1
0
mirror of https://github.com/netsampler/goflow2.git synced 2024-05-06 15:54:52 +00:00

18 Commits

Author SHA1 Message Date
b047aafe15 goflow2: allows using a single port for multiple protocols (sFlow, NetFlow, IPFIX) (#197) 2023-08-14 18:39:56 -07:00
ae56e41786 refactor: v2 (#150) 2023-08-09 19:47:20 -07:00
69a6eaf99e templates: retrofit to avoid issue when upgrading dep (#160) 2023-04-20 20:05:33 -07:00
c4c4ffb4e4 Refactor template as module (#49)
* Refactor template as module
* Abstraction to allow custom template storage (eg: file, redis, http...)
* Works similarly to Transport and Format
2023-04-15 20:52:32 -07:00
40e5ef08fd mapping: allow lists to be mapped (#149) 2023-03-28 21:55:21 -07:00
7801c6a273 nit: defer after error check (#127) 2022-10-08 08:55:53 -07:00
d6caeaacdd Bugfix: fix closing of UDP routine (#118) 2022-08-24 20:38:56 -07:00
Ian
fc42020d1b Silently drop 0 byte packets without processing as flow (#114)
Co-authored-by: Ian Pye <pye@kentik.com>
2022-08-17 20:01:02 -07:00
0020934574 Observation domain (#98)
* netflow: Add observation domain and point to message

The ObservationDomainID and ObservationPointID are two IPFIX fields that
identify the entity that is capturing flows and can be used to enrich
the context around a specific sample.

Parse these fields from the sample and add them to the FlowMessage.

Signed-off-by: Adrian Moreno <amorenoz@redhat.com>
Co-authored-by: Adrian Moreno <amorenoz@redhat.com>
2022-07-20 21:27:51 -07:00
78f2ce561d Add logging of transport error 2022-06-13 17:36:28 +02:00
a5fc8ecfb6 Fix type for a counter when decoding a template flowset 2022-03-03 19:45:34 +01:00
615b9f697c Avoid unnecessary memory allocations 2022-01-26 17:24:35 +01:00
43cf8b58d9 Bugfix: decoding OptionsTemplateSet
* Was improperly decoding scope fields
* Start removing custom errors structures (will optimize template not found)
2021-11-13 15:49:27 -08:00
0f5528170d utils: copy payload before accepting another UDP packet
In d1e1ace3186d ("Allow Flow Routines to be cancellable (#40)"), the
payload was passed to another goroutine and erased by the next packet
to be received if the goroutine did not process it fast enough. Make
a copy before passing it to the goroutine to fix that.
2021-11-10 15:56:49 +01:00
d1e1ace318 Allow Flow Routines to be cancellable (#40)
* Allow Flow Routines to be cancellable
2021-10-31 16:42:07 -07:00
536b08812f Custom map flow fields (#36)
* adds dataframe link decoding
* can map NetFlow/IPFIX fields and bytes sections from sFlow/packets to any field inside the protobuf
* add CLI argument for loading a mapping yaml file
2021-09-23 20:41:17 -07:00
04c8543306 Bugfix NetFlow/IPFIX producer
* Source and destination mac addresses are fed from `NFV9_FIELD_xx_yyy_MAC`
  Fixes a bug where the samples were missing either source or destination Mac.
  This is supposed to be linked to the sampling direction.
2021-06-09 18:08:55 -07:00
e4bacbc4bd init 2021-05-25 17:33:26 -07:00