logstash-filter-cidrtagmap 1.1.0 → 1.2.0
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/README.md +5 -4
- data/logstash-filter-cidrtagmap.gemspec +3 -3
- metadata +4 -6
- data/CONTRIBUTORS +0 -11
- data/DEVELOPER.md +0 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8a84d59293902f5d951c56c730f818b102505a79
|
|
4
|
+
data.tar.gz: 8386370459f96c62abb44299c286e50099842b22
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 3bd56f6e098c2d190d66e5ae6c3e2c87fce7ac4fe34aefaf5ff59ec6a21698abe16094c218657e25fa681bb9658cab2c8f74ccb31318fdd45ca469e1556a675d
|
|
7
|
+
data.tar.gz: 755b109660dea605cfaf2c18704a819afa1f4f61db63017f8cfd169653393d40976376df5e55cff5a30fc1e2857e6b3621eade55c9ae91012082fa34d1fb5778
|
data/README.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
This logstash filter tags netflow records according to a list of CIDR to tag mappings.
|
|
1
|
+
This logstash filter tags netflow records according to a list of CIDR to tag mappings, and adds ASN names for the src_as and dst_as fields.
|
|
2
2
|
|
|
3
3
|
The list is an external / stand alone text file consisting of lines of the form:
|
|
4
4
|
|
|
@@ -15,6 +15,8 @@ src_tag = the tag associated with the spec that matched
|
|
|
15
15
|
|
|
16
16
|
src_tagMatch = the CIDR spec that matched (as rendered by IPAddr.to_s)
|
|
17
17
|
|
|
18
|
+
Download the asn map file here: ftp://ftp.arin.net/info/asn.txt
|
|
19
|
+
|
|
18
20
|
|
|
19
21
|
Configuration:
|
|
20
22
|
|
|
@@ -22,16 +24,15 @@ Configuration:
|
|
|
22
24
|
filter{
|
|
23
25
|
cidrtagmap {
|
|
24
26
|
mapfilepath => "cidrmap.txt"
|
|
27
|
+
asnmapfilepath => "asn.txt"
|
|
25
28
|
}
|
|
26
29
|
}
|
|
27
30
|
```
|
|
28
31
|
|
|
29
|
-
Tell the filter to reload its
|
|
32
|
+
Tell the filter to reload its maps
|
|
30
33
|
|
|
31
34
|
```
|
|
32
35
|
touch <mapfilepath>.RELOAD
|
|
33
36
|
```
|
|
34
37
|
|
|
35
38
|
Reloading is thread safe.
|
|
36
|
-
|
|
37
|
-
Put cidrtagmap.rb in $LOGSTASH/lib/logstash/filters/
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
s.name = 'logstash-filter-cidrtagmap'
|
|
3
|
-
s.version = '1.
|
|
3
|
+
s.version = '1.2.0'
|
|
4
4
|
s.licenses = ['Apache License (2.0)']
|
|
5
|
-
s.summary = "
|
|
5
|
+
s.summary = "Filter adds tags to netflow records in logstash based on a static table of cidr->name and adds asn name fields"
|
|
6
6
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
|
7
7
|
s.authors = ["svdasein"]
|
|
8
8
|
s.email = 'daveparker01@gmail.com'
|
|
9
|
-
s.homepage = "
|
|
9
|
+
s.homepage = "https://github.com/svdasein/cidrtagmap"
|
|
10
10
|
s.require_paths = ["lib"]
|
|
11
11
|
|
|
12
12
|
# Files
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: logstash-filter-cidrtagmap
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.2.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- svdasein
|
|
@@ -47,8 +47,6 @@ extensions: []
|
|
|
47
47
|
extra_rdoc_files: []
|
|
48
48
|
files:
|
|
49
49
|
- CHANGELOG.md
|
|
50
|
-
- CONTRIBUTORS
|
|
51
|
-
- DEVELOPER.md
|
|
52
50
|
- Gemfile
|
|
53
51
|
- LICENSE
|
|
54
52
|
- NOTICE.TXT
|
|
@@ -57,7 +55,7 @@ files:
|
|
|
57
55
|
- logstash-filter-cidrtagmap.gemspec
|
|
58
56
|
- spec/filters/example_spec.rb
|
|
59
57
|
- spec/spec_helper.rb
|
|
60
|
-
homepage:
|
|
58
|
+
homepage: https://github.com/svdasein/cidrtagmap
|
|
61
59
|
licenses:
|
|
62
60
|
- Apache License (2.0)
|
|
63
61
|
metadata:
|
|
@@ -82,8 +80,8 @@ rubyforge_project:
|
|
|
82
80
|
rubygems_version: 2.4.8
|
|
83
81
|
signing_key:
|
|
84
82
|
specification_version: 4
|
|
85
|
-
summary:
|
|
86
|
-
|
|
83
|
+
summary: Filter adds tags to netflow records in logstash based on a static table of
|
|
84
|
+
cidr->name and adds asn name fields
|
|
87
85
|
test_files:
|
|
88
86
|
- spec/filters/example_spec.rb
|
|
89
87
|
- spec/spec_helper.rb
|
data/CONTRIBUTORS
DELETED
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
The following is a list of people who have contributed ideas, code, bug
|
|
2
|
-
reports, or in general have helped logstash along its way.
|
|
3
|
-
|
|
4
|
-
Contributors:
|
|
5
|
-
* Aaron Mildenstein (untergeek)
|
|
6
|
-
* Pier-Hugues Pellerin (ph)
|
|
7
|
-
|
|
8
|
-
Note: If you've sent us patches, bug reports, or otherwise contributed to
|
|
9
|
-
Logstash, and you aren't on the list above and want to be, please let us know
|
|
10
|
-
and we'll make sure you're here. Contributions from folks like you are what make
|
|
11
|
-
open source awesome.
|
data/DEVELOPER.md
DELETED