logstash-codec-netflow 4.2.0 → 4.2.1

Sign up to get free protection for your applications and to get access to all the features.
Files changed (8) hide show
  1. checksums.yaml +4 -4
  2. data/CHANGELOG.md +4 -0
  3. data/CONTRIBUTORS +1 -0
  4. data/lib/logstash/codecs/netflow.rb +2 -2
  5. data/lib/logstash/codecs/netflow/ipfix.yaml +14 -17
  6. data/logstash-codec-netflow.gemspec +1 -1
  7. data/spec/codecs/netflow_spec.rb +43 -43
  8. metadata +172 -170
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA1:
3
- metadata.gz: f2e6d54d4cdca81ee9644aed1eeae50bb8a9d1ee
4
- data.tar.gz: 6ba6e2b5d731d3307de736e8e56d010e27ad2fcc
3
+ metadata.gz: 5577f3642f1d4136ece8b15c15e94b26718005ce
4
+ data.tar.gz: 6c539f16ae819a589cbb3b5f16af2e26bce1f550
5
5
  SHA512:
6
- metadata.gz: e03f252f4070524376db990d4e5e511bb4eae836f205638f1a0de9a328355b52a571c0805a9a71e9e3eeb0facd840a03acceaf94572087f6dfe2c14ab988643b
7
- data.tar.gz: 7d355546ea91c3daf872e45cc9a6f9f1e1e00c8b5e5d3a4f16c89ac835bb25d95872f48406d7a2141ef068b545e9b1950ca5b24d6b32c8d9211f512a4242ea63
6
+ metadata.gz: bbe44345d69394da17702b4cb656f2775b960da03ed2f533e23018355e0f89d39b8b64e5de9f1751d21f85b587900a6f4a5e9dbbc370a705f64020b75e6d284d
7
+ data.tar.gz: 1c441347d6fffc53a28bd5461b003d7a8f6f1c850d53b591788e204c3b6ac1c59b089c3ef55d62499867c4b71b19f59f714c4c9caf65bc39597053423043bf77
data/CHANGELOG.md CHANGED
@@ -1,3 +1,7 @@
1
+ ## 4.2.1
2
+
3
+ - Fix sub-second timestamp math
4
+
1
5
  ## 4.2.0
2
6
 
3
7
  - Added Cisco ACI to list of known working Netflow v9 exporters
data/CONTRIBUTORS CHANGED
@@ -10,6 +10,7 @@ Contributors:
10
10
  * Bjørn Ruberg (bruberg)
11
11
  * Colin Surprenant (colinsurprenant)
12
12
  * Daniel Nägele (analogbyte)
13
+ * Dan Hermann (danhermann)
13
14
  * Diyaldine Maoulida
14
15
  * Evgeniy Sudyr (ejectck)
15
16
  * G.J. Moed (gjmoed)
data/lib/logstash/codecs/netflow.rb CHANGED
@@ -136,7 +136,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
136
136
  # convert these into absolute times
137
137
  millis = flowset.uptime - v
138
138
  seconds = flowset.unix_sec - (millis / 1000)
139
- micros = (flowset.unix_nsec / 1000) - (millis % 1000)
139
+ micros = (flowset.unix_nsec / 1000) - ((millis % 1000) * 1000)
140
140
  if micros < 0
141
141
  seconds--
142
142
  micros += 1000000
@@ -262,7 +262,7 @@ class LogStash::Codecs::Netflow < LogStash::Codecs::Base
262
262
  millis = flowset.uptime - v
263
263
  seconds = flowset.unix_sec - (millis / 1000)
264
264
  # v9 did away with the nanosecs field
265
- micros = 1000000 - (millis % 1000)
265
+ micros = 1000000 - ((millis % 1000) * 1000)
266
266
  event[@target][k.to_s] = LogStash::Timestamp.at(seconds, micros).to_iso8601
267
267
  else
268
268
  event[@target][k.to_s] = v.snapshot
data/lib/logstash/codecs/netflow/ipfix.yaml CHANGED
@@ -2453,37 +2453,34 @@
2453
2453
  6876:
2454
2454
  880:
2455
2455
  - :uint8
2456
- - :vmwareUnknown880
2456
+ - :vmwareTenantProtocol
2457
2457
  881:
2458
- - :uint32
2459
- - :vmwareUnknown881
2458
+ - :ip4_addr
2459
+ - :vmwareTenantSourceIPv4
2460
2460
  882:
2461
- - :uint32
2462
- - :vmwareUnknown882
2461
+ - :ip4_addr
2462
+ - :vmwareTenantDestIPv4
2463
2463
  883:
2464
- - :string
2465
- - :vmwareUnknown883
2464
+ - :ip6_addr
2465
+ - :vmwareTenantSourceIPv6
2466
2466
  884:
2467
- - :string
2468
- - :vmwareUnknown884
2467
+ - :ip6_addr
2468
+ - :vmwareTenantDestIPv6
2469
2469
  886:
2470
2470
  - :uint16
2471
- - :vmwareUnknown886
2471
+ - :vmwareTenantSourcePort
2472
2472
  887:
2473
2473
  - :uint16
2474
- - :vmwareUnknown887
2474
+ - :vmwareTenantDestPort
2475
2475
  888:
2476
2476
  - :uint16
2477
- # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
2478
- - :vmwareEgressInterfaceTypeID
2477
+ - :vmwareEgressInterfaceAttr
2479
2478
  889:
2480
2479
  - :uint8
2481
- # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
2482
- - :vmwareObservationDomainID
2480
+ - :vmwareVxlanExportRole
2483
2481
  890:
2484
2482
  - :uint16
2485
- # source: https://github.com/logstash-plugins/logstash-codec-netflow/issues/28#issuecomment-371811848
2486
- - :vmwareIngressInterfaceTypeID
2483
+ - :vmwareIngressInterfaceAttr
2487
2484
  29305:
2488
2485
  1:
2489
2486
  - :uint64
data/logstash-codec-netflow.gemspec CHANGED
@@ -1,7 +1,7 @@
1
1
  Gem::Specification.new do |s|
2
2
 
3
3
  s.name = 'logstash-codec-netflow'
4
- s.version = '4.2.0'
4
+ s.version = '4.2.1'
5
5
  s.licenses = ['Apache License (2.0)']
6
6
  s.summary = "Reads Netflow v5, Netflow v9 and IPFIX data"
7
7
  s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
data/spec/codecs/netflow_spec.rb CHANGED
@@ -48,8 +48,8 @@ describe LogStash::Codecs::Netflow do
48
48
  "output_snmp": 0,
49
49
  "in_pkts": 5,
50
50
  "in_bytes": 230,
51
- "first_switched": "2015-06-21T11:40:52.280Z",
52
- "last_switched": "2015-05-02T18:38:08.279Z",
51
+ "first_switched": "2015-06-21T11:40:52.194Z",
52
+ "last_switched": "2015-05-02T18:38:08.476Z",
53
53
  "l4_src_port": 54435,
54
54
  "l4_dst_port": 22,
55
55
  "tcp_flags": 16,
