Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- [2019-09-12T15:57:25,484][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_as_org", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][as_org]}"}}|[str]pipeline:627:23:```
- mutate {
- id => "elastiflow_postproc_dst_as_from_as_org"
- add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][as_org]}" }
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
- [2019-09-12T15:57:25,525][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
- [if (event.getField('[flow][ip_version]')=='undetermined')]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@98a5f031
- [2019-09-12T15:57:25,535][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
- [if (event.get('[metadata][geoip_dst][asn]'))]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b8bdbae1
- [2019-09-12T15:57:25,666][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-mutate{"id"=>"elastiflow_postproc_src_addr_public", "replace"=>{"[flow][traffic_locality]"=>"public"}}|[str]pipeline:710:13:```
- mutate {
- id => "elastiflow_postproc_src_addr_public"
- replace => { "[flow][traffic_locality]" => "public" }
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e59effe8
- [2019-09-12T15:57:25,677][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
- [if (event.get('[sflow][protocol]'))]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@25bc6a19
- [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ParNew"}
- [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ConcurrentMarkSweep"}
- [2019-09-12T15:57:25,797][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
- [if (event.getField('[@metadata][geoip_lookup]')=='true')]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@21a9e5a1
- [2019-09-12T15:57:25,810][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_asn", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][asn]}"}}|[str]pipeline:633:21:```
- mutate {
- id => "elastiflow_postproc_dst_as_from_asn"
- add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][asn]}" }
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@42a50b76
- [2019-09-12T15:57:25,828][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
- [if (event.get('[flow][src_addr]'))]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@86994801
- [2019-09-12T15:57:25,839][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}}|[str]pipeline:638:21:```
- mutate {
- add_field => { "[flow][dst_autonomous_system]" => "public" }
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
- [2019-09-12T15:57:25,889][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>2095819, :source_id_type=>0, :source_id_index=>46, :sampling_rate=>1000, :sample_pool=>1999496057, :drops=>1425, :input_interface=>46, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"########################", :eth_src=>"#####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39683, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>62, :ip_protocol=>6, :ip_checksum=>63298, :src_ip=>"#####################", :dst_ip=>"#################", :ip_data=>{:src_port=>26672, :dst_port=>443, :tcp_seq_number=>4220563484, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>65127, :tcp_urgent_pointer=>0, :data=>6891333316688858494651476080640314568351975325824563496913311072972887993388246870181843081041120860688542495971177009554677755933456730189608934449887067895546440420021912856175}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>2017, :src_priority=>0, :dst_vlan=>2017, :dst_priority=>0}}]}}
- [2019-09-12T15:57:25,912][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85526, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061776828, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"#####################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62027, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26316, :src_ip=>"###############", :dst_ip=>"################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>465758321, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>25518, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
- [2019-09-12T15:57:25,925][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85527, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061777103, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"####################", :eth_src=>"##################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62117, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26226, :src_ip=>"######################", :dst_ip=>"#####################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>466021121, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>24858, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
- warning: thread "<udp.3" terminated with exception (report_on_exception is true):
- java.lang.StackOverflowError
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.RubyClass.finvoke(RubyClass.java:505)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.RubyClass.finvoke(RubyClass.java:505)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.RubyClass.finvoke(RubyClass.java:505)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.RubyClass.finvoke(RubyClass.java:503)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63)
- at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136)
- at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77)
- at org.jruby.runtime.Block.call(Block.java:124)
- at org.jruby.RubyProc.call(RubyProc.java:295)
- at org.jruby.RubyProc.call(RubyProc.java:274)
- at org.jruby.RubyProc.call(RubyProc.java:270)
- at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)
- at java.lang.Thread.run(Thread.java:748)
- [2019-09-12T15:57:25,983][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-geoip{"id"=>"elastiflow_postproc_geoip_src_city", "source"=>"[flow][src_addr]", "database"=>"${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb", "cache_size"=>"${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}", "target"=>"[metadata][geoip_src]", "fields"=>["city_name", "country_name", "country_code2", "location"]}|[str]pipeline:717:17:```
- geoip {
- id => "elastiflow_postproc_geoip_src_city"
- source => "[flow][src_addr]"
- database => "${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb"
- cache_size => "${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}"
- target => "[metadata][geoip_src]"
- fields => [ "city_name", "country_name", "country_code2", "location" ]
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b5d170a8
- [2019-09-12T15:57:26,005][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-translate{"id"=>"sflow_translate_protocol_name", "dictionary_path"=>"${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml", "field"=>"[sflow][protocol]", "destination"=>"[sflow][protocol]", "fallback"=>"UNKNOWN(%{[sflow][protocol]})", "override"=>"true", "refresh_behaviour"=>"replace"}|[str]pipeline:400:9:```
- translate {
- id => "sflow_translate_protocol_name"
- dictionary_path => "${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml"
- field => "[sflow][protocol]"
- destination => "[sflow][protocol]"
- fallback => "UNKNOWN(%{[sflow][protocol]})"
- override => true
- refresh_behaviour => "replace"
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@ae8c4e88
- [2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"##################", :dst_ip=>"####################", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
- warning: thread "<udp.1" terminated with exception (report_on_exception is true):
- java.lang.StackOverflowError
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.RubyClass.finvoke(RubyClass.java:505)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.RubyClass.finvoke(RubyClass.java:505)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.RubyClass.finvoke(RubyClass.java:505)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.RubyClass.finvoke(RubyClass.java:503)
- at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
- at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
- at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
- at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
- at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
- at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
- at org.jruby.runtime.Block.yield(Block.java:165)
- at org.jruby.RubyArray.each(RubyArray.java:1792)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
- at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb)
- at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
- at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
- at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183)
- at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63)
- at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136)
- at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77)
- at org.jruby.runtime.Block.call(Block.java:124)
- at org.jruby.RubyProc.call(RubyProc.java:295)
- at org.jruby.RubyProc.call(RubyProc.java:274)
- at org.jruby.RubyProc.call(RubyProc.java:270)
- at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)
- at java.lang.Thread.run(Thread.java:748)
- [2019-09-12T15:57:26,124][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
- [if !(('_geoip_lookup_failure'.include?event.getField('[tags]')))]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@708caf9
- [2019-09-12T15:57:26,135][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-mutate{"id"=>"elastiflow_set_dst_asn", "rename"=>{"[metadata][geoip_dst][asn]"=>"[flow][dst_asn]"}}|[str]pipeline:642:19:```
- mutate {
- id => "elastiflow_set_dst_asn"
- rename => { "[metadata][geoip_dst][asn]" => "[flow][dst_asn]" }
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@f1550fea
- [2019-09-12T15:57:26,148][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-cidr{"id"=>"elastiflow_ipv4_cidr_src", "address"=>["%{[flow][src_addr]}"], "network"=>["0.0.0.0/0"], "add_field"=>{"[flow][ip_version]"=>"IPv4"}}|[str]pipeline:441:9:```
- cidr {
- id => "elastiflow_ipv4_cidr_src"
- address => [ "%{[flow][src_addr]}" ]
- network => [ "0.0.0.0/0" ]
- add_field => {
- "[flow][ip_version]" => "IPv4"
- }
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@70e99788
- [2019-09-12T15:57:26,162][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
- P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}, "remove_tag"=>["_geoip_lookup_failure"]}|[str]pipeline:647:19:```
- mutate {
- add_field => { "[flow][dst_autonomous_system]" => "public" }
- remove_tag => [ "_geoip_lookup_failure" ]
- }
- ```]
- into
- org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
- [2019-09-12T15:57:26,255][ERROR][org.logstash.Logstash ] java.lang.StackOverflowError
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement