View difference between Paste ID: hcb5hsLj and iZemscsv
SHOW: | | - or go back to the newest paste.
1
[2019-09-12T15:57:25,484][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
2
 P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_as_org", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][as_org]}"}}|[str]pipeline:627:23:```
3
mutate {
4
                        id => "elastiflow_postproc_dst_as_from_as_org"
5
                        add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][as_org]}" }
6
                      }
7
```]
8
 into
9
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
10
[2019-09-12T15:57:25,525][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
11
 [if (event.getField('[flow][ip_version]')=='undetermined')]
12
 into
13
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@98a5f031
14
[2019-09-12T15:57:25,535][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
15
 [if (event.get('[metadata][geoip_dst][asn]'))]
16
 into
17
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b8bdbae1
18
[2019-09-12T15:57:25,666][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
19
 P[filter-mutate{"id"=>"elastiflow_postproc_src_addr_public", "replace"=>{"[flow][traffic_locality]"=>"public"}}|[str]pipeline:710:13:```
20
mutate {
21
              id => "elastiflow_postproc_src_addr_public"
22
              replace => { "[flow][traffic_locality]" => "public" }
23
            }
24
```]
25
 into
26
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e59effe8
27
[2019-09-12T15:57:25,677][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
28
 [if (event.get('[sflow][protocol]'))]
29
 into
30
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@25bc6a19
31
[2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ParNew"}
32
[2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ConcurrentMarkSweep"}
33
[2019-09-12T15:57:25,797][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
34
 [if (event.getField('[@metadata][geoip_lookup]')=='true')]
35
 into
36
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@21a9e5a1
37
[2019-09-12T15:57:25,810][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
38
 P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_asn", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][asn]}"}}|[str]pipeline:633:21:```
39
mutate {
40
                      id => "elastiflow_postproc_dst_as_from_asn"
41
                      add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][asn]}" }
42
                    }
43
```]
44
 into
45
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@42a50b76
46
[2019-09-12T15:57:25,828][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
47
 [if (event.get('[flow][src_addr]'))]
48
 into
49
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@86994801
50
[2019-09-12T15:57:25,839][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
51
 P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}}|[str]pipeline:638:21:```
52
mutate {
53
                      add_field => { "[flow][dst_autonomous_system]" => "public" }
54
                    }
55
```]
56
 into
57
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
58
[2019-09-12T15:57:25,889][DEBUG][logstash.codecs.sflow    ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>2095819, :source_id_type=>0, :source_id_index=>46, :sampling_rate=>1000, :sample_pool=>1999496057, :drops=>1425, :input_interface=>46, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"########################", :eth_src=>"#####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39683, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>62, :ip_protocol=>6, :ip_checksum=>63298, :src_ip=>"#####################", :dst_ip=>"#################", :ip_data=>{:src_port=>26672, :dst_port=>443, :tcp_seq_number=>4220563484, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>65127, :tcp_urgent_pointer=>0, :data=>6891333316688858494651476080640314568351975325824563496913311072972887993388246870181843081041120860688542495971177009554677755933456730189608934449887067895546440420021912856175}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>2017, :src_priority=>0, :dst_vlan=>2017, :dst_priority=>0}}]}}
59
[2019-09-12T15:57:25,912][DEBUG][logstash.codecs.sflow    ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85526, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061776828, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"#####################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62027, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26316, :src_ip=>"###############", :dst_ip=>"################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>465758321, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>25518, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
60
[2019-09-12T15:57:25,925][DEBUG][logstash.codecs.sflow    ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85527, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061777103, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"####################", :eth_src=>"##################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62117, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26226, :src_ip=>"######################", :dst_ip=>"#####################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>466021121, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>24858, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
61
warning: thread "<udp.3" terminated with exception (report_on_exception is true):
62
java.lang.StackOverflowError
63
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
64
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
65
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
66
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
67
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
68
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
69
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
70
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
71
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
72
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
73
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
74
        at org.jruby.runtime.Block.yield(Block.java:165)
75
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
76
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
77
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
78
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
79
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
80
        at org.jruby.runtime.Block.yield(Block.java:165)
81
        at org.jruby.RubyArray.each(RubyArray.java:1792)
82
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
83
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
84
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
85
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
86
        at org.jruby.RubyClass.finvoke(RubyClass.java:505)
87
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
88
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
89
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
90
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
91
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
92
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
93
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
94
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
95
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
96
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
97
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
98
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
99
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
100
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
101
        at org.jruby.runtime.Block.yield(Block.java:165)
102
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
103
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
104
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
105
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
106
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
107
        at org.jruby.runtime.Block.yield(Block.java:165)
108
        at org.jruby.RubyArray.each(RubyArray.java:1792)
109
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
110
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
111
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
112
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
113
        at org.jruby.RubyClass.finvoke(RubyClass.java:505)
114
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
115
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
116
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
117
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
118
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
119
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
120
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
121
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
122
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
123
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
124
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
125
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
126
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
127
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
128
        at org.jruby.runtime.Block.yield(Block.java:165)
129
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
130
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
131
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
132
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
133
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
