Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- input {
- udp {
- host => "0.0.0.0"
- port => 4739
- codec => netflow {
- versions => [10]
- target => ipfix
- }
- type => ipfix
- }
- }
- {
- "ipfix" => {
- "destinationTransportPort" => 39912,
- "flowEndMicroseconds" => "2017-04-11T02:53:09.000Z",
- "sourceIPv4Address" => "10.x.x.x",
- "netscalerUnknown329" => 0,
- "egressInterface" => 0,
- "octetDeltaCount" => 6600,
- "netscalerAppNameAppId" => 165707776,
- "sourceTransportPort" => 636,
- "flowId" => 14049270,
- "destinationIPv4Address" => "10.y.y.y",
- "observationPointId" => 472006666,
- "netscalerConnectionId" => 14049269,
- "tcpControlBits" => 25,
- "flowStartMicroseconds" => "2017-04-11T02:53:09.000Z",
- "ingressInterface" => 2147483651,
- "version" => 10,
- "packetDeltaCount" => 16,
- "netscalerRoundTripTime" => 0,
- "netscalerConnectionChainID" => "00000000000000000000000000000000",
- "ipVersion" => 4,
- "protocolIdentifier" => 6,
- "netscalerUnknown331" => 0,
- "netscalerUnknown332" => 0,
- "exportingProcessId" => 0,
- "netscalerFlowFlags" => 1090527232,
- "netscalerTransactionId" => 342306495,
- "netscalerConnectionChainHopCount" => 0
- },
- "@timestamp" => 2017-04-11T02:53:09.000Z,
- "@version" => "1",
- "host" => "172.28.128.3",
- "type" => "ipfix"
- }
- {
- "ipfix" => {
- "netscalerHttpReqUserAgent" => "",
- "destinationTransportPort" => 443,
- "netscalerHttpReqCookie" => "",
- "flowEndMicroseconds" => "2017-04-11T02:52:49.000Z",
- "netscalerHttpReqUrl" => "/someblah",
- "sourceIPv4Address" => "10.z.z.z",
- "netscalerHttpReqMethod" => "POST",
- "netscalerHttpReqHost" => "some.example.com",
- "egressInterface" => 2147483651,
- "octetDeltaCount" => 1165,
- "netscalerAppNameAppId" => 36274176,
- "sourceTransportPort" => 59959,
- "flowId" => 14043803,
- "netscalerHttpReqAuthorization" => "",
- "netscalerHttpDomainName" => "",
- "netscalerAaaUsername" => "",
- "netscalerHttpContentType" => "",
- "destinationIPv4Address" => "10.w.w.w",
- "observationPointId" => 472006666,
- "netscalerHttpReqVia" => "",
- "netscalerConnectionId" => 14043803,
- "tcpControlBits" => 24,
- "flowStartMicroseconds" => "2017-04-11T02:52:49.000Z",
- "ingressInterface" => 1,
- "version" => 10,
- "packetDeltaCount" => 1,
- "netscalerUnknown330" => 0,
- "netscalerConnectionChainID" => "928ba0c1da3300000145ec5805800e00",
- "ipVersion" => 4,
- "protocolIdentifier" => 6,
- "netscalerHttpResForwLB" => 0,
- "netscalerHttpReqReferer" => "",
- "exportingProcessId" => 0,
- "netscalerAppUnitNameAppId" => 0,
- "netscalerFlowFlags" => 151134208,
- "netscalerTransactionId" => 342305773,
- "netscalerHttpResForwFB" => 0,
- "netscalerConnectionChainHopCount" => 1,
- "netscalerHttpReqXForwardedFor" => ""
- },
- "@timestamp" => 2017-04-11T02:52:51.000Z,
- "@version" => "1",
- "host" => "172.28.128.3",
- "type" => "ipfix"
- }
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement