Advertisement
Guest User

Untitled

a guest
Sep 12th, 2019
163
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. [2019-09-12T15:57:25,484][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  2. P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_as_org", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][as_org]}"}}|[str]pipeline:627:23:```
  3. mutate {
  4. id => "elastiflow_postproc_dst_as_from_as_org"
  5. add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][as_org]}" }
  6. }
  7. ```]
  8. into
  9. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
  10. [2019-09-12T15:57:25,525][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
  11. [if (event.getField('[flow][ip_version]')=='undetermined')]
  12. into
  13. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@98a5f031
  14. [2019-09-12T15:57:25,535][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
  15. [if (event.get('[metadata][geoip_dst][asn]'))]
  16. into
  17. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b8bdbae1
  18. [2019-09-12T15:57:25,666][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  19. P[filter-mutate{"id"=>"elastiflow_postproc_src_addr_public", "replace"=>{"[flow][traffic_locality]"=>"public"}}|[str]pipeline:710:13:```
  20. mutate {
  21. id => "elastiflow_postproc_src_addr_public"
  22. replace => { "[flow][traffic_locality]" => "public" }
  23. }
  24. ```]
  25. into
  26. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@e59effe8
  27. [2019-09-12T15:57:25,677][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
  28. [if (event.get('[sflow][protocol]'))]
  29. into
  30. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@25bc6a19
  31. [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ParNew"}
  32. [2019-09-12T15:57:25,767][DEBUG][logstash.instrument.periodicpoller.jvm] collector name {:name=>"ConcurrentMarkSweep"}
  33. [2019-09-12T15:57:25,797][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
  34. [if (event.getField('[@metadata][geoip_lookup]')=='true')]
  35. into
  36. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@21a9e5a1
  37. [2019-09-12T15:57:25,810][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  38. P[filter-mutate{"id"=>"elastiflow_postproc_dst_as_from_asn", "add_field"=>{"[flow][dst_autonomous_system]"=>"%{[metadata][geoip_dst][asn]}"}}|[str]pipeline:633:21:```
  39. mutate {
  40. id => "elastiflow_postproc_dst_as_from_asn"
  41. add_field => { "[flow][dst_autonomous_system]" => "%{[metadata][geoip_dst][asn]}" }
  42. }
  43. ```]
  44. into
  45. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@42a50b76
  46. [2019-09-12T15:57:25,828][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
  47. [if (event.get('[flow][src_addr]'))]
  48. into
  49. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@86994801
  50. [2019-09-12T15:57:25,839][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  51. P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}}|[str]pipeline:638:21:```
  52. mutate {
  53. add_field => { "[flow][dst_autonomous_system]" => "public" }
  54. }
  55. ```]
  56. into
  57. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
  58. [2019-09-12T15:57:25,889][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>2095819, :source_id_type=>0, :source_id_index=>46, :sampling_rate=>1000, :sample_pool=>1999496057, :drops=>1425, :input_interface=>46, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"########################", :eth_src=>"#####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39683, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>62, :ip_protocol=>6, :ip_checksum=>63298, :src_ip=>"#####################", :dst_ip=>"#################", :ip_data=>{:src_port=>26672, :dst_port=>443, :tcp_seq_number=>4220563484, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>65127, :tcp_urgent_pointer=>0, :data=>6891333316688858494651476080640314568351975325824563496913311072972887993388246870181843081041120860688542495971177009554677755933456730189608934449887067895546440420021912856175}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>2017, :src_priority=>0, :dst_vlan=>2017, :dst_priority=>0}}]}}
  59. [2019-09-12T15:57:25,912][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85526, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061776828, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"#####################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62027, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26316, :src_ip=>"###############", :dst_ip=>"################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>465758321, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>25518, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
  60. [2019-09-12T15:57:25,925][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>140, :sample_data=>{:flow_sequence_number=>85527, :source_id_type=>0, :source_id_index=>17, :sampling_rate=>1000, :sample_pool=>1061777103, :drops=>0, :input_interface=>17, :output_interface=>2147483650, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>76, :record_data=>{:protocol=>1, :frame_length=>64, :stripped=>4, :header_size=>60, :sample_header=>{:eth_dst=>"####################", :eth_src=>"##################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>40, :ip_identification=>62117, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>128, :ip_protocol=>6, :ip_checksum=>26226, :src_ip=>"######################", :dst_ip=>"#####################", :ip_data=>{:src_port=>50445, :dst_port=>443, :tcp_seq_number=>1950436056, :tcp_ack_number=>466021121, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>8280, :tcp_checksum=>24858, :tcp_urgent_pointer=>0, :data=>0}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>407, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
  61. warning: thread "<udp.3" terminated with exception (report_on_exception is true):
  62. java.lang.StackOverflowError
  63. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  64. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  65. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  66. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  67. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  68. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  69. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  70. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  71. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  72. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  73. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  74. at org.jruby.runtime.Block.yield(Block.java:165)
