logstash-codec-netflow 4.2.0 → 4.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +4 -0
  3. data/CONTRIBUTORS +1 -0
  4. data/lib/logstash/codecs/netflow.rb +2 -2
  5. data/lib/logstash/codecs/netflow/ipfix.yaml +14 -17
  6. data/logstash-codec-netflow.gemspec +1 -1
  7. data/spec/codecs/netflow_spec.rb +43 -43
  8. metadata +172 -170
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: f2e6d54d4cdca81ee9644aed1eeae50bb8a9d1ee
4
- data.tar.gz: 6ba6e2b5d731d3307de736e8e56d010e27ad2fcc
3
+ metadata.gz: 5577f3642f1d4136ece8b15c15e94b26718005ce
4
+ data.tar.gz: 6c539f16ae819a589cbb3b5f16af2e26bce1f550
5
5
  SHA512:
6
- metadata.gz: e03f252f4070524376db990d4e5e511bb4eae836f205638f1a0de9a328355b52a571c0805a9a71e9e3eeb0facd840a03acceaf94572087f6dfe2c14ab988643b
7
- data.tar.gz: 7d355546ea91c3daf872e45cc9a6f9f1e1e00c8b5e5d3a4f16c89ac835bb25d95872f48406d7a2141ef068b545e9b1950ca5b24d6b32c8d9211f512a4242ea63
6
+ metadata.gz: bbe44345d69394da17702b4cb656f2775b960da03ed2f533e23018355e0f89d39b8b64e5de9f1751d21f85b587900a6f4a5e9dbbc370a705f64020b75e6d284d
7
+ data.tar.gz: 1c441347d6fffc53a28bd5461b003d7a8f6f1c850d53b591788e204c3b6ac1c59b089c3ef55d62499867c4b71b19f59f714c4c9caf65bc39597053423043bf77
data/CHANGELOG.md CHANGED
@@ -1,3 +1,7 @@
1
+ ## 4.2.1
2
+
3
+ - Fix sub-second timestamp math
4
+
1
5
  ## 4.2.0
2
6
 
3
7
  - Added Cisco ACI to list of known working Netflow v9 exporters
data/CONTRIBUTORS CHANGED
@@ -10,6 +10,7 @@ Contributors:
10
10
  * Bjørn Ruberg (bruberg)
11
11
  * Colin Surprenant (colinsurprenant)
12
12
  * Daniel Nägele (analogbyte)
13
+ * Dan Hermann (danhermann)
13
14
  * Diyaldine Maoulida
14
15
  * Evgeniy Sudyr (ejectck)
15
16
  * G.J. Moed (gjmoed)
data/lib/logstash/codecs/netflow.rb CHANGED
@@ -136,7 +136,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
136
136
  # convert these into absolute times
137
137
  millis = flowset.uptime - v
138
138
  seconds = flowset.unix_sec - (millis / 1000)
139
- micros = (flowset.unix_nsec / 1000) - (millis % 1000)
139
+ micros = (flowset.unix_nsec / 1000) - ((millis % 1000) * 1000)
140
140
  if micros < 0
141
141
  seconds--
142
142
  micros += 1000000
@@ -262,7 +262,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
262
262
  millis = flowset.uptime - v
263
263
  seconds = flowset.unix_sec - (millis / 1000)
264
264
  # v9 did away with the nanosecs field
265
- micros = 1000000 - (millis % 1000)
265
+ micros = 1000000 - ((millis % 1000) * 1000)
266
266
  event[@target][k.to_s] = LogStash::Timestamp.at(seconds, micros).to_iso8601
267
267
  else
268
268
  event[@target][k.to_s] = v.snapshot
data/lib/logstash/codecs/netflow/ipfix.yaml CHANGED
@@ -2453,37 +2453,34 @@
2453
2453
  6876:
2454
2454
  880:
2455
2455
  - :uint8
2456
- - :vmwareUnknown880
2456
+ - :vmwareTenantProtocol
2457
2457
  881:
2458
- - :uint32
2459
- - :vmwareUnknown881
2458
+ - :ip4_addr
2459
+ - :vmwareTenantSourceIPv4
2460
2460
  882:
2461
- - :uint32
2462
- - :vmwareUnknown882
2461
+ - :ip4_addr
2462
+ - :vmwareTenantDestIPv4
2463
2463
  883:
2464
- - :string
2465
- - :vmwareUnknown883
2464
+ - :ip6_addr
2465
+ - :vmwareTenantSourceIPv6
2466
2466
  884:
2467
- - :string
2468
- - :vmwareUnknown884
2467
+ - :ip6_addr
2468
+ - :vmwareTenantDestIPv6
2469
2469
  886:
2470
2470
  - :uint16
2471
- - :vmwareUnknown886
2471
+ - :vmwareTenantSourcePort
2472
2472
  887:
2473
2473
  - :uint16
2474
- - :vmwareUnknown887
2474
+ - :vmwareTenantDestPort
2475
2475
  888:
2476
2476
  - :uint16
2477
- # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
2478
- - :vmwareEgressInterfaceTypeID
2477
+ - :vmwareEgressInterfaceAttr
2479
2478
  889:
2480
2479
  - :uint8
2481
- # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
2482
- - :vmwareObservationDomainID
2480
+ - :vmwareVxlanExportRole
2483
2481
  890:
2484
2482
  - :uint16
2485
- # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
2486
- - :vmwareIngressInterfaceTypeID
2483
+ - :vmwareIngressInterfaceAttr
2487
2484
  29305:
2488
2485
  1:
2489
2486
  - :uint64
data/logstash-codec-netflow.gemspec CHANGED
@@ -1,7 +1,7 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-codec-netflow'
4
- s.version = '4.2.0'
4
+ s.version = '4.2.1'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "Reads Netflow v5, Netflow v9 and IPFIX data"
7
7
  s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
data/spec/codecs/netflow_spec.rb CHANGED
@@ -48,8 +48,8 @@ describe LogStash::Codecs::Netflow do
48
48
  "output_snmp": 0,
49
49
  "in_pkts": 5,
50
50
  "in_bytes": 230,
51
- "first_switched": "2015-06-21T11:40:52.280Z",
52
- "last_switched": "2015-05-02T18:38:08.279Z",
51
+ "first_switched": "2015-06-21T11:40:52.194Z",
52
+ "last_switched": "2015-05-02T18:38:08.476Z",
53
53
  "l4_src_port": 54435,
54
54
  "l4_dst_port": 22,
55
55
  "tcp_flags": 16,
@@ -82,8 +82,8 @@ describe LogStash::Codecs::Netflow do
82
82
  "output_snmp": 0,
83
83
  "in_pkts": 4,
84
84
  "in_bytes": 304,
85
- "first_switched": "2015-06-21T11:40:52.280Z",
86
- "last_switched": "2015-05-02T18:38:08.279Z",
85
+ "first_switched": "2015-06-21T11:40:52.194Z",
86
+ "last_switched": "2015-05-02T18:38:08.476Z",
87
87
  "l4_src_port": 22,
88
88
  "l4_dst_port": 54435,
89
89
  "tcp_flags": 24,
@@ -169,8 +169,8 @@ describe LogStash::Codecs::Netflow do
169
169
  "flowset_id":1024,
170
170
  "ipv4_src_addr": "172.16.32.100",
171
171
  "ipv4_dst_addr":"172.16.32.248",
172
- "last_switched":"2015-10-08T19:03:47.999Z",
173
- "first_switched":"2015-10-08T19:03:47.999Z",
172
+ "last_switched":"2015-10-08T19:03:47.141Z",
173
+ "first_switched":"2015-10-08T19:03:47.140Z",
174
174
  "in_bytes":76,
175
175
  "in_pkts":1,
176
176
  "input_snmp":0,
@@ -262,9 +262,9 @@ describe LogStash::Codecs::Netflow do
262
262
  "l4_src_port": 179,
263
263
  "ipv4_dst_addr": "10.154.231.146",
264
264
  "in_pkts": 2,
265
- "first_switched": "2018-10-15T11:28:05.999Z",
265
+ "first_switched": "2018-10-15T11:28:05.019Z",
266
266
  "protocol": 6,
267
- "last_switched": "2018-10-15T11:28:24.999Z",
267
+ "last_switched": "2018-10-15T11:28:24.066Z",
268
268
  "ip_protocol_version": 4,
269
269
  "in_bytes": 99,
270
270
  "flow_seq_num": 36,
@@ -368,8 +368,8 @@ describe LogStash::Codecs::Netflow do
368
368
  "flowset_id":1024,
369
369
  "ipv4_src_addr":"172.16.32.100",
370
370
  "ipv4_dst_addr":"172.16.32.248",
371
- "last_switched":"2015-10-08T19:03:47.999Z",
372
- "first_switched":"2015-10-08T19:03:47.999Z",
371
+ "last_switched":"2015-10-08T19:03:47.141Z",
372
+ "first_switched":"2015-10-08T19:03:47.140Z",
373
373
  "in_bytes":76,
374
374
  "in_pkts":1,
375
375
  "input_snmp":0,
@@ -408,8 +408,8 @@ describe LogStash::Codecs::Netflow do
408
408
  "ipv4_next_hop":"0.0.0.0",
409
409
  "src_as":0,
410
410
  "dst_as":0,
411
- "last_switched":"2015-10-08T19:05:56.999Z",
412
- "first_switched":"2015-10-08T19:05:56.999Z"
411
+ "last_switched":"2015-10-08T19:05:56.015Z",
412
+ "first_switched":"2015-10-08T19:05:56.010Z"
413
413
  },
414
414
  "@version":"1"
415
415
  }
@@ -829,7 +829,7 @@ describe LogStash::Codecs::Netflow do
829
829
 
830
830
  end
831
831
 
832
- context "Netflow5 microtik" do
832
+ context "Netflow5 mikrotik" do
833
833
  let(:data) do
834
834
  packets = []
835
835
  packets << IO.read(File.join(File.dirname(__FILE__), "netflow5_test_microtik.dat"), :mode => "rb")
@@ -855,8 +855,8 @@ describe LogStash::Codecs::Netflow do
855
855
  "output_snmp": 46,
856
856
  "in_pkts": 13,
857
857
  "in_bytes": 11442,
858
- "first_switched": "2016-07-21T13:51:42.514Z",
859
- "last_switched": "2016-07-21T13:51:42.514Z",
858
+ "first_switched": "2016-07-21T13:51:42.254Z",
859
+ "last_switched": "2016-07-21T13:51:42.254Z",
860
860
  "l4_src_port": 80,
861
861
  "l4_dst_port": 51826,
862
862
  "tcp_flags": 82,
@@ -912,8 +912,8 @@ describe LogStash::Codecs::Netflow do
912
912
  "output_snmp": 536,
913
913
  "in_pkts": 2,
914
914
  "in_bytes": 104,
915
- "first_switched": "2016-07-21T13:52:34.999Z",
916
- "last_switched": "2016-07-21T13:52:34.999Z",
915
+ "first_switched": "2016-07-21T13:52:34.936Z",
916
+ "last_switched": "2016-07-21T13:52:34.936Z",
917
917
  "l4_src_port": 37387,
918
918
  "l4_dst_port": 80,
919
919
  "tcp_flags": 16,
@@ -956,7 +956,7 @@ describe LogStash::Codecs::Netflow do
956
956
  {
957
957
  "netflow": {
958
958
  "l4_src_port": 443,
959
- "last_switched": "2018-02-18T05:46:54.999Z",
959
+ "last_switched": "2018-02-18T05:46:54.992Z",
960
960
  "ingressPhysicalInterface": 7,
961
961
  "in_bytes": 187,
962
962
  "tcpOptions": 2164260864,
@@ -972,7 +972,7 @@ describe LogStash::Codecs::Netflow do
972
972
  "flow_seq_num": 344481,
973
973
  "ipv4_next_hop": "10.232.5.1",
974
974
  "flowset_id": 260,
975
- "first_switched": "2018-02-18T05:46:54.999Z",
975
+ "first_switched": "2018-02-18T05:46:54.800Z",
976
976
  "tcp_flags": 25,
977
977
  "ipv4_dst_addr": "10.233.150.21",
978
978
  "ipv4_src_addr": "2.17.140.47",
@@ -1014,7 +1014,7 @@ describe LogStash::Codecs::Netflow do
1014
1014
  "src_as": 0,
1015
1015
  "flowset_id": 3281,
1016
1016
  "l4_dst_port": 0,
1017
- "last_switched": "2018-05-21T09:25:04.999Z",
1017
+ "last_switched": "2018-05-21T09:25:04.928Z",
1018
1018
  "dst_mask": 24,
1019
1019
  "tcp_flags": 0,
1020
1020
  "src_tos": 0,
@@ -1029,7 +1029,7 @@ describe LogStash::Codecs::Netflow do
1029
1029
  "src_traffic_index": 0,
1030
1030
  "in_bytes": 5092,
1031
1031
  "ipv4_src_addr": "10.22.166.36",
1032
- "first_switched": "2018-05-21T09:24:04.999Z",
1032
+ "first_switched": "2018-05-21T09:24:04.922Z",
1033
1033
  "ipv4_dst_addr": "10.21.75.38",
1034
1034
  "ipv4_next_hop": "10.21.17.78",
1035
1035
  "forwarding_status": {
@@ -1206,9 +1206,9 @@ describe LogStash::Codecs::Netflow do
1206
1206
  "@timestamp": "2018-07-18T01:35:35.000Z",
1207
1207
  "netflow": {
1208
1208
  "in_pkts": 9,
1209
- "last_switched": "2018-07-18T01:35:03.999Z",
1209
+ "last_switched": "2018-07-18T01:35:03.969Z",
1210
1210
  "direction": 0,
1211
- "first_switched": "2018-07-18T01:34:34.999Z",
1211
+ "first_switched": "2018-07-18T01:34:34.274Z",
1212
1212
  "ipv4_dst_addr": "20.20.255.255",
1213
1213
  "src_tos": 0,
1214
1214
  "ipv4_src_addr": "20.20.20.20",
@@ -1275,7 +1275,7 @@ describe LogStash::Codecs::Netflow do
1275
1275
  "xlate_src_port": 45380,
1276
1276
  "in_pkts": 6,
1277
1277
  "ipv4_dst_addr": "182.50.136.239",
1278
- "first_switched": "2018-05-11T00:54:10.999Z",
1278
+ "first_switched": "2018-05-11T00:54:10.580Z",
1279
1279
  "flowset_id": 262,
1280
1280
  "l4_src_port": 45380,
1281
1281
  "xlate_dst_port": 0,
@@ -1286,7 +1286,7 @@ describe LogStash::Codecs::Netflow do
1286
1286
  "in_bytes": 748,
1287
1287
  "protocol": 6,
1288
1288
  "flow_end_reason": 3,
1289
- "last_switched": "2018-05-11T00:54:10.999Z",
1289
+ "last_switched": "2018-05-11T00:54:10.990Z",
1290
1290
  "input_snmp": 8,
1291
1291
  "out_pkts": 6,
1292
1292
  "out_bytes": 748,
@@ -1611,7 +1611,7 @@ describe LogStash::Codecs::Netflow do
1611
1611
  "ip_protocol_version": 4,
1612
1612
  "ipv4_dst_addr": "10.2.0.95",
1613
1613
  "src_tos": 0,
1614
- "first_switched": "2016-09-10T15:02:54.999Z",
1614
+ "first_switched": "2016-09-10T15:02:54.375Z",
1615
1615
  "flowset_id": 1025,
1616
1616
  "l4_src_port": 47690,
1617
1617
  "out_dst_mac": "44:d9:e7:be:ef:8e",
@@ -1626,7 +1626,7 @@ describe LogStash::Codecs::Netflow do
1626
1626
  "label": 0,
1627
1627
  "ttl": 4
1628
1628
  },
1629
- "last_switched": "2016-09-10T15:23:45.999Z",
1629
+ "last_switched": "2016-09-10T15:23:45.363Z",
1630
1630
  "input_snmp": 2,
1631
1631
  "flows": 0,
1632
1632
  "tcp_flags": 27,
@@ -1735,7 +1735,7 @@ describe LogStash::Codecs::Netflow do
1735
1735
  "output_snmp": 3,
1736
1736
  "in_pkts": 3,
1737
1737
  "ipv4_dst_addr": "31.13.87.36",
1738
- "first_switched": "2017-07-25T04:44:29.999Z",
1738
+ "first_switched": "2017-07-25T04:44:29.522Z",
1739
1739
  "flowset_id": 257,
1740
1740
  "l4_src_port": 61910,
1741
1741
  "version": 9,
@@ -1743,7 +1743,7 @@ describe LogStash::Codecs::Netflow do
1743
1743
  "ipv4_src_addr": "192.168.99.7",
1744
1744
  "in_bytes": 152,
1745
1745
  "protocol": 6,
1746
- "last_switched": "2017-07-25T04:44:38.999Z",
1746
+ "last_switched": "2017-07-25T04:44:38.522Z",
1747
1747
  "input_snmp": 9,
1748
1748
  "out_pkts": 0,
1749
1749
  "out_bytes": 0,
@@ -1781,7 +1781,7 @@ describe LogStash::Codecs::Netflow do
1781
1781
  {
1782
1782
  "netflow": {
1783
1783
  "in_pkts": 3,
1784
- "first_switched": "2017-01-11T11:47:23.999Z",
1784
+ "first_switched": "2017-01-11T11:47:23.867Z",
1785
1785
  "flowset_id": 256,
1786
1786
  "l4_src_port": 8080,
1787
1787
  "streamcore_id_rule_1": 1171,
@@ -1803,7 +1803,7 @@ describe LogStash::Codecs::Netflow do
1803
1803
  "flow_seq_num": 2143054578,
1804
1804
  "ipv4_src_addr": "100.78.40.201",
1805
1805
  "input_snmp": 1152,
1806
- "last_switched": "2017-01-11T11:47:29.999Z",
1806
+ "last_switched": "2017-01-11T11:47:29.879Z",
1807
1807
  "streamcore_wan_rtt": 0,
1808
1808
  "streamcore_total_app_resp_time": 0
1809
1809
  },
@@ -1894,7 +1894,7 @@ describe LogStash::Codecs::Netflow do
1894
1894
  "netflow": {
1895
1895
  "streamcore_id_rule_10": 0,
1896
1896
  "in_pkts": 11,
1897
- "first_switched": "2017-01-11T11:22:44.999Z",
1897
+ "first_switched": "2017-01-11T11:22:44.939Z",
1898
1898
  "flowset_id": 260,
1899
1899
  "l4_src_port": 53483,
1900
1900
  "streamcore_id_rule_1": 1171,
@@ -1921,7 +1921,7 @@ describe LogStash::Codecs::Netflow do
1921
1921
  "flow_seq_num": 2142545188,
1922
1922
  "ipv4_src_addr": "10.27.8.20",
1923
1923
  "input_snmp": 1148,
1924
- "last_switched": "2017-01-11T11:23:35.999Z",
1924
+ "last_switched": "2017-01-11T11:23:35.954Z",
1925
1925
  "streamcore_url": "\/mux.json",
1926
1926
  "streamcore_wan_rtt": 0,
1927
1927
  "streamcore_total_app_resp_time": 19
@@ -2134,7 +2134,7 @@ describe LogStash::Codecs::Netflow do
2134
2134
  "destinationIPv4Address": "172.18.65.211",
2135
2135
  "destinationTransportPort": 5985,
2136
2136
  "tcpControlBits": 2,
2137
- "vmwareIngressInterfaceTypeID": 1,
2137
+ "vmwareIngressInterfaceAttr": 1,
2138
2138
  "sourceIPv4Address": "172.18.65.21",
2139
2139
  "ingressInterface": 3,
2140
2140
  "ipClassOfService": 0,
@@ -2149,9 +2149,9 @@ describe LogStash::Codecs::Netflow do
2149
2149
  "sourceTransportPort": 61209,
2150
2150
  "flowEndMilliseconds": "2016-12-22T12:17:37.000Z",
2151
2151
  "maximumTTL": 128,
2152
- "vmwareEgressInterfaceTypeID": 2,
2152
+ "vmwareEgressInterfaceAttr": 2,
2153
2153
  "flowStartMilliseconds": "2016-12-22T12:17:37.000Z",
2154
- "vmwareObservationDomainID": 0
2154
+ "vmwareVxlanExportRole": 0
2155
2155
  },
2156
2156
  "@timestamp": "2016-12-22T12:17:52.000Z",
2157
2157
  "@version": "1"
@@ -2342,7 +2342,7 @@ describe LogStash::Codecs::Netflow do
2342
2342
  "dst_mask":32,
2343
2343
  "in_pkts":0,
2344
2344
  "ipv4_dst_addr":"239.255.255.250",
2345
- "first_switched":"2016-12-23T01:34:52.999Z",
2345
+ "first_switched":"2016-12-23T01:34:52.569Z",
2346
2346
  "flowset_id":256,
2347
2347
  "l4_src_port":0,
2348
2348
  "src_mask":32,
@@ -2352,7 +2352,7 @@ describe LogStash::Codecs::Netflow do
2352
2352
  "in_bytes":0,
2353
2353
  "protocol":2,
2354
2354
  "input_snmp":2,
2355
- "last_switched":"2016-12-23T01:34:52.999Z",
2355
+ "last_switched":"2016-12-23T01:34:52.569Z",
2356
2356
  "tcp_flags":0,
2357
2357
  "engine_id":1,
2358
2358
  "out_pkts":1,
@@ -2434,7 +2434,7 @@ describe LogStash::Codecs::Netflow do
2434
2434
  "status": 0
2435
2435
  },
2436
2436
  "in_pkts": 4,
2437
- "first_switched": "2018-01-29T02:56:52.999Z",
2437
+ "first_switched": "2018-01-29T02:56:52.940Z",
2438
2438
  "flowset_id": 1315,
2439
2439
  "ipv4_next_hop": "10.108.252.41",
2440
2440
  "l4_src_port": 45587,
@@ -2541,7 +2541,7 @@ describe LogStash::Codecs::Netflow do
2541
2541
  "status": 1
2542
2542
  },
2543
2543
  "in_pkts": 2,
2544
- "first_switched": "2016-12-06T10:08:53.999Z",
2544
+ "first_switched": "2016-12-06T10:08:53.377Z",
2545
2545
  "flowset_id": 260,
2546
2546
  "l4_src_port": 443,
2547
2547
  "in_bytes": 112,
@@ -2561,7 +2561,7 @@ describe LogStash::Codecs::Netflow do
2561
2561
  "ipv4_src_addr": "10.0.29.46",
2562
2562
  "egressVRFID": 1610612736,
2563
2563
  "input_snmp": 75,
2564
- "last_switched": "2016-12-06T10:08:54.999Z",
2564
+ "last_switched": "2016-12-06T10:08:54.964Z",
2565
2565
  "flow_sampler_id": 1,
2566
2566
  "bgp_ipv4_next_hop": "10.0.14.27"
2567
2567
  },
@@ -2632,7 +2632,7 @@ describe LogStash::Codecs::Netflow do
2632
2632
  "dst_as": 0,
2633
2633
  "in_pkts": 36,
2634
2634
  "ipv4_src_prefix": "0.0.0.0",
2635
- "first_switched": "2017-02-14T11:10:20.999Z",
2635
+ "first_switched": "2017-02-14T11:10:20.936Z",
2636
2636
  "flowset_id": 262,
2637
2637
  "l4_src_port": 45269,
2638
2638
  "ipv4_next_hop": "0.0.0.0",
@@ -2656,7 +2656,7 @@ describe LogStash::Codecs::Netflow do
2656
2656
  "ipv4_src_addr": "10.10.172.60",
2657
2657
  "in_src_mac": "00:18:19:9e:6c:01",
2658
2658
  "input_snmp": 1,
2659
- "last_switched": "2017-02-14T11:10:21.999Z",
2659
+ "last_switched": "2017-02-14T11:10:21.008Z",
2660
2660
  "flow_sampler_id": 0
2661
2661
  },
2662
2662
  "@timestamp": "2017-02-14T11:10:36.000Z",
metadata CHANGED
@@ -1,135 +1,107 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-codec-netflow
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.2.0
4
+ version: 4.2.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Elastic
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-10-28 00:00:00.000000000 Z
11
+ date: 2018-12-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
+ name: logstash-core-plugin-api
14
15
  requirement: !ruby/object:Gem::Requirement
15
16
  requirements:
16
17
  - - ~>
17
18
  - !ruby/object:Gem::Version
18
19
  version: '2.0'
19
- name: logstash-core-plugin-api
20
- prerelease: false
21
20
  type: :runtime
21
+ prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - ~>
25
25
  - !ruby/object:Gem::Version
26
26
  version: '2.0'
27
27
  - !ruby/object:Gem::Dependency
28
+ name: bindata
28
29
  requirement: !ruby/object:Gem::Requirement
29
30
  requirements:
30
31
  - - '>='
31
32
  - !ruby/object:Gem::Version
32
33
  version: 1.5.0
33
- name: bindata
34
- prerelease: false
35
34
  type: :runtime
35
+ prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '>='
39
39
  - !ruby/object:Gem::Version
40
40
  version: 1.5.0
41
41
  - !ruby/object:Gem::Dependency
42
+ name: logstash-devutils
42
43
  requirement: !ruby/object:Gem::Requirement
43
44
  requirements:
44
45
  - - '>='
45
46
  - !ruby/object:Gem::Version
46
47
  version: 1.0.0
47
- name: logstash-devutils
48
- prerelease: false
49
48
  type: :development
49
+ prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
52
  - - '>='
53
53
  - !ruby/object:Gem::Version
54
54
  version: 1.0.0
55
- description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
55
+ description: This gem is a Logstash plugin required to be installed on top of the
56
+ Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
57
+ gem is not a stand-alone program
56
58
  email: info@elastic.co
57
59
  executables: []
58
60
  extensions: []
59
61
  extra_rdoc_files: []
60
62
  files:
61
- - CHANGELOG.md
62
- - CONTRIBUTORS
63
- - Gemfile
64
- - LICENSE
65
- - NOTICE.TXT
66
- - README.md
67
- - RFC_COMPLIANCE_IPFIX.md
68
- - RFC_COMPLIANCE_NETFLOW_v9.md
69
- - docs/index.asciidoc
70
- - lib/logstash/codecs/netflow.rb
71
63
  - lib/logstash/codecs/netflow/iana2yaml.rb
72
- - lib/logstash/codecs/netflow/ipfix.yaml
73
64
  - lib/logstash/codecs/netflow/netflow.yaml
74
65
  - lib/logstash/codecs/netflow/util.rb
75
- - logstash-codec-netflow.gemspec
76
- - spec/codecs/benchmarks/ACLidASA.rb
77
- - spec/codecs/benchmarks/IP6Addr.rb
78
- - spec/codecs/benchmarks/IPAddr.rb
79
- - spec/codecs/benchmarks/MacAddr.rb
80
- - spec/codecs/benchmarks/benchmark_fields.rb
81
- - spec/codecs/benchmarks/flowStartMilliseconds.rb
82
- - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
83
- - spec/codecs/benchmarks/ipfix_bench_yaf.py
84
- - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
85
- - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
66
+ - lib/logstash/codecs/netflow/ipfix.yaml
67
+ - lib/logstash/codecs/netflow.rb
86
68
  - spec/codecs/ipfix.dat
87
- - spec/codecs/ipfix_stress.py
88
- - spec/codecs/ipfix_test_barracuda_data256.dat
89
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
90
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
91
- - spec/codecs/ipfix_test_barracuda_tpl.dat
92
- - spec/codecs/ipfix_test_ixia_tpldata256.dat
93
- - spec/codecs/ipfix_test_ixia_tpldata271.dat
94
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
95
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
96
- - spec/codecs/ipfix_test_mikrotik_data258.dat
97
- - spec/codecs/ipfix_test_mikrotik_data259.dat
98
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
99
- - spec/codecs/ipfix_test_netscaler_data.dat
100
- - spec/codecs/ipfix_test_netscaler_tpl.dat
101
- - spec/codecs/ipfix_test_nokia_bras_data256.dat
102
- - spec/codecs/ipfix_test_nokia_bras_tpl.dat
103
69
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
104
70
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
105
- - spec/codecs/ipfix_test_procera_data52935.dat
106
- - spec/codecs/ipfix_test_procera_tpl52935.dat
107
- - spec/codecs/ipfix_test_viptela_data257.dat
108
- - spec/codecs/ipfix_test_viptela_tpl257.dat
109
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
110
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
111
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
112
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
113
- - spec/codecs/ipfix_test_yaf_data45841.dat
114
- - spec/codecs/ipfix_test_yaf_data45873.dat
115
- - spec/codecs/ipfix_test_yaf_data53248.dat
116
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
117
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
118
71
  - spec/codecs/netflow5.dat
119
72
  - spec/codecs/netflow5_test_invalid01.dat
120
73
  - spec/codecs/netflow5_test_invalid02.dat
121
74
  - spec/codecs/netflow5_test_juniper_mx80.dat
122
75
  - spec/codecs/netflow5_test_microtik.dat
123
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
124
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
125
- - spec/codecs/netflow9_test_cisco_1941K9.dat
126
- - spec/codecs/netflow9_test_cisco_aci_data256.dat
127
- - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
128
76
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
129
77
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
130
78
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
131
79
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
132
80
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
81
+ - spec/codecs/netflow9_test_invalid01.dat
82
+ - spec/codecs/netflow9_test_macaddr_data.dat
83
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
84
+ - spec/codecs/netflow9_test_nprobe_data.dat
85
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
86
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
87
+ - spec/codecs/netflow9_test_valid01.dat
88
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
89
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
90
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
91
+ - spec/codecs/ipfix_test_netscaler_data.dat
92
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
93
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
94
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
95
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
96
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
97
+ - spec/codecs/ipfix_test_barracuda_data256.dat
98
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
99
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
100
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
101
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
102
+ - spec/codecs/ipfix_test_nokia_bras_tpl.dat
103
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
104
+ - spec/codecs/netflow_spec.rb
133
105
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
134
106
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
135
107
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -140,51 +112,81 @@ files:
140
112
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
141
113
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
142
114
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
143
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
115
+ - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
144
116
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
145
117
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
146
- - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
147
- - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
148
118
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
149
119
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
150
120
