logstash-codec-sflow 0.8.0 → 0.9.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/README.md +11 -0
- data/lib/logstash/codecs/sflow.rb +3 -0
- data/logstash-codec-sflow.gemspec +1 -1
- metadata +2 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 0dd6c6453a6f16c8f7526f8e210f9c7e6a9de5b3
|
|
4
|
+
data.tar.gz: 51951483cfd88c3c7a3a310e2c1a4fd064259656
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: f3b2675a5d8f30c131c94751e294723939cacba36b30f008b4a6cc5328f285043076e13298475ceb2e26b4ff7919f66ae3448ed62a877bcf081d517cd4028418
|
|
7
|
+
data.tar.gz: 3e6510c59a4939d7079f50960657dba71629833ab4f12b37247c9f2af32095ca896fc3db4429b09f0bd295bb142a255e2b0b2b2f6e8c8acb9c68e656f6c245e9
|
data/README.md
CHANGED
|
@@ -1,6 +1,17 @@
|
|
|
1
1
|
# Logstash Codec SFlow Plugin
|
|
2
2
|
## Description
|
|
3
3
|
Logstash codec plugin to decode sflow codec
|
|
4
|
+
This codec manage flow sample and counter flow.
|
|
5
|
+
|
|
6
|
+
For the flow sample it is able to decode Ethernet, IPv4, UDP and TCP header
|
|
7
|
+
|
|
8
|
+
For the counter flow it is able to decode some records of type:
|
|
9
|
+
- Generic Interface
|
|
10
|
+
- Ethernet Interface
|
|
11
|
+
- VLAN
|
|
12
|
+
- Processor Information
|
|
13
|
+
- HTTP
|
|
14
|
+
|
|
4
15
|
|
|
5
16
|
[](http://build-eu-00.elastic.co/view/LS%20Plugins/view/LS%20Codecs/job/logstash-plugin-codec-example-unit/)
|
|
@@ -95,6 +95,8 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
95
95
|
if event.include?('frame_length') and event.include?('sampling_rate')
|
|
96
96
|
event["frame_length_times_sampling_rate"] = event['frame_length'].to_i * event['sampling_rate'].to_i
|
|
97
97
|
end
|
|
98
|
+
|
|
99
|
+
event["sflow_type"] = 'sample'
|
|
98
100
|
events.push(event)
|
|
99
101
|
|
|
100
102
|
#treat counter flow
|
|
@@ -111,6 +113,7 @@ class LogStash::Codecs::Sflow < LogStash::Codecs::Base
|
|
|
111
113
|
|
|
112
114
|
common_sflow(event, decoded, sample, record)
|
|
113
115
|
|
|
116
|
+
event["sflow_type"] = 'counter'
|
|
114
117
|
events.push(event)
|
|
115
118
|
end
|
|
116
119
|
end
|
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
|
|
3
3
|
s.name = 'logstash-codec-sflow'
|
|
4
|
-
s.version = '0.
|
|
4
|
+
s.version = '0.9.0'
|
|
5
5
|
s.licenses = ['Apache License (2.0)']
|
|
6
6
|
s.summary = "The sflow codec is for decoding SFlow v5 flows."
|
|
7
7
|
s.description = "This gem is a logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/plugin install gemname. This gem is not a stand-alone program"
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: logstash-codec-sflow
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 0.
|
|
4
|
+
version: 0.9.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Nicolas Fraison
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2015-12-
|
|
11
|
+
date: 2015-12-22 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
requirement: !ruby/object:Gem::Requirement
|