@@ -82,8 +82,8 @@ describe LogStash::Codecs::Netflow do
82
82
  "output_snmp": 0,
83
83
  "in_pkts": 4,
84
84
  "in_bytes": 304,
85
- "first_switched": "2015-06-21T11:40:52.280Z",
86
- "last_switched": "2015-05-02T18:38:08.279Z",
85
+ "first_switched": "2015-06-21T11:40:52.194Z",
86
+ "last_switched": "2015-05-02T18:38:08.476Z",
87
87
  "l4_src_port": 22,
88
88
  "l4_dst_port": 54435,
89
89
  "tcp_flags": 24,
@@ -169,8 +169,8 @@ describe LogStash::Codecs::Netflow do
169
169
  "flowset_id":1024,
170
170
  "ipv4_src_addr": "172.16.32.100",
171
171
  "ipv4_dst_addr":"172.16.32.248",
172
- "last_switched":"2015-10-08T19:03:47.999Z",
173
- "first_switched":"2015-10-08T19:03:47.999Z",
172
+ "last_switched":"2015-10-08T19:03:47.141Z",
173
+ "first_switched":"2015-10-08T19:03:47.140Z",
174
174
  "in_bytes":76,
175
175
  "in_pkts":1,
176
176
  "input_snmp":0,
@@ -262,9 +262,9 @@ describe LogStash::Codecs::Netflow do
262
262
  "l4_src_port": 179,
263
263
  "ipv4_dst_addr": "10.154.231.146",
264
264
  "in_pkts": 2,
265
- "first_switched": "2018-10-15T11:28:05.999Z",
265
+ "first_switched": "2018-10-15T11:28:05.019Z",
266
266
  "protocol": 6,
267
- "last_switched": "2018-10-15T11:28:24.999Z",
267
+ "last_switched": "2018-10-15T11:28:24.066Z",
268
268
  "ip_protocol_version": 4,
269
269
  "in_bytes": 99,
270
270
  "flow_seq_num": 36,
@@ -368,8 +368,8 @@ describe LogStash::Codecs::Netflow do
368
368
  "flowset_id":1024,
369
369
  "ipv4_src_addr":"172.16.32.100",
370
370
  "ipv4_dst_addr":"172.16.32.248",
371
- "last_switched":"2015-10-08T19:03:47.999Z",
372
- "first_switched":"2015-10-08T19:03:47.999Z",
371
+ "last_switched":"2015-10-08T19:03:47.141Z",
372
+ "first_switched":"2015-10-08T19:03:47.140Z",
373
373
  "in_bytes":76,
374
374
  "in_pkts":1,
375
375
  "input_snmp":0,
@@ -408,8 +408,8 @@ describe LogStash::Codecs::Netflow do
408
408
  "ipv4_next_hop":"0.0.0.0",
409
409
  "src_as":0,
410
410
  "dst_as":0,
411
- "last_switched":"2015-10-08T19:05:56.999Z",
412
- "first_switched":"2015-10-08T19:05:56.999Z"
411
+ "last_switched":"2015-10-08T19:05:56.015Z",
412
+ "first_switched":"2015-10-08T19:05:56.010Z"
413
413
  },
414
414
  "@version":"1"
415
415
  }
@@ -829,7 +829,7 @@ describe LogStash::Codecs::Netflow do
829
829
 
830
830
  end
831
831
 
832
- context "Netflow5 microtik" do
832
+ context "Netflow5 mikrotik" do
833
833
  let(:data) do
834
834
  packets = []
835
835
  packets << IO.read(File.join(File.dirname(__FILE__), "netflow5_test_microtik.dat"), :mode => "rb")
@@ -855,8 +855,8 @@ describe LogStash::Codecs::Netflow do
855
855
  "output_snmp": 46,
856
856
  "in_pkts": 13,
857
857
  "in_bytes": 11442,
858
- "first_switched": "2016-07-21T13:51:42.514Z",
859
- "last_switched": "2016-07-21T13:51:42.514Z",
858
+ "first_switched": "2016-07-21T13:51:42.254Z",
859
+ "last_switched": "2016-07-21T13:51:42.254Z",
860
860
  "l4_src_port": 80,
861
861
  "l4_dst_port": 51826,
862
862
  "tcp_flags": 82,
@@ -912,8 +912,8 @@ describe LogStash::Codecs::Netflow do
912
912
  "output_snmp": 536,
913
913
  "in_pkts": 2,
914
914
  "in_bytes": 104,
915
- "first_switched": "2016-07-21T13:52:34.999Z",
916
- "last_switched": "2016-07-21T13:52:34.999Z",
915
+ "first_switched": "2016-07-21T13:52:34.936Z",
916
+ "last_switched": "2016-07-21T13:52:34.936Z",
917
917
  "l4_src_port": 37387,
918
918
  "l4_dst_port": 80,
919
919
  "tcp_flags": 16,
@@ -956,7 +956,7 @@ describe LogStash::Codecs::Netflow do
956
956
  {
957
957
  "netflow": {
958
958
  "l4_src_port": 443,
959
- "last_switched": "2018-02-18T05:46:54.999Z",
959
+ "last_switched": "2018-02-18T05:46:54.992Z",
960
960
  "ingressPhysicalInterface": 7,
961
961
  "in_bytes": 187,
962
962
  "tcpOptions": 2164260864,
@@ -972,7 +972,7 @@ describe LogStash::Codecs::Netflow do
972
972
  "flow_seq_num": 344481,
973
973
  "ipv4_next_hop": "10.232.5.1",
974
974
  "flowset_id": 260,
975
- "first_switched": "2018-02-18T05:46:54.999Z",
975
+ "first_switched": "2018-02-18T05:46:54.800Z",
976
976
  "tcp_flags": 25,
977
977
  "ipv4_dst_addr": "10.233.150.21",
978
978
  "ipv4_src_addr": "2.17.140.47",
@@ -1014,7 +1014,7 @@ describe LogStash::Codecs::Netflow do
1014
1014
  "src_as": 0,
1015
1015
  "flowset_id": 3281,
1016
1016
  "l4_dst_port": 0,
1017
- "last_switched": "2018-05-21T09:25:04.999Z",
1017
+ "last_switched": "2018-05-21T09:25:04.928Z",
1018
1018
  "dst_mask": 24,
1019
1019
  "tcp_flags": 0,
1020
1020
  "src_tos": 0,
@@ -1029,7 +1029,7 @@ describe LogStash::Codecs::Netflow do
1029
1029
  "src_traffic_index": 0,
1030
1030
  "in_bytes": 5092,
1031
1031
  "ipv4_src_addr": "10.22.166.36",
1032
- "first_switched": "2018-05-21T09:24:04.999Z",
1032
+ "first_switched": "2018-05-21T09:24:04.922Z",
1033
1033
  "ipv4_dst_addr": "10.21.75.38",
1034
1034
  "ipv4_next_hop": "10.21.17.78",
1035
1035
  "forwarding_status": {
@@ -1206,9 +1206,9 @@ describe LogStash::Codecs::Netflow do
1206
1206
  "@timestamp": "2018-07-18T01:35:35.000Z",
1207
1207
  "netflow": {
1208
1208
  "in_pkts": 9,
1209
- "last_switched": "2018-07-18T01:35:03.999Z",
1209
+ "last_switched": "2018-07-18T01:35:03.969Z",
1210
1210
  "direction": 0,
1211
- "first_switched": "2018-07-18T01:34:34.999Z",
1211
+ "first_switched": "2018-07-18T01:34:34.274Z",
1212
1212
  "ipv4_dst_addr": "20.20.255.255",
1213
1213
  "src_tos": 0,
1214
1214
  "ipv4_src_addr": "20.20.20.20",
@@ -1275,7 +1275,7 @@ describe LogStash::Codecs::Netflow do
1275
1275
  "xlate_src_port": 45380,
1276
1276
  "in_pkts": 6,
1277
1277
  "ipv4_dst_addr": "182.50.136.239",
1278
- "first_switched": "2018-05-11T00:54:10.999Z",
1278
+ "first_switched": "2018-05-11T00:54:10.580Z",
1279
1279
  "flowset_id": 262,
1280
1280
  "l4_src_port": 45380,
1281
1281
  "xlate_dst_port": 0,
@@ -1286,7 +1286,7 @@ describe LogStash::Codecs::Netflow do
1286
1286
  "in_bytes": 748,
1287
1287
  "protocol": 6,
1288
1288
  "flow_end_reason": 3,
1289
- "last_switched": "2018-05-11T00:54:10.999Z",
1289
+ "last_switched": "2018-05-11T00:54:10.990Z",
1290
1290
  "input_snmp": 8,
1291
1291
  "out_pkts": 6,
1292
1292
  "out_bytes": 748,
@@ -1611,7 +1611,7 @@ describe LogStash::Codecs::Netflow do
1611
1611
  "ip_protocol_version": 4,
1612
1612
  "ipv4_dst_addr": "10.2.0.95",
1613
1613
  "src_tos": 0,
1614
- "first_switched": "2016-09-10T15:02:54.999Z",
1614
+ "first_switched": "2016-09-10T15:02:54.375Z",
1615
1615
  "flowset_id": 1025,
1616
1616
  "l4_src_port": 47690,
1617
1617
  "out_dst_mac": "44:d9:e7:be:ef:8e",
@@ -1626,7 +1626,7 @@ describe LogStash::Codecs::Netflow do
1626
1626
  "label": 0,
1627
1627
  "ttl": 4
1628
1628
  },
1629
- "last_switched": "2016-09-10T15:23:45.999Z",
1629
+ "last_switched": "2016-09-10T15:23:45.363Z",
1630
1630
  "input_snmp": 2,
1631
1631
  "flows": 0,
1632
1632
  "tcp_flags": 27,
@@ -1735,7 +1735,7 @@ describe LogStash::Codecs::Netflow do
1735
1735
  "output_snmp": 3,
1736
1736
  "in_pkts": 3,
1737
1737
  "ipv4_dst_addr": "31.13.87.36",
1738
- "first_switched": "2017-07-25T04:44:29.999Z",
1738
+ "first_switched": "2017-07-25T04:44:29.522Z",
1739
1739
  "flowset_id": 257,
1740
1740
  "l4_src_port": 61910,
1741
1741
  "version": 9,
@@ -1743,7 +1743,7 @@ describe LogStash::Codecs::Netflow do
1743
1743
  "ipv4_src_addr": "192.168.99.7",
1744
1744
  "in_bytes": 152,
1745
1745
  "protocol": 6,
1746
- "last_switched": "2017-07-25T04:44:38.999Z",
1746
+ "last_switched": "2017-07-25T04:44:38.522Z",
1747
1747
  "input_snmp": 9,
1748
1748
  "out_pkts": 0,
1749
1749
  "out_bytes": 0,
@@ -1781,7 +1781,7 @@ describe LogStash::Codecs::Netflow do
1781
1781
  {
1782
1782
  "netflow": {
1783
1783
  "in_pkts": 3,
1784
- "first_switched": "2017-01-11T11:47:23.999Z",
1784
+ "first_switched": "2017-01-11T11:47:23.867Z",
1785
1785
  "flowset_id": 256,
1786
1786
  "l4_src_port": 8080,
1787
1787
  "streamcore_id_rule_1": 1171,
@@ -1803,7 +1803,7 @@ describe LogStash::Codecs::Netflow do
1803
1803
  "flow_seq_num": 2143054578,
1804
1804
  "ipv4_src_addr": "100.78.40.201",
1805
1805
  "input_snmp": 1152,
1806
- "last_switched": "2017-01-11T11:47:29.999Z",
1806
+ "last_switched": "2017-01-11T11:47:29.879Z",
1807
1807
  "streamcore_wan_rtt": 0,
1808
1808
  "streamcore_total_app_resp_time": 0
1809
1809
  },
@@ -1894,7 +1894,7 @@ describe LogStash::Codecs::Netflow do
1894
1894
  "netflow": {
1895
1895
  "streamcore_id_rule_10": 0,
1896
1896
  "in_pkts": 11,
1897
- "first_switched": "2017-01-11T11:22:44.999Z",
1897
+ "first_switched": "2017-01-11T11:22:44.939Z",
1898
1898
  "flowset_id": 260,
1899
1899
  "l4_src_port": 53483,
1900
1900
  "streamcore_id_rule_1": 1171,
@@ -1921,7 +1921,7 @@ describe LogStash::Codecs::Netflow do
1921
1921
  "flow_seq_num": 2142545188,
1922
1922
  "ipv4_src_addr": "10.27.8.20",
1923
1923
  "input_snmp": 1148,
1924
- "last_switched": "2017-01-11T11:23:35.999Z",
1924
+ "last_switched": "2017-01-11T11:23:35.954Z",
1925
1925
  "streamcore_url": "\/mux.json",
1926
1926
  "streamcore_wan_rtt": 0,
1927
1927
  "streamcore_total_app_resp_time": 19
@@ -2134,7 +2134,7 @@ describe LogStash::Codecs::Netflow do
2134
2134
  "destinationIPv4Address": "172.18.65.211",
2135
2135
  "destinationTransportPort": 5985,
2136
2136
  "tcpControlBits": 2,
2137
- "vmwareIngressInterfaceTypeID": 1,
2137
+ "vmwareIngressInterfaceAttr": 1,
2138
2138
  "sourceIPv4Address": "172.18.65.21",
2139
2139
  "ingressInterface": 3,
2140
2140
  "ipClassOfService": 0,
@@ -2149,9 +2149,9 @@ describe LogStash::Codecs::Netflow do
2149
2149
  "sourceTransportPort": 61209,
2150
2150
  "flowEndMilliseconds": "2016-12-22T12:17:37.000Z",
2151
2151
  "maximumTTL": 128,
2152
- "vmwareEgressInterfaceTypeID": 2,
2152
+ "vmwareEgressInterfaceAttr": 2,
2153
2153
  "flowStartMilliseconds": "2016-12-22T12:17:37.000Z",
2154
- "vmwareObservationDomainID": 0
2154
+ "vmwareVxlanExportRole": 0
2155
2155
  },
2156
2156
  "@timestamp": "2016-12-22T12:17:52.000Z",
2157
2157
  "@version": "1"
@@ -2342,7 +2342,7 @@ describe LogStash::Codecs::Netflow do
2342
2342
  "dst_mask":32,
2343
2343
  "in_pkts":0,
2344
2344
  "ipv4_dst_addr":"239.255.255.250",
2345
- "first_switched":"2016-12-23T01:34:52.999Z",
2345
+ "first_switched":"2016-12-23T01:34:52.569Z",
2346
2346
  "flowset_id":256,
2347
2347
  "l4_src_port":0,
2348
2348
  "src_mask":32,
@@ -2352,7 +2352,7 @@ describe LogStash::Codecs::Netflow do
2352
2352
  "in_bytes":0,
2353
2353
  "protocol":2,
2354
2354
  "input_snmp":2,
2355
- "last_switched":"2016-12-23T01:34:52.999Z",
2355
+ "last_switched":"2016-12-23T01:34:52.569Z",
2356
2356
  "tcp_flags":0,
2357
2357
  "engine_id":1,
2358
2358
  "out_pkts":1,
@@ -2434,7 +2434,7 @@ describe LogStash::Codecs::Netflow do
2434
2434
  "status": 0
2435
2435
  },
2436
2436
  "in_pkts": 4,
2437
- "first_switched": "2018-01-29T02:56:52.999Z",
2437
+ "first_switched": "2018-01-29T02:56:52.940Z",
2438
2438
  "flowset_id": 1315,
2439
2439
  "ipv4_next_hop": "10.108.252.41",
2440
2440
  "l4_src_port": 45587,
@@ -2541,7 +2541,7 @@ describe LogStash::Codecs::Netflow do
2541
2541
  "status": 1
2542
2542
  },
2543
2543
  "in_pkts": 2,
2544
- "first_switched": "2016-12-06T10:08:53.999Z",
2544
+ "first_switched": "2016-12-06T10:08:53.377Z",
2545
2545
  "flowset_id": 260,
2546
2546
  "l4_src_port": 443,
2547
2547
  "in_bytes": 112,
@@ -2561,7 +2561,7 @@ describe LogStash::Codecs::Netflow do
2561
2561
  "ipv4_src_addr": "10.0.29.46",
2562
2562
  "egressVRFID": 1610612736,
2563
2563
  "input_snmp": 75,
2564
- "last_switched": "2016-12-06T10:08:54.999Z",
2564
+ "last_switched": "2016-12-06T10:08:54.964Z",
2565
2565
  "flow_sampler_id": 1,
2566
2566
  "bgp_ipv4_next_hop": "10.0.14.27"
2567
2567
  },
@@ -2632,7 +2632,7 @@ describe LogStash::Codecs::Netflow do
2632
2632
  "dst_as": 0,
2633
2633
  "in_pkts": 36,
2634
2634
  "ipv4_src_prefix": "0.0.0.0",
2635
- "first_switched": "2017-02-14T11:10:20.999Z",
2635
+ "first_switched": "2017-02-14T11:10:20.936Z",
2636
2636
  "flowset_id": 262,
2637
2637
  "l4_src_port": 45269,
2638
2638
  "ipv4_next_hop": "0.0.0.0",
@@ -2656,7 +2656,7 @@ describe LogStash::Codecs::Netflow do
2656
2656
  "ipv4_src_addr": "10.10.172.60",
2657
2657
  "in_src_mac": "00:18:19:9e:6c:01",
2658
2658
  "input_snmp": 1,
2659
- "last_switched": "2017-02-14T11:10:21.999Z",
2659
+ "last_switched": "2017-02-14T11:10:21.008Z",
2660
2660
  "flow_sampler_id": 0
2661
2661
  },
2662
2662
  "@timestamp": "2017-02-14T11:10:36.000Z",
metadata CHANGED
@@ -1,135 +1,107 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: logstash-codec-netflow
3
3
  version: !ruby/object:Gem::Version
4
- version: 4.2.0
4
+ version: 4.2.1
5
5
  platform: ruby
6
6
  authors:
7
7
  - Elastic
8
- autorequire:
8
+ autorequire:
9
9
  bindir: bin
10
10
  cert_chain: []
11
- date: 2018-10-28 00:00:00.000000000 Z
11
+ date: 2018-12-30 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
+ name: logstash-core-plugin-api
14
15
  requirement: !ruby/object:Gem::Requirement
15
16
  requirements:
16
17
  - - ~>
17
18
  - !ruby/object:Gem::Version
18
19
  version: '2.0'
19
- name: logstash-core-plugin-api
20
- prerelease: false
21
20
  type: :runtime
21
+ prerelease: false
22
22
  version_requirements: !ruby/object:Gem::Requirement
23
23
  requirements:
24
24
  - - ~>
25
25
  - !ruby/object:Gem::Version
26
26
  version: '2.0'
27
27
  - !ruby/object:Gem::Dependency
28
+ name: bindata
28
29
  requirement: !ruby/object:Gem::Requirement
29
30
  requirements:
30
31
  - - '>='
31
32
  - !ruby/object:Gem::Version
32
33
  version: 1.5.0
33
- name: bindata
34
- prerelease: false
35
34
  type: :runtime
35
+ prerelease: false
36
36
  version_requirements: !ruby/object:Gem::Requirement
37
37
  requirements:
38
38
  - - '>='
39
39
  - !ruby/object:Gem::Version
40
40
  version: 1.5.0
41
41
  - !ruby/object:Gem::Dependency
42
+ name: logstash-devutils
42
43
  requirement: !ruby/object:Gem::Requirement
43
44
  requirements:
44
45
  - - '>='
45
46
  - !ruby/object:Gem::Version
46
47
  version: 1.0.0
47
- name: logstash-devutils
48
- prerelease: false
49
48
  type: :development
49
+ prerelease: false
50
50
  version_requirements: !ruby/object:Gem::Requirement
51
51
  requirements:
52
52
  - - '>='
53
53
  - !ruby/object:Gem::Version
54
54
  version: 1.0.0
55
- description: This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program
55
+ description: This gem is a Logstash plugin required to be installed on top of the
56
+ Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This
57
+ gem is not a stand-alone program
56
58
  email: info@elastic.co
57
59
  executables: []
58
60
  extensions: []
59
61
  extra_rdoc_files: []
60
62
  files:
61
- - CHANGELOG.md
62
- - CONTRIBUTORS
63
- - Gemfile
64
- - LICENSE
65
- - NOTICE.TXT
66
- - README.md
67
- - RFC_COMPLIANCE_IPFIX.md
68
- - RFC_COMPLIANCE_NETFLOW_v9.md
69
- - docs/index.asciidoc
70
- - lib/logstash/codecs/netflow.rb
71
63
  - lib/logstash/codecs/netflow/iana2yaml.rb
72
- - lib/logstash/codecs/netflow/ipfix.yaml
73
64
  - lib/logstash/codecs/netflow/netflow.yaml
74
65
  - lib/logstash/codecs/netflow/util.rb
75
- - logstash-codec-netflow.gemspec
76
- - spec/codecs/benchmarks/ACLidASA.rb
77
- - spec/codecs/benchmarks/IP6Addr.rb
78
- - spec/codecs/benchmarks/IPAddr.rb
79