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
151
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
152
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
153
- - spec/codecs/netflow9_test_h3c_data3281.dat
154
- - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
155
- - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
156
- - spec/codecs/netflow9_test_h3c_tpl3281.dat
157
- - spec/codecs/netflow9_test_huawei_netstream_data.dat
158
- - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
159
- - spec/codecs/netflow9_test_invalid01.dat
160
- - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
161
121
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
162
- - spec/codecs/netflow9_test_macaddr_data.dat
163
- - spec/codecs/netflow9_test_macaddr_tpl.dat
164
- - spec/codecs/netflow9_test_nprobe_data.dat
165
122
  - spec/codecs/netflow9_test_nprobe_dpi.dat
166
- - spec/codecs/netflow9_test_nprobe_tpl.dat
167
- - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
168
- - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
169
- - spec/codecs/netflow9_test_paloalto_panos_data.dat
170
- - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
171
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
172
123
  - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
173
124
  - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
174
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
175
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
176
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
177
- - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
178
- - spec/codecs/netflow9_test_valid01.dat
179
- - spec/codecs/netflow_spec.rb
125
+ - spec/codecs/ipfix_test_yaf_data45841.dat
126
+ - spec/codecs/ipfix_test_yaf_data45873.dat
127
+ - spec/codecs/ipfix_test_yaf_data53248.dat
128
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
129
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
130
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
131
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
132
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
133
+ - spec/codecs/netflow9_test_paloalto_panos_data.dat
134
+ - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
180
135
  - spec/codecs/netflow_stress.py
136
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
137
+ - spec/codecs/ipfix_test_viptela_data257.dat
138
+ - spec/codecs/ipfix_test_nokia_bras_data256.dat
139
+ - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
140
+ - spec/codecs/ipfix_test_procera_tpl52935.dat
141
+ - spec/codecs/ipfix_test_procera_data52935.dat
142
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
143
+ - spec/codecs/benchmarks/ACLidASA.rb
144
+ - spec/codecs/benchmarks/MacAddr.rb
145
+ - spec/codecs/benchmarks/IPAddr.rb
146
+ - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
147
+ - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
148
+ - spec/codecs/benchmarks/ipfix_bench_yaf.py
149
+ - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
150
+ - spec/codecs/benchmarks/flowStartMilliseconds.rb
151
+ - spec/codecs/benchmarks/IP6Addr.rb
152
+ - spec/codecs/benchmarks/benchmark_fields.rb
153
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
154
+ - spec/codecs/netflow9_test_h3c_tpl3281.dat
155
+ - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
156
+ - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
157
+ - spec/codecs/netflow9_test_huawei_netstream_data.dat
158
+ - spec/codecs/ipfix_stress.py
159
+ - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
160
+ - spec/codecs/netflow9_test_h3c_data3281.dat
161
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
162
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
163
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
164
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
165
+ - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
166
+ - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
167
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
168
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
169
+ - spec/codecs/ipfix_test_ixia_tpldata256.dat
170
+ - spec/codecs/ipfix_test_ixia_tpldata271.dat
171
+ - spec/codecs/netflow9_test_cisco_aci_data256.dat
172
+ - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
173
+ - logstash-codec-netflow.gemspec
174
+ - CHANGELOG.md
175
+ - README.md
176
+ - RFC_COMPLIANCE_IPFIX.md
177
+ - RFC_COMPLIANCE_NETFLOW_v9.md
178
+ - CONTRIBUTORS
179
+ - Gemfile
180
+ - LICENSE
181
+ - NOTICE.TXT
182
+ - docs/index.asciidoc
181
183
  homepage: http://www.elastic.co/guide/en/logstash/current/index.html
182
184
  licenses:
183
185
  - Apache License (2.0)
184
186
  metadata:
185
187
  logstash_plugin: 'true'
186
188
  logstash_group: codec
187
- post_install_message:
189
+ post_install_message:
188
190
  rdoc_options: []
189
191
  require_paths:
190
192
  - lib
@@ -199,69 +201,49 @@ required_rubygems_version: !ruby/object:Gem::Requirement
199
201
  - !ruby/object:Gem::Version
200
202
  version: '0'
201
203
  requirements: []
202
- rubyforge_project:
203
- rubygems_version: 2.4.8
204
- signing_key:
204
+ rubyforge_project:
205
+ rubygems_version: 2.0.14.1
206
+ signing_key:
205
207
  specification_version: 4
206
208
  summary: Reads Netflow v5, Netflow v9 and IPFIX data
207
209
  test_files:
208
- - spec/codecs/benchmarks/ACLidASA.rb
209
- - spec/codecs/benchmarks/IP6Addr.rb
210
- - spec/codecs/benchmarks/IPAddr.rb
211
- - spec/codecs/benchmarks/MacAddr.rb
212
- - spec/codecs/benchmarks/benchmark_fields.rb
213
- - spec/codecs/benchmarks/flowStartMilliseconds.rb
214
- - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
215
- - spec/codecs/benchmarks/ipfix_bench_yaf.py
216
- - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
217
- - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
218
210
  - spec/codecs/ipfix.dat
219
- - spec/codecs/ipfix_stress.py
220
- - spec/codecs/ipfix_test_barracuda_data256.dat
221
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
222
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
223
- - spec/codecs/ipfix_test_barracuda_tpl.dat
224
- - spec/codecs/ipfix_test_ixia_tpldata256.dat
225
- - spec/codecs/ipfix_test_ixia_tpldata271.dat
226
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
227
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
228
- - spec/codecs/ipfix_test_mikrotik_data258.dat
229
- - spec/codecs/ipfix_test_mikrotik_data259.dat
230
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
231
- - spec/codecs/ipfix_test_netscaler_data.dat
232
- - spec/codecs/ipfix_test_netscaler_tpl.dat
233
- - spec/codecs/ipfix_test_nokia_bras_data256.dat
234
- - spec/codecs/ipfix_test_nokia_bras_tpl.dat
235
211
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
236
212
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
237
- - spec/codecs/ipfix_test_procera_data52935.dat
238
- - spec/codecs/ipfix_test_procera_tpl52935.dat
239
- - spec/codecs/ipfix_test_viptela_data257.dat
240
- - spec/codecs/ipfix_test_viptela_tpl257.dat
241
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
242
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
243
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
244
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
245
- - spec/codecs/ipfix_test_yaf_data45841.dat
246
- - spec/codecs/ipfix_test_yaf_data45873.dat
247
- - spec/codecs/ipfix_test_yaf_data53248.dat
248
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
249
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
250
213
  - spec/codecs/netflow5.dat
251
214
  - spec/codecs/netflow5_test_invalid01.dat
252
215
  - spec/codecs/netflow5_test_invalid02.dat
253
216
  - spec/codecs/netflow5_test_juniper_mx80.dat
254
217
  - spec/codecs/netflow5_test_microtik.dat
255
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
256
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
257
- - spec/codecs/netflow9_test_cisco_1941K9.dat
258
- - spec/codecs/netflow9_test_cisco_aci_data256.dat
259
- - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
260
218
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
261
219
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
262
220
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
263
221
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
264
222
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
223
+ - spec/codecs/netflow9_test_invalid01.dat
224
+ - spec/codecs/netflow9_test_macaddr_data.dat
225
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
226
+ - spec/codecs/netflow9_test_nprobe_data.dat
227
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
228
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
229
+ - spec/codecs/netflow9_test_valid01.dat
230
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
231
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
232
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
233
+ - spec/codecs/ipfix_test_netscaler_data.dat
234
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
235
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
236
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
237
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
238
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
239
+ - spec/codecs/ipfix_test_barracuda_data256.dat
240
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
241
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
242
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
243
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
244
+ - spec/codecs/ipfix_test_nokia_bras_tpl.dat
245
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
246
+ - spec/codecs/netflow_spec.rb
265
247
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
266
248
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
267
249
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -272,41 +254,61 @@ test_files:
272
254
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
273
255
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
274
256
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
275
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
257
+ - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
276
258
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
277
259
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
278
- - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
279
- - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
280
260
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
281
261
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
282
262
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
283
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
284
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
285
- - spec/codecs/netflow9_test_h3c_data3281.dat
286
- - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
287
- - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
288
- - spec/codecs/netflow9_test_h3c_tpl3281.dat
289
- - spec/codecs/netflow9_test_huawei_netstream_data.dat
290
- - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
291
- - spec/codecs/netflow9_test_invalid01.dat
292
- - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
293
263
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
294
- - spec/codecs/netflow9_test_macaddr_data.dat
295
- - spec/codecs/netflow9_test_macaddr_tpl.dat
296
- - spec/codecs/netflow9_test_nprobe_data.dat
297
264
  - spec/codecs/netflow9_test_nprobe_dpi.dat
298
- - spec/codecs/netflow9_test_nprobe_tpl.dat
299
- - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
300
- - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
301
- - spec/codecs/netflow9_test_paloalto_panos_data.dat
302
- - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
303
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
304
265
  - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
305
266
  - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
306
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
307
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
308
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
309
- - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
310
- - spec/codecs/netflow9_test_valid01.dat
311
- - spec/codecs/netflow_spec.rb
267
+ - spec/codecs/ipfix_test_yaf_data45841.dat
268
+ - spec/codecs/ipfix_test_yaf_data45873.dat
269
+ - spec/codecs/ipfix_test_yaf_data53248.dat
270
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
271
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
272
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
273
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
274
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
275
+ - spec/codecs/netflow9_test_paloalto_panos_data.dat
276
+ - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
312
277
  - spec/codecs/netflow_stress.py
278
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
279
+ - spec/codecs/ipfix_test_viptela_data257.dat
280
+ - spec/codecs/ipfix_test_nokia_bras_data256.dat
281
+ - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
282
+ - spec/codecs/ipfix_test_procera_tpl52935.dat
283
+ - spec/codecs/ipfix_test_procera_data52935.dat
284
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
285
+ - spec/codecs/benchmarks/ACLidASA.rb
286
+ - spec/codecs/benchmarks/MacAddr.rb
287
+ - spec/codecs/benchmarks/IPAddr.rb
288
+ - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
289
+ - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
290
+ - spec/codecs/benchmarks/ipfix_bench_yaf.py
291
+ - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
292
+ - spec/codecs/benchmarks/flowStartMilliseconds.rb
293
+ - spec/codecs/benchmarks/IP6Addr.rb
294
+ - spec/codecs/benchmarks/benchmark_fields.rb
295
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
296
+ - spec/codecs/netflow9_test_h3c_tpl3281.dat
297
+ - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
298
+ - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
299
+ - spec/codecs/netflow9_test_huawei_netstream_data.dat
300
+ - spec/codecs/ipfix_stress.py
301
+ - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
302
+ - spec/codecs/netflow9_test_h3c_data3281.dat
303
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
304
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
305
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
306
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
307
+ - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
308
+ - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
309
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
310
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
311
+ - spec/codecs/ipfix_test_ixia_tpldata256.dat
312
+ - spec/codecs/ipfix_test_ixia_tpldata271.dat
313
+ - spec/codecs/netflow9_test_cisco_aci_data256.dat
314
+ - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat