logstash-codec-netflow 3.8.3 → 3.9.0

Sign up to get free protection for your applications and to get access to all the features.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +5 -0
  3. data/CONTRIBUTORS +1 -0
  4. data/docs/index.asciidoc +4 -2
  5. data/lib/logstash/codecs/netflow/ipfix.yaml +47 -0
  6. data/logstash-codec-netflow.gemspec +1 -1
  7. data/spec/codecs/ipfix_test_viptela_data257.dat +0 -0
  8. data/spec/codecs/ipfix_test_viptela_tpl257.dat +0 -0
  9. data/spec/codecs/netflow_spec.rb +55 -0
  10. metadata +93 -91
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: eb35147ecbca3f014d8ba75ae96d5b5190cca121
4
- data.tar.gz: 2faec212bb770aa4bcae045c2f30d4046b12cbdd
3
+ metadata.gz: 92cb1dff0db3b3d3895ec7113d8bb4435eea7569
4
+ data.tar.gz: 49ac590c5ce5a8709456a877b87c7098d9f751ff
5
5
  SHA512:
6
- metadata.gz: 6fecbcfdb821d74677230e402afd21964ab4a7d6190a548439cf8b2118e1af584365ad5a951231ba45647cfdee33a01cb2a51e5f5344b69b1202f969332ece1d
7
- data.tar.gz: 3df0991010965dc1630ff39b7fdefc96ca102b51241a12c55d5cb829cadc76ccaf840684272b769a7452a5abe4293684a4717894df4139a1155c7090ea2a05c3
6
+ metadata.gz: fcbefcbcea05d524abd7e80f35b53036f1995609f595b2920445505f35848974d295008c7d0a261f1a2e702762fa5a912598be1c71da19b0dbe9f22fe7e695b4
7
+ data.tar.gz: df7b3492b75c5b6a78b58bbdd1e3e26ad25f406ab9916b612f0c21a2f780ef198e491531a7ad7235747fa716fce023a1832c6d6e8b65fc7ffe60ac10b9d2dd29
data/CHANGELOG.md CHANGED
@@ -1,3 +1,8 @@
1
+ ## 3.9.0
2
+
3
+ - Added vIPtela support
4
+ - Added fields for Cisco ASR1k
5
+
1
6
  ## 3.8.3
2
7
 
3
8
  - Fixed a race condition that could cause some errors when running in a multithreaded input
data/CONTRIBUTORS CHANGED
@@ -20,6 +20,7 @@ Contributors:
20
20
  * Marian Craciunescu (marian-craciunescu)
21
21
  * Matt Dainty (bodgit)
22
22
  * Paul Warren (pwarren)
23
+ * Pedro de Oliveira
23
24
  * Philipp Kahr
24
25
  * Pier-Hugues Pellerin (ph)
25
26
  * Pulkit Agrawal (propulkit)
data/docs/index.asciidoc CHANGED
@@ -37,9 +37,10 @@ The following Netflow/IPFIX exporters are known to work with the most recent ver
37
37
  |Netflow exporter | v5 | v9 | IPFIX | Remarks
38
38
  |Barracuda Firewall | | | y |
39
39
  |Cisco ASA | | y | |
40
- |Cisco ASR | | y | |
40
+ |Cisco ASR 1k | | | n | Fails because of duplicate fields
41
+ |Cisco ASR 9k | | y | |
41
42
  |Cisco IOS 12.x | | y | |
42
- |Cisco ISR w/ HSL | | n | | https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
43
+ |Cisco ISR w/ HSL | | n | | Fails because of duplicate fields, see: https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
43
44
  |Cisco WLC | | y | |
44
45
  |Citrix Netscaler | | | y | Still some unknown fields, labeled netscalerUnknown<id>
45
46
  |fprobe | y | | |
@@ -55,6 +56,7 @@ The following Netflow/IPFIX exporters are known to work with the most recent ver
55
56
  |Ubiquiti Edgerouter X | | y | | With MPLS labels
56
57
  |VMware VDS | | | y | Still some unknown fields
57
58
  |YAF | | | y | With silk and applabel, but no DPI plugin support
59
+ |vIPtela | | | y |
58
60
  |===========================================================================================
59
61
 
60
62
  ==== Usage
data/lib/logstash/codecs/netflow/ipfix.yaml CHANGED
@@ -1202,6 +1202,49 @@
1202
1202
  433:
1203
1203
  - :uint64
1204
1204
  - :ignoredLayer2FrameTotalCount
1205
+ 9:
1206
+ 8337:
1207
+ - :uint64
1208
+ - :ciscoServerBytesNetwork
1209
+ 8338:
1210
+ - :uint64
1211
+ - :ciscoClientBytesNetwork
1212
+ 9252:
1213
+ - :uint8
1214
+ - :ciscoServicesWaasSegment
1215
+ 9253:
1216
+ - :uint8
1217
+ - :ciscoServicesWaasPassthroughReason
1218
+ 9357:
1219
+ - :string
1220
+ - :ciscoAppHTTPUriStatistics
1221
+ 12232:
1222
+ - :string
1223
+ - :cisoAppCategoryName
1224
+ 12234:
1225
+ - :string
1226
+ - :ciscoAppGroupName
1227
+ 12235:
1228
+ - :string
1229
+ - :ciscoAppHTTPHost
1230
+ 12236:
1231
+ - :ip4_addr
1232
+ - :ciscoClientIPv4Address
1233
+ 12237:
1234
+ - :ip4_addr
1235
+ - :ciscoServerIPv4Address
1236
+ 12240:
1237
+ - :uint16
1238
+ - :ciscoClientL4Port
1239
+ 12241:
1240
+ - :uint16
1241
+ - :ciscoServerL4Port
1242
+ 12242:
1243
+ - :uint32
1244
+ - :ciscoConnectionId
1245
+ 12244:
1246
+ - :string
1247
+ - :ciscoAppBusiness
1205
1248
  5951:
1206
1249
  128:
1207
1250
  - :uint32
@@ -3555,3 +3598,7 @@
3555
3598
  433:
3556
3599
  - :uint64
3557
3600
  - :reverseIgnoredLayer2FrameTotalCount
3601
+ 41916:
3602
+ 4321:
3603
+ - :uint64
3604
+ - :viptelaVPNId
data/logstash-codec-netflow.gemspec CHANGED
@@ -1,7 +1,7 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-codec-netflow'
4
- s.version = '3.8.3'
4
+ s.version = '3.9.0'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "Reads Netflow v5 and Netflow v9 data"
7
7
  s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
data/spec/codecs/netflow_spec.rb CHANGED
@@ -2020,6 +2020,61 @@ describe LogStash::Codecs::Netflow do
2020
2020
  end
2021
2021
  end
2022
2022
 
2023
+ context "IPFIX vIPtela with VPN id" do
2024
+ let(:data) do
2025
+ packets = []
2026
+ packets << IO.read(File.join(File.dirname(__FILE__), "ipfix_test_viptela_tpl257.dat"), :mode => "rb")
2027
+ packets << IO.read(File.join(File.dirname(__FILE__), "ipfix_test_viptela_data257.dat"), :mode => "rb")
2028
+ end
2029
+
2030
+ let(:json_events) do
2031
+ events = []
2032
+ events << <<-END
2033
+ {
2034
+ "@version": "1",
2035
+ "netflow": {
2036
+ "destinationTransportPort": 443,
2037
+ "icmpTypeCodeIPv4": 0,
2038
+ "sourceIPv4Address": "10.113.7.54",
2039
+ "ipClassOfService": 48,
2040
+ "ipPrecedence": 1,
2041
+ "maximumIpTotalLength": 277,
2042
+ "egressInterface": 3,
2043
+ "octetDeltaCount": 775,
2044
+ "ipNextHopIPv4Address": "10.0.0.1",
2045
+ "sourceTransportPort": 41717,
2046
+ "viptelaVPNId": 100,
2047
+ "destinationIPv4Address": "172.16.21.27",
2048
+ "octetTotalCount": 775,
2049
+ "minimumIpTotalLength": 70,
2050
+ "ipDiffServCodePoint": 12,
2051
+ "tcpControlBits": 16,
2052
+ "ingressInterface": 11,
2053
+ "version": 10,
2054
+ "packetDeltaCount": 8,
2055
+ "flowEndReason": 3,
2056
+ "protocolIdentifier": 6,
2057
+ "flowEndSeconds": "2017-11-21T14:32:15.000Z",
2058
+ "flowStartSeconds": "2017-11-21T14:32:15.000Z",
2059
+ "packetTotalCount": 8
2060
+ },
2061
+ "@timestamp": "2017-11-21T14:32:15.000Z"
2062
+ }
2063
+ END
2064
+ events.map{|event| event.gsub(/\s+/, "")}
2065
+ end
2066
+
2067
+ it "should decode raw data" do
2068
+ expect(decode.size).to eq(1)
2069
+ expect(decode[0].get("[netflow][viptelaVPNId]")).to eq(100)
2070
+ end
2071
+
2072
+ it "should serialize to json" do
2073
+ expect(JSON.parse(decode[0].to_json)).to eq(JSON.parse(json_events[0]))
2074
+ end
2075
+ end
2076
+
2077
+
2023
2078
 
2024
2079
  context "IPFIX Barracuda firewall" do
2025
2080
  let(:data) do
metadata CHANGED
@@ -1,17 +1,16 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-codec-netflow
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.8.3
4
+ version: 3.9.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Elastic
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2017-11-23 00:00:00.000000000 Z
11
+ date: 2017-12-03 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
- name: logstash-core-plugin-api
15
14
  requirement: !ruby/object:Gem::Requirement
16
15
  requirements:
17
16
  - - '>='
@@ -20,8 +19,9 @@ dependencies:
20
19
  - - <=
21
20
  - !ruby/object:Gem::Version
22
21
  version: '2.99'
23
- type: :runtime
22
+ name: logstash-core-plugin-api
24
23
  prerelease: false
24
+ type: :runtime
25
25
  version_requirements: !ruby/object:Gem::Requirement
26
26
  requirements:
27
27
  - - '>='
@@ -31,81 +31,88 @@ dependencies:
31
31
  - !ruby/object:Gem::Version
32
32
  version: '2.99'
33
33
  - !ruby/object:Gem::Dependency
34
- name: bindata
35
34
  requirement: !ruby/object:Gem::Requirement
36
35
  requirements:
37
36
  - - '>='
38
37
  - !ruby/object:Gem::Version
39
38
  version: 1.5.0
40
- type: :runtime
39
+ name: bindata
41
40
  prerelease: false
41
+ type: :runtime
42
42
  version_requirements: !ruby/object:Gem::Requirement
43
43
  requirements:
44
44
  - - '>='
45
45
  - !ruby/object:Gem::Version
46
46
  version: 1.5.0
47
47
  - !ruby/object:Gem::Dependency
48
- name: logstash-devutils
49
48
  requirement: !ruby/object:Gem::Requirement
50
49
  requirements:
51
50
  - - '>='
52
51
  - !ruby/object:Gem::Version
53
52
  version: 1.0.0
54
- type: :development
53
+ name: logstash-devutils
55
54
  prerelease: false
55
+ type: :development
56
56
  version_requirements: !ruby/object:Gem::Requirement
57
57
  requirements:
58
58
  - - '>='
59
59
  - !ruby/object:Gem::Version
60
60
  version: 1.0.0
61
- description: This gem is a Logstash plugin required to be installed on top of the
62
- Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
63
- gem is not a stand-alone program
61
+ description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
64
62
  email: info@elastic.co
65
63
  executables: []
66
64
  extensions: []
67
65
  extra_rdoc_files: []
68
66
  files:
67
+ - CHANGELOG.md
68
+ - CONTRIBUTORS
69
+ - Gemfile
70
+ - LICENSE
71
+ - NOTICE.TXT
72
+ - README.md
73
+ - RFC_COMPLIANCE_IPFIX.md
74
+ - RFC_COMPLIANCE_NETFLOW_v9.md
75
+ - docs/index.asciidoc
76
+ - lib/logstash/codecs/netflow.rb
69
77
  - lib/logstash/codecs/netflow/iana2yaml.rb
70
78
  - lib/logstash/codecs/netflow/ipfix.yaml
71
79
  - lib/logstash/codecs/netflow/netflow.yaml
72
80
  - lib/logstash/codecs/netflow/util.rb
73
- - lib/logstash/codecs/netflow.rb
81
+ - logstash-codec-netflow.gemspec
74
82
  - spec/codecs/ipfix.dat
83
+ - spec/codecs/ipfix_test_barracuda_data256.dat
84
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
85
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
86
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
87
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
88
+ - spec/codecs/ipfix_test_netscaler_data.dat
89
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
75
90
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
76
91
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
92
+ - spec/codecs/ipfix_test_viptela_data257.dat
93
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
94
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
95
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
96
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
97
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
98
+ - spec/codecs/ipfix_test_yaf_data45841.dat
99
+ - spec/codecs/ipfix_test_yaf_data45873.dat
100
+ - spec/codecs/ipfix_test_yaf_data53248.dat
101
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
102
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
77
103
  - spec/codecs/netflow5.dat
78
104
  - spec/codecs/netflow5_test_invalid01.dat
79
105
  - spec/codecs/netflow5_test_invalid02.dat
80
106
  - spec/codecs/netflow5_test_juniper_mx80.dat
81
107
  - spec/codecs/netflow5_test_microtik.dat
108
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
109
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
110
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
82
111
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
83
112
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
84
113
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
85
114
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
86
115
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
87
- - spec/codecs/netflow9_test_invalid01.dat
88
- - spec/codecs/netflow9_test_macaddr_data.dat
89
- - spec/codecs/netflow9_test_macaddr_tpl.dat
90
- - spec/codecs/netflow9_test_nprobe_data.dat
91
- - spec/codecs/netflow9_test_nprobe_tpl.dat
92
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
93
- - spec/codecs/netflow9_test_valid01.dat
94
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
95
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
96
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
97
- - spec/codecs/ipfix_test_netscaler_data.dat
98
- - spec/codecs/ipfix_test_netscaler_tpl.dat
99
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
100
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
101
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
102
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
103
- - spec/codecs/ipfix_test_barracuda_data256.dat
104
- - spec/codecs/ipfix_test_barracuda_tpl.dat
105
- - spec/codecs/ipfix_test_mikrotik_data258.dat
106
- - spec/codecs/ipfix_test_mikrotik_data259.dat
107
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
108
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
109
116
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
110
117
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
111
118
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -116,44 +123,37 @@ files:
116
123
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
117
124
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
118
125
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
126
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
119
127
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
120
128
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
121
129
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
122
130
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
123
131
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
132
+ - spec/codecs/netflow9_test_invalid01.dat
124
133
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
134
+ - spec/codecs/netflow9_test_macaddr_data.dat
135
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
136
+ - spec/codecs/netflow9_test_nprobe_data.dat
125
137
  - spec/codecs/netflow9_test_nprobe_dpi.dat
126
- - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
127
- - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
128
- - spec/codecs/ipfix_test_yaf_data45841.dat
129
- - spec/codecs/ipfix_test_yaf_data45873.dat
130
- - spec/codecs/ipfix_test_yaf_data53248.dat
131
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
132
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
133
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
134
- - spec/codecs/netflow9_test_cisco_1941K9.dat
135
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
138
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
136
139
  - spec/codecs/netflow9_test_paloalto_panos_data.dat
137
140
  - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
141
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
142
+ - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
143
+ - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
144
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
145
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
146
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
147
+ - spec/codecs/netflow9_test_valid01.dat
138
148
  - spec/codecs/netflow_spec.rb
139
149
  - spec/codecs/netflow_stress.py
140
- - logstash-codec-netflow.gemspec
141
- - RFC_COMPLIANCE_NETFLOW_v9.md
142
- - README.md
143
- - RFC_COMPLIANCE_IPFIX.md
144
- - CHANGELOG.md
145
- - CONTRIBUTORS
146
- - Gemfile
147
- - LICENSE
148
- - NOTICE.TXT
149
- - docs/index.asciidoc
150
150
  homepage: http://www.elastic.co/guide/en/logstash/current/index.html
151
151
  licenses:
152
152
  - Apache License (2.0)
153
153
  metadata:
154
154
  logstash_plugin: 'true'
155
155
  logstash_group: codec
156
- post_install_message:
156
+ post_install_message:
157
157
  rdoc_options: []
158
158
  require_paths:
159
159
  - lib
@@ -168,47 +168,46 @@ required_rubygems_version: !ruby/object:Gem::Requirement
168
168
  - !ruby/object:Gem::Version
169
169
  version: '0'
170
170
  requirements: []
171
- rubyforge_project:
172
- rubygems_version: 2.0.14.1
173
- signing_key:
171
+ rubyforge_project:
172
+ rubygems_version: 2.4.8
173
+ signing_key:
174
174
  specification_version: 4
175
175
  summary: Reads Netflow v5 and Netflow v9 data
176
176
  test_files:
177
177
  - spec/codecs/ipfix.dat
178
+ - spec/codecs/ipfix_test_barracuda_data256.dat
179
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
180
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
181
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
182
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
183
+ - spec/codecs/ipfix_test_netscaler_data.dat
184
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
178
185
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
179
186
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
187
+ - spec/codecs/ipfix_test_viptela_data257.dat
188
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
189
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
190
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
191
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
192
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
193
+ - spec/codecs/ipfix_test_yaf_data45841.dat
194
+ - spec/codecs/ipfix_test_yaf_data45873.dat
195
+ - spec/codecs/ipfix_test_yaf_data53248.dat
196
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
197
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
180
198
  - spec/codecs/netflow5.dat
181
199
  - spec/codecs/netflow5_test_invalid01.dat
182
200
  - spec/codecs/netflow5_test_invalid02.dat
183
201
  - spec/codecs/netflow5_test_juniper_mx80.dat
184
202
  - spec/codecs/netflow5_test_microtik.dat
203
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
204
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
205
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
185
206
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
186
207
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
187
208
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
188
209
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
189
210
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
190
- - spec/codecs/netflow9_test_invalid01.dat
191
- - spec/codecs/netflow9_test_macaddr_data.dat
192
- - spec/codecs/netflow9_test_macaddr_tpl.dat
193
- - spec/codecs/netflow9_test_nprobe_data.dat
194
- - spec/codecs/netflow9_test_nprobe_tpl.dat
195
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
196
- - spec/codecs/netflow9_test_valid01.dat
197
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
198
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
199
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
200
- - spec/codecs/ipfix_test_netscaler_data.dat
201
- - spec/codecs/ipfix_test_netscaler_tpl.dat
202
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
203
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
204
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
205
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
206
- - spec/codecs/ipfix_test_barracuda_data256.dat
207
- - spec/codecs/ipfix_test_barracuda_tpl.dat
208
- - spec/codecs/ipfix_test_mikrotik_data258.dat
209
- - spec/codecs/ipfix_test_mikrotik_data259.dat
210
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
211
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
212
211
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
213
212
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
214
213
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -219,24 +218,27 @@ test_files:
219
218
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
220
219
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
221
220
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
221
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
222
222
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
223
223
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
224
224
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
225
225
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
226
226
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
227
+ - spec/codecs/netflow9_test_invalid01.dat
227
228
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
229
+ - spec/codecs/netflow9_test_macaddr_data.dat
230
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
231
+ - spec/codecs/netflow9_test_nprobe_data.dat
228
232
  - spec/codecs/netflow9_test_nprobe_dpi.dat
229
- - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
230
- - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
231
- - spec/codecs/ipfix_test_yaf_data45841.dat
232
- - spec/codecs/ipfix_test_yaf_data45873.dat
233
- - spec/codecs/ipfix_test_yaf_data53248.dat
234
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
235
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
236
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
237
- - spec/codecs/netflow9_test_cisco_1941K9.dat
238
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
233
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
239
234
  - spec/codecs/netflow9_test_paloalto_panos_data.dat
240
235
  - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
236
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
237
+ - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
238
+ - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
239
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
240
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
241
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
242
+ - spec/codecs/netflow9_test_valid01.dat
241
243
  - spec/codecs/netflow_spec.rb
242
244
  - spec/codecs/netflow_stress.py