2023-08-09 19:47:20 -07:00
|
|
|
formatter:
|
|
|
|
|
fields: # list of fields to format in JSON
|
|
|
|
|
- type
|
|
|
|
|
- time_received_ns
|
|
|
|
|
- sequence_num
|
|
|
|
|
- sampling_rate
|
|
|
|
|
- flow_direction
|
|
|
|
|
- sampler_address
|
|
|
|
|
- time_flow_start_ns
|
|
|
|
|
- time_flow_end_ns
|
|
|
|
|
- bytes
|
|
|
|
|
- packets
|
|
|
|
|
- src_addr
|
|
|
|
|
- src_net
|
|
|
|
|
- dst_addr
|
|
|
|
|
- dst_net
|
|
|
|
|
- etype
|
|
|
|
|
- proto
|
|
|
|
|
- src_port
|
|
|
|
|
- dst_port
|
|
|
|
|
- in_if
|
|
|
|
|
- out_if
|
|
|
|
|
- src_mac
|
|
|
|
|
- dst_mac
|
|
|
|
|
# additional fields
|
|
|
|
|
- icmp_name # virtual column
|
|
|
|
|
key:
|
|
|
|
|
- sampler_address
|
|
|
|
|
protobuf: # manual protobuf fields addition
|
|
|
|
|
- name: flow_direction
|
|
|
|
|
index: 42
|
|
|
|
|
type: varint
|
|
|
|
|
- name: bi_flow_direction
|
|
|
|
|
index: 41
|
|
|
|
|
type: varint
|
|
|
|
|
- name: ingress_vrf_id
|
|
|
|
|
index: 39
|
|
|
|
|
type: varint
|
|
|
|
|
- name: egress_vrf_id
|
|
|
|
|
index: 40
|
|
|
|
|
type: varint
|
|
|
|
|
# Decoder mappings
|
2021-09-23 20:41:17 -07:00
|
|
|
ipfix:
|
|
|
|
|
mapping:
|
2023-08-09 19:47:20 -07:00
|
|
|
- field: 61
|
|
|
|
|
destination: flow_direction
|
|
|
|
|
- field: 239
|
|
|
|
|
destination: bi_flow_direction
|
|
|
|
|
- field: 234
|
|
|
|
|
destination: ingress_vrf_id
|
|
|
|
|
- field: 235
|
|
|
|
|
destination: egress_vrf_id
|
2021-09-23 20:41:17 -07:00
|
|
|
netflowv9:
|
|
|
|
|
mapping:
|
2023-08-09 19:47:20 -07:00
|
|
|
- field: 34 # samplingInterval provided within the template
|
|
|
|
|
destination: sampling_rate
|
2023-03-28 22:05:47 -07:00
|
|
|
endian: little
|
2023-08-09 19:47:20 -07:00
|
|
|
- field: 61
|
|
|
|
|
destination: flow_direction
|
2021-09-23 20:41:17 -07:00
|
|
|
sflow:
|
2023-08-09 19:47:20 -07:00
|
|
|
mapping: []
|
