25 Commits
Author SHA1 Message Date
LouisandGitHub c38607daf9 transport: mute errors when too verbose (#249) 2024-01-06 01:03:13 -08:00
LouisandGitHub ff4ddca5d5 metrics: collect drops on receiver (#226) 2024-01-06 00:51:07 -08:00
LouisandGitHub 1a5d58e3cf feat: handle panic (#254) 2023-12-09 11:56:30 -08:00
LouisandGitHub da044ac77a producer: add datetime render (#225) 2023-12-06 05:03:45 -08:00
LouisandGitHub a0660824f0 goflow2: add configuration example for sflow mapping (#224) 2023-10-18 19:54:47 -07:00
edc306cc29 goflow2: add additional parameters in listen URL (#208)
Co-authored-by: Paweł Mieczkowski <[email protected]>
2023-09-01 14:45:07 -07:00
LouisandGitHub 085e34a85f enricher: add binary marshaller (#212) 2023-08-31 23:27:47 -07:00
LouisandGitHub b047aafe15 goflow2: allows using a single port for multiple protocols (sFlow, NetFlow, IPFIX) (#197) 2023-08-14 18:39:56 -07:00
LouisandGitHub ae56e41786 refactor: v2 (#150) 2023-08-09 19:47:20 -07:00
LouisandGitHub b58874c36a app: hotfix (#156) 2023-04-20 06:46:01 -07:00
LouisandGitHub c4c4ffb4e4 Refactor template as module (#49)
* Refactor template as module
* Abstraction to allow custom template storage (eg: file, redis, http...)
* Works similarly to Transport and Format
2023-04-15 20:52:32 -07:00
LouisandGitHub d59f209302 mapping: support endianness (#130) 2023-03-28 22:05:47 -07:00
LouisandGitHub 40e5ef08fd mapping: allow lists to be mapped (#149) 2023-03-28 21:55:21 -07:00
LouisandGitHub 332655476b proto: change protobuf definition case (#109) 2022-10-08 15:47:31 -07:00
LouisandGitHub f6a776993f format: improve text formatter (#110) 2022-10-08 15:29:06 -07:00
LouisandGitHub 05a03e2446 socket reuse URI argument (#107) 2022-10-08 08:50:23 -07:00
0020934574 Observation domain (#98)
* netflow: Add observation domain and point to message

The ObservationDomainID and ObservationPointID are two IPFIX fields that
identify the entity that is capturing flows and can be used to enrich
the context around a specific sample.

Parse these fields from the sample and add them to the FlowMessage.

Signed-off-by: Adrian Moreno <[email protected]>
Co-authored-by: Adrian Moreno <[email protected]>
2022-07-20 21:27:51 -07:00
lspgn 7acb84835b Bugfix: issues when reading a partial chunk of protobuf from stdin 2022-01-24 20:30:30 -08:00
LouisandGitHub 536b08812f Custom map flow fields (#36)
* adds dataframe link decoding
* can map NetFlow/IPFIX fields and bytes sections from sFlow/packets to any field inside the protobuf
* add CLI argument for loading a mapping yaml file
2021-09-23 20:41:17 -07:00
LouisandGitHub faca667b19 Merge pull request #30 from netsampler/bug/enricher-decode
bugfix: enricher decoding certain protobuf
2021-08-29 08:00:47 -07:00
lspgn 21c7fee62e bugfix: enricher decoding certain protobuf
* now requires length prefixed messages
* allows custom line separator for text transport output
2021-08-27 10:04:22 -07:00
lspgn 5a42b2b1f7 Enricher can set sampling rate 2021-08-10 22:32:43 -07:00
LouisandGitHub e52a053c9c formatting improved with selectors and text output (#14)
* Improve format registration
* less interleaving (json does not require importing protobuf)
* generic text renderer
* escape for strings in text/json formatter
2021-06-11 08:42:32 -07:00
lspgn ab81e52b43 Fix protobuf
* Rebuiild with protoc v3.17.2 and protoc-gen-go v1.26.0
* Add misisng go_package flag
* Add protobuf documentation
2021-06-07 22:43:09 -07:00
lspgn e4bacbc4bd init 2021-05-25 17:33:26 -07:00