+
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
141
|
+
- spec/codecs/ipfix_test_procera_data52935.dat
|
142
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
143
|
+
- spec/codecs/benchmarks/ACLidASA.rb
|
144
|
+
- spec/codecs/benchmarks/MacAddr.rb
|
145
|
+
- spec/codecs/benchmarks/IPAddr.rb
|
146
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
147
|
+
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
148
|
+
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
149
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
150
|
+
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
151
|
+
- spec/codecs/benchmarks/IP6Addr.rb
|
152
|
+
- spec/codecs/benchmarks/benchmark_fields.rb
|
153
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
154
|
+
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
155
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
156
|
+
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
157
|
+
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
158
|
+
- spec/codecs/ipfix_stress.py
|
159
|
+
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
160
|
+
- spec/codecs/netflow9_test_h3c_data3281.dat
|
161
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
162
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
163
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
164
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
165
|
+
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
166
|
+
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
167
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
168
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
169
|
+
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
170
|
+
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
171
|
+
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
172
|
+
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|
173
|
+
- logstash-codec-netflow.gemspec
|
174
|
+
- CHANGELOG.md
|
175
|
+
- README.md
|
176
|
+
- RFC_COMPLIANCE_IPFIX.md
|
177
|
+
- RFC_COMPLIANCE_NETFLOW_v9.md
|
178
|
+
- CONTRIBUTORS
|
179
|
+
- Gemfile
|
180
|
+
- LICENSE
|
181
|
+
- NOTICE.TXT
|
182
|
+
- docs/index.asciidoc
|
181
183
|
homepage: http://www.elastic.co/guide/en/logstash/current/index.html
|
182
184
|
licenses:
|
183
185
|
- Apache License (2.0)
|
184
186
|
metadata:
|
185
187
|
logstash_plugin: 'true'
|
186
188
|
logstash_group: codec
|
187
|
-
post_install_message:
|
189
|
+
post_install_message:
|
188
190
|
rdoc_options: []
|
189
191
|
require_paths:
|
190
192
|
- lib
|
@@ -199,69 +201,49 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
199
201
|
- !ruby/object:Gem::Version
|
200
202
|
version: '0'
|
201
203
|
requirements: []
|
202
|
-
rubyforge_project:
|
203
|
-
rubygems_version: 2.
|
204
|
-
signing_key:
|
204
|
+
rubyforge_project:
|
205
|
+
rubygems_version: 2.0.14.1
|
206
|
+
signing_key:
|
205
207
|
specification_version: 4
|
206
208
|
summary: Reads Netflow v5, Netflow v9 and IPFIX data
|
207
209
|
test_files:
|
208
|
-
- spec/codecs/benchmarks/ACLidASA.rb
|
209
|
-
- spec/codecs/benchmarks/IP6Addr.rb
|
210
|
-
- spec/codecs/benchmarks/IPAddr.rb
|
211
|
-
- spec/codecs/benchmarks/MacAddr.rb
|
212
|
-
- spec/codecs/benchmarks/benchmark_fields.rb
|
213
|
-
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
214
|
-
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
215
|
-
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
216
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
217
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
218
210
|
- spec/codecs/ipfix.dat
|
219
|
-
- spec/codecs/ipfix_stress.py
|
220
|
-
- spec/codecs/ipfix_test_barracuda_data256.dat
|
221
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
222
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
223
|
-
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
224
|
-
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
225
|
-
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
226
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
227
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
228
|
-
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
229
|
-
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
230
|
-
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
231
|
-
- spec/codecs/ipfix_test_netscaler_data.dat
|
232
|
-
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
233
|
-
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
234
|
-
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
235
211
|
- spec/codecs/ipfix_test_openbsd_pflow_data.dat
|
236
212
|
- spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
|
237
|
-
- spec/codecs/ipfix_test_procera_data52935.dat
|
238
|
-
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
239
|
-
- spec/codecs/ipfix_test_viptela_data257.dat
|
240
|
-
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
241
|
-
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
242
|
-
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
243
|
-
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
244
|
-
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
245
|
-
- spec/codecs/ipfix_test_yaf_data45841.dat
|
246
|
-
- spec/codecs/ipfix_test_yaf_data45873.dat
|
247
|
-
- spec/codecs/ipfix_test_yaf_data53248.dat
|
248
|
-
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
249
|
-
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
250
213
|
- spec/codecs/netflow5.dat
|
251
214
|
- spec/codecs/netflow5_test_invalid01.dat
|
252
215
|
- spec/codecs/netflow5_test_invalid02.dat
|
253
216
|
- spec/codecs/netflow5_test_juniper_mx80.dat
|
254
217
|
- spec/codecs/netflow5_test_microtik.dat
|
255
|
-
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
256
|
-
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
257
|
-
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
258
|
-
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
259
|
-
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|
260
218
|
- spec/codecs/netflow9_test_cisco_asa_1_data.dat
|
261
219
|
- spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
|
262
220
|
- spec/codecs/netflow9_test_cisco_asa_2_data.dat
|
263
221
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
|
264
222
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
|
223
|
+
- spec/codecs/netflow9_test_invalid01.dat
|
224
|
+
- spec/codecs/netflow9_test_macaddr_data.dat
|
225
|
+
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
226
|
+
- spec/codecs/netflow9_test_nprobe_data.dat
|
227
|
+
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
228
|
+
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
229
|
+
- spec/codecs/netflow9_test_valid01.dat
|
230
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
231
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
232
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
233
|
+
- spec/codecs/ipfix_test_netscaler_data.dat
|
234
|
+
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
235
|
+
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
236
|
+
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
237
|
+
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
238
|
+
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
239
|
+
- spec/codecs/ipfix_test_barracuda_data256.dat
|
240
|
+
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
241
|
+
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
242
|
+
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
243
|
+
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
244
|
+
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
245
|
+
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
246
|
+
- spec/codecs/netflow_spec.rb
|
265
247
|
- spec/codecs/netflow9_test_cisco_asr9k_data256.dat
|
266
248
|
- spec/codecs/netflow9_test_cisco_asr9k_data260.dat
|
267
249
|
- spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
|
@@ -272,41 +254,61 @@ test_files:
|
|
272
254
|
- spec/codecs/netflow9_test_cisco_nbar_data262.dat
|
273
255
|
- spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
|
274
256
|
- spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
|
275
|
-
- spec/codecs/
|
257
|
+
- spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
|
276
258
|
- spec/codecs/netflow9_test_cisco_wlc_data261.dat
|
277
259
|
- spec/codecs/netflow9_test_cisco_wlc_tpl.dat
|
278
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
279
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
280
260
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
|
281
261
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
|
282
262
|
- spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
|
283
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
284
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
285
|
-
- spec/codecs/netflow9_test_h3c_data3281.dat
|
286
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
287
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
288
|
-
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
289
|
-
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
290
|
-
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
291
|
-
- spec/codecs/netflow9_test_invalid01.dat
|
292
|
-
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
293
263
|
- spec/codecs/netflow9_test_juniper_srx_tplopt.dat
|
294
|
-
- spec/codecs/netflow9_test_macaddr_data.dat
|
295
|
-
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
296
|
-
- spec/codecs/netflow9_test_nprobe_data.dat
|
297
264
|
- spec/codecs/netflow9_test_nprobe_dpi.dat
|
298
|
-
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
299
|
-
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
300
|
-
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
301
|
-
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
302
|
-
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
303
|
-
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
304
265
|
- spec/codecs/netflow9_test_streamcore_tpl_data256.dat
|
305
266
|
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
306
|
-
- spec/codecs/
|
307
|
-
- spec/codecs/
|
308
|
-
- spec/codecs/
|
309
|
-
- spec/codecs/
|
310
|
-
- spec/codecs/
|
311
|
-
- spec/codecs/
|
267
|
+
- spec/codecs/ipfix_test_yaf_data45841.dat
|
268
|
+
- spec/codecs/ipfix_test_yaf_data45873.dat
|
269
|
+
- spec/codecs/ipfix_test_yaf_data53248.dat
|
270
|
+
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
271
|
+
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
272
|
+
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
273
|
+
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
274
|
+
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
275
|
+
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
276
|
+
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
312
277
|
- spec/codecs/netflow_stress.py
|
278
|
+
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
279
|
+
- spec/codecs/ipfix_test_viptela_data257.dat
|
280
|
+
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
281
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
282
|
+
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
283
|
+
- spec/codecs/ipfix_test_procera_data52935.dat
|
284
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
285
|
+
- spec/codecs/benchmarks/ACLidASA.rb
|
286
|
+
- spec/codecs/benchmarks/MacAddr.rb
|
287
|
+
- spec/codecs/benchmarks/IPAddr.rb
|
288
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
289
|
+
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
290
|
+
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
291
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
292
|
+
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
293
|
+
- spec/codecs/benchmarks/IP6Addr.rb
|
294
|
+
- spec/codecs/benchmarks/benchmark_fields.rb
|
295
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
296
|
+
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
297
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
298
|
+
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
299
|
+
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
300
|
+
- spec/codecs/ipfix_stress.py
|
301
|
+
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
302
|
+
- spec/codecs/netflow9_test_h3c_data3281.dat
|
303
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
304
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
305
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
306
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
307
|
+
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
308
|
+
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
309
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
310
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
311
|
+
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
312
|
+
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
313
|
+
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
314
|
+
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|