Skip to content

Prototype for the upcoming upgrade to IPFIXcol2s existing json output plugin

Notifications You must be signed in to change notification settings

samo538/IPFIXcol2_jsonplug

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

17 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

WORK IN PROGRESS

This plugin is part of: https://github.com/CESNET/ipfixcol2

THIS PLUGIN NOW DEPENDS ON THE LIBFDS LIBRARY! (https://github.com/CESNET/libfds)

Right now, when you use IPFIXcol2 with the json output plugin, every field of every IPFIX message will be
parsed into the json output. Sometimes you want parse only some of the fields located in IPFIX massages
(for example: you are only interested in Src/Dst ip adresses). This plugin aims to resolve this issue.

Goals:
	-Reduce the parsed output to those fields which the user selects
	-Integration of alliases (for example: instead of the field "iana:sourceIPv4Address" which is pretty 
	non readable you can specify this fields as "ipsrc")
	-The previous example brings up a problem when your traffic consists of IPv4 and IPv6 packets. Which 
	one to select ? Auto detection of used IP protocol will be used in this instance, and the output will
	be formated accordingly (for example: if you specify the field "ipsrc" then packets containing IPv4 will
	be parsed into "ipsrc":"x.x.x.x" and packets containing IPv6 will be parse into "ipsrc":"x:x:x:x:x:x:x:x") 

About

Prototype for the upcoming upgrade to IPFIXcol2s existing json output plugin

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published