Louis
a0660824f0
goflow2: add configuration example for sflow mapping ( #224 )
2023-10-18 19:54:47 -07:00
Paweł Mieczkowski
edc306cc29
goflow2: add additional parameters in listen URL ( #208 )
...
Co-authored-by: Paweł Mieczkowski <pawel.mieczkowski@redge.com >
2023-09-01 14:45:07 -07:00
Louis
085e34a85f
enricher: add binary marshaller ( #212 )
2023-08-31 23:27:47 -07:00
Louis
b047aafe15
goflow2: allows using a single port for multiple protocols (sFlow, NetFlow, IPFIX) ( #197 )
2023-08-14 18:39:56 -07:00
Louis
ae56e41786
refactor: v2 ( #150 )
2023-08-09 19:47:20 -07:00
Louis
b58874c36a
app: hotfix ( #156 )
2023-04-20 06:46:01 -07:00
Louis
c4c4ffb4e4
Refactor template as module ( #49 )
...
* Refactor template as module
* Abstraction to allow custom template storage (eg: file, redis, http...)
* Works similarly to Transport and Format
2023-04-15 20:52:32 -07:00
Louis
d59f209302
mapping: support endianness ( #130 )
2023-03-28 22:05:47 -07:00
Louis
40e5ef08fd
mapping: allow lists to be mapped ( #149 )
2023-03-28 21:55:21 -07:00
Louis
332655476b
proto: change protobuf definition case ( #109 )
2022-10-08 15:47:31 -07:00
Louis
f6a776993f
format: improve text formatter ( #110 )
2022-10-08 15:29:06 -07:00
Louis
05a03e2446
socket reuse URI argument ( #107 )
2022-10-08 08:50:23 -07:00
Louis
0020934574
Observation domain ( #98 )
...
* netflow: Add observation domain and point to message
The ObservationDomainID and ObservationPointID are two IPFIX fields that
identify the entity that is capturing flows and can be used to enrich
the context around a specific sample.
Parse these fields from the sample and add them to the FlowMessage.
Signed-off-by: Adrian Moreno <amorenoz@redhat.com >
Co-authored-by: Adrian Moreno <amorenoz@redhat.com >
2022-07-20 21:27:51 -07:00
lspgn
7acb84835b
Bugfix: issues when reading a partial chunk of protobuf from stdin
2022-01-24 20:30:30 -08:00
Louis
536b08812f
Custom map flow fields ( #36 )
...
* adds dataframe link decoding
* can map NetFlow/IPFIX fields and bytes sections from sFlow/packets to any field inside the protobuf
* add CLI argument for loading a mapping yaml file
2021-09-23 20:41:17 -07:00
Louis
faca667b19
Merge pull request #30 from netsampler/bug/enricher-decode
...
bugfix: enricher decoding certain protobuf
2021-08-29 08:00:47 -07:00
lspgn
21c7fee62e
bugfix: enricher decoding certain protobuf
...
* now requires length prefixed messages
* allows custom line separator for text transport output
2021-08-27 10:04:22 -07:00
lspgn
5a42b2b1f7
Enricher can set sampling rate
2021-08-10 22:32:43 -07:00
Louis
e52a053c9c
formatting improved with selectors and text output ( #14 )
...
* Improve format registration
* less interleaving (json does not require importing protobuf)
* generic text renderer
* escape for strings in text/json formatter
2021-06-11 08:42:32 -07:00
lspgn
ab81e52b43
Fix protobuf
...
* Rebuiild with protoc v3.17.2 and protoc-gen-go v1.26.0
* Add misisng go_package flag
* Add protobuf documentation
2021-06-07 22:43:09 -07:00
lspgn
e4bacbc4bd
init
2021-05-25 17:33:26 -07:00