- - spec/codecs/benchmarks/MacAddr.rb
80
- - spec/codecs/benchmarks/benchmark_fields.rb
81
- - spec/codecs/benchmarks/flowStartMilliseconds.rb
82
- - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
83
- - spec/codecs/benchmarks/ipfix_bench_yaf.py
84
- - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
85
- - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
66
+ - lib/logstash/codecs/netflow/ipfix.yaml
67
+ - lib/logstash/codecs/netflow.rb
86
68
  - spec/codecs/ipfix.dat
87
- - spec/codecs/ipfix_stress.py
88
- - spec/codecs/ipfix_test_barracuda_data256.dat
89
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
90
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
91
- - spec/codecs/ipfix_test_barracuda_tpl.dat
92
- - spec/codecs/ipfix_test_ixia_tpldata256.dat
93
- - spec/codecs/ipfix_test_ixia_tpldata271.dat
94
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
95
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
96
- - spec/codecs/ipfix_test_mikrotik_data258.dat
97
- - spec/codecs/ipfix_test_mikrotik_data259.dat
98
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
99
- - spec/codecs/ipfix_test_netscaler_data.dat
100
- - spec/codecs/ipfix_test_netscaler_tpl.dat
101
- - spec/codecs/ipfix_test_nokia_bras_data256.dat
102
- - spec/codecs/ipfix_test_nokia_bras_tpl.dat
103
69
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
104
70
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
105
- - spec/codecs/ipfix_test_procera_data52935.dat
106
- - spec/codecs/ipfix_test_procera_tpl52935.dat
107
- - spec/codecs/ipfix_test_viptela_data257.dat
108
- - spec/codecs/ipfix_test_viptela_tpl257.dat
109
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
110
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
111
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
112
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
113
- - spec/codecs/ipfix_test_yaf_data45841.dat
114
- - spec/codecs/ipfix_test_yaf_data45873.dat
115
- - spec/codecs/ipfix_test_yaf_data53248.dat
116
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
117
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
118
71
  - spec/codecs/netflow5.dat
119
72
  - spec/codecs/netflow5_test_invalid01.dat
120
73
  - spec/codecs/netflow5_test_invalid02.dat
121
74
  - spec/codecs/netflow5_test_juniper_mx80.dat
122
75
  - spec/codecs/netflow5_test_microtik.dat
123
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
124
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
125
- - spec/codecs/netflow9_test_cisco_1941K9.dat
126
- - spec/codecs/netflow9_test_cisco_aci_data256.dat
127
- - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
128
76
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
129
77
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
130
78
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
131
79
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
132
80
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
81
+ - spec/codecs/netflow9_test_invalid01.dat
82
+ - spec/codecs/netflow9_test_macaddr_data.dat
83
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
84
+ - spec/codecs/netflow9_test_nprobe_data.dat
85
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
86
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
87
+ - spec/codecs/netflow9_test_valid01.dat
88
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
89
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
90
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
91
+ - spec/codecs/ipfix_test_netscaler_data.dat
92
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
93
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
94
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
95
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
96
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
97
+ - spec/codecs/ipfix_test_barracuda_data256.dat
98
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
99
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
100
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
101
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
102
+ - spec/codecs/ipfix_test_nokia_bras_tpl.dat
103
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
104
+ - spec/codecs/netflow_spec.rb
133
105
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
134
106
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
135
107
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -140,51 +112,81 @@ files:
140
112
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
141
113
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
142
114
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
143
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
115
+ - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
144
116
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
145
117
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
146
- - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
147
- - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
148
118
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
149
119
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
150
120
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
151
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
152
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
153
- - spec/codecs/netflow9_test_h3c_data3281.dat
154
- - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
155
- - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
156
- - spec/codecs/netflow9_test_h3c_tpl3281.dat
157
- - spec/codecs/netflow9_test_huawei_netstream_data.dat
158
- - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
159
- - spec/codecs/netflow9_test_invalid01.dat
160
- - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
161
121
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
162
- - spec/codecs/netflow9_test_macaddr_data.dat
163
- - spec/codecs/netflow9_test_macaddr_tpl.dat
164
- - spec/codecs/netflow9_test_nprobe_data.dat
165
122
  - spec/codecs/netflow9_test_nprobe_dpi.dat
166
- - spec/codecs/netflow9_test_nprobe_tpl.dat
167
- - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
168
- - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
169
- - spec/codecs/netflow9_test_paloalto_panos_data.dat
170
- - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
171
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
172
123
  - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
173
124
  - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
174
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
175
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
176
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
177
- - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
178
- - spec/codecs/netflow9_test_valid01.dat
179
- - spec/codecs/netflow_spec.rb
125
+ - spec/codecs/ipfix_test_yaf_data45841.dat
126
+ - spec/codecs/ipfix_test_yaf_data45873.dat
127
+ - spec/codecs/ipfix_test_yaf_data53248.dat
128
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
129
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
130
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
131
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
132
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
133
+ - spec/codecs/netflow9_test_paloalto_panos_data.dat
134
+ - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
180
135
  - spec/codecs/netflow_stress.py
136
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
137
+ - spec/codecs/ipfix_test_viptela_data257.dat
138
+ - spec/codecs/ipfix_test_nokia_bras_data256.dat
139
+ - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
140
+ - spec/codecs/ipfix_test_procera_tpl52935.dat
141
+ - spec/codecs/ipfix_test_procera_data52935.dat
142
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
143
+ - spec/codecs/benchmarks/ACLidASA.rb
144
+ - spec/codecs/benchmarks/MacAddr.rb
145
+ - spec/codecs/benchmarks/IPAddr.rb
146
+ - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
147
+ - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
148
+ - spec/codecs/benchmarks/ipfix_bench_yaf.py
149
+ - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
150
+ - spec/codecs/benchmarks/flowStartMilliseconds.rb
151
+ - spec/codecs/benchmarks/IP6Addr.rb
152
+ - spec/codecs/benchmarks/benchmark_fields.rb
153
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
154
+ - spec/codecs/netflow9_test_h3c_tpl3281.dat
155
+ - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
156
+ - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
157
+ - spec/codecs/netflow9_test_huawei_netstream_data.dat
158
+ - spec/codecs/ipfix_stress.py
159
+ - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
160
+ - spec/codecs/netflow9_test_h3c_data3281.dat
161
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
162
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
163
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
164
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
165
+ - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
166
+ - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
167
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
168
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
169
+ - spec/codecs/ipfix_test_ixia_tpldata256.dat
170
+ - spec/codecs/ipfix_test_ixia_tpldata271.dat
171
+ - spec/codecs/netflow9_test_cisco_aci_data256.dat
172
+ - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
173
+ - logstash-codec-netflow.gemspec
174
+ - CHANGELOG.md
175
+ - README.md
176
+ - RFC_COMPLIANCE_IPFIX.md
177
+ - RFC_COMPLIANCE_NETFLOW_v9.md
178
+ - CONTRIBUTORS
179
+ - Gemfile
180
+ - LICENSE
181
+ - NOTICE.TXT
182
+ - docs/index.asciidoc
181
183
  homepage: http://www.elastic.co/guide/en/logstash/current/index.html
182
184
  licenses:
183
185
  - Apache License (2.0)
184
186
  metadata:
185
187
  logstash_plugin: 'true'
186
188
  logstash_group: codec
187
- post_install_message:
189
+ post_install_message:
188
190
  rdoc_options: []
189
191
  require_paths:
190
192
  - lib
@@ -199,69 +201,49 @@ required_rubygems_version: !ruby/object:Gem::Requirement
199
201
  - !ruby/object:Gem::Version
200
202
  version: '0'
201
203
  requirements: []
202
- rubyforge_project:
203
- rubygems_version: 2.4.8
204
- signing_key:
204
+ rubyforge_project:
205
+ rubygems_version: 2.0.14.1
206
+ signing_key:
205
207
  specification_version: 4
206
208
  summary: Reads Netflow v5, Netflow v9 and IPFIX data
207
209
  test_files:
208
- - spec/codecs/benchmarks/ACLidASA.rb
209
- - spec/codecs/benchmarks/IP6Addr.rb
210
- - spec/codecs/benchmarks/IPAddr.rb
211
- - spec/codecs/benchmarks/MacAddr.rb
212
- - spec/codecs/benchmarks/benchmark_fields.rb
213
- - spec/codecs/benchmarks/flowStartMilliseconds.rb
214
- - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
215
- - spec/codecs/benchmarks/ipfix_bench_yaf.py
216
- - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
217
- - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
218
210
  - spec/codecs/ipfix.dat
219
- - spec/codecs/ipfix_stress.py
220
- - spec/codecs/ipfix_test_barracuda_data256.dat
221
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
222
- - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
223
- - spec/codecs/ipfix_test_barracuda_tpl.dat
224
- - spec/codecs/ipfix_test_ixia_tpldata256.dat
225
- - spec/codecs/ipfix_test_ixia_tpldata271.dat
226
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
227
- - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
228
- - spec/codecs/ipfix_test_mikrotik_data258.dat
229
- - spec/codecs/ipfix_test_mikrotik_data259.dat
230
- - spec/codecs/ipfix_test_mikrotik_tpl.dat
231
- - spec/codecs/ipfix_test_netscaler_data.dat
232
- - spec/codecs/ipfix_test_netscaler_tpl.dat
233
- - spec/codecs/ipfix_test_nokia_bras_data256.dat
234
- - spec/codecs/ipfix_test_nokia_bras_tpl.dat
235
211
  - spec/codecs/ipfix_test_openbsd_pflow_data.dat
236
212
  - spec/codecs/ipfix_test_openbsd_pflow_tpl.dat
237
- - spec/codecs/ipfix_test_procera_data52935.dat
238
- - spec/codecs/ipfix_test_procera_tpl52935.dat
239
- - spec/codecs/ipfix_test_viptela_data257.dat
240
- - spec/codecs/ipfix_test_viptela_tpl257.dat
241
- - spec/codecs/ipfix_test_vmware_vds_data264.dat
242
- - spec/codecs/ipfix_test_vmware_vds_data266.dat
243
- - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
244
- - spec/codecs/ipfix_test_vmware_vds_tpl.dat
245
- - spec/codecs/ipfix_test_yaf_data45841.dat
246
- - spec/codecs/ipfix_test_yaf_data45873.dat
247
- - spec/codecs/ipfix_test_yaf_data53248.dat
248
- - spec/codecs/ipfix_test_yaf_tpl45841.dat
249
- - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
250
213
  - spec/codecs/netflow5.dat
251
214
  - spec/codecs/netflow5_test_invalid01.dat
252
215
  - spec/codecs/netflow5_test_invalid02.dat
253
216
  - spec/codecs/netflow5_test_juniper_mx80.dat
254
217
  - spec/codecs/netflow5_test_microtik.dat
255
- - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
256
- - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
257
- - spec/codecs/netflow9_test_cisco_1941K9.dat
258
- - spec/codecs/netflow9_test_cisco_aci_data256.dat
259
- - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat
260
218
  - spec/codecs/netflow9_test_cisco_asa_1_data.dat
261
219
  - spec/codecs/netflow9_test_cisco_asa_1_tpl.dat
262
220
  - spec/codecs/netflow9_test_cisco_asa_2_data.dat
263
221
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_26x.dat
264
222
  - spec/codecs/netflow9_test_cisco_asa_2_tpl_27x.dat
223
+ - spec/codecs/netflow9_test_invalid01.dat
224
+ - spec/codecs/netflow9_test_macaddr_data.dat
225
+ - spec/codecs/netflow9_test_macaddr_tpl.dat
226
+ - spec/codecs/netflow9_test_nprobe_data.dat
227
+ - spec/codecs/netflow9_test_nprobe_tpl.dat
228
+ - spec/codecs/netflow9_test_softflowd_tpl_data.dat
229
+ - spec/codecs/netflow9_test_valid01.dat
230
+ - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
231
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
232
+ - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
233
+ - spec/codecs/ipfix_test_netscaler_data.dat
234
+ - spec/codecs/ipfix_test_netscaler_tpl.dat
235
+ - spec/codecs/ipfix_test_vmware_vds_data264.dat
236
+ - spec/codecs/ipfix_test_vmware_vds_data266.dat
237
+ - spec/codecs/ipfix_test_vmware_vds_data266_267.dat
238
+ - spec/codecs/ipfix_test_vmware_vds_tpl.dat
239
+ - spec/codecs/ipfix_test_barracuda_data256.dat
240
+ - spec/codecs/ipfix_test_barracuda_tpl.dat
241
+ - spec/codecs/ipfix_test_mikrotik_data258.dat
242
+ - spec/codecs/ipfix_test_mikrotik_data259.dat
243
+ - spec/codecs/ipfix_test_mikrotik_tpl.dat
244
+ - spec/codecs/ipfix_test_nokia_bras_tpl.dat
245
+ - spec/codecs/netflow9_test_0length_fields_tpl_data.dat
246
+ - spec/codecs/netflow_spec.rb
265
247
  - spec/codecs/netflow9_test_cisco_asr9k_data256.dat
266
248
  - spec/codecs/netflow9_test_cisco_asr9k_data260.dat
267
249
  - spec/codecs/netflow9_test_cisco_asr9k_opttpl256.dat
@@ -272,41 +254,61 @@ test_files:
272
254
  - spec/codecs/netflow9_test_cisco_nbar_data262.dat
273
255
  - spec/codecs/netflow9_test_cisco_nbar_opttpl260.dat
274
256
  - spec/codecs/netflow9_test_cisco_nbar_tpl262.dat
275
- - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
257
+ - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
276
258
  - spec/codecs/netflow9_test_cisco_wlc_data261.dat
277
259
  - spec/codecs/netflow9_test_cisco_wlc_tpl.dat
278
- - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
279
- - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
280
260
  - spec/codecs/netflow9_test_fortigate_fortios_521_data256.dat
281
261
  - spec/codecs/netflow9_test_fortigate_fortios_521_data257.dat
282
262
  - spec/codecs/netflow9_test_fortigate_fortios_521_tpl.dat
283
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
284
- - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
285
- - spec/codecs/netflow9_test_h3c_data3281.dat
286
- - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
287
- - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
288
- - spec/codecs/netflow9_test_h3c_tpl3281.dat
289
- - spec/codecs/netflow9_test_huawei_netstream_data.dat
290
- - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
291
- - spec/codecs/netflow9_test_invalid01.dat
292
- - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
293
263
  - spec/codecs/netflow9_test_juniper_srx_tplopt.dat
294
- - spec/codecs/netflow9_test_macaddr_data.dat
295
- - spec/codecs/netflow9_test_macaddr_tpl.dat
296
- - spec/codecs/netflow9_test_nprobe_data.dat
297
264
  - spec/codecs/netflow9_test_nprobe_dpi.dat
298
- - spec/codecs/netflow9_test_nprobe_tpl.dat
299
- - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
300
- - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
301
- - spec/codecs/netflow9_test_paloalto_panos_data.dat
302
- - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
303
- - spec/codecs/netflow9_test_softflowd_tpl_data.dat
304
265
  - spec/codecs/netflow9_test_streamcore_tpl_data256.dat
305
266
  - spec/codecs/netflow9_test_streamcore_tpl_data260.dat
306
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1024.dat
307
- - spec/codecs/netflow9_test_ubnt_edgerouter_data1025.dat
308
- - spec/codecs/netflow9_test_ubnt_edgerouter_tpl.dat
309
- - spec/codecs/netflow9_test_unknown_tpl266_292_data.dat
310
- - spec/codecs/netflow9_test_valid01.dat
311
- - spec/codecs/netflow_spec.rb
267
+ - spec/codecs/ipfix_test_yaf_data45841.dat
268
+ - spec/codecs/ipfix_test_yaf_data45873.dat
269
+ - spec/codecs/ipfix_test_yaf_data53248.dat
270
+ - spec/codecs/ipfix_test_yaf_tpl45841.dat
271
+ - spec/codecs/ipfix_test_yaf_tpls_option_tpl.dat
272
+ - spec/codecs/netflow9_cisco_asr1001x_tpl259.dat
273
+ - spec/codecs/netflow9_test_cisco_1941K9.dat
274
+ - spec/codecs/netflow9_test_cisco_wlc_8510_tpl_262.dat
275
+ - spec/codecs/netflow9_test_paloalto_panos_data.dat
276
+ - spec/codecs/netflow9_test_paloalto_panos_tpl.dat
312
277
  - spec/codecs/netflow_stress.py
278
+ - spec/codecs/ipfix_test_viptela_tpl257.dat
279
+ - spec/codecs/ipfix_test_viptela_data257.dat
280
+ - spec/codecs/ipfix_test_nokia_bras_data256.dat
281
+ - spec/codecs/netflow9_test_field_layer2segmentid_data.dat
282
+ - spec/codecs/ipfix_test_procera_tpl52935.dat
283
+ - spec/codecs/ipfix_test_procera_data52935.dat
284
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_tpl256.dat
285
+ - spec/codecs/benchmarks/ACLidASA.rb
286
+ - spec/codecs/benchmarks/MacAddr.rb
287
+ - spec/codecs/benchmarks/IPAddr.rb
288
+ - spec/codecs/benchmarks/netflow_bench_cisco_asa.py
289
+ - spec/codecs/benchmarks/ipfix_bench_sonicwall.py
290
+ - spec/codecs/benchmarks/ipfix_bench_yaf.py
291
+ - spec/codecs/benchmarks/netflow_bench_cisco_asr.py
292
+ - spec/codecs/benchmarks/flowStartMilliseconds.rb
293
+ - spec/codecs/benchmarks/IP6Addr.rb
294
+ - spec/codecs/benchmarks/benchmark_fields.rb
295
+ - spec/codecs/ipfix_test_barracuda_extended_uniflow_data256.dat
296
+ - spec/codecs/netflow9_test_h3c_tpl3281.dat
297
+ - spec/codecs/netflow9_test_field_layer2segmentid_tpl.dat
298
+ - spec/codecs/netflow9_test_huawei_netstream_tpl.dat
299
+ - spec/codecs/netflow9_test_huawei_netstream_data.dat
300
+ - spec/codecs/ipfix_stress.py
301
+ - spec/codecs/netflow9_test_iptnetflow_reduced_size_encoding_tpldata260.dat
302
+ - spec/codecs/netflow9_test_h3c_data3281.dat
303
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_data258_262.dat
304
+ - spec/codecs/netflow9_test_fortigate_fortios_542_appid_tpl258-269.dat
305
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_opttpl512.dat
306
+ - spec/codecs/ipfix_test_juniper_mx240_junos151r6s3_data512.dat
307
+ - spec/codecs/netflow9_test_paloalto_81_data257_1flowset_in_large_zerofilled_packet.dat
308
+ - spec/codecs/netflow9_test_paloalto_81_tpl256-263.dat
309
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_data3281.dat
310
+ - spec/codecs/netflow9_test_h3c_netstream_varstring_tpl3281.dat
311
+ - spec/codecs/ipfix_test_ixia_tpldata256.dat
312
+ - spec/codecs/ipfix_test_ixia_tpldata271.dat
313
+ - spec/codecs/netflow9_test_cisco_aci_data256.dat
314
+ - spec/codecs/netflow9_test_cisco_aci_tpl256-258.dat