Skip to content

Commit

Permalink
IPFIX input: add support for reading IPFIX Files, documentation
Browse files Browse the repository at this point in the history
  • Loading branch information
Lukas955 committed Apr 26, 2020
1 parent 14d6b6f commit 3979da2
Show file tree
Hide file tree
Showing 3 changed files with 280 additions and 35 deletions.
19 changes: 13 additions & 6 deletions src/plugins/input/ipfix/README.rst
Original file line number Diff line number Diff line change
@@ -1,23 +1,30 @@
IPFIX file (input plugin)
IPFIX File (input plugin)
=========================

TODO
The plugin reads flow data from one or more files in IPFIX File format. It is possible to
use it to load flow records previously stored using IPFIX output plugin.

Unlike UDP and TCP input plugins which infinitely waits for data from NetFlow/IPFIX
exporters, the plugin will terminate the collector after all files are processed.

Example configuration
---------------------

.. code-block:: xml
<input>
<name>IPFIX input</name>
<name>IPFIX File</name>
<plugin>ipfix</plugin>
<params>
<dirPath>4739</dirPath>
<fileName></fileName>
<path>/tmp/flow/file.ipfix</path>
</params>
</input>
Parameters
----------

TODO
:``path``:
Path to file(s) in IPFIX File format. It is possible to use asterisk instead of
a filename/directory, tilde character (i.e. "~") instead of the home directory of
the user, and brace expressions (i.e. "/tmp/{source1,source2}/file.ipfix").
Directories and non-IPFIX Files that match the file pattern are skipped/ignored.
4 changes: 2 additions & 2 deletions src/plugins/input/ipfix/config.h
Original file line number Diff line number Diff line change
Expand Up @@ -48,8 +48,8 @@

/** Configuration of a instance of the IPFIX plugin */
struct ipfix_config {
/** Local port */
const char *path;
/** File pattern */
char *path;
};

/**
Expand Down
Loading

0 comments on commit 3979da2

Please sign in to comment.