  75. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  76. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  77. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  78. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  79. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  80. at org.jruby.runtime.Block.yield(Block.java:165)
  81. at org.jruby.RubyArray.each(RubyArray.java:1792)
  82. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  83. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  84. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  85. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  86. at org.jruby.RubyClass.finvoke(RubyClass.java:505)
  87. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  88. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  89. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  90. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  91. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  92. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  93. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  94. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  95. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  96. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  97. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  98. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  99. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  100. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  101. at org.jruby.runtime.Block.yield(Block.java:165)
  102. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  103. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  104. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  105. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  106. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  107. at org.jruby.runtime.Block.yield(Block.java:165)
  108. at org.jruby.RubyArray.each(RubyArray.java:1792)
  109. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  110. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  111. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  112. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  113. at org.jruby.RubyClass.finvoke(RubyClass.java:505)
  114. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  115. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  116. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  117. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  118. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  119. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  120. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  121. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  122. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  123. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  124. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  125. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  126. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  127. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  128. at org.jruby.runtime.Block.yield(Block.java:165)
  129. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  130. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  131. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  132. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  133. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  134. at org.jruby.runtime.Block.yield(Block.java:165)
  135. at org.jruby.RubyArray.each(RubyArray.java:1792)
  136. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  137. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  138. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  139. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  140. at org.jruby.RubyClass.finvoke(RubyClass.java:505)
  141. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  142. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  143. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  144. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88)
  145. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  146. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  147. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  148. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  149. at org.jruby.RubyClass.finvoke(RubyClass.java:503)
  150. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  151. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  152. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  153. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  154. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  155. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  156. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  157. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  158. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  159. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  160. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  161. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  162. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  163. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  164. at org.jruby.runtime.Block.yield(Block.java:165)
  165. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  166. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  167. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  168. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  169. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  170. at org.jruby.runtime.Block.yield(Block.java:165)
  171. at org.jruby.RubyArray.each(RubyArray.java:1792)
  172. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  173. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  174. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  175. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  176. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177)
  177. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  178. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131)
