logstash-filter-cidrtagmap 1.1.0 → 1.2.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/README.md +5 -4
- data/logstash-filter-cidrtagmap.gemspec +3 -3
- metadata +4 -6
- data/CONTRIBUTORS +0 -11
- data/DEVELOPER.md +0 -2
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA1:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: 8a84d59293902f5d951c56c730f818b102505a79
|
|
4
|
+
data.tar.gz: 8386370459f96c62abb44299c286e50099842b22
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 3bd56f6e098c2d190d66e5ae6c3e2c87fce7ac4fe34aefaf5ff59ec6a21698abe16094c218657e25fa681bb9658cab2c8f74ccb31318fdd45ca469e1556a675d
|
|
7
|
+
data.tar.gz: 755b109660dea605cfaf2c18704a819afa1f4f61db63017f8cfd169653393d40976376df5e55cff5a30fc1e2857e6b3621eade55c9ae91012082fa34d1fb5778
|
data/README.md
CHANGED
|
@@ -1,4 +1,4 @@
|
|
|
1
|
-
This logstash filter tags netflow records according to a list of CIDR to tag mappings.
|
|
1
|
+
This logstash filter tags netflow records according to a list of CIDR to tag mappings, and adds ASN names for the src_as and dst_as fields.
|
|
2
2
|
|
|
3
3
|
The list is an external / stand alone text file consisting of lines of the form:
|
|
4
4
|
|
|
@@ -15,6 +15,8 @@ src_tag = the tag associated with the spec that matched
|
|
|
15
15
|
|
|
16
16
|
src_tagMatch = the CIDR spec that matched (as rendered by IPAddr.to_s)
|
|
17
17
|
|
|
18
|
+
Download the asn map file here: ftp://ftp.arin.net/info/asn.txt
|
|
19
|
+
|
|
18
20
|
|
|
19
21
|
Configuration:
|
|
20
22
|
|
|
@@ -22,16 +24,15 @@ Configuration:
|
|
|
22
24
|
filter{
|
|
23
25
|
cidrtagmap {
|
|
24
26
|
mapfilepath => "cidrmap.txt"
|
|
27
|
+
asnmapfilepath => "asn.txt"
|
|
25
28
|
}
|
|
26
29
|
}
|
|
27
30
|
```
|
|
28
31
|
|
|
29
|
-
Tell the filter to reload its
|
|
32
|
+
Tell the filter to reload its maps
|
|
30
33
|
|
|
31
34
|
```
|
|
32
35
|
touch <mapfilepath>.RELOAD
|
|
33
36
|
```
|
|
34
37
|
|
|
35
38
|
Reloading is thread safe.
|
|
36
|
-
|
|
37
|
-
Put cidrtagmap.rb in $LOGSTASH/lib/logstash/filters/
|
|
@@ -1,12 +1,12 @@
|
|
|
1
1
|
Gem::Specification.new do |s|
|
|
2
2
|
s.name = 'logstash-filter-cidrtagmap'
|
|
3
|
-
s.version = '1.
|
|
3
|
+
s.version = '1.2.0'
|
|
4
4
|
s.licenses = ['Apache License (2.0)']
|
|
5
|
-
s.summary = "
|
|
5
|
+
s.summary = "Filter adds tags to netflow records in logstash based on a static table of cidr->name and adds asn name fields"
|
|
6
6
|
s.description = "This gem is a Logstash plugin required to be installed on top of the Logstash core pipeline using $LS_HOME/bin/logstash-plugin install gemname. This gem is not a stand-alone program"
|
|
7
7
|
s.authors = ["svdasein"]
|
|
8
8
|
s.email = 'daveparker01@gmail.com'
|
|
9
|
-
s.homepage = "
|
|
9
|
+
s.homepage = "https://github.com/svdasein/cidrtagmap"
|
|
10
10
|
s.require_paths = ["lib"]
|
|
11
11
|
|
|
12
12
|
# Files
|
metadata
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: logstash-filter-cidrtagmap
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 1.
|
|
4
|
+
version: 1.2.0
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- svdasein
|
|
@@ -47,8 +47,6 @@ extensions: []
|
|
|
47
47
|
extra_rdoc_files: []
|
|
48
48
|
files:
|
|
49
49
|
- CHANGELOG.md
|
|
50
|
-
- CONTRIBUTORS
|
|
51
|
-
- DEVELOPER.md
|
|
52
50
|
- Gemfile
|
|
53
51
|
- LICENSE
|
|
54
52
|
- NOTICE.TXT
|
|
@@ -57,7 +55,7 @@ files:
|
|
|
57
55
|
- logstash-filter-cidrtagmap.gemspec
|
|
58
56
|
- spec/filters/example_spec.rb
|
|
59
57
|
- spec/spec_helper.rb
|
|
60
|
-
homepage:
|
|
58
|
+
homepage: https://github.com/svdasein/cidrtagmap
|
|
61
59
|
licenses:
|
|
62
60
|
- Apache License (2.0)
|
|
63
61
|
metadata:
|
|
@@ -82,8 +80,8 @@ rubyforge_project:
|
|
|
82
80
|
rubygems_version: 2.4.8
|
|
83
81
|
signing_key:
|
|
84
82
|
specification_version: 4
|
|
85
|
-
summary:
|
|
86
|
-
|
|
83
|
+
summary: Filter adds tags to netflow records in logstash based on a static table of
|
|
84
|
+
cidr->name and adds asn name fields
|
|
87
85
|
test_files:
|
|
88
86
|
- spec/filters/example_spec.rb
|
|
89
87
|
- spec/spec_helper.rb
|
data/CONTRIBUTORS
DELETED
|
@@ -1,11 +0,0 @@
|
|
|
1
|
-
The following is a list of people who have contributed ideas, code, bug
|
|
2
|
-
reports, or in general have helped logstash along its way.
|
|
3
|
-
|
|
4
|
-
Contributors:
|
|
5
|
-
* Aaron Mildenstein (untergeek)
|
|
6
|
-
* Pier-Hugues Pellerin (ph)
|
|
7
|
-
|
|
8
|
-
Note: If you've sent us patches, bug reports, or otherwise contributed to
|
|
9
|
-
Logstash, and you aren't on the list above and want to be, please let us know
|
|
10
|
-
and we'll make sure you're here. Contributions from folks like you are what make
|
|
11
|
-
open source awesome.
|
data/DEVELOPER.md
DELETED