logstash-codec-netflow 3.8.3 → 3.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (10) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +5 -0
  3. data/CONTRIBUTORS +1 -0
  4. data/docs/index.asciidoc +4 -2
  5. data/lib/logstash/codecs/netflow/ipfix.yaml +47 -0
  6. data/logstash-codec-netflow.gemspec +1 -1
  7. data/spec/codecs/ipfix_test_viptela_data257.dat +0 -0
  8. data/spec/codecs/ipfix_test_viptela_tpl257.dat +0 -0
  9. data/spec/codecs/netflow_spec.rb +55 -0
  10. metadata +93 -91
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: eb35147ecbca3f014d8ba75ae96d5b5190cca121
4
- data.tar.gz: 2faec212bb770aa4bcae045c2f30d4046b12cbdd
3
+ metadata.gz: 92cb1dff0db3b3d3895ec7113d8bb4435eea7569
4
+ data.tar.gz: 49ac590c5ce5a8709456a877b87c7098d9f751ff
5
5
  SHA512:
6
- metadata.gz: 6fecbcfdb821d74677230e402afd21964ab4a7d6190a548439cf8b2118e1af584365ad5a951231ba45647cfdee33a01cb2a51e5f5344b69b1202f969332ece1d
7
- data.tar.gz: 3df0991010965dc1630ff39b7fdefc96ca102b51241a12c55d5cb829cadc76ccaf840684272b769a7452a5abe4293684a4717894df4139a1155c7090ea2a05c3
6
+ metadata.gz: fcbefcbcea05d524abd7e80f35b53036f1995609f595b2920445505f35848974d295008c7d0a261f1a2e702762fa5a912598be1c71da19b0dbe9f22fe7e695b4
7
+ data.tar.gz: df7b3492b75c5b6a78b58bbdd1e3e26ad25f406ab9916b612f0c21a2f780ef198e491531a7ad7235747fa716fce023a1832c6d6e8b65fc7ffe60ac10b9d2dd29
data/CHANGELOG.md CHANGED
@@ -1,3 +1,8 @@
1
+ ## 3.9.0
2
+
3
+ - Added vIPtela support
4
+ - Added fields for Cisco ASR1k
5
+
1
6
  ## 3.8.3
2
7
 
3
8
  - Fixed a race condition that could cause some errors when running in a multithreaded input
data/CONTRIBUTORS CHANGED
@@ -20,6 +20,7 @@ Contributors:
20
20
  * Marian Craciunescu (marian-craciunescu)
21
21
  * Matt Dainty (bodgit)
22
22
  * Paul Warren (pwarren)
23
+ * Pedro de Oliveira
23
24
  * Philipp Kahr
24
25
  * Pier-Hugues Pellerin (ph)
25
26
  * Pulkit Agrawal (propulkit)
data/docs/index.asciidoc CHANGED
@@ -37,9 +37,10 @@ The following Netflow/IPFIX exporters are known to work with the most recent ver
37
37
  |Netflow exporter | v5 | v9 | IPFIX | Remarks
38
38
  |Barracuda Firewall | | | y |
39
39
  |Cisco ASA | | y | |
40
- |Cisco ASR | | y | |
40
+ |Cisco ASR 1k | | | n | Fails because of duplicate fields
41
+ |Cisco ASR 9k | | y | |
41
42
  |Cisco IOS 12.x | | y | |
42
- |Cisco ISR w/ HSL | | n | | https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
43
+ |Cisco ISR w/ HSL | | n | | Fails because of duplicate fields, see: https://github.com/logstash-plugins/logstash-codec-netflow/issues/93
43
44
  |Cisco WLC | | y | |
44
45
  |Citrix Netscaler | | | y | Still some unknown fields, labeled netscalerUnknown<id>
45
46
  |fprobe | y | | |
@@ -55,6 +56,7 @@ The following Netflow/IPFIX exporters are known to work with the most recent ver
55
56
  |Ubiquiti Edgerouter X | | y | | With MPLS labels
56
57
  |VMware VDS | | | y | Still some unknown fields
57
58
  |YAF | | | y | With silk and applabel, but no DPI plugin support
59
+ |vIPtela | | | y |
58
60
  |===========================================================================================
59
61
 
60
62
  ==== Usage
data/lib/logstash/codecs/netflow/ipfix.yaml CHANGED
@@ -1202,6 +1202,49 @@
1202
1202
  433:
1203
1203
  - :uint64
1204
1204
  - :ignoredLayer2FrameTotalCount
1205
+ 9:
1206
+ 8337:
1207
+ - :uint64
1208
+ - :ciscoServerBytesNetwork
1209
+ 8338:
1210
+ - :uint64
1211
+ - :ciscoClientBytesNetwork
1212
+ 9252:
1213
+ - :uint8
1214
+ - :ciscoServicesWaasSegment
1215
+ 9253:
1216
+ - :uint8
1217
+ - :ciscoServicesWaasPassthroughReason
1218
+ 9357:
1219
+ - :string
1220
+ - :ciscoAppHTTPUriStatistics
1221
+ 12232:
1222
+ - :string
1223
+ - :cisoAppCategoryName
1224
+ 12234:
1225
+ - :string
1226
+ - :ciscoAppGroupName
1227
+ 12235:
1228
+ - :string
1229
+ - :ciscoAppHTTPHost
1230
+ 12236:
1231
+ - :ip4_addr
1232
+ - :ciscoClientIPv4Address
1233
+ 12237:
1234
+ - :ip4_addr
1235
+ - :ciscoServerIPv4Address
1236
+ 12240:
1237
+ - :uint16
1238
+ - :ciscoClientL4Port
1239
+ 12241:
1240
+ - :uint16
1241
+ - :ciscoServerL4Port
1242
+ 12242:
1243
+ - :uint32
1244
+ - :ciscoConnectionId
1245
+ 12244:
1246
+ - :string
1247
+ - :ciscoAppBusiness
1205
1248
  5951:
1206
1249
  128:
1207
1250
  - :uint32
