logstash-codec-netflow 3.11.2 → 3.11.3

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA1:
-  metadata.gz: 77f122827b88b2cd3de0a5d33e68bebf2543b123
-  data.tar.gz: dd53ee247135f3c112105cdb44287bfd4cdff02b
+  metadata.gz: 320304153a7d6ce91b9102a5bac6889fa1a86783
+  data.tar.gz: 3d315078467947c08ddb21fd5788ae39d56d400c
 SHA512:
-  metadata.gz: 58fb4cd257c95d1dc594908982dc680e85827109c50d30b82a20e898bc21676c0e128d66cd9bd541b65b842eba2080a2110cf41ea042b75e28292c56641e8c49
-  data.tar.gz: 010589f423fc57e4c3600c47ffd1a07fcd3a80382b7b037c4756ef27a24254ccc5fc506a3f8744263455fba6ee7e71fa6af28539fe26bf49fde99e277a41939f
+  metadata.gz: 9756b70f353ccd051c7a8b3bae7492ff92d71bbc726d27ce382ee84dad8723c0ebf0ac51e285b6c27e13d1d0a1c2e355f0c5eeaf304314c80280833b9ded4a01
+  data.tar.gz: ec14123d04ec0a452338a1a408e1c3cc10f6ba8389df57655df367ac4067079f6bfbf5989dd31f20068087ca31a0adf0c8f94182f11af935d659ec505c0a6bef

data/CHANGELOG.md

@@ -1,3 +1,7 @@
+## 3.11.3
+
+  - Renamed some unknown VMware VDS fields 
+
 ## 3.11.2
 
   - Further improved decoding performance of ASA ACL ids

data/CONTRIBUTORS

@@ -12,6 +12,7 @@ Contributors:
 * Evgeniy Sudyr (ejectck)
 * G.J. Moed (gjmoed)
 * Gmoz Shih
+* James Park-Watt (jimmypw)
 * Jason Keller (jasonkeller)
 * Jeremy Foran (jeremyforan)
 * Jordan Sissel (jordansissel)

data/lib/logstash/codecs/netflow/ipfix.yaml

@@ -2472,13 +2472,16 @@
   - :vmwareUnknown887
   888:
   - :uint16
-  - :vmwareUnknown888
+  # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
+  - :vmwareEgressInterfaceTypeID
   889:
   - :uint8
-  - :vmwareUnknown889
+  # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
+  - :vmwareObservationDomainID
   890:
   - :uint16
-  - :vmwareUnknown890
+  # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
+  - :vmwareIngressInterfaceTypeID
 29305:
   1:
   - :uint64
@@ -3608,6 +3611,23 @@
   433:
   - :uint64
   - :reverseIgnoredLayer2FrameTotalCount
+21373:
+  4:
+  - :uint32
+  - :mark
+  6:
+  - :uint32
+  - :conntrack_id
+9789:
+  1:
+  - :uint16
+  - :afcProtocol
+  2:
+  - :string
+  - :afcProtocolName
+  4:
+  - :uint8
+  - :flowDirection 
 41916:
   4321:
   - :uint64

data/logstash-codec-netflow.gemspec

@@ -1,7 +1,7 @@
 Gem::Specification.new do |s|
 
   s.name            = 'logstash-codec-netflow'
-  s.version         = '3.11.2'
+  s.version         = '3.11.3'
   s.licenses        = ['Apache License (2.0)']
   s.summary         = "Reads Netflow v5, Netflow v9 and IPFIX data"
   s.description     = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"

data/spec/codecs/netflow_spec.rb

@@ -1577,7 +1577,7 @@ describe LogStash::Codecs::Netflow do
           "destinationIPv4Address": "172.18.65.211",
           "destinationTransportPort": 5985,
           "tcpControlBits": 2,
-          "vmwareUnknown890": 1,
+          "vmwareIngressInterfaceTypeID": 1,
           "sourceIPv4Address": "172.18.65.21",
           "ingressInterface": 3,
           "ipClassOfService": 0,
@@ -1592,9 +1592,9 @@ describe LogStash::Codecs::Netflow do
           "sourceTransportPort": 61209,
           "flowEndMilliseconds": "2016-12-22T12:17:37.000Z",
           "maximumTTL": 128,
-          "vmwareUnknown888": 2,
+          "vmwareEgressInterfaceTypeID": 2,
           "flowStartMilliseconds": "2016-12-22T12:17:37.000Z",
-          "vmwareUnknown889": 0
+          "vmwareObservationDomainID": 0
         },
         "@timestamp": "2016-12-22T12:17:52.000Z",
         "@version": "1"

metadata

@@ -1,14 +1,14 @@
 --- !ruby/object:Gem::Specification
 name: logstash-codec-netflow
 version: !ruby/object:Gem::Version
-  version: 3.11.2
+  version: 3.11.3
 platform: ruby
 authors:
 - Elastic
 autorequire:
 bindir: bin
 cert_chain: []
-date: 2018-02-01 00:00:00.000000000 Z
+date: 2018-03-25 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   requirement: !ruby/object:Gem::Requirement