logstash-codec-netflow 4.2.0 → 4.2.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/CHANGELOG.md +4 -0
- data/CONTRIBUTORS +1 -0
- data/lib/logstash/codecs/netflow.rb +2 -2
- data/lib/logstash/codecs/netflow/ipfix.yaml +14 -17
- data/logstash-codec-netflow.gemspec +1 -1
- data/spec/codecs/netflow_spec.rb +43 -43
- metadata +172 -170
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 5577f3642f1d4136ece8b15c15e94b26718005ce
|
4
|
+
data.tar.gz: 6c539f16ae819a589cbb3b5f16af2e26bce1f550
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: bbe44345d69394da17702b4cb656f2775b960da03ed2f533e23018355e0f89d39b8b64e5de9f1751d21f85b587900a6f4a5e9dbbc370a705f64020b75e6d284d
|
7
|
+
data.tar.gz: 1c441347d6fffc53a28bd5461b003d7a8f6f1c850d53b591788e204c3b6ac1c59b089c3ef55d62499867c4b71b19f59f714c4c9caf65bc39597053423043bf77
|
data/CHANGELOG.md
CHANGED
data/CONTRIBUTORS
CHANGED
@@ -136,7 +136,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
136
136
|
# convert these into absolute times
|
137
137
|
millis = flowset.uptime - v
|
138
138
|
seconds = flowset.unix_sec - (millis / 1000)
|
139
|
-
micros = (flowset.unix_nsec / 1000) - (millis % 1000)
|
139
|
+
micros = (flowset.unix_nsec / 1000) - ((millis % 1000) * 1000)
|
140
140
|
if micros < 0
|
141
141
|
seconds--
|
142
142
|
micros += 1000000
|
@@ -262,7 +262,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
262
262
|
millis = flowset.uptime - v
|
263
263
|
seconds = flowset.unix_sec - (millis / 1000)
|
264
264
|
# v9 did away with the nanosecs field
|
265
|
-
micros = 1000000 - (millis % 1000)
|
265
|
+
micros = 1000000 - ((millis % 1000) * 1000)
|
266
266
|
event[@target][k.to_s] = LogStash::Timestamp.at(seconds, micros).to_iso8601
|
267
267
|
else
|
268
268
|
event[@target][k.to_s] = v.snapshot
|
@@ -2453,37 +2453,34 @@
|
|
2453
2453
|
6876:
|
2454
2454
|
880:
|
2455
2455
|
- :uint8
|
2456
|
-
- :
|
2456
|
+
- :vmwareTenantProtocol
|
2457
2457
|
881:
|
2458
|
-
- :
|
2459
|
-
- :
|
2458
|
+
- :ip4_addr
|
2459
|
+
- :vmwareTenantSourceIPv4
|
2460
2460
|
882:
|
2461
|
-
- :
|
2462
|
-
- :
|
2461
|
+
- :ip4_addr
|
2462
|
+
- :vmwareTenantDestIPv4
|
2463
2463
|
883:
|
2464
|
-
- :
|
2465
|
-
- :
|
2464
|
+
- :ip6_addr
|
2465
|
+
- :vmwareTenantSourceIPv6
|
2466
2466
|
884:
|
2467
|
-
- :
|
2468
|
-
- :
|
2467
|
+
- :ip6_addr
|
2468
|
+
- :vmwareTenantDestIPv6
|
2469
2469
|
886:
|
2470
2470
|
- :uint16
|
2471
|
-
- :
|
2471
|
+
- :vmwareTenantSourcePort
|
2472
2472
|
887:
|
2473
2473
|
- :uint16
|
2474
|
-
- :
|
2474
|
+
- :vmwareTenantDestPort
|
2475
2475
|
888:
|
2476
2476
|
- :uint16
|
2477
|
-
|
2478
|
-
- :vmwareEgressInterfaceTypeID
|
2477
|
+
- :vmwareEgressInterfaceAttr
|
2479
2478
|
889:
|
2480
2479
|
- :uint8
|
2481
|
-
|
2482
|
-
- :vmwareObservationDomainID
|
2480
|
+
- :vmwareVxlanExportRole
|
2483
2481
|
890:
|
2484
2482
|
- :uint16
|
2485
|
-
|
2486
|
-
- :vmwareIngressInterfaceTypeID
|
2483
|
+
- :vmwareIngressInterfaceAttr
|
2487
2484
|
29305:
|
2488
2485
|
1:
|
2489
2486
|
- :uint64
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
|
3
3
|
s.name = 'logstash-codec-netflow'
|
4
|
-
s.version = '4.2.
|
4
|
+
s.version = '4.2.1'
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
6
6
|
s.summary = "Reads Netflow v5, Netflow v9 and IPFIX data"
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
data/spec/codecs/netflow_spec.rb
CHANGED
@@ -48,8 +48,8 @@ describe LogStash::Codecs::Netflow do
|
|
48
48
|
"output_snmp": 0,
|
49
49
|
"in_pkts": 5,
|
50
50
|
"in_bytes": 230,
|
51
|
-
"first_switched": "2015-06-21T11:40:52.
|
52
|
-
"last_switched": "2015-05-02T18:38:08.
|
51
|
+
"first_switched": "2015-06-21T11:40:52.194Z",
|
52
|
+
"last_switched": "2015-05-02T18:38:08.476Z",
|
53
53
|
"l4_src_port": 54435,
|
54
54
|
"l4_dst_port": 22,
|
55
55
|
"tcp_flags": 16,
|
@@ -82,8 +82,8 @@ describe LogStash::Codecs::Netflow do
|
|
82
82
|
"output_snmp": 0,
|
83
83
|
"in_pkts": 4,
|
84
84
|
"in_bytes": 304,
|
85
|
-
"first_switched": "2015-06-21T11:40:52.
|
86
|
-
"last_switched": "2015-05-02T18:38:08.