@@ -3555,3 +3598,7 @@
3555
3598
  433:
3556
3599
  - :uint64
3557
3600
  - :reverseIgnoredLayer2FrameTotalCount
3601
+ 41916:
3602
+ 4321:
3603
+ - :uint64
3604
+ - :viptelaVPNId
data/logstash-codec-netflow.gemspec CHANGED
@@ -1,7 +1,7 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-codec-netflow'
4
- s.version = '3.8.3'
4
+ s.version = '3.9.0'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "Reads Netflow v5 and Netflow v9 data"
7
7
  s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
data/spec/codecs/netflow_spec.rb CHANGED
@@ -2020,6 +2020,61 @@ describe LogStash::Codecs::Netflow do
2020
2020
  end
2021
2021
  end
2022
2022
 
2023
+ context "IPFIX vIPtela with VPN id" do
2024
+ let(:data) do
2025
+ packets = []
2026
+ packets << IO.read(File.join(File.dirname(__FILE__), "ipfix_test_viptela_tpl257.dat"), :mode => "rb")
2027
+ packets << IO.read(File.join(File.dirname(__FILE__), "ipfix_test_viptela_data257.dat"), :mode => "rb")
2028
+ end
2029
+
2030
+ let(:json_events) do
2031
+ events = []
2032
+ events << <<-END
2033
+ {
2034
+ "@version": "1",
2035
+ "netflow": {
2036
+ "destinationTransportPort": 443,
2037
+ "icmpTypeCodeIPv4": 0,
2038
+ "sourceIPv4Address": "10.113.7.54",
2039
+ "ipClassOfService": 48,
2040
+ "ipPrecedence": 1,
2041
+ "maximumIpTotalLength": 277,
2042
+ "egressInterface": 3,
2043
+ "octetDeltaCount": 775,
2044
+ "ipNextHopIPv4Address": "10.0.0.1",
2045
+ "sourceTransportPort": 41717,
2046
+ "viptelaVPNId": 100,
2047
+ "destinationIPv4Address": "172.16.21.27",
2048
+ "octetTotalCount": 775,
2049
+ "minimumIpTotalLength": 70,
2050
+ "ipDiffServCodePoint": 12,
2051
+ "tcpControlBits": 16,
2052
+ "ingressInterface": 11,
2053
+ "version": 10,
2054
+ "packetDeltaCount": 8,
2055
+ "flowEndReason": 3,
2056
+ "protocolIdentifier": 6,
2057
+ "flowEndSeconds": "2017-11-21T14:32:15.000Z",
2058
+ "flowStartSeconds": "2017-11-21T14:32:15.000Z",
2059
+ "packetTotalCount": 8
2060
+ },
2061
+ "@timestamp": "2017-11-21T14:32:15.000Z"
2062
+ }
2063
+ END
2064
+ events.map{|event| event.gsub(/\s+/, "")}
2065
+ end
2066
+
2067
+ it "should decode raw data" do
2068
+ expect(decode.size).to eq(1)
2069
+ expect(decode[0].get("[netflow][viptelaVPNId]")).to eq(100)
2070
+ end
2071
+
2072
+ it "should serialize to json" do
2073
+ expect(JSON.parse(decode[0].to_json)).to eq(JSON.parse(json_events[0]))
2074
+ end
2075
+ end
2076
+
2077
+
2023
2078
 
2024
2079
  context "IPFIX Barracuda firewall" do
2025
2080
  let(:data) do
metadata CHANGED
@@ -1,17 +1,16 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-codec-netflow
3
3
  version: !ruby/object:Gem::Version
4
- version: 3.8.3
4
+ version: 3.9.0
5
5
  platform: ruby
6
6
  authors:
7
7
  - Elastic
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2017-11-23 00:00:00.000000000 Z
11
+ date: 2017-12-03 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
- name: logstash-core-plugin-api
15
14
  requirement: !ruby/object:Gem::Requirement
16
15
  requirements:
17
16
  - - '>='
@@ -20,8 +19,9 @@ dependencies:
20
19
  - - <=
21
20
  - !ruby/object:Gem::Version
22
21
  version: '2.99'
23
- type: :runtime
22
+ name: logstash-core-plugin-api
24
23
  prerelease: false
24
+ type: :runtime
25
25
  version_requirements: !ruby/object:Gem::Requirement
26
26
  requirements:
27
27
  - - '>='
@@ -31,81 +31,88 @@ dependencies:
31
31
  - !ruby/object:Gem::Version
32
32
  version: '2.99'
33
33
  - !ruby/object:Gem::Dependency
34
- name: bindata
35
34
  requirement: !ruby/object:Gem::Requirement
36
35
  requirements:
37
36
  - - '>='
38
37
  - !ruby/object:Gem::Version
39
38
  version: 1.5.0
40
- type: :runtime
39
+ name: bindata
41
40
  prerelease: false
41
+ type: :runtime
42
42
  version_requirements: !ruby/object:Gem::Requirement
43
43
  requirements:
44
44
  - - '>='
45
45
  - !ruby/object:Gem::Version
46
46
  version: 1.5.0
47
47
  - !ruby/object:Gem::Dependency
48
- name: logstash-devutils
49
48
  requirement: !ruby/object:Gem::Requirement
50
49
  requirements:
51
50
  - - '>='
52
51
  - !ruby/object:Gem::Version
53
52
  version: 1.0.0
54
- type: :development
53
+ name: logstash-devutils
55
54
  prerelease: false
55
+ type: :development
56
56
  version_requirements: !ruby/object:Gem::Requirement
57
57
  requirements:
58
58
  - - '>='
59
59
  - !ruby/object:Gem::Version
60
60
  version: 1.0.0
61
- description: This gem is a Logstash plugin required to be installed on top of the
62
- Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
63
- gem is not a stand-alone program
61
+ description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
64
62
  email: info@elastic.co
65
63
  executables: []
66
64
  extensions: []
67
65
  extra_rdoc_files: []
68
66
  files:
67
+ - CHANGELOG.md
68
+ - CONTRIBUTORS
69
+ - Gemfile
70
+ - LICENSE
71
+ - NOTICE.TXT
72
+ - README.md
73
+ - RFC_COMPLIANCE_IPFIX.md
74
+ - RFC_COMPLIANCE_NETFLOW_v9.md
75
+ - docs/index.asciidoc
76
+ - lib/logstash/codecs/netflow.rb
69
77
  - lib/logstash/codecs/netflow/iana2yaml.rb
70
78
  - lib/logstash/codecs/netflow/ipfix.yaml
71
79
  - lib/logstash/codecs/netflow/netflow.yaml
72
80
  - lib/logstash/codecs/netflow/util.rb
73
- - lib/logstash/codecs/netflow.rb
81
+ - logstash-codec-netflow.gemspec
74
82
  - spec/codecs/ipfix.dat
83
+ - spec/codecs/ipfix_test_barracuda_data256.dat
84
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
85
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
86
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
87
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
88
+ - spec/codecs/ipfix_test_netscaler_data.dat
89
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
75
90
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
76
91
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
92
+ - spec/codecs/ipfix_test_viptela_data257.dat
93
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
94
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
95
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
96
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
97
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
98
+ - spec/codecs/ipfix_test_yaf_data45841.dat
99
+ - spec/codecs/ipfix_test_yaf_data45873.dat
100
+ - spec/codecs/ipfix_test_yaf_data53248.dat
101
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
102
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
77
103
  - spec/codecs/netflow5.dat
78
104
  - spec/codecs/netflow5_test_invalid01.dat
79
105
  - spec/codecs/netflow5_test_invalid02.dat
80
106
  - spec/codecs/netflow5_test_juniper_mx80.dat
81
107
  - spec/codecs/netflow5_test_microtik.dat
108
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
109
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
110
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
82
111
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
83
112
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
84
113
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
85
114
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
86
115
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
87
- - spec/codecs/netflow9_test_invalid01.dat
88
- - spec/codecs/netflow9_test_macaddr_data.dat
89
- - spec/codecs/netflow9_test_macaddr_tpl.dat
90
- - spec/codecs/netflow9_test_nprobe_data.dat
91
- - spec/codecs/netflow9_test_nprobe_tpl.dat
92
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
93
- - spec/codecs/netflow9_test_valid01.dat
94
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
95
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
96
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
97
- - spec/codecs/ipfix_test_netscaler_data.dat
98
- - spec/codecs/ipfix_test_netscaler_tpl.dat
99
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
100
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
101
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
102
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
103
- - spec/codecs/ipfix_test_barracuda_data256.dat
104
- - spec/codecs/ipfix_test_barracuda_tpl.dat
105
- - spec/codecs/ipfix_test_mikrotik_data258.dat
106
- - spec/codecs/ipfix_test_mikrotik_data259.dat
107
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
108
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
109
116
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
110
117
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
111
118
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -116,44 +123,37 @@ files:
116
123