134
        at org.jruby.runtime.Block.yield(Block.java:165)
135
        at org.jruby.RubyArray.each(RubyArray.java:1792)
136
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
137
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
138
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
139
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
140
        at org.jruby.RubyClass.finvoke(RubyClass.java:505)
141
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
142
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
143
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
144
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88)
145
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
146
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
147
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
148
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
149
        at org.jruby.RubyClass.finvoke(RubyClass.java:503)
150
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
151
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
152
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
153
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
154
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
155
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
156
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
157
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
158
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
159
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
160
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
161
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
162
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
163
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
164
        at org.jruby.runtime.Block.yield(Block.java:165)
165
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
166
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
167
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
168
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
169
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
170
        at org.jruby.runtime.Block.yield(Block.java:165)
171
        at org.jruby.RubyArray.each(RubyArray.java:1792)
172
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
173
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
174
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
175
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
176
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177)
177
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
178
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131)
179
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
180
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
181
        at org.jruby.runtime.Block.yield(Block.java:165)
182
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
183
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
184
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
185
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
186
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
187
        at org.jruby.runtime.Block.yield(Block.java:165)
188
        at org.jruby.RubyArray.each(RubyArray.java:1792)
189
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
190
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
191
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
192
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
193
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
194
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
195
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124)
196
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
197
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
198
        at org.jruby.runtime.Block.yield(Block.java:165)
199
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
200
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
201
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
202
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
203
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
204
        at org.jruby.runtime.Block.yield(Block.java:165)
205
        at org.jruby.RubyArray.each(RubyArray.java:1792)
206
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
207
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
208
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
209
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
210
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
211
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
212
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109)
213
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151)
214
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb)
215
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
216
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
217
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183)
218
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63)
219
        at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136)
220
        at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77)
221
        at org.jruby.runtime.Block.call(Block.java:124)
222
        at org.jruby.RubyProc.call(RubyProc.java:295)
223
        at org.jruby.RubyProc.call(RubyProc.java:274)
224
        at org.jruby.RubyProc.call(RubyProc.java:270)
225
        at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)
226
        at java.lang.Thread.run(Thread.java:748)
227
[2019-09-12T15:57:25,983][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
228
 P[filter-geoip{"id"=>"elastiflow_postproc_geoip_src_city", "source"=>"[flow][src_addr]", "database"=>"${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb", "cache_size"=>"${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}", "target"=>"[metadata][geoip_src]", "fields"=>["city_name", "country_name", "country_code2", "location"]}|[str]pipeline:717:17:```
229
geoip {
230
                  id => "elastiflow_postproc_geoip_src_city"
231
                  source => "[flow][src_addr]"
232
                  database => "${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb"
233
                  cache_size => "${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}"
234
                  target => "[metadata][geoip_src]"
235
                  fields => [ "city_name", "country_name", "country_code2", "location" ]
236
                }
237
```]
238
 into
239
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b5d170a8
240
[2019-09-12T15:57:26,005][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
241
 P[filter-translate{"id"=>"sflow_translate_protocol_name", "dictionary_path"=>"${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml", "field"=>"[sflow][protocol]", "destination"=>"[sflow][protocol]", "fallback"=>"UNKNOWN(%{[sflow][protocol]})", "override"=>"true", "refresh_behaviour"=>"replace"}|[str]pipeline:400:9:```
242
translate {
243
          id => "sflow_translate_protocol_name"
244
          dictionary_path => "${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml"
245
          field => "[sflow][protocol]"
246
          destination => "[sflow][protocol]"
247
          fallback => "UNKNOWN(%{[sflow][protocol]})"
248
          override => true
249
          refresh_behaviour => "replace"
250
        }
251
```]
252
 into
253
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@ae8c4e88
254-
[2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow    ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"10.4.90.29", :dst_ip=>"52.119.211.91", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
254+
[2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow    ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"##################", :dst_ip=>"####################", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
255
warning: thread "<udp.1" terminated with exception (report_on_exception is true):
256
java.lang.StackOverflowError
257
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
258
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
259
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
260
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
261
        at org.jruby.runtime.Block.yield(Block.java:165)
262
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
263
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
264
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
265
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
266
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
267
        at org.jruby.runtime.Block.yield(Block.java:165)
268
        at org.jruby.RubyArray.each(RubyArray.java:1792)
269
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
270
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
271
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
272
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
273
        at org.jruby.RubyClass.finvoke(RubyClass.java:505)
274
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
275
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
276
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
277
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
278
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
279
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
280
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
281
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
282
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
283
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
284
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
285
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
286
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
287
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
288
        at org.jruby.runtime.Block.yield(Block.java:165)
289
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
290
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
291
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
292
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
293
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
294
        at org.jruby.runtime.Block.yield(Block.java:165)
295
        at org.jruby.RubyArray.each(RubyArray.java:1792)
296
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
297
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
298
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
299
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
300
        at org.jruby.RubyClass.finvoke(RubyClass.java:505)
301
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
302
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
303
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
304
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
305
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
306
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
307
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
308
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
309
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
310
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
311
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
312
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
313
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
314
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
315
        at org.jruby.runtime.Block.yield(Block.java:165)
316
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
317
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
318
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
319
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
320
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
321
        at org.jruby.runtime.Block.yield(Block.java:165)
322
        at org.jruby.RubyArray.each(RubyArray.java:1792)
323
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
324
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
325
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
326
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
327
        at org.jruby.RubyClass.finvoke(RubyClass.java:505)
328
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
329
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
330
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
331
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88)
332
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
333
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
334
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
335
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
336
        at org.jruby.RubyClass.finvoke(RubyClass.java:503)
337
        at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
338
        at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
339
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
340
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
341
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
342
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
343
        at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
344
        at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
345
        at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
346
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
347
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
348
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
349
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
350
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
351
        at org.jruby.runtime.Block.yield(Block.java:165)
352
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
353
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
354
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
355
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
356
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
357
        at org.jruby.runtime.Block.yield(Block.java:165)
358
        at org.jruby.RubyArray.each(RubyArray.java:1792)
359
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
360
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
361
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
362
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
363
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177)
364
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
365
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131)
366
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
367
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
368
        at org.jruby.runtime.Block.yield(Block.java:165)
369
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
370
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
371
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
372
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
373
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
374
        at org.jruby.runtime.Block.yield(Block.java:165)
375
        at org.jruby.RubyArray.each(RubyArray.java:1792)
376
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
377
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
378
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
379
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
380
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
381
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
382
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124)
383
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
384
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
385
        at org.jruby.runtime.Block.yield(Block.java:165)
386
        at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
387
        at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
388
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
389
        at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
390
        at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
391
        at org.jruby.runtime.Block.yield(Block.java:165)
392
        at org.jruby.RubyArray.each(RubyArray.java:1792)
393
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
394
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
395
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
396
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
397
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
398
        at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
399
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109)
400
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151)
401
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb)
402
        at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
403
        at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
404
        at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183)
405
        at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63)
406
        at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136)
407
        at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77)
408
        at org.jruby.runtime.Block.call(Block.java:124)
409
        at org.jruby.RubyProc.call(RubyProc.java:295)
410
        at org.jruby.RubyProc.call(RubyProc.java:274)
411
        at org.jruby.RubyProc.call(RubyProc.java:270)
412
        at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)
413
        at java.lang.Thread.run(Thread.java:748)
414
[2019-09-12T15:57:26,124][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
415
 [if !(('_geoip_lookup_failure'.include?event.getField('[tags]')))]
416
 into
417
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@708caf9
418
[2019-09-12T15:57:26,135][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
419
 P[filter-mutate{"id"=>"elastiflow_set_dst_asn", "rename"=>{"[metadata][geoip_dst][asn]"=>"[flow][dst_asn]"}}|[str]pipeline:642:19:```
420
mutate {
421
                    id => "elastiflow_set_dst_asn"
422
                    rename => { "[metadata][geoip_dst][asn]" => "[flow][dst_asn]" }
423
                  }
424
```]
425
 into
426
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@f1550fea
427
[2019-09-12T15:57:26,148][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
428
 P[filter-cidr{"id"=>"elastiflow_ipv4_cidr_src", "address"=>["%{[flow][src_addr]}"], "network"=>["0.0.0.0/0"], "add_field"=>{"[flow][ip_version]"=>"IPv4"}}|[str]pipeline:441:9:```
429
cidr {
430
          id => "elastiflow_ipv4_cidr_src"
431
          address => [ "%{[flow][src_addr]}" ]
432
          network => [ "0.0.0.0/0" ]
433
          add_field => {
434
            "[flow][ip_version]" => "IPv4"
435
          }
436
        }
437
```]
438
 into
439
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@70e99788
440
[2019-09-12T15:57:26,162][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
441
 P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}, "remove_tag"=>["_geoip_lookup_failure"]}|[str]pipeline:647:19:```
442
mutate {
443
                    add_field => { "[flow][dst_autonomous_system]" => "public" }
444
                    remove_tag => [ "_geoip_lookup_failure" ]
445
                  }
446
```]
447
 into
448
 org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
449
[2019-09-12T15:57:26,255][ERROR][org.logstash.Logstash    ] java.lang.StackOverflowError