  179. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  180. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  181. at org.jruby.runtime.Block.yield(Block.java:165)
  182. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  183. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  184. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  185. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  186. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  187. at org.jruby.runtime.Block.yield(Block.java:165)
  188. at org.jruby.RubyArray.each(RubyArray.java:1792)
  189. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  190. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
  191. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  192. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  193. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  194. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
  195. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124)
  196. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  197. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  198. at org.jruby.runtime.Block.yield(Block.java:165)
  199. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  200. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  201. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  202. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  203. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  204. at org.jruby.runtime.Block.yield(Block.java:165)
  205. at org.jruby.RubyArray.each(RubyArray.java:1792)
  206. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  207. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
  208. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  209. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  210. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  211. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
  212. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109)
  213. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151)
  214. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb)
  215. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  216. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  217. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183)
  218. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63)
  219. at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136)
  220. at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77)
  221. at org.jruby.runtime.Block.call(Block.java:124)
  222. at org.jruby.RubyProc.call(RubyProc.java:295)
  223. at org.jruby.RubyProc.call(RubyProc.java:274)
  224. at org.jruby.RubyProc.call(RubyProc.java:270)
  225. at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)
  226. at java.lang.Thread.run(Thread.java:748)
  227. [2019-09-12T15:57:25,983][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  228. P[filter-geoip{"id"=>"elastiflow_postproc_geoip_src_city", "source"=>"[flow][src_addr]", "database"=>"${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb", "cache_size"=>"${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}", "target"=>"[metadata][geoip_src]", "fields"=>["city_name", "country_name", "country_code2", "location"]}|[str]pipeline:717:17:```
  229. geoip {
  230. id => "elastiflow_postproc_geoip_src_city"
  231. source => "[flow][src_addr]"
  232. database => "${ELASTIFLOW_GEOIP_DB_PATH:/etc/logstash/elastiflow/geoipdbs}/GeoLite2-City.mmdb"
  233. cache_size => "${ELASTIFLOW_GEOIP_CACHE_SIZE:8192}"
  234. target => "[metadata][geoip_src]"
  235. fields => [ "city_name", "country_name", "country_code2", "location" ]
  236. }
  237. ```]
  238. into
  239. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@b5d170a8
  240. [2019-09-12T15:57:26,005][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  241. P[filter-translate{"id"=>"sflow_translate_protocol_name", "dictionary_path"=>"${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml", "field"=>"[sflow][protocol]", "destination"=>"[sflow][protocol]", "fallback"=>"UNKNOWN(%{[sflow][protocol]})", "override"=>"true", "refresh_behaviour"=>"replace"}|[str]pipeline:400:9:```
  242. translate {
  243. id => "sflow_translate_protocol_name"
  244. dictionary_path => "${ELASTIFLOW_DICT_PATH:/etc/logstash/elastiflow/dictionaries}/sflow_header_protocol.yml"
  245. field => "[sflow][protocol]"
  246. destination => "[sflow][protocol]"
  247. fallback => "UNKNOWN(%{[sflow][protocol]})"
  248. override => true
  249. refresh_behaviour => "replace"
  250. }
  251. ```]
  252. into
  253. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@ae8c4e88
  254. [2019-09-12T15:57:26,086][DEBUG][logstash.codecs.sflow ] sample: {:sample_entreprise=>0, :sample_format=>1, :sample_length=>208, :sample_data=>{:flow_sequence_number=>1962165, :source_id_type=>0, :source_id_index=>318, :sampling_rate=>1000, :sample_pool=>3771449579, :drops=>162, :input_interface=>318, :output_interface=>38, :record_count=>2, :records=>[{:record_entreprise=>0, :record_format=>1, :record_length=>144, :record_data=>{:protocol=>1, :frame_length=>1518, :stripped=>4, :header_size=>128, :sample_header=>{:eth_dst=>"######################", :eth_src=>"####################", :eth_type=>2048, :eth_data=>{:ip_version=>4, :ip_header_length=>5, :ip_dscp=>0, :ip_ecn=>0, :ip_total_length=>1500, :ip_identification=>39966, :ip_flags=>2, :ip_fragment_offset=>0, :ip_ttl=>64, :ip_protocol=>6, :ip_checksum=>11530, :src_ip=>"##################", :dst_ip=>"####################", :ip_data=>{:src_port=>55298, :dst_port=>443, :tcp_seq_number=>4220966544, :tcp_ack_number=>178617856, :tcp_header_length=>5, :tcp_reserved=>0, :tcp_is_nonce=>0, :tcp_is_cwr=>0, :tcp_is_ecn_echo=>0, :tcp_is_urgent=>0, :tcp_is_ack=>1, :tcp_is_push=>0, :tcp_is_reset=>0, :tcp_is_syn=>0, :tcp_is_fin=>0, :tcp_window_size=>457, :tcp_checksum=>28713, :tcp_urgent_pointer=>0, :data=>#############################################}}}}}, {:record_entreprise=>0, :record_format=>1001, :record_length=>16, :record_data=>{:src_vlan=>490, :src_priority=>0, :dst_vlan=>207, :dst_priority=>0}}]}}
  255. warning: thread "<udp.1" terminated with exception (report_on_exception is true):
  256. java.lang.StackOverflowError
  257. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  258. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  259. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  260. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  261. at org.jruby.runtime.Block.yield(Block.java:165)
  262. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  263. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  264. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  265. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  266. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  267. at org.jruby.runtime.Block.yield(Block.java:165)
  268. at org.jruby.RubyArray.each(RubyArray.java:1792)
  269. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  270. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  271. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  272. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  273. at org.jruby.RubyClass.finvoke(RubyClass.java:505)
  274. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  275. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  276. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  277. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  278. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  279. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  280. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  281. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  282. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  283. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  284. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  285. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  286. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  287. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  288. at org.jruby.runtime.Block.yield(Block.java:165)
  289. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  290. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  291. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  292. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  293. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  294. at org.jruby.runtime.Block.yield(Block.java:165)
  295. at org.jruby.RubyArray.each(RubyArray.java:1792)
  296. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  297. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  298. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  299. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  300. at org.jruby.RubyClass.finvoke(RubyClass.java:505)
  301. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  302. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  303. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  304. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  305. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  306. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  307. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  308. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  309. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  310. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  311. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  312. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  313. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  314. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  315. at org.jruby.runtime.Block.yield(Block.java:165)
  316. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  317. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  318. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  319. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  320. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  321. at org.jruby.runtime.Block.yield(Block.java:165)
  322. at org.jruby.RubyArray.each(RubyArray.java:1792)
  323. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  324. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  325. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  326. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  327. at org.jruby.RubyClass.finvoke(RubyClass.java:505)
  328. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  329. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  330. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  331. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.buffer.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/buffer.rb:88)
  332. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  333. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  334. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  335. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  336. at org.jruby.RubyClass.finvoke(RubyClass.java:503)
  337. at org.jruby.RubyBasicObject.send(RubyBasicObject.java:1740)
  338. at org.jruby.RubyBasicObject$INVOKER$i$send.call(RubyBasicObject$INVOKER$i$send.gen)
  339. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  340. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.choice.RUBY$method$method_missing$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/choice.rb:93)
  341. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  342. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  343. at org.jruby.runtime.Helpers$MethodMissingMethod.call(Helpers.java:393)
  344. at org.jruby.runtime.Helpers.callMethodMissing(Helpers.java:111)
  345. at org.jruby.ir.targets.InvokeSite.callMethodMissing(InvokeSite.java:722)
  346. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:162)
  347. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  348. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$assign_key_value$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:42)
  349. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  350. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  351. at org.jruby.runtime.Block.yield(Block.java:165)
  352. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  353. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  354. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$block$each_pair$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:169)
  355. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  356. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  357. at org.jruby.runtime.Block.yield(Block.java:165)
  358. at org.jruby.RubyArray.each(RubyArray.java:1792)
  359. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb:168)
  360. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.struct.RUBY$method$each_pair$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/struct.rb)
  361. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  362. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  363. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:177)
  364. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$assign_key_value$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:40)
  365. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:131)
  366. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  367. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  368. at org.jruby.runtime.Block.yield(Block.java:165)
  369. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  370. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  371. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  372. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  373. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  374. at org.jruby.runtime.Block.yield(Block.java:165)
  375. at org.jruby.RubyArray.each(RubyArray.java:1792)
  376. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  377. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
  378. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  379. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  380. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  381. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
  382. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$block$decode$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:124)
  383. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  384. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  385. at org.jruby.runtime.Block.yield(Block.java:165)
  386. at org.jruby.ir.runtime.IRRuntimeHelpers.yield(IRRuntimeHelpers.java:478)
  387. at org.jruby.ir.targets.YieldSite.yield(YieldSite.java:105)
  388. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$block$each$1(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  389. at org.jruby.runtime.CompiledIRBlockBody.yieldDirect(CompiledIRBlockBody.java:146)
  390. at org.jruby.runtime.BlockBody.yield(BlockBody.java:114)
  391. at org.jruby.runtime.Block.yield(Block.java:165)
  392. at org.jruby.RubyArray.each(RubyArray.java:1792)
  393. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb:208)
  394. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.bindata_minus_2_dot_4_dot_4.lib.bindata.array.RUBY$method$each$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/bindata-2.4.4/lib/bindata/array.rb)
  395. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  396. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  397. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:223)
  398. at org.jruby.ir.targets.InvokeSite.fail(InvokeSite.java:230)
  399. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_codec_minus_sflow_minus_2_dot_1_dot_1.lib.logstash.codecs.sflow.RUBY$method$decode$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-codec-sflow-2.1.1/lib/logstash/codecs/sflow.rb:109)
  400. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:151)
  401. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$method$inputworker$0$__VARARGS__(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb)
  402. at org.jruby.internal.runtime.methods.CompiledIRMethod.call(CompiledIRMethod.java:91)
  403. at org.jruby.internal.runtime.methods.MixedModeIRMethod.call(MixedModeIRMethod.java:90)
  404. at org.jruby.ir.targets.InvokeSite.invoke(InvokeSite.java:183)
  405. at usr.share.logstash.vendor.bundle.jruby.$2_dot_5_dot_0.gems.logstash_minus_input_minus_udp_minus_3_dot_3_dot_4.lib.logstash.inputs.udp.RUBY$block$run$2(/usr/share/logstash/vendor/bundle/jruby/2.5.0/gems/logstash-input-udp-3.3.4/lib/logstash/inputs/udp.rb:63)
  406. at org.jruby.runtime.CompiledIRBlockBody.callDirect(CompiledIRBlockBody.java:136)
  407. at org.jruby.runtime.IRBlockBody.call(IRBlockBody.java:77)
  408. at org.jruby.runtime.Block.call(Block.java:124)
  409. at org.jruby.RubyProc.call(RubyProc.java:295)
  410. at org.jruby.RubyProc.call(RubyProc.java:274)
  411. at org.jruby.RubyProc.call(RubyProc.java:270)
  412. at org.jruby.internal.runtime.RubyRunnable.run(RubyRunnable.java:105)
  413. at java.lang.Thread.run(Thread.java:748)
  414. [2019-09-12T15:57:26,124][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled conditional
  415. [if !(('_geoip_lookup_failure'.include?event.getField('[tags]')))]
  416. into
  417. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@708caf9
  418. [2019-09-12T15:57:26,135][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  419. P[filter-mutate{"id"=>"elastiflow_set_dst_asn", "rename"=>{"[metadata][geoip_dst][asn]"=>"[flow][dst_asn]"}}|[str]pipeline:642:19:```
  420. mutate {
  421. id => "elastiflow_set_dst_asn"
  422. rename => { "[metadata][geoip_dst][asn]" => "[flow][dst_asn]" }
  423. }
  424. ```]
  425. into
  426. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@f1550fea
  427. [2019-09-12T15:57:26,148][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  428. P[filter-cidr{"id"=>"elastiflow_ipv4_cidr_src", "address"=>["%{[flow][src_addr]}"], "network"=>["0.0.0.0/0"], "add_field"=>{"[flow][ip_version]"=>"IPv4"}}|[str]pipeline:441:9:```
  429. cidr {
  430. id => "elastiflow_ipv4_cidr_src"
  431. address => [ "%{[flow][src_addr]}" ]
  432. network => [ "0.0.0.0/0" ]
  433. add_field => {
  434. "[flow][ip_version]" => "IPv4"
  435. }
  436. }
  437. ```]
  438. into
  439. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@70e99788
  440. [2019-09-12T15:57:26,162][DEBUG][org.logstash.config.ir.CompiledPipeline] Compiled filter
  441. P[filter-mutate{"add_field"=>{"[flow][dst_autonomous_system]"=>"public"}, "remove_tag"=>["_geoip_lookup_failure"]}|[str]pipeline:647:19:```
  442. mutate {
  443. add_field => { "[flow][dst_autonomous_system]" => "public" }
  444. remove_tag => [ "_geoip_lookup_failure" ]
  445. }
  446. ```]
  447. into
  448. org.logstash.config.ir.compiler.ComputeStepSyntaxElement@27ffd08
  449. [2019-09-12T15:57:26,255][ERROR][org.logstash.Logstash ] java.lang.StackOverflowError
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement