logstash-codec-netflow 3.1.0 → 3.1.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/CHANGELOG.md +16 -0
- data/lib/logstash/codecs/netflow.rb +2 -2
- data/lib/logstash/codecs/netflow/util.rb +2 -2
- data/logstash-codec-netflow.gemspec +2 -2
- metadata +5 -5
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA1:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: 8238fad0b560a5311bdb38f38347a787ec707f1f
|
4
|
+
data.tar.gz: 7888b221ce1eaf08ea72748b6d846843095b35b5
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1fbcbace10032828575f758811be68f0c647ab86f0c9640a726343dc8924aafafbd936d20367176a87a0fa8cb649627b2bc775bb7c805c703e2f2c26280144f7
|
7
|
+
data.tar.gz: f81b2d77b36c9f6205206ca89c2fb6cfc841033b87105305f3f4a705fd10f00e944c2bc1c6f5f07cb586271d594569ed0d4c16974b038c404cf334c8896de9f4
|
data/CHANGELOG.md
CHANGED
@@ -1,22 +1,38 @@
|
|
1
|
+
## 3.1.1
|
2
|
+
|
3
|
+
- Small update due to breaking change in BinData gem (issue #41)
|
4
|
+
|
1
5
|
## 3.1.0
|
6
|
+
|
2
7
|
- Added IPFIX support
|
8
|
+
|
3
9
|
## 3.0.1
|
10
|
+
|
4
11
|
- Republish all the gems under jruby.
|
12
|
+
|
5
13
|
## 3.0.0
|
14
|
+
|
6
15
|
- Update the plugin to the version 2.0 of the plugin api, this change is required for Logstash 5.0 compatibility. See https://github.com/elastic/logstash/issues/5141
|
7
16
|
- Fixed exception if Netflow data contains MAC addresses (issue #26, issue #34)
|
8
17
|
- Fixed exceptions when receiving invalid Netflow v5 and v9 data (issue #17, issue 18)
|
9
18
|
- Fixed decoding Netflow templates from multiple (non-identical) exporters
|
10
19
|
- Add support for Cisco ASA fields
|
11
20
|
- Add support for Netflow 9 options template with scope fields
|
21
|
+
|
12
22
|
# 2.0.5
|
23
|
+
|
13
24
|
- Depend on logstash-core-plugin-api instead of logstash-core, removing the need to mass update plugins on major releases of logstash
|
25
|
+
|
14
26
|
# 2.0.4
|
27
|
+
|
15
28
|
- New dependency requirements for logstash-core for the 5.0 release
|
29
|
+
|
16
30
|
## 2.0.3
|
31
|
+
|
17
32
|
- Fixed JSON compare flaw in specs
|
18
33
|
|
19
34
|
## 2.0.0
|
35
|
+
|
20
36
|
- Plugins were updated to follow the new shutdown semantic, this mainly allows Logstash to instruct input plugins to terminate gracefully,
|
21
37
|
instead of using Thread.raise on the plugins' threads. Ref: https://github.com/elastic/logstash/pull/3895
|
22
38
|
- Dependency on logstash-core update to 2.0
|
@@ -217,7 +217,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
217
217
|
record.flowset_data.templates.each do |template|
|
218
218
|
catch (:field) do
|
219
219
|
fields = []
|
220
|
-
template.
|
220
|
+
template.record_fields.each do |field|
|
221
221
|
entry = netflow_field_for(field.field_type, field.field_length)
|
222
222
|
throw :field unless entry
|
223
223
|
fields += entry
|
@@ -333,7 +333,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
|
|
333
333
|
record.flowset_data.templates.each do |template|
|
334
334
|
catch (:field) do
|
335
335
|
fields = []
|
336
|
-
template.
|
336
|
+
template.record_fields.each do |field|
|
337
337
|
field_type = field.field_type
|
338
338
|
field_length = field.field_length
|
339
339
|
enterprise_id = field.enterprise ? field.enterprise_id : 0
|
@@ -110,7 +110,7 @@ class NetflowTemplateFlowset < BinData::Record
|
|
110
110
|
array :templates, :read_until => lambda { array.num_bytes == flowset_length - 4 } do
|
111
111
|
uint16 :template_id
|
112
112
|
uint16 :field_count
|
113
|
-
array :
|
113
|
+
array :record_fields, :initial_length => :field_count do
|
114
114
|
uint16 :field_type
|
115
115
|
uint16 :field_length
|
116
116
|
end
|
@@ -159,7 +159,7 @@ class IpfixTemplateFlowset < BinData::Record
|
|
159
159
|
array :templates, :read_until => lambda { flowset_length - 4 - array.num_bytes <= 2 } do
|
160
160
|
uint16 :template_id
|
161
161
|
uint16 :field_count
|
162
|
-
array :
|
162
|
+
array :record_fields, :initial_length => :field_count do
|
163
163
|
bit1 :enterprise
|
164
164
|
bit15 :field_type
|
165
165
|
uint16 :field_length
|
@@ -1,7 +1,7 @@
|
|
1
1
|
Gem::Specification.new do |s|
|
2
2
|
|
3
3
|
s.name = 'logstash-codec-netflow'
|
4
|
-
s.version = '3.1.
|
4
|
+
s.version = '3.1.1'
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
6
6
|
s.summary = "The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows."
|
7
7
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
@@ -22,6 +22,6 @@ Gem::Specification.new do |s|
|
|
22
22
|
# Gem dependencies
|
23
23
|
s.add_runtime_dependency "logstash-core-plugin-api", "~> 2.0"
|
24
24
|
s.add_runtime_dependency 'bindata', ['>= 1.5.0']
|
25
|
-
s.add_development_dependency 'logstash-devutils'
|
25
|
+
s.add_development_dependency 'logstash-devutils', ['>= 1.0.0']
|
26
26
|
end
|
27
27
|
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: logstash-codec-netflow
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 3.1.
|
4
|
+
version: 3.1.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Elastic
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2016-
|
11
|
+
date: 2016-07-08 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|
@@ -43,7 +43,7 @@ dependencies:
|
|
43
43
|
requirements:
|
44
44
|
- - '>='
|
45
45
|
- !ruby/object:Gem::Version
|
46
|
-
version:
|
46
|
+
version: 1.0.0
|
47
47
|
name: logstash-devutils
|
48
48
|
prerelease: false
|
49
49
|
type: :development
|
@@ -51,7 +51,7 @@ dependencies:
|
|
51
51
|
requirements:
|
52
52
|
- - '>='
|
53
53
|
- !ruby/object:Gem::Version
|
54
|
-
version:
|
54
|
+
version: 1.0.0
|
55
55
|
description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
|
56
56
|
email: info@elastic.co
|
57
57
|
executables: []
|
@@ -106,7 +106,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
|
|
106
106
|
version: '0'
|
107
107
|
requirements: []
|
108
108
|
rubyforge_project:
|
109
|
-
rubygems_version: 2.4.
|
109
|
+
rubygems_version: 2.4.8
|
110
110
|
signing_key:
|
111
111
|
specification_version: 4
|
112
112
|
summary: The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows.
|