search

logstash-plugins / logstash-input-udp

Apache License 2.0
13 stars 22 forks source link

Add support for sending connection metadata to codecs that need it #20

Closed jorritfolmer closed 8 years ago

jorritfolmer commented 8 years ago

In case of the Netflow codec: it needs to be able to differentiate between eg a Cisco ASA and a Cisco router based on source IP and source port, like in logstash-plugins/logstash-codec-netflow#21.

However, since only the payload is passed to the codec, it cannot properly decode the Netflow data packets if there are multiple devices sending Netflow data. For decoding Netflow packets, a Netflow collector like Logstash depends on the data templates every Netflow exporter sends only once in a while.

More details about this in logstash-plugins/logstash-codec-netflow#9

jorritfolmer commented 8 years ago

Closing. This PR is no longer relevant with the transition of logstash-codec-netflow to logstas-input-netflow, based on this udp plugin.