activecm / ipfix-rita

Collect IPFIX / Netflow v9 Records and Ship them to RITA for Analysis
https://www.activecountermeasures.com/
10 stars 1 forks source link

Bump RITA Output Version #69

Closed Zalgo2462 closed 5 years ago

Zalgo2462 commented 5 years ago

RITA is moving to version 2.0. Thankfully, it appears the input schemas are backwards compatible. We will need to bump the ImportVersion version string in the MetaDatabase records we create to 2.0.

We might think about versioning the input schemas separate from the rest of the project to reduce this type of problem in the future.

This line simply needs to be changed to: ImportVersion: "v2.0.0+ActiveCM-IPFIX",

SamuelCarroll commented 5 years ago

There may be associated issues with this based on the new strobe feature in RITA v2.0.0+ we want to address as well. By associated it would probably constitute a separate issue but just want to put that out there