logstash-codec-sflow 0.8.0 → 0.9.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +11 -0
- data/lib/logstash/codecs/sflow.rb +3 -0
- data/logstash-codec-sflow.gemspec +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0dd6c6453a6f16c8f7526f8e210f9c7e6a9de5b3
|
|
4
|
+
data.tar.gz: 51951483cfd88c3c7a3a310e2c1a4fd064259656
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f3b2675a5d8f30c131c94751e294723939cacba36b30f008b4a6cc5328f285043076e13298475ceb2e26b4ff7919f66ae3448ed62a877bcf081d517cd4028418
|
|
7
|
+
data.tar.gz: 3e6510c59a4939d7079f50960657dba71629833ab4f12b37247c9f2af32095ca896fc3db4429b09f0bd295bb142a255e2b0b2b2f6e8c8acb9c68e656f6c245e9
|
data/README.md
CHANGED
|
@@ -1,6 +1,17 @@
|
|
|
1
1
|
# Logstash Codec SFlow Plugin
|
|
2
2
|
## Description
|
|
3
3
|
Logstash codec plugin to decode sflow codec
|
|
4
|
+
This codec manage flow sample and counter flow.
|
|
5
|
+
|
|
6
|
+
For the flow sample it is able to decode Ethernet, IPv4, UDP and TCP header
|
|
7
|
+
|
|
8
|
+
For the counter flow it is able to decode some records of type:
|
|
9
|
+
- Generic Interface
|
|
10
|
+
- Ethernet Interface
|
|
11
|
+
- VLAN
|
|
12
|
+
- Processor Information
|
|
13
|
+
- HTTP
|
|
14
|
+
|
|
4
15
|
|
|
5
16
|
[](http://build-eu-00.elastic.co/view/LS%20Plugins/view/LS%20Codecs/job/logstash-plugin-codec-example-unit/)
|
|
@@ -95,6 +95,8 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
95
95
|
if event.include?('frame_length') and event.include?('sampling_rate')
|
|
96
96
|
event["frame_length_times_sampling_rate"] = event['frame_length'].to_i * event['sampling_rate'].to_i
|
|
97
97
|
end
|
|
98
|
+
|
|
99
|
+
event["sflow_type"] = 'sample'
|
|
98
100
|
events.push(event)
|
|
99
101
|
|
|
100
102
|
#treat counter flow
|
|
@@ -111,6 +113,7 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
111
113
|
|
|
112
114
|
common_sflow(event, decoded, sample, record)
|
|
113
115
|
|
|
116
|
+
event["sflow_type"] = 'counter'
|
|
114
117
|
events.push(event)
|
|
115
118
|
end
|
|
116
119
|
end
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-codec-sflow'
|
|
4
|
-
s.version = '0.
|
|
4
|
+
s.version = '0.9.0'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "The sflow codec is for decoding SFlow v5 flows."
|
|
7
7
|
s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: logstash-codec-sflow
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.9.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Nicolas Fraison
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2015-12-
|
|
11
|
+
date: 2015-12-22 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|