Commit Graph

8 Commits

Author SHA1 Message Date
Louis
40e5ef08fd mapping: allow lists to be mapped (#149) 2023-03-28 21:55:21 -07:00
Louis
f542b64401 clear logging statement (#129) 2022-10-08 15:36:20 -07:00
Louis
f6a776993f format: improve text formatter (#110) 2022-10-08 15:29:06 -07:00
Louis
0020934574 Observation domain (#98)
* netflow: Add observation domain and point to message

The ObservationDomainID and ObservationPointID are two IPFIX fields that
identify the entity that is capturing flows and can be used to enrich
the context around a specific sample.

Parse these fields from the sample and add them to the FlowMessage.

Signed-off-by: Adrian Moreno <amorenoz@redhat.com>
Co-authored-by: Adrian Moreno <amorenoz@redhat.com>
2022-07-20 21:27:51 -07:00
Alejandro Antonio Moreno Sancho
55bef5b2f0 Added TimeFlowStartMs and TimeFlowEndMs to Netflow v9 2022-05-07 12:00:33 +02:00
lspgn
def05e071b Map ProtoName for SCTP 2021-12-20 16:53:00 +01:00
Louis
536b08812f Custom map flow fields (#36)
* adds dataframe link decoding
* can map NetFlow/IPFIX fields and bytes sections from sFlow/packets to any field inside the protobuf
* add CLI argument for loading a mapping yaml file
2021-09-23 20:41:17 -07:00
Louis
e52a053c9c formatting improved with selectors and text output (#14)
* Improve format registration
* less interleaving (json does not require importing protobuf)
* generic text renderer
* escape for strings in text/json formatter
2021-06-11 08:42:32 -07:00