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
117
124
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
118
125
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
126
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
119
127
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
120
128
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
121
129
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
122
130
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
123
131
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
132
+ - spec/codecs/netflow9_test_invalid01.dat
124
133
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
134
+ - spec/codecs/netflow9_test_macaddr_data.dat
135
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
136
+ - spec/codecs/netflow9_test_nprobe_data.dat
125
137
  - spec/codecs/netflow9_test_nprobe_dpi.dat
126
- - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
127
- - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
128
- - spec/codecs/ipfix_test_yaf_data45841.dat
129
- - spec/codecs/ipfix_test_yaf_data45873.dat
130
- - spec/codecs/ipfix_test_yaf_data53248.dat
131
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
132
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
133
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
134
- - spec/codecs/netflow9_test_cisco_1941K9.dat
135
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
138
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
136
139
  - spec/codecs/netflow9_test_paloalto_panos_data.dat
137
140
  - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
141
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
142
+ - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
143
+ - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
144
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
145
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
146
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
147
+ - spec/codecs/netflow9_test_valid01.dat
138
148
  - spec/codecs/netflow_spec.rb
139
149
  - spec/codecs/netflow_stress.py
140
- - logstash-codec-netflow.gemspec
141
- - RFC_COMPLIANCE_NETFLOW_v9.md
142
- - README.md
143
- - RFC_COMPLIANCE_IPFIX.md
144
- - CHANGELOG.md
145
- - CONTRIBUTORS
146
- - Gemfile
147
- - LICENSE
148
- - NOTICE.TXT
149
- - docs/index.asciidoc
150
150
  homepage: http://www.elastic.co/guide/en/logstash/current/index.html
151
151
  licenses:
152
152
  - Apache License (2.0)
153
153
  metadata:
154
154
  logstash_plugin: 'true'
155
155
  logstash_group: codec
156
- post_install_message:
156
+ post_install_message:
157
157
  rdoc_options: []
158
158
  require_paths:
159
159
  - lib
@@ -168,47 +168,46 @@ required_rubygems_version: !ruby/object:Gem::Requirement
168
168
  - !ruby/object:Gem::Version
169
169
  version: '0'
170
170
  requirements: []
171
- rubyforge_project:
172
- rubygems_version: 2.0.14.1
173
- signing_key:
171
+ rubyforge_project:
172
+ rubygems_version: 2.4.8
173
+ signing_key:
174
174
  specification_version: 4
175
175
  summary: Reads Netflow v5 and Netflow v9 data
176
176
  test_files:
177
177
  - spec/codecs/ipfix.dat
178
+ - spec/codecs/ipfix_test_barracuda_data256.dat
179
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
180
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
181
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
182
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
183
+ - spec/codecs/ipfix_test_netscaler_data.dat
184
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
178
185
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
179
186
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
187
+ - spec/codecs/ipfix_test_viptela_data257.dat
188
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
189
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
190
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
191
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
192
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
193
+ - spec/codecs/ipfix_test_yaf_data45841.dat
194
+ - spec/codecs/ipfix_test_yaf_data45873.dat
195
+ - spec/codecs/ipfix_test_yaf_data53248.dat
196
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
197
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
