Graylog2 / Graylog2/graylog-plugin-integrations
Support structured data in IPFIX templates: basicList
- Dominant language
- Java
- Stars
- 17
- Forks
- 14
- PR merge metrics
- No merged PRs in 30d
Description
The IPFIX parser currently only supports the standard scalar fields but not the ones described in [RFC 6313](https://tools.ietf.org/html/rfc6313).
The structured fields should be flattened into message fields in Graylog, because we don't have good support for nested/repeated fields yet.
Provide support for parsing [ basicList ]
Encoding :(https://tools.ietf.org/html/rfc6313#section-4.5.1)
Ref:https://tools.ietf.org/html/rfc6313#section-9.3
[basiclist-ipfix.txt](https://github.com/Graylog2/graylog-plugin-integrations/files/3990491/basiclist-ipfix.txt)
What is a basicList ? (https://tools.ietf.org/html/rfc6313#section-4.3.1)
A basicList specifies a generic Information Element with a basicList
abstract data type as defined in Section 4.1.1 and list semantics as
defined in Section 4.2.1. Examples include a list of port numbers, a
list of interface indexes, etc.
Contributor guide
Assessment
This issue has not been assessed yet.