1a5d58e3cf
feat: handle panic ( #254 )
2023-12-09 11:56:30 -08:00
da044ac77a
producer: add datetime render ( #225 )
2023-12-06 05:03:45 -08:00
a0660824f0
goflow2: add configuration example for sflow mapping ( #224 )
2023-10-18 19:54:47 -07:00
edc306cc29
goflow2: add additional parameters in listen URL ( #208 )
...
Co-authored-by: Paweł Mieczkowski <pawel.mieczkowski@redge.com>
2023-09-01 14:45:07 -07:00
085e34a85f
enricher: add binary marshaller ( #212 )
2023-08-31 23:27:47 -07:00
b047aafe15
goflow2: allows using a single port for multiple protocols (sFlow, NetFlow, IPFIX) ( #197 )
2023-08-14 18:39:56 -07:00
ae56e41786
refactor: v2 ( #150 )
2023-08-09 19:47:20 -07:00
b58874c36a
app: hotfix ( #156 )
2023-04-20 06:46:01 -07:00
c4c4ffb4e4
Refactor template as module ( #49 )
...
* Refactor template as module
* Abstraction to allow custom template storage (eg: file, redis, http...)
* Works similarly to Transport and Format
2023-04-15 20:52:32 -07:00
d59f209302
mapping: support endianness ( #130 )
2023-03-28 22:05:47 -07:00
40e5ef08fd
mapping: allow lists to be mapped ( #149 )
2023-03-28 21:55:21 -07:00
332655476b
proto: change protobuf definition case ( #109 )
2022-10-08 15:47:31 -07:00
f6a776993f
format: improve text formatter ( #110 )
2022-10-08 15:29:06 -07:00
05a03e2446
socket reuse URI argument ( #107 )
2022-10-08 08:50:23 -07:00
0020934574
Observation domain ( #98 )
...
* netflow: Add observation domain and point to message
The ObservationDomainID and ObservationPointID are two IPFIX fields that
identify the entity that is capturing flows and can be used to enrich
the context around a specific sample.
Parse these fields from the sample and add them to the FlowMessage.
Signed-off-by: Adrian Moreno <amorenoz@redhat.com>
Co-authored-by: Adrian Moreno <amorenoz@redhat.com>
2022-07-20 21:27:51 -07:00
7acb84835b
Bugfix: issues when reading a partial chunk of protobuf from stdin
2022-01-24 20:30:30 -08:00
536b08812f
Custom map flow fields ( #36 )
...
* adds dataframe link decoding
* can map NetFlow/IPFIX fields and bytes sections from sFlow/packets to any field inside the protobuf
* add CLI argument for loading a mapping yaml file
2021-09-23 20:41:17 -07:00
faca667b19
Merge pull request #30 from netsampler/bug/enricher-decode
...
bugfix: enricher decoding certain protobuf
2021-08-29 08:00:47 -07:00
21c7fee62e
bugfix: enricher decoding certain protobuf
...
* now requires length prefixed messages
* allows custom line separator for text transport output
2021-08-27 10:04:22 -07:00
5a42b2b1f7
Enricher can set sampling rate
2021-08-10 22:32:43 -07:00
e52a053c9c
formatting improved with selectors and text output ( #14 )
...
* Improve format registration
* less interleaving (json does not require importing protobuf)
* generic text renderer
* escape for strings in text/json formatter
2021-06-11 08:42:32 -07:00
ab81e52b43
Fix protobuf
...
* Rebuiild with protoc v3.17.2 and protoc-gen-go v1.26.0
* Add misisng go_package flag
* Add protobuf documentation
2021-06-07 22:43:09 -07:00
e4bacbc4bd
init
2021-05-25 17:33:26 -07:00