|
85
|
+
"first_switched": "2015-06-21T11:40:52.194Z",
|
86
|
+
"last_switched": "2015-05-02T18:38:08.476Z",
|
87
87
|
"l4_src_port": 22,
|
88
88
|
"l4_dst_port": 54435,
|
89
89
|
"tcp_flags": 24,
|
@@ -169,8 +169,8 @@ describe LogStash::Codecs::Netflow do
|
|
169
169
|
"flowset_id":1024,
|
170
170
|
"ipv4_src_addr": "172.16.32.100",
|
171
171
|
"ipv4_dst_addr":"172.16.32.248",
|
172
|
-
"last_switched":"2015-10-08T19:03:47.
|
173
|
-
"first_switched":"2015-10-08T19:03:47.
|
172
|
+
"last_switched":"2015-10-08T19:03:47.141Z",
|
173
|
+
"first_switched":"2015-10-08T19:03:47.140Z",
|
174
174
|
"in_bytes":76,
|
175
175
|
"in_pkts":1,
|
176
176
|
"input_snmp":0,
|
@@ -262,9 +262,9 @@ describe LogStash::Codecs::Netflow do
|
|
262
262
|
"l4_src_port": 179,
|
263
263
|
"ipv4_dst_addr": "10.154.231.146",
|
264
264
|
"in_pkts": 2,
|
265
|
-
"first_switched": "2018-10-15T11:28:05.
|
265
|
+
"first_switched": "2018-10-15T11:28:05.019Z",
|
266
266
|
"protocol": 6,
|
267
|
-
"last_switched": "2018-10-15T11:28:24.
|
267
|
+
"last_switched": "2018-10-15T11:28:24.066Z",
|
268
268
|
"ip_protocol_version": 4,
|
269
269
|
"in_bytes": 99,
|
270
270
|
"flow_seq_num": 36,
|
@@ -368,8 +368,8 @@ describe LogStash::Codecs::Netflow do
|
|
368
368
|
"flowset_id":1024,
|
369
369
|
"ipv4_src_addr":"172.16.32.100",
|
370
370
|
"ipv4_dst_addr":"172.16.32.248",
|
371
|
-
"last_switched":"2015-10-08T19:03:47.
|
372
|
-
"first_switched":"2015-10-08T19:03:47.
|
371
|
+
"last_switched":"2015-10-08T19:03:47.141Z",
|
372
|
+
"first_switched":"2015-10-08T19:03:47.140Z",
|
373
373
|
"in_bytes":76,
|
374
374
|
"in_pkts":1,
|
375
375
|
"input_snmp":0,
|
@@ -408,8 +408,8 @@ describe LogStash::Codecs::Netflow do
|
|
408
408
|
"ipv4_next_hop":"0.0.0.0",
|
409
409
|
"src_as":0,
|
410
410
|
"dst_as":0,
|
411
|
-
"last_switched":"2015-10-08T19:05:56.
|
412
|
-
"first_switched":"2015-10-08T19:05:56.
|
411
|
+
"last_switched":"2015-10-08T19:05:56.015Z",
|
412
|
+
"first_switched":"2015-10-08T19:05:56.010Z"
|
413
413
|
},
|
414
414
|
"@version":"1"
|
415
415
|
}
|
@@ -829,7 +829,7 @@ describe LogStash::Codecs::Netflow do
|
|
829
829
|
|
830
830
|
end
|
831
831
|
|
832
|
-
context "Netflow5
|
832
|
+
context "Netflow5 mikrotik" do
|
833
833
|
let(:data) do
|
834
834
|
packets = []
|
835
835
|
packets << IO.read(File.join(File.dirname(__FILE__), "netflow5_test_microtik.dat"), :mode => "rb")
|
@@ -855,8 +855,8 @@ describe LogStash::Codecs::Netflow do
|
|
855
855
|
"output_snmp": 46,
|
856
856
|
"in_pkts": 13,
|
857
857
|
"in_bytes": 11442,
|
858
|
-
"first_switched": "2016-07-21T13:51:42.
|
859
|
-
"last_switched": "2016-07-21T13:51:42.
|
858
|
+
"first_switched": "2016-07-21T13:51:42.254Z",
|
859
|
+
"last_switched": "2016-07-21T13:51:42.254Z",
|
860
860
|
"l4_src_port": 80,
|
861
861
|
"l4_dst_port": 51826,
|
862
862
|
"tcp_flags": 82,
|
@@ -912,8 +912,8 @@ describe LogStash::Codecs::Netflow do
|
|
912
912
|
"output_snmp": 536,
|
913
913
|
"in_pkts": 2,
|
914
914
|
"in_bytes": 104,
|
915
|
-
"first_switched": "2016-07-21T13:52:34.
|
916
|
-
"last_switched": "2016-07-21T13:52:34.
|
915
|
+
"first_switched": "2016-07-21T13:52:34.936Z",
|
916
|
+
"last_switched": "2016-07-21T13:52:34.936Z",
|
917
917
|
"l4_src_port": 37387,
|
918
918
|
"l4_dst_port": 80,
|
919
919
|
"tcp_flags": 16,
|
@@ -956,7 +956,7 @@ describe LogStash::Codecs::Netflow do
|
|
956
956
|
{
|
957
957
|
"netflow": {
|
958
958
|
"l4_src_port": 443,
|
959
|
-
"last_switched": "2018-02-18T05:46:54.
|
959
|
+
"last_switched": "2018-02-18T05:46:54.992Z",
|
960
960
|
"ingressPhysicalInterface": 7,
|
961
961
|
"in_bytes": 187,
|
962
962
|
"tcpOptions": 2164260864,
|
@@ -972,7 +972,7 @@ describe LogStash::Codecs::Netflow do
|
|
972
972
|
"flow_seq_num": 344481,
|
973
973
|
"ipv4_next_hop": "10.232.5.1",
|
974
974
|
"flowset_id": 260,
|
975
|
-
"first_switched": "2018-02-18T05:46:54.
|
975
|
+
"first_switched": "2018-02-18T05:46:54.800Z",
|
976
976
|
"tcp_flags": 25,
|
977
977
|
"ipv4_dst_addr": "10.233.150.21",
|
978
978
|
"ipv4_src_addr": "2.17.140.47",
|
@@ -1014,7 +1014,7 @@ describe LogStash::Codecs::Netflow do
|
|
1014
1014
|
"src_as": 0,
|
1015
1015
|
"flowset_id": 3281,
|
1016
1016
|
"l4_dst_port": 0,
|
1017
|
-
"last_switched": "2018-05-21T09:25:04.
|
1017
|
+
"last_switched": "2018-05-21T09:25:04.928Z",
|
1018
1018
|
"dst_mask": 24,
|
1019
1019
|
"tcp_flags": 0,
|
1020
1020
|
"src_tos": 0,
|
@@ -1029,7 +1029,7 @@ describe LogStash::Codecs::Netflow do
|
|
1029
1029
|
"src_traffic_index": 0,
|
1030
1030
|
"in_bytes": 5092,
|
1031
1031
|
"ipv4_src_addr": "10.22.166.36",
|
1032
|
-
"first_switched": "2018-05-21T09:24:04.
|
1032
|
+
"first_switched": "2018-05-21T09:24:04.922Z",
|
1033
1033
|
"ipv4_dst_addr": "10.21.75.38",
|
1034
1034
|
"ipv4_next_hop": "10.21.17.78",
|
1035
1035
|
"forwarding_status": {
|
@@ -1206,9 +1206,9 @@ describe LogStash::Codecs::Netflow do
|
|
1206
1206
|
"@timestamp": "2018-07-18T01:35:35.000Z",
|
1207
1207
|
"netflow": {
|
1208
1208
|
"in_pkts": 9,
|
1209
|
-
"last_switched": "2018-07-18T01:35:03.
|
1209
|
+
"last_switched": "2018-07-18T01:35:03.969Z",
|
1210
1210
|
"direction": 0,
|
1211
|
-
"first_switched": "2018-07-18T01:34:34.
|
1211
|
+
"first_switched": "2018-07-18T01:34:34.274Z",
|
1212
1212
|
"ipv4_dst_addr": "20.20.255.255",
|
1213
1213
|
"src_tos": 0,
|
1214
1214
|
"ipv4_src_addr": "20.20.20.20",
|
@@ -1275,7 +1275,7 @@ describe LogStash::Codecs::Netflow do
|
|
1275
1275
|
"xlate_src_port": 45380,
|
1276
1276
|
"in_pkts": 6,
|
1277
1277
|
"ipv4_dst_addr": "182.50.136.239",
|
1278
|
-
"first_switched": "2018-05-11T00:54:10.
|
1278
|
+
"first_switched": "2018-05-11T00:54:10.580Z",
|
1279
1279
|
"flowset_id": 262,
|
1280
1280
|
"l4_src_port": 45380,
|
1281
1281
|
"xlate_dst_port": 0,
|
@@ -1286,7 +1286,7 @@ describe LogStash::Codecs::Netflow do
|
|
1286
1286
|
"in_bytes": 748,
|
1287
1287
|
"protocol": 6,
|
1288
1288
|
"flow_end_reason": 3,
|
1289
|
-
"last_switched": "2018-05-11T00:54:10.
|
1289
|
+
"last_switched": "2018-05-11T00:54:10.990Z",
|
1290
1290
|
"input_snmp": 8,
|
1291
1291
|
"out_pkts": 6,
|
1292
1292
|
"out_bytes": 748,
|
@@ -1611,7 +1611,7 @@ describe LogStash::Codecs::Netflow do
|
|
1611
1611
|
"ip_protocol_version": 4,
|
1612
1612
|
"ipv4_dst_addr": "10.2.0.95",
|
1613
1613
|
"src_tos": 0,
|
1614
|
-
"first_switched": "2016-09-10T15:02:54.
|
1614
|
+
"first_switched": "2016-09-10T15:02:54.375Z",
|
1615
1615
|
"flowset_id": 1025,
|
1616
1616
|
"l4_src_port": 47690,
|
1617
1617
|
"out_dst_mac": "44:d9:e7:be:ef:8e",
|
@@ -1626,7 +1626,7 @@ describe LogStash::Codecs::Netflow do
|
|
1626
1626
|
"label": 0,
|
1627
1627
|
"ttl": 4
|
1628
1628
|
},
|
1629
|
-
"last_switched": "2016-09-10T15:23:45.
|
1629
|
+
"last_switched": "2016-09-10T15:23:45.363Z",
|
1630
1630
|
"input_snmp": 2,
|
1631
1631
|
"flows": 0,
|
1632
1632
|
"tcp_flags": 27,
|
@@ -1735,7 +1735,7 @@ describe LogStash::Codecs::Netflow do
|
|
1735
1735
|
"output_snmp": 3,
|
1736
1736
|
"in_pkts": 3,
|
1737
1737
|
"ipv4_dst_addr": "31.13.87.36",
|
1738
|
-
"first_switched": "2017-07-25T04:44:29.
|
1738
|
+
"first_switched": "2017-07-25T04:44:29.522Z",
|
1739
1739
|
"flowset_id": 257,
|
1740
1740
|
"l4_src_port": 61910,
|
1741
1741
|
"version": 9,
|
@@ -1743,7 +1743,7 @@ describe LogStash::Codecs::Netflow do
|
|
1743
1743
|
"ipv4_src_addr": "192.168.99.7",
|
1744
1744
|
"in_bytes": 152,
|
1745
1745
|
"protocol": 6,
|
1746
|
-
"last_switched": "2017-07-25T04:44:38.
|
1746
|
+
"last_switched": "2017-07-25T04:44:38.522Z",
|
1747
1747
|
"input_snmp": 9,
|
1748
1748
|
"out_pkts": 0,
|
1749
1749
|
"out_bytes": 0,
|
@@ -1781,7 +1781,7 @@ describe LogStash::Codecs::Netflow do
|
|
1781
1781
|
{
|
1782
1782
|
"netflow": {
|
1783
1783
|
"in_pkts": 3,
|
1784
|
-
"first_switched": "2017-01-11T11:47:23.
|
1784
|
+
"first_switched": "2017-01-11T11:47:23.867Z",
|
1785
1785
|
"flowset_id": 256,
|
1786
1786
|
"l4_src_port": 8080,
|
1787
1787
|
"streamcore_id_rule_1": 1171,
|
@@ -1803,7 +1803,7 @@ describe LogStash::Codecs::Netflow do
|
|
1803
1803
|
"flow_seq_num": 2143054578,
|
1804
1804
|
"ipv4_src_addr": "100.78.40.201",
|
1805
1805
|
"input_snmp": 1152,
|
1806
|
-
"last_switched": "2017-01-11T11:47:29.
|
1806
|
+
"last_switched": "2017-01-11T11:47:29.879Z",
|
1807
1807
|
"streamcore_wan_rtt": 0,
|
1808
1808
|
"streamcore_total_app_resp_time": 0
|
1809
1809
|
},
|
@@ -1894,7 +1894,7 @@ describe LogStash::Codecs::Netflow do
|
|
1894
1894
|
"netflow": {
|
1895
1895
|
"streamcore_id_rule_10": 0,
|
1896
1896
|
"in_pkts": 11,
|
1897
|
-
"first_switched": "2017-01-11T11:22:44.
|
1897
|
+
"first_switched": "2017-01-11T11:22:44.939Z",
|
1898
1898
|
"flowset_id": 260,
|
1899
1899
|
"l4_src_port": 53483,
|
1900
1900
|
"streamcore_id_rule_1": 1171,
|
@@ -1921,7 +1921,7 @@ describe LogStash::Codecs::Netflow do
|
|
1921
1921
|
"flow_seq_num": 2142545188,
|
1922
1922
|
"ipv4_src_addr": "10.27.8.20",
|
1923
1923
|
"input_snmp": 1148,
|
1924
|
-
"last_switched": "2017-01-11T11:23:35.
|
1924
|
+
"last_switched": "2017-01-11T11:23:35.954Z",
|
1925
1925
|
"streamcore_url": "\/mux.json",
|
1926
1926
|
"streamcore_wan_rtt": 0,
|
1927
1927
|
"streamcore_total_app_resp_time": 19
|
@@ -2134,7 +2134,7 @@ describe LogStash::Codecs::Netflow do
|
|
2134
2134
|
"destinationIPv4Address": "172.18.65.211",
|
2135
2135
|
"destinationTransportPort": 5985,
|
2136
2136
|
"tcpControlBits": 2,
|
2137
|
-
"
|
2137
|
+
"vmwareIngressInterfaceAttr": 1,
|
2138
2138
|
"sourceIPv4Address": "172.18.65.21",
|
2139
2139
|
"ingressInterface": 3,
|
2140
2140
|
"ipClassOfService": 0,
|
@@ -2149,9 +2149,9 @@ describe LogStash::Codecs::Netflow do
|
|
2149
2149
|
"sourceTransportPort": 61209,
|
2150
2150
|
"flowEndMilliseconds": "2016-12-22T12:17:37.000Z",
|
2151
2151
|
"maximumTTL": 128,
|
2152
|
-
"
|
2152
|
+
"vmwareEgressInterfaceAttr": 2,
|
2153
2153
|
"flowStartMilliseconds": "2016-12-22T12:17:37.000Z",
|
2154
|
-
"
|
2154
|
+
"vmwareVxlanExportRole": 0
|
2155
2155
|
},
|
2156
2156
|
"@timestamp": "2016-12-22T12:17:52.000Z",
|
2157
2157
|
"@version": "1"
|
@@ -2342,7 +2342,7 @@ describe LogStash::Codecs::Netflow do
|
|
2342
2342
|
"dst_mask":32,
|
2343
2343
|
"in_pkts":0,
|
2344
2344
|
"ipv4_dst_addr":"239.255.255.250",
|
2345
|
-
"first_switched":"2016-12-23T01:34:52.
|
2345
|
+
"first_switched":"2016-12-23T01:34:52.569Z",
|
2346
2346
|
"flowset_id":256,
|
2347
2347
|
"l4_src_port":0,
|
2348
2348
|
"src_mask":32,
|
@@ -2352,7 +2352,7 @@ describe LogStash::Codecs::Netflow do
|
|
2352
2352
|
"in_bytes":0,
|
2353
2353
|
"protocol":2,
|
2354
2354
|
"input_snmp":2,
|
2355
|
-
"last_switched":"2016-12-23T01:34:52.
|
2355
|
+
"last_switched":"2016-12-23T01:34:52.569Z",
|
2356
2356
|
"tcp_flags":0,
|
2357
2357
|
"engine_id":1,
|
2358
2358
|
"out_pkts":1,
|
@@ -2434,7 +2434,7 @@ describe LogStash::Codecs::Netflow do
|
|
2434
2434
|
"status": 0
|
2435
2435
|
},
|
2436
2436
|
"in_pkts": 4,
|
2437
|
-
"first_switched": "2018-01-29T02:56:52.
|
2437
|
+
"first_switched": "2018-01-29T02:56:52.940Z",
|
2438
2438
|
"flowset_id": 1315,
|
2439
2439
|
"ipv4_next_hop": "10.108.252.41",
|
2440
2440
|
"l4_src_port": 45587,
|
@@ -2541,7 +2541,7 @@ describe LogStash::Codecs::Netflow do
|
|
2541
2541
|
"status": 1
|
2542
2542
|
},
|
2543
2543
|
"in_pkts": 2,
|
2544
|
-
"first_switched": "2016-12-06T10:08:53.
