logstash-codec-netflow 3.4.0 → 3.4.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (6) hide show
  1. checksums.yaml +4 -4
  2. data/Gemfile +8 -1
  3. data/docs/index.asciidoc +192 -0
  4. data/lib/logstash/codecs/netflow/netflow.yaml +6 -0
  5. data/logstash-codec-netflow.gemspec +2 -2
  6. metadata +73 -74
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: ffbcfb5f7060a15a914f28a8dc4060d3c4bb0249
4
- data.tar.gz: 64d0ef8ea3727572035c681d8278c0fe7c4cdb85
3
+ metadata.gz: e24cdd7142f243456a0979b80fee32122326f8a8
4
+ data.tar.gz: 7957b0685a192b19c5c47e642fe0afdb8d53b25a
5
5
  SHA512:
6
- metadata.gz: b167a1d6300bf833673be39852d55895fee81994098a174ef5def894a183d0554c41bef7c89ae21755a052c20053c35a2b93ab44cd35b888c5a68c71c33bdb0e
7
- data.tar.gz: 7f12d909b7c1fc92586b488e3501d4f315d9460f5184b68d72aa883353af4153e2e6523e8f546fa55f273ae0078cd5bb2374329ef5a5a8053cbfc6b8af081bc2
6
+ metadata.gz: 95744daec1b4bdab27fc5632735d4c7d09f2de41826dedf7ba52e2f8e6f0a298cb1e952a5e9e9009268f2862e87fb9d47ce1a2edb6856edbd4aa769f3c9cbb87
7
+ data.tar.gz: 572be553da4d2a93619df3f146c274d8b7babc85292b31ea676321c0e8320e420f5fad27010b826564a1b835f9537975af341f17fd29452da479016fc29cdf11
data/Gemfile CHANGED
@@ -1,4 +1,11 @@
1
1
  source 'https://rubygems.org'
2
2
 
3
- # Specify your gem's dependencies in logstash-mass_effect.gemspec
4
3
  gemspec
4
+
5
+ logstash_path = ENV["LOGSTASH_PATH"] || "../../logstash"
6
+ use_logstash_source = ENV["LOGSTASH_SOURCE"] && ENV["LOGSTASH_SOURCE"].to_s == "1"
7
+
8
+ if Dir.exist?(logstash_path) && use_logstash_source
9
+ gem 'logstash-core', :path => "#{logstash_path}/logstash-core"
10
+ gem 'logstash-core-plugin-api', :path => "#{logstash_path}/logstash-core-plugin-api"
11
+ end
data/docs/index.asciidoc ADDED
@@ -0,0 +1,192 @@
1
+ :plugin: netflow
2
+ :type: codec
3
+
4
+ ///////////////////////////////////////////
5
+ START - GENERATED VARIABLES, DO NOT EDIT!
6
+ ///////////////////////////////////////////
7
+ :version: %VERSION%
8
+ :release_date: %RELEASE_DATE%
9
+ :changelog_url: %CHANGELOG_URL%
10
+ :include_path: ../../../../logstash/docs/include
11
+ ///////////////////////////////////////////
12
+ END - GENERATED VARIABLES, DO NOT EDIT!
13
+ ///////////////////////////////////////////
14
+
15
+ [id="plugins-{type}-{plugin}"]
16
+
17
+ === Netflow codec plugin
18
+
19
+ include::{include_path}/plugin_header.asciidoc[]
20
+
21
+ ==== Description
22
+
23
+ The "netflow" codec is used for decoding Netflow v5/v9/v10 (IPFIX) flows.
24
+
25
+ ==== Supported Netflow/IPFIX exporters
26
+
27
+ The following Netflow/IPFIX exporters are known to work with the most recent version of the netflow codec:
28
+
29
+ [cols="6,^2,^2,^2,12",options="header"]
30
+ |===========================================================================================
31
+ |Netflow exporter | v5 | v9 | IPFIX | Remarks
32
+ |Softflowd | y | y | y | IPFIX supported in https://github.com/djmdjm/softflowd
33
+ |nProbe | y | y | y |
34
+ |ipt_NETFLOW | y | y | y |
35
+ |Cisco ASA | | y | |
36
+ |Cisco IOS 12.x | | y | |
37
+ |fprobe | y | | |
38
+ |Juniper MX80 | y | | | SW > 12.3R8
39
+ |OpenBSD pflow | y | n | y | http://man.openbsd.org/OpenBSD-current/man4/pflow.4
40
+ |Mikrotik 6.35.4 | y | | n | http://wiki.mikrotik.com/wiki/Manual:IP/Traffic_Flow
41
+ |Ubiquiti Edgerouter X | | y | | With MPLS labels
42
+ |Citrix Netscaler | | | y | Still some unknown fields, labeled netscalerUnknown<id>
43
+ |===========================================================================================
44
+
45
+ ==== Usage
46
+
47
+ Example Logstash configuration:
48
+
49
+ [source, ruby]
50
+ --------------------------
51
+ input {
52
+ udp {
53
+ host => localhost
54
+ port => 2055
55
+ codec => netflow {
56
+ versions => [5, 9]
57
+ }
58
+ type => netflow
59
+ }
60
+ udp {
61
+ host => localhost
62
+ port => 4739
63
+ codec => netflow {
64
+ versions => [10]
65
+ target => ipfix
66
+ }
67
+ type => ipfix
68
+ }
69
+ tcp {
70
+ host => localhost
71
+ port => 4739
72
+ codec => netflow {
73
+ versions => [10]
74
+ target => ipfix
75
+ }
76
+ type => ipfix
77
+ }
78
+ }
79
+ --------------------------
80
+
81
+ [id="plugins-{type}s-{plugin}-options"]
82
+ ==== Netflow Codec Configuration Options
83
+
84
+ [cols="<,<,<",options="header",]
85
+ |=======================================================================
86
+ |Setting |Input type|Required
87
+ | <<plugins-{type}s-{plugin}-cache_save_path>> |a valid filesystem path|No
88
+ | <<plugins-{type}s-{plugin}-cache_ttl>> |<<number,number>>|No
89
+ | <<plugins-{type}s-{plugin}-include_flowset_id>> |<<boolean,boolean>>|No
90
+ | <<plugins-{type}s-{plugin}-ipfix_definitions>> |a valid filesystem path|No
91
+ | <<plugins-{type}s-{plugin}-netflow_definitions>> |a valid filesystem path|No
92
+ | <<plugins-{type}s-{plugin}-target>> |<<string,string>>|No
93
+ | <<plugins-{type}s-{plugin}-versions>> |<<array,array>>|No
94
+ |=======================================================================
95
+
96
+ &nbsp;
97
+
98
+ [id="plugins-{type}s-{plugin}-cache_save_path"]
99
+ ===== `cache_save_path`
100
+
101
+ * Value type is <<path,path>>
102
+ * There is no default value for this setting.
103
+
104
+ Where to save the template cache
105
+ This helps speed up processing when restarting logstash
106
+ (So you don't have to await the arrival of templates)
107
+ cache will save as path/netflow_templates.cache and/or path/ipfix_templates.cache
108
+
109
+ [id="plugins-{type}s-{plugin}-cache_ttl"]
110
+ ===== `cache_ttl`
111
+
112
+ * Value type is <<number,number>>
113
+ * Default value is `4000`
114
+
115
+ Netflow v9/v10 template cache TTL (minutes)
116
+
117
+ [id="plugins-{type}s-{plugin}-include_flowset_id"]
118
+ ===== `include_flowset_id`
119
+
120
+ * Value type is <<boolean,boolean>>
121
+ * Default value is `false`
122
+
123
+ Only makes sense for ipfix, v9 already includes this
124
+ Setting to true will include the flowset_id in events
125
+ Allows you to work with sequences, for instance with the aggregate filter
126
+
127
+ [id="plugins-{type}s-{plugin}-ipfix_definitions"]
128
+ ===== `ipfix_definitions`
129
+
130
+ * Value type is <<path,path>>
131
+ * There is no default value for this setting.
132
+
133
+ Override YAML file containing IPFIX field definitions
134
+
135
+ Very similar to the Netflow version except there is a top level Private
136
+ Enterprise Number (PEN) key added:
137
+
138
+ [source,yaml]
139
+ --------------------------
140
+ pen:
141
+ id:
142
+ - :uintN or :ip4_addr or :ip6_addr or :mac_addr or :string
143
+ - :name
144
+ id:
145
+ - :skip
146
+ --------------------------
147
+
148
+ There is an implicit PEN 0 for the standard fields.
149
+
150
+ See <https://github.com/logstash-plugins/logstash-codec-netflow/blob/master/lib/logstash/codecs/netflow/ipfix.yaml> for the base set.
151
+
152
+ [id="plugins-{type}s-{plugin}-netflow_definitions"]
153
+ ===== `netflow_definitions`
154
+
155
+ * Value type is <<path,path>>
156
+ * There is no default value for this setting.
157
+
158
+ Override YAML file containing Netflow field definitions
159
+
160
+ Each Netflow field is defined like so:
161
+
162
+ [source,yaml]
163
+ --------------------------
164
+ id:
165
+ - default length in bytes
166
+ - :name
167
+ id:
168
+ - :uintN or :ip4_addr or :ip6_addr or :mac_addr or :string
169
+ - :name
170
+ id:
171
+ - :skip
172
+ --------------------------
173
+
174
+ See <https://github.com/logstash-plugins/logstash-codec-netflow/blob/master/lib/logstash/codecs/netflow/netflow.yaml> for the base set.
175
+
176
+ [id="plugins-{type}s-{plugin}-target"]
177
+ ===== `target`
178
+
179
+ * Value type is <<string,string>>
180
+ * Default value is `"netflow"`
181
+
182
+ Specify into what field you want the Netflow data.
183
+
184
+ [id="plugins-{type}s-{plugin}-versions"]
185
+ ===== `versions`
186
+
187
+ * Value type is <<array,array>>
188
+ * Default value is `[5, 9, 10]`
189
+
190
+ Specify which Netflow versions you will accept.
191
+
192
+
data/lib/logstash/codecs/netflow/netflow.yaml CHANGED
@@ -310,6 +310,12 @@
310
310
  282:
311
311
  - :ip6_addr
312
312
  - :xlate_dst_addr_ipv6
313
+ 298:
314
+ - :uint64
315
+ - :initiatorPackets
316
+ 299:
317
+ - :uint64
318
+ - :responderPackets
313
319
  323:
314
320
  - 8
315
321
  - :event_time_msec
data/logstash-codec-netflow.gemspec CHANGED
@@ -1,7 +1,7 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-codec-netflow'
4
- s.version = '3.4.0'
4
+ s.version = '3.4.1'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows."
7
7
  s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
@@ -11,7 +11,7 @@ Gem::Specification.new do |s|
11
11
  s.require_paths = ["lib"]
12
12
 
13
13
  # Files
14
- s.files = Dir['lib/**/*','spec/**/*','vendor/**/*','*.gemspec','*.md','CONTRIBUTORS','Gemfile','LICENSE','NOTICE.TXT']
14
+ s.files = Dir["lib/**/*","spec/**/*","*.gemspec","*.md","CONTRIBUTORS","Gemfile","LICENSE","NOTICE.TXT", "vendor/jar-dependencies/**/*.jar", "vendor/jar-dependencies/**/*.rb", "VERSION", "docs/**/*"]
15
15
 
16
16
  # Tests
17
17
  s.test_files = s.files.grep(%r{^(test|spec|features)/})
metadata CHANGED
@@ -1,109 +1,102 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-codec-netflow
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.4.0
4
+ version: 3.4.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Elastic
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2017-03-15 00:00:00.000000000 Z
11
+ date: 2017-06-23 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
- name: logstash-core-plugin-api
15
14
  requirement: !ruby/object:Gem::Requirement
16
15
  requirements:
17
- - - '>='
16
+ - - ">="
18
17
  - !ruby/object:Gem::Version
19
18
  version: '1.60'
20
- - - <=
19
+ - - "<="
21
20
  - !ruby/object:Gem::Version
22
21
  version: '2.99'
23
- type: :runtime
22
+ name: logstash-core-plugin-api
24
23
  prerelease: false
24
+ type: :runtime
25
25
  version_requirements: !ruby/object:Gem::Requirement
26
26
  requirements:
27
- - - '>='
27
+ - - ">="
28
28
  - !ruby/object:Gem::Version
29
29
  version: '1.60'
30
- - - <=
30
+ - - "<="
31
31
  - !ruby/object:Gem::Version
32
32
  version: '2.99'
33
33
  - !ruby/object:Gem::Dependency
34
- name: bindata
35
34
  requirement: !ruby/object:Gem::Requirement
36
35
  requirements:
37
- - - '>='
36
+ - - ">="
38
37
  - !ruby/object:Gem::Version
39
38
  version: 1.5.0
40
- type: :runtime
39
+ name: bindata
41
40
  prerelease: false
41
+ type: :runtime
42
42
  version_requirements: !ruby/object:Gem::Requirement
43
43
  requirements:
44
- - - '>='
44
+ - - ">="
45
45
  - !ruby/object:Gem::Version
46
46
  version: 1.5.0
47
47
  - !ruby/object:Gem::Dependency
48
- name: logstash-devutils
49
48
  requirement: !ruby/object:Gem::Requirement
50
49
  requirements:
51
- - - '>='
50
+ - - ">="
52
51
  - !ruby/object:Gem::Version
53
52
  version: 1.0.0
54
- type: :development
53
+ name: logstash-devutils
55
54
  prerelease: false
55
+ type: :development
56
56
  version_requirements: !ruby/object:Gem::Requirement
57
57
  requirements:
58
- - - '>='
58
+ - - ">="
59
59
  - !ruby/object:Gem::Version
60
60
  version: 1.0.0
61
- description: This gem is a Logstash plugin required to be installed on top of the
62
- Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
63
- gem is not a stand-alone program
61
+ description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
64
62
  email: info@elastic.co
65
63
  executables: []
66
64
  extensions: []
67
65
  extra_rdoc_files: []
68
66
  files:
67
+ - CHANGELOG.md
68
+ - CONTRIBUTORS
69
+ - Gemfile
70
+ - LICENSE
71
+ - NOTICE.TXT
72
+ - README.md
73
+ - docs/index.asciidoc
74
+ - lib/logstash/codecs/netflow.rb
69
75
  - lib/logstash/codecs/netflow/iana2yaml.rb
70
76
  - lib/logstash/codecs/netflow/ipfix.yaml
71
77
  - lib/logstash/codecs/netflow/netflow.yaml
72
78
  - lib/logstash/codecs/netflow/util.rb
73
- - lib/logstash/codecs/netflow.rb
79
+ - logstash-codec-netflow.gemspec
74
80
  - spec/codecs/ipfix.dat
81
+ - spec/codecs/ipfix_test_netscaler_data.dat
82
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
75
83
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
76
84
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
85
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
86
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
87
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
88
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
77
89
  - spec/codecs/netflow5.dat
78
90
  - spec/codecs/netflow5_test_invalid01.dat
79
91
  - spec/codecs/netflow5_test_invalid02.dat
80
92
  - spec/codecs/netflow5_test_juniper_mx80.dat
81
93
  - spec/codecs/netflow5_test_microtik.dat
94
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
82
95
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
83
96
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
84
97
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
85
98
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
86
99
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
87
- - spec/codecs/netflow9_test_invalid01.dat
88
- - spec/codecs/netflow9_test_macaddr_data.dat
89
- - spec/codecs/netflow9_test_macaddr_tpl.dat
90
- - spec/codecs/netflow9_test_nprobe_data.dat
91
- - spec/codecs/netflow9_test_nprobe_tpl.dat
92
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
93
- - spec/codecs/netflow9_test_valid01.dat
94
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
95
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
96
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
97
- - spec/codecs/ipfix_test_netscaler_data.dat
98
- - spec/codecs/ipfix_test_netscaler_tpl.dat
99
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
100
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
101
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
102
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
103
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
104
- - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
105
- - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
106
- - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
107
100
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
108
101
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
109
102
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -114,74 +107,67 @@ files:
114
107
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
115
108
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
116
109
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
110
+ - spec/codecs/netflow9_test_invalid01.dat
111
+ - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
112
+ - spec/codecs/netflow9_test_macaddr_data.dat
113
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
114
+ - spec/codecs/netflow9_test_nprobe_data.dat
115
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
116
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
117
+ - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
118
+ - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
119
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
120
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
121
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
122
+ - spec/codecs/netflow9_test_valid01.dat
117
123
  - spec/codecs/netflow_spec.rb
118
- - logstash-codec-netflow.gemspec
119
- - README.md
120
- - CHANGELOG.md
121
- - CONTRIBUTORS
122
- - Gemfile
123
- - LICENSE
124
- - NOTICE.TXT
125
124
  homepage: http://www.elastic.co/guide/en/logstash/current/index.html
126
125
  licenses:
127
126
  - Apache License (2.0)
128
127
  metadata:
129
128
  logstash_plugin: 'true'
130
129
  logstash_group: codec
131
- post_install_message:
130
+ post_install_message:
132
131
  rdoc_options: []
133
132
  require_paths:
134
133
  - lib
135
134
  required_ruby_version: !ruby/object:Gem::Requirement
136
135
  requirements:
137
- - - '>='
136
+ - - ">="
138
137
  - !ruby/object:Gem::Version
139
138
  version: '0'
140
139
  required_rubygems_version: !ruby/object:Gem::Requirement
141
140
  requirements:
142
- - - '>='
141
+ - - ">="
143
142
  - !ruby/object:Gem::Version
144
143
  version: '0'
145
144
  requirements: []
146
- rubyforge_project:
147
- rubygems_version: 2.0.14
148
- signing_key:
145
+ rubyforge_project:
146
+ rubygems_version: 2.4.8
147
+ signing_key:
149
148
  specification_version: 4
150
149
  summary: The netflow codec is for decoding Netflow v5/v9/v10 (IPFIX) flows.
151
150
  test_files:
152
151
  - spec/codecs/ipfix.dat
152
+ - spec/codecs/ipfix_test_netscaler_data.dat
153
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
153
154
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
154
155
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
156
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
157
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
158
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
159
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
155
160
  - spec/codecs/netflow5.dat
156
161
  - spec/codecs/netflow5_test_invalid01.dat
157
162
  - spec/codecs/netflow5_test_invalid02.dat
158
163
  - spec/codecs/netflow5_test_juniper_mx80.dat
159
164
  - spec/codecs/netflow5_test_microtik.dat
165
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
160
166
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
161
167
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
162
168
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
163
169
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
164
170
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
165
- - spec/codecs/netflow9_test_invalid01.dat
166
- - spec/codecs/netflow9_test_macaddr_data.dat
167
- - spec/codecs/netflow9_test_macaddr_tpl.dat
168
- - spec/codecs/netflow9_test_nprobe_data.dat
169
- - spec/codecs/netflow9_test_nprobe_tpl.dat
170
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
171
- - spec/codecs/netflow9_test_valid01.dat
172
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
173
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
174
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
175
- - spec/codecs/ipfix_test_netscaler_data.dat
176
- - spec/codecs/ipfix_test_netscaler_tpl.dat
177
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
178
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
179
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
180
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
181
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
182
- - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
183
- - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
184
- - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
185
171
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
186
172
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
187
173
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -192,4 +178,17 @@ test_files:
192
178
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
193
179
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
194
180
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
181
+ - spec/codecs/netflow9_test_invalid01.dat
182
+ - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
183
+ - spec/codecs/netflow9_test_macaddr_data.dat
184
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
185
+ - spec/codecs/netflow9_test_nprobe_data.dat
186
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
187
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
188
+ - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
189
+ - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
190
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
191
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
192
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
193
+ - spec/codecs/netflow9_test_valid01.dat
195
194
  - spec/codecs/netflow_spec.rb