180
198
  - spec/codecs/netflow5.dat
181
199
  - spec/codecs/netflow5_test_invalid01.dat
182
200
  - spec/codecs/netflow5_test_invalid02.dat
183
201
  - spec/codecs/netflow5_test_juniper_mx80.dat
184
202
  - spec/codecs/netflow5_test_microtik.dat
203
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
204
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
205
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
185
206
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
186
207
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
187
208
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
188
209
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
189
210
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
190
- - spec/codecs/netflow9_test_invalid01.dat
191
- - spec/codecs/netflow9_test_macaddr_data.dat
192
- - spec/codecs/netflow9_test_macaddr_tpl.dat
193
- - spec/codecs/netflow9_test_nprobe_data.dat
194
- - spec/codecs/netflow9_test_nprobe_tpl.dat
195
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
196
- - spec/codecs/netflow9_test_valid01.dat
197
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
198
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
199
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
200
- - spec/codecs/ipfix_test_netscaler_data.dat
201
- - spec/codecs/ipfix_test_netscaler_tpl.dat
202
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
203
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
204
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
205
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
206
- - spec/codecs/ipfix_test_barracuda_data256.dat
207
- - spec/codecs/ipfix_test_barracuda_tpl.dat
208
- - spec/codecs/ipfix_test_mikrotik_data258.dat
209
- - spec/codecs/ipfix_test_mikrotik_data259.dat
210
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
211
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
212
211
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
213
212
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
214
213
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -219,24 +218,27 @@ test_files:
219
218
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
220
219
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
221
220
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
221
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
222
222
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
223
223
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
224
224
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
225
225
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
226
226
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
227
+ - spec/codecs/netflow9_test_invalid01.dat
227
228
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
229
+ - spec/codecs/netflow9_test_macaddr_data.dat
230
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
231
+ - spec/codecs/netflow9_test_nprobe_data.dat
228
232
  - spec/codecs/netflow9_test_nprobe_dpi.dat
229
- - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
230
- - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
231
- - spec/codecs/ipfix_test_yaf_data45841.dat
232
- - spec/codecs/ipfix_test_yaf_data45873.dat
233
- - spec/codecs/ipfix_test_yaf_data53248.dat
234
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
235
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
236
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
237
- - spec/codecs/netflow9_test_cisco_1941K9.dat
238
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
233
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
239
234
  - spec/codecs/netflow9_test_paloalto_panos_data.dat
240
235
  - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
236
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
237
+ - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
238
+ - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
239
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
240
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
241
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
242
+ - spec/codecs/netflow9_test_valid01.dat
241
243
  - spec/codecs/netflow_spec.rb
242
244
  - spec/codecs/netflow_stress.py