SHOW:
|
|
- or go back to the newest paste.
1 | [2019-09-12T15:57:25,484][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
2 | P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_as_org", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][as_org]}"}}|[str]pipeline:627:23:``` | |
3 | mutate { | |
4 | id => "elastiflow_postproc_dst_as_from_as_org" | |
5 | add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][as_org]}" } | |
6 | } | |
7 | ```] | |
8 | into | |
9 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08 | |
10 | [2019-09-12T15:57:25,525][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
11 | [if (event.getField('[flow][ip_version]')=='undetermined')] | |
12 | into | |
13 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@98a5f031 | |
14 | [2019-09-12T15:57:25,535][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
15 | [if (event.get('[metadata][geoip_dst][asn]'))] | |
16 | into | |
17 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b8bdbae1 | |
18 | [2019-09-12T15:57:25,666][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
19 | P[filter-mutate{"id"=>"elastiflow_postproc_src_addr_public", "replace"=>{"[flow][traffic_locality]"=>"public"}}|[str]pipeline:710:13:``` | |
20 | mutate { | |
21 | id => "elastiflow_postproc_src_addr_public" | |
22 | replace => { "[flow][traffic_locality]" => "public" } | |
23 | } | |
24 | ```] | |
25 | into | |
26 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e59effe8 | |
27 | [2019-09-12T15:57:25,677][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
28 | [if (event.get('[sflow][protocol]'))] | |
29 | into | |
30 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@25bc6a19 | |
31 | [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ParNew"} | |
32 | [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ConcurrentMarkSweep"} | |
33 | [2019-09-12T15:57:25,797][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
34 | [if (event.getField('[@metadata][geoip_lookup]')=='true')] | |
35 | into | |
36 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@21a9e5a1 | |
37 | [2019-09-12T15:57:25,810][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
38 | P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_asn", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][asn]}"}}|[str]pipeline:633:21:``` | |
39 | mutate { | |
40 | id => "elastiflow_postproc_dst_as_from_asn" | |
41 | add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][asn]}" } | |
42 | } | |
43 | ```] | |
44 | into | |
45 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@42a50b76 | |
46 | [2019-09-12T15:57:25,828][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
47 | [if (event.get('[flow][src_addr]'))] | |
48 | into | |
49 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@86994801 | |
50 | [2019-09-12T15:57:25,839][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
51 | P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}}|[str]pipeline:638:21:``` | |
52 | mutate { | |
53 | add_field => { "[flow][dst_autonomous_system]" => "public" } | |
54 | } | |
55 | ```] | |
56 | into | |
57 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08 | |
58 | [2019-09-12T15:57:25,889][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>2095819, :source_id_type=>0, :source_id_index=>46, :sampling_rate=>1000, :sample_pool=>1999496057, :drops=>1425, :input_interface=>46, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"########################", :eth_src=>"#####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39683, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>62, :ip_protocol=>6, :ip_checksum=>63298, :src_ip=>"#####################", :dst_ip=>"#################", :ip_data=>{:src_port=>26672, :dst_port=>443, :tcp_seq_number=>4220563484, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>65127, :tcp_urgent_pointer=>0, :data=>6891333316688858494651476080640314568351975325824563496913311072972887993388246870181843081041120860688542495971177009554677755933456730189608934449887067895546440420021912856175}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>2017, :src_priority=>0, :dst_vlan=>2017, :dst_priority=>0}}]}} | |
59 | [2019-09-12T15:57:25,912][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85526, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061776828, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"#####################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62027, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26316, :src_ip=>"###############", :dst_ip=>"################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>465758321, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>25518, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}} | |
60 | [2019-09-12T15:57:25,925][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85527, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061777103, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"####################", :eth_src=>"##################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62117, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26226, :src_ip=>"######################", :dst_ip=>"#####################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>466021121, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>24858, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}} | |
61 | warning: thread "<udp.3" terminated with exception (report_on_exception is true): | |
62 | java.lang.StackOverflowError | |
63 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
64 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
65 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
66 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
67 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
68 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
69 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
70 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
71 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
72 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
73 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
74 | at org.jruby.runtime.Block.yield(Block.java:165) | |
75 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
76 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
77 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
78 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
79 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
80 | at org.jruby.runtime.Block.yield(Block.java:165) | |
81 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
82 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
83 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
84 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
85 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
86 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
87 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
88 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
89 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
90 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
91 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
92 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
93 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
94 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
95 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
96 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
97 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
98 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
99 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
100 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
101 | at org.jruby.runtime.Block.yield(Block.java:165) | |
102 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
103 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
104 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
105 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
106 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
107 | at org.jruby.runtime.Block.yield(Block.java:165) | |
108 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
109 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
110 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
111 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
112 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
113 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
114 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
115 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
116 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
117 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
118 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
119 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
120 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
121 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
122 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
123 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
124 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
125 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
126 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
127 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
128 | at org.jruby.runtime.Block.yield(Block.java:165) | |
129 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
130 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
131 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
132 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
133 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
134 | at org.jruby.runtime.Block.yield(Block.java:165) | |
135 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
136 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
137 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
138 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
139 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
140 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
141 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
142 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
143 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
144 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88) | |
145 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
146 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
147 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
148 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
149 | at org.jruby.RubyClass.finvoke(RubyClass.java:503) | |
150 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
151 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
152 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
153 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
154 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
155 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
156 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
157 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
158 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
159 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
160 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
161 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
162 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
163 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
164 | at org.jruby.runtime.Block.yield(Block.java:165) | |
165 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
166 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
167 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
168 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
169 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
170 | at org.jruby.runtime.Block.yield(Block.java:165) | |
171 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
172 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
173 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
174 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
175 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
176 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177) | |
177 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
178 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131) | |
179 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
180 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
181 | at org.jruby.runtime.Block.yield(Block.java:165) | |
182 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
183 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
184 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
185 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
186 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
187 | at org.jruby.runtime.Block.yield(Block.java:165) | |
188 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
189 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
190 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
191 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
192 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
193 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
194 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
195 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124) | |
196 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
197 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
198 | at org.jruby.runtime.Block.yield(Block.java:165) | |
199 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
200 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
201 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
202 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
203 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
204 | at org.jruby.runtime.Block.yield(Block.java:165) | |
205 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
206 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
207 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
208 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
209 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
210 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
211 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
212 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109) | |
213 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151) | |
214 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb) | |
215 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
216 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
217 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183) | |
218 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63) | |
219 | at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136) | |
220 | at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77) | |
221 | at org.jruby.runtime.Block.call(Block.java:124) | |
222 | at org.jruby.RubyProc.call(RubyProc.java:295) | |
223 | at org.jruby.RubyProc.call(RubyProc.java:274) | |
224 | at org.jruby.RubyProc.call(RubyProc.java:270) | |
225 | at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105) | |
226 | at java.lang.Thread.run(Thread.java:748) | |
227 | [2019-09-12T15:57:25,983][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
228 | P[filter-geoip{"id"=>"elastiflow_postproc_geoip_src_city", "source"=>"[flow][src_addr]", "database"=>"${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb", "cache_size"=>"${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}", "target"=>"[metadata][geoip_src]", "fields"=>["city_name", "country_name", "country_code2", "location"]}|[str]pipeline:717:17:``` | |
229 | geoip { | |
230 | id => "elastiflow_postproc_geoip_src_city" | |
231 | source => "[flow][src_addr]" | |
232 | database => "${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb" | |
233 | cache_size => "${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}" | |
234 | target => "[metadata][geoip_src]" | |
235 | fields => [ "city_name", "country_name", "country_code2", "location" ] | |
236 | } | |
237 | ```] | |
238 | into | |
239 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b5d170a8 | |
240 | [2019-09-12T15:57:26,005][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
241 | P[filter-translate{"id"=>"sflow_translate_protocol_name", "dictionary_path"=>"${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml", "field"=>"[sflow][protocol]", "destination"=>"[sflow][protocol]", "fallback"=>"UNKNOWN(%{[sflow][protocol]})", "override"=>"true", "refresh_behaviour"=>"replace"}|[str]pipeline:400:9:``` | |
242 | translate { | |
243 | id => "sflow_translate_protocol_name" | |
244 | dictionary_path => "${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml" | |
245 | field => "[sflow][protocol]" | |
246 | destination => "[sflow][protocol]" | |
247 | fallback => "UNKNOWN(%{[sflow][protocol]})" | |
248 | override => true | |
249 | refresh_behaviour => "replace" | |
250 | } | |
251 | ```] | |
252 | into | |
253 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@ae8c4e88 | |
254 | - | [2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"10.4.90.29", :dst_ip=>"52.119.211.91", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}} |
254 | + | [2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"##################", :dst_ip=>"####################", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}} |
255 | warning: thread "<udp.1" terminated with exception (report_on_exception is true): | |
256 | java.lang.StackOverflowError | |
257 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
258 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
259 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
260 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
261 | at org.jruby.runtime.Block.yield(Block.java:165) | |
262 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
263 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
264 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
265 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
266 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
267 | at org.jruby.runtime.Block.yield(Block.java:165) | |
268 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
269 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
270 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
271 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
272 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
273 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
274 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
275 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
276 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
277 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
278 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
279 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
280 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
281 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
282 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
283 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
284 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
285 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
286 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
287 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
288 | at org.jruby.runtime.Block.yield(Block.java:165) | |
289 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
290 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
291 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
292 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
293 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
294 | at org.jruby.runtime.Block.yield(Block.java:165) | |
295 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
296 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
297 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
298 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
299 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
300 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
301 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
302 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
303 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
304 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
305 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
306 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
307 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
308 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
309 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
310 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
311 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
312 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
313 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
314 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
315 | at org.jruby.runtime.Block.yield(Block.java:165) | |
316 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
317 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
318 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
319 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
320 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
321 | at org.jruby.runtime.Block.yield(Block.java:165) | |
322 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
323 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
324 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
325 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
326 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
327 | at org.jruby.RubyClass.finvoke(RubyClass.java:505) | |
328 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
329 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
330 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
331 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88) | |
332 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
333 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
334 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
335 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
336 | at org.jruby.RubyClass.finvoke(RubyClass.java:503) | |
337 | at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740) | |
338 | at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen) | |
339 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
340 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93) | |
341 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
342 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
343 | at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393) | |
344 | at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111) | |
345 | at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722) | |
346 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162) | |
347 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
348 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42) | |
349 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
350 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
351 | at org.jruby.runtime.Block.yield(Block.java:165) | |
352 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
353 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
354 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169) | |
355 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
356 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
357 | at org.jruby.runtime.Block.yield(Block.java:165) | |
358 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
359 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168) | |
360 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb) | |
361 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
362 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
363 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177) | |
364 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40) | |
365 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131) | |
366 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
367 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
368 | at org.jruby.runtime.Block.yield(Block.java:165) | |
369 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
370 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
371 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
372 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
373 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
374 | at org.jruby.runtime.Block.yield(Block.java:165) | |
375 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
376 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
377 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
378 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
379 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
380 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
381 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
382 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124) | |
383 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
384 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
385 | at org.jruby.runtime.Block.yield(Block.java:165) | |
386 | at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478) | |
387 | at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105) | |
388 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
389 | at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146) | |
390 | at org.jruby.runtime.BlockBody.yield(BlockBody.java:114) | |
391 | at org.jruby.runtime.Block.yield(Block.java:165) | |
392 | at org.jruby.RubyArray.each(RubyArray.java:1792) | |
393 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208) | |
394 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb) | |
395 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
396 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
397 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223) | |
398 | at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230) | |
399 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109) | |
400 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151) | |
401 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb) | |
402 | at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91) | |
403 | at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90) | |
404 | at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183) | |
405 | at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63) | |
406 | at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136) | |
407 | at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77) | |
408 | at org.jruby.runtime.Block.call(Block.java:124) | |
409 | at org.jruby.RubyProc.call(RubyProc.java:295) | |
410 | at org.jruby.RubyProc.call(RubyProc.java:274) | |
411 | at org.jruby.RubyProc.call(RubyProc.java:270) | |
412 | at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105) | |
413 | at java.lang.Thread.run(Thread.java:748) | |
414 | [2019-09-12T15:57:26,124][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional | |
415 | [if !(('_geoip_lookup_failure'.include?event.getField('[tags]')))] | |
416 | into | |
417 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@708caf9 | |
418 | [2019-09-12T15:57:26,135][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
419 | P[filter-mutate{"id"=>"elastiflow_set_dst_asn", "rename"=>{"[metadata][geoip_dst][asn]"=>"[flow][dst_asn]"}}|[str]pipeline:642:19:``` | |
420 | mutate { | |
421 | id => "elastiflow_set_dst_asn" | |
422 | rename => { "[metadata][geoip_dst][asn]" => "[flow][dst_asn]" } | |
423 | } | |
424 | ```] | |
425 | into | |
426 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@f1550fea | |
427 | [2019-09-12T15:57:26,148][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
428 | P[filter-cidr{"id"=>"elastiflow_ipv4_cidr_src", "address"=>["%{[flow][src_addr]}"], "network"=>["0.0.0.0/0"], "add_field"=>{"[flow][ip_version]"=>"IPv4"}}|[str]pipeline:441:9:``` | |
429 | cidr { | |
430 | id => "elastiflow_ipv4_cidr_src" | |
431 | address => [ "%{[flow][src_addr]}" ] | |
432 | network => [ "0.0.0.0/0" ] | |
433 | add_field => { | |
434 | "[flow][ip_version]" => "IPv4" | |
435 | } | |
436 | } | |
437 | ```] | |
438 | into | |
439 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@70e99788 | |
440 | [2019-09-12T15:57:26,162][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter | |
441 | P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}, "remove_tag"=>["_geoip_lookup_failure"]}|[str]pipeline:647:19:``` | |
442 | mutate { | |
443 | add_field => { "[flow][dst_autonomous_system]" => "public" } | |
444 | remove_tag => [ "_geoip_lookup_failure" ] | |
445 | } | |
446 | ```] | |
447 | into | |
448 | org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08 | |
449 | [2019-09-12T15:57:26,255][ERROR][org.logstash.Logstash ] java.lang.StackOverflowError |