|
2544
|
+
"first_switched": "2016-12-06T10:08:53.377Z",
|
2545
2545
|
"flowset_id": 260,
|
2546
2546
|
"l4_src_port": 443,
|
2547
2547
|
"in_bytes": 112,
|
@@ -2561,7 +2561,7 @@ describe LogStash::Codecs::Netflow do
|
|
2561
2561
|
"ipv4_src_addr": "10.0.29.46",
|
2562
2562
|
"egressVRFID": 1610612736,
|
2563
2563
|
"input_snmp": 75,
|
2564
|
-
"last_switched": "2016-12-06T10:08:54.
|
2564
|
+
"last_switched": "2016-12-06T10:08:54.964Z",
|
2565
2565
|
"flow_sampler_id": 1,
|
2566
2566
|
"bgp_ipv4_next_hop": "10.0.14.27"
|
2567
2567
|
},
|
@@ -2632,7 +2632,7 @@ describe LogStash::Codecs::Netflow do
|
|
2632
2632
|
"dst_as": 0,
|
2633
2633
|
"in_pkts": 36,
|
2634
2634
|
"ipv4_src_prefix": "0.0.0.0",
|
2635
|
-
"first_switched": "2017-02-14T11:10:20.
|
2635
|
+
"first_switched": "2017-02-14T11:10:20.936Z",
|
2636
2636
|
"flowset_id": 262,
|
2637
2637
|
"l4_src_port": 45269,
|
2638
2638
|
"ipv4_next_hop": "0.0.0.0",
|
@@ -2656,7 +2656,7 @@ describe LogStash::Codecs::Netflow do
|
|
2656
2656
|
"ipv4_src_addr": "10.10.172.60",
|
2657
2657
|
"in_src_mac": "00:18:19:9e:6c:01",
|
2658
2658
|
"input_snmp": 1,
|
2659
|
-
"last_switched": "2017-02-14T11:10:21.
|
2659
|
+
"last_switched": "2017-02-14T11:10:21.008Z",
|
2660
2660
|
"flow_sampler_id": 0
|
2661
2661
|
},
|
2662
2662
|
"@timestamp": "2017-02-14T11:10:36.000Z",
|
metadata
CHANGED
@@ -1,135 +1,107 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-codec-netflow
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 4.2.
|
4
|
+
version: 4.2.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Elastic
|
8
|
-
autorequire:
|
8
|
+
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2018-
|
11
|
+
date: 2018-12-30 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
|
+
name: logstash-core-plugin-api
|
14
15
|
requirement: !ruby/object:Gem::Requirement
|
15
16
|
requirements:
|
16
17
|
- - ~>
|
17
18
|
- !ruby/object:Gem::Version
|
18
19
|
version: '2.0'
|
19
|
-
name: logstash-core-plugin-api
|
20
|
-
prerelease: false
|
21
20
|
type: :runtime
|
21
|
+
prerelease: false
|
22
22
|
version_requirements: !ruby/object:Gem::Requirement
|
23
23
|
requirements:
|
24
24
|
- - ~>
|
25
25
|
- !ruby/object:Gem::Version
|
26
26
|
version: '2.0'
|
27
27
|
- !ruby/object:Gem::Dependency
|
28
|
+
name: bindata
|
28
29
|
requirement: !ruby/object:Gem::Requirement
|
29
30
|
requirements:
|
30
31
|
- - '>='
|
31
32
|
- !ruby/object:Gem::Version
|
32
33
|
version: 1.5.0
|
33
|
-
name: bindata
|
34
|
-
prerelease: false
|
35
34
|
type: :runtime
|
35
|
+
prerelease: false
|
36
36
|
version_requirements: !ruby/object:Gem::Requirement
|
37
37
|
requirements:
|
38
38
|
- - '>='
|
39
39
|
- !ruby/object:Gem::Version
|
40
40
|
version: 1.5.0
|
41
41
|
- !ruby/object:Gem::Dependency
|
42
|
+
name: logstash-devutils
|
42
43
|
requirement: !ruby/object:Gem::Requirement
|
43
44
|
requirements:
|
44
45
|
- - '>='
|
45
46
|
- !ruby/object:Gem::Version
|
46
47
|
version: 1.0.0
|
47
|
-
name: logstash-devutils
|
48
|
-
prerelease: false
|
49
48
|
type: :development
|
49
|
+
prerelease: false
|
50
50
|
version_requirements: !ruby/object:Gem::Requirement
|
51
51
|
requirements:
|
52
52
|
- - '>='
|
53
53
|
- !ruby/object:Gem::Version
|
54
54
|
version: 1.0.0
|
55
|
-
description: This gem is a Logstash plugin required to be installed on top of the
|
55
|
+
description: This gem is a Logstash plugin required to be installed on top of the
|
56
|
+
Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
|
57
|
+
gem is not a stand-alone program
|
56
58
|
email: info@elastic.co
|
57
59
|
executables: []
|
58
60
|
extensions: []
|
59
61
|
extra_rdoc_files: []
|
60
62
|
files:
|
61
|
-
- CHANGELOG.md
|
62
|
-
- CONTRIBUTORS
|
63
|
-
- Gemfile
|
64
|
-
- LICENSE
|
65
|
-
- NOTICE.TXT
|
66
|
-
- README.md
|
67
|
-
- RFC_COMPLIANCE_IPFIX.md
|
68
|
-
- RFC_COMPLIANCE_NETFLOW_v9.md
|
69
|
-
- docs/index.asciidoc
|
70
|
-
- lib/logstash/codecs/netflow.rb
|
71
63
|
- lib/logstash/codecs/netflow/iana2yaml.rb
|
72
|
-
- lib/logstash/codecs/netflow/ipfix.yaml
|
73
64
|
- lib/logstash/codecs/netflow/netflow.yaml
|
74
65
|
- lib/logstash/codecs/netflow/util.rb
|
75
|
-
- logstash
|
76
|
-
-
|
77
|
-
- spec/codecs/benchmarks/IP6Addr.rb
|
78
|
-
- spec/codecs/benchmarks/IPAddr.rb
|
79
|
-
- spec/codecs/benchmarks/MacAddr.rb
|
80
|
-
- spec/codecs/benchmarks/benchmark_fields.rb
|
81
|
-
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
82
|
-
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
83
|
-
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
84
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
85
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
66
|
+
- lib/logstash/codecs/netflow/ipfix.yaml
|
67
|
+
- lib/logstash/codecs/netflow.rb
|
86
68
|
- spec/codecs/ipfix.dat
|
87
|
-
- spec/codecs/ipfix_stress.py
|
88
|
-
- spec/codecs/ipfix_test_barracuda_data256.dat
|
89
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
90
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
91
|
-
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
92
|
-
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
93
|
-
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
94
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
95
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
96
|
-
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
97
|
-
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
98
|
-
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
99
|
-
- spec/codecs/ipfix_test_netscaler_data.dat
|
100
|
-
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
101
|
-
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
102
|
-
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
103
69
|
- spec/codecs/ipfix_test_openbsd_pflow_data.dat
|
104
70
|
- spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
|
105
|
-
- spec/codecs/ipfix_test_procera_data52935.dat
|
106
|
-
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
107
|
-
- spec/codecs/ipfix_test_viptela_data257.dat
|
108
|
-
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
109
|
-
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
110
|
-
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
111
|
-
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
112
|
-
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
113
|
-
- spec/codecs/ipfix_test_yaf_data45841.dat
|
114
|
-
- spec/codecs/ipfix_test_yaf_data45873.dat
|
115
|
-
- spec/codecs/ipfix_test_yaf_data53248.dat
|
116
|
-
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
117
|
-
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
118
71
|
- spec/codecs/netflow5.dat
|
119
72
|
- spec/codecs/netflow5_test_invalid01.dat
|
120
73
|
- spec/codecs/netflow5_test_invalid02.dat
|
121
74
|
- spec/codecs/netflow5_test_juniper_mx80.dat
|
122
75
|
- spec/codecs/netflow5_test_microtik.dat
|
123
|
-
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
124
|
-
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
125
|
-
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
126
|
-
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
127
|
-
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|
128
76
|
- spec/codecs/netflow9_test_cisco_asa_1_data.dat
|
129
77
|
- spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
|
130
78
|
- spec/codecs/netflow9_test_cisco_asa_2_data.dat
|
131
79
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
|
132
80
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
|
81
|
+
- spec/codecs/netflow9_test_invalid01.dat
|
82
|
+
- spec/codecs/netflow9_test_macaddr_data.dat
|
83
|
+
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
84
|
+
- spec/codecs/netflow9_test_nprobe_data.dat
|
85
|
+
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
86
|
+
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
87
|
+
- spec/codecs/netflow9_test_valid01.dat
|
88
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
89
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
90
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
91
|
+
- spec/codecs/ipfix_test_netscaler_data.dat
|
92
|
+
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
93
|
+
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
94
|
+
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
95
|
+
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
96
|
+
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
97
|
+
- spec/codecs/ipfix_test_barracuda_data256.dat
|
98
|
+
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
99
|
+
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
100
|
+
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
101
|
+
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
102
|
+
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
103
|
+
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
104
|
+
- spec/codecs/netflow_spec.rb
|
133
105
|
- spec/codecs/netflow9_test_cisco_asr9k_data256.dat
|
134
106
|
- spec/codecs/netflow9_test_cisco_asr9k_data260.dat
|
135
107
|
- spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
|
@@ -140,51 +112,81 @@ files:
|
|
140
112
|
- spec/codecs/netflow9_test_cisco_nbar_data262.dat
|
141
113
|
- spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
|
142
114
|
- spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
|
143
|
-
- spec/codecs/
|
115
|
+
- spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
|
144
116
|
- spec/codecs/netflow9_test_cisco_wlc_data261.dat
|
145
117
|
- spec/codecs/netflow9_test_cisco_wlc_tpl.dat
|
146
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
147
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
148
118
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
|
149
119
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
|
150
120
|
- spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
|
151
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
152
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
153
|
-
- spec/codecs/netflow9_test_h3c_data3281.dat
|
154
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
155
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
156
|
-
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
157
|
-
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
158
|
-
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
159
|
-
- spec/codecs/netflow9_test_invalid01.dat
|
160
|
-
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
161
121
|
- spec/codecs/netflow9_test_juniper_srx_tplopt.dat
|
162
|
-
- spec/codecs/netflow9_test_macaddr_data.dat
|
163
|
-
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
164
|
-
- spec/codecs/netflow9_test_nprobe_data.dat
|
165
122
|
- spec/codecs/netflow9_test_nprobe_dpi.dat
|
166
|
-
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
167
|
-
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
168
|
-
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
169
|
-
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
170
|
-
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
171
|
-
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
172
123
|
- spec/codecs/netflow9_test_streamcore_tpl_data256.dat
|
173
124
|
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
174
|
-
- spec/codecs/
|
175
|
-
- spec/codecs/
|
176
|
-
- spec/codecs/
|
177
|
-
- spec/codecs/
|
178
|
-
- spec/codecs/
|
179
|
-
- spec/codecs/
|
125
|
+
- spec/codecs/ipfix_test_yaf_data45841.dat
|
126
|
+
- spec/codecs/ipfix_test_yaf_data45873.dat
|
127
|
+
- spec/codecs/ipfix_test_yaf_data53248.dat
|
128
|
+
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
129
|
+
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
130
|
+
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
131
|
+
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
132
|
+
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
133
|
+
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
134
|
+
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
180
135
|
- spec/codecs/netflow_stress.py
|
136
|
+
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
137
|
+
- spec/codecs/ipfix_test_viptela_data257.dat
|
138
|
+
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
139
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
140
|
+
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
141
|
+
- spec/codecs/ipfix_test_procera_data52935.dat
|
142
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
143
|
+
- spec/codecs/benchmarks/ACLidASA.rb
|
144
|
+
- spec/codecs/benchmarks/MacAddr.rb
|
145
|
+
- spec/codecs/benchmarks/IPAddr.rb
|
146
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
147
|
+
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
148
|
+
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
149
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
150
|
+
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
151
|
+
- spec/codecs/benchmarks/IP6Addr.rb
|
152
|
+
- spec/codecs/benchmarks/benchmark_fields.rb
|
153
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
154
|
+
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
155
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
156
|
+
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
157
|
+
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
158
|
+
- spec/codecs/ipfix_stress.py
|
159
|
+
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
160
|
+
- spec/codecs/netflow9_test_h3c_data3281.dat
|
161
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
162
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
163
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
164
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
165
|
+
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
166
|
+
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
167
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
168
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
169
|
+
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
170
|
+
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
171
|
+
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
172
|
+
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|
173
|
+
- logstash-codec-netflow.gemspec
|
174
|
+
- CHANGELOG.md
|
175
|
+
- README.md
|
176
|
+
- RFC_COMPLIANCE_IPFIX.md
|
177
|
+
- RFC_COMPLIANCE_NETFLOW_v9.md
|
178
|
+
- CONTRIBUTORS
|
179
|
+
- Gemfile
|
180
|
+
- LICENSE
|
181
|
+
- NOTICE.TXT
|
182
|
+
- docs/index.asciidoc
|
181
183
|
homepage: http://www.elastic.co/guide/en/logstash/current/index.html
|
182
184
|
licenses:
|
183
185
|
- Apache License (2.0)
|
184
186
|
metadata:
|
185
187
|
logstash_plugin: 'true'
|
186
188
|
logstash_group: codec
|
187
|
-
post_install_message:
|
189
|
+
post_install_message:
|
188
190
|
rdoc_options: []
|
189
191
|
require_paths:
|
190
192
|
- lib
|
@@ -199,69 +201,49 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
199
201
|
- !ruby/object:Gem::Version
|
200
202
|
version: '0'
|
201
203
|
requirements: []
|
202
|
-
rubyforge_project:
|
203
|
-
rubygems_version: 2.
|
204
|
-
signing_key:
|
204
|
+
rubyforge_project:
|
205
|
+
rubygems_version: 2.0.14.1
|
206
|
+
signing_key:
|
205
207
|
specification_version: 4
|
206
208
|
summary: Reads Netflow v5, Netflow v9 and IPFIX data
|
207
209
|
test_files:
|
208
|
-
- spec/codecs/benchmarks/ACLidASA.rb
|
209
|
-
- spec/codecs/benchmarks/IP6Addr.rb
|
210
|
-
- spec/codecs/benchmarks/IPAddr.rb
|
211
|
-
- spec/codecs/benchmarks/MacAddr.rb
|
212
|
-
- spec/codecs/benchmarks/benchmark_fields.rb
|
213
|
-
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
214
|
-
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
215
|
-
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
216
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
217
|
-
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
218
210
|
- spec/codecs/ipfix.dat
|
219
|
-
- spec/codecs/ipfix_stress.py
|
220
|
-
- spec/codecs/ipfix_test_barracuda_data256.dat
|
221
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
222
|
-
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
223
|
-
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
224
|
-
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
225
|
-
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
226
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
227
|
-
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
228
|
-
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
229
|
-
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
230
|
-
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
231
|
-
- spec/codecs/ipfix_test_netscaler_data.dat
|
232
|
-
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
233
|
-
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
234
|
-
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
235
211
|
- spec/codecs/ipfix_test_openbsd_pflow_data.dat
|
236
212
|
- spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
|
237
|
-
- spec/codecs/ipfix_test_procera_data52935.dat
|
238
|
-
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
239
|
-
- spec/codecs/ipfix_test_viptela_data257.dat
|
240
|
-
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
241
|
-
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
242
|
-
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
243
|
-
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
244
|
-
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
245
|
-
- spec/codecs/ipfix_test_yaf_data45841.dat
|
246
|
-
- spec/codecs/ipfix_test_yaf_data45873.dat
|
247
|
-
- spec/codecs/ipfix_test_yaf_data53248.dat
|
248
|
-
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
249
|
-
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
250
213
|
- spec/codecs/netflow5.dat
|
251
214
|
- spec/codecs/netflow5_test_invalid01.dat
|
252
215
|
- spec/codecs/netflow5_test_invalid02.dat
|
253
216
|
- spec/codecs/netflow5_test_juniper_mx80.dat
|
254
217
|
- spec/codecs/netflow5_test_microtik.dat
|
255
|
-
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
256
|
-
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
257
|
-
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
258
|
-
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
259
|
-
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|
260
218
|
- spec/codecs/netflow9_test_cisco_asa_1_data.dat
|
261
219
|
- spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
|
262
220
|
- spec/codecs/netflow9_test_cisco_asa_2_data.dat
|
263
221
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
|
264
222
|
- spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
|
223
|
+
- spec/codecs/netflow9_test_invalid01.dat
|
224
|
+
- spec/codecs/netflow9_test_macaddr_data.dat
|
225
|
+
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
226
|
+
- spec/codecs/netflow9_test_nprobe_data.dat
|
227
|
+
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
228
|
+
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
229
|
+
- spec/codecs/netflow9_test_valid01.dat
|
230
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
|
231
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
|
232
|
+
- spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
|
233
|
+
- spec/codecs/ipfix_test_netscaler_data.dat
|
234
|
+
- spec/codecs/ipfix_test_netscaler_tpl.dat
|
235
|
+
- spec/codecs/ipfix_test_vmware_vds_data264.dat
|
236
|
+
- spec/codecs/ipfix_test_vmware_vds_data266.dat
|
237
|
+
- spec/codecs/ipfix_test_vmware_vds_data266_267.dat
|
238
|
+
- spec/codecs/ipfix_test_vmware_vds_tpl.dat
|
239
|
+
- spec/codecs/ipfix_test_barracuda_data256.dat
|
240
|
+
- spec/codecs/ipfix_test_barracuda_tpl.dat
|
241
|
+
- spec/codecs/ipfix_test_mikrotik_data258.dat
|
242
|
+
- spec/codecs/ipfix_test_mikrotik_data259.dat
|
243
|
+
- spec/codecs/ipfix_test_mikrotik_tpl.dat
|
244
|
+
- spec/codecs/ipfix_test_nokia_bras_tpl.dat
|
245
|
+
- spec/codecs/netflow9_test_0length_fields_tpl_data.dat
|
246
|
+
- spec/codecs/netflow_spec.rb
|
265
247
|
- spec/codecs/netflow9_test_cisco_asr9k_data256.dat
|
266
248
|
- spec/codecs/netflow9_test_cisco_asr9k_data260.dat
|
267
249
|
- spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
|
@@ -272,41 +254,61 @@ test_files:
|
|
272
254
|
- spec/codecs/netflow9_test_cisco_nbar_data262.dat
|
273
255
|
- spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
|
274
256
|
- spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
|
275
|
-
- spec/codecs/
|
257
|
+
- spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
|
276
258
|
- spec/codecs/netflow9_test_cisco_wlc_data261.dat
|
277
259
|
- spec/codecs/netflow9_test_cisco_wlc_tpl.dat
|
278
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
279
|
-
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
280
260
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
|
281
261
|
- spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
|
282
262
|
- spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
|
283
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
284
|
-
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
285
|
-
- spec/codecs/netflow9_test_h3c_data3281.dat
|
286
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
287
|
-
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
288
|
-
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
289
|
-
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
290
|
-
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
291
|
-
- spec/codecs/netflow9_test_invalid01.dat
|
292
|
-
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
293
263
|
- spec/codecs/netflow9_test_juniper_srx_tplopt.dat
|
294
|
-
- spec/codecs/netflow9_test_macaddr_data.dat
|
295
|
-
- spec/codecs/netflow9_test_macaddr_tpl.dat
|
296
|
-
- spec/codecs/netflow9_test_nprobe_data.dat
|
297
264
|
- spec/codecs/netflow9_test_nprobe_dpi.dat
|
298
|
-
- spec/codecs/netflow9_test_nprobe_tpl.dat
|
299
|
-
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
300
|
-
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
301
|
-
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
302
|
-
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
303
|
-
- spec/codecs/netflow9_test_softflowd_tpl_data.dat
|
304
265
|
- spec/codecs/netflow9_test_streamcore_tpl_data256.dat
|
305
266
|
- spec/codecs/netflow9_test_streamcore_tpl_data260.dat
|
306
|
-
- spec/codecs/
|
307
|
-
- spec/codecs/
|
308
|
-
- spec/codecs/
|
309
|
-
- spec/codecs/
|
310
|
-
- spec/codecs/
|
311
|
-
- spec/codecs/
|
267
|
+
- spec/codecs/ipfix_test_yaf_data45841.dat
|
268
|
+
- spec/codecs/ipfix_test_yaf_data45873.dat
|
269
|
+
- spec/codecs/ipfix_test_yaf_data53248.dat
|
270
|
+
- spec/codecs/ipfix_test_yaf_tpl45841.dat
|
271
|
+
- spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
|
272
|
+
- spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
|
273
|
+
- spec/codecs/netflow9_test_cisco_1941K9.dat
|
274
|
+
- spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
|
275
|
+
- spec/codecs/netflow9_test_paloalto_panos_data.dat
|
276
|
+
- spec/codecs/netflow9_test_paloalto_panos_tpl.dat
|
312
277
|
- spec/codecs/netflow_stress.py
|
278
|
+
- spec/codecs/ipfix_test_viptela_tpl257.dat
|
279
|
+
- spec/codecs/ipfix_test_viptela_data257.dat
|
280
|
+
- spec/codecs/ipfix_test_nokia_bras_data256.dat
|
281
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_data.dat
|
282
|
+
- spec/codecs/ipfix_test_procera_tpl52935.dat
|
283
|
+
- spec/codecs/ipfix_test_procera_data52935.dat
|
284
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
|
285
|
+
- spec/codecs/benchmarks/ACLidASA.rb
|
286
|
+
- spec/codecs/benchmarks/MacAddr.rb
|
287
|
+
- spec/codecs/benchmarks/IPAddr.rb
|
288
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asa.py
|
289
|
+
- spec/codecs/benchmarks/ipfix_bench_sonicwall.py
|
290
|
+
- spec/codecs/benchmarks/ipfix_bench_yaf.py
|
291
|
+
- spec/codecs/benchmarks/netflow_bench_cisco_asr.py
|
292
|
+
- spec/codecs/benchmarks/flowStartMilliseconds.rb
|
293
|
+
- spec/codecs/benchmarks/IP6Addr.rb
|
294
|
+
- spec/codecs/benchmarks/benchmark_fields.rb
|
295
|
+
- spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
|
296
|
+
- spec/codecs/netflow9_test_h3c_tpl3281.dat
|
297
|
+
- spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
|
298
|
+
- spec/codecs/netflow9_test_huawei_netstream_tpl.dat
|
299
|
+
- spec/codecs/netflow9_test_huawei_netstream_data.dat
|
300
|
+
- spec/codecs/ipfix_stress.py
|
301
|
+
- spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
|
302
|
+
- spec/codecs/netflow9_test_h3c_data3281.dat
|
303
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
|
304
|
+
- spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
|
305
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
|
306
|
+
- spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
|
307
|
+
- spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
|
308
|
+
- spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
|
309
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
|
310
|
+
- spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
|
311
|
+
- spec/codecs/ipfix_test_ixia_tpldata256.dat
|
312
|
+
- spec/codecs/ipfix_test_ixia_tpldata271.dat
|
313
|
+
- spec/codecs/netflow9_test_cisco_aci_data256.dat
|
314
|
+
- spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
|