-
Notifications
You must be signed in to change notification settings - Fork 2
/
Copy pathnetflow_avro_sample1.json
executable file
·48 lines (48 loc) · 1.63 KB
/
netflow_avro_sample1.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
{
"tag": 0,
"tag2": 0,
"label": "Label",
"class": "TestClass",
"mac_src": "00:00:00:00:00:00",
"mac_dst": "00:00:00:00:00:00",
"vlan": 0,
"cos": 0,
"etype": "Test",
"peer_ip_src": "${utils.randomIP()}",
"iface_in": 11,
"iface_out": 0,
"ip_src": "${utils.randomIP()}",
"net_src": "${utils.randomIP()}",
"ip_dst": "${utils.randomIP()}",
"net_dst": "${utils.randomIP()}",
"mask_src": 500,
"mask_dst": 700,
"port_src": ${utils.randomInt(1024,65535)?c},
"port_dst": ${utils.randomInt(1024,65535)?c},
"tcp_flags": "fss",
"ip_proto": "photo.jpeg",
"tos": ${utils.randomInt(1,65535)?c},
"sampling_rate": ${utils.randomInt(1,65535)?c},
"post_nat_ip_src": "${utils.randomIP()}",
"post_nat_ip_dst": "${utils.randomIP()}",
"post_nat_port_src": ${utils.randomInt(1024,65535)?c},
"post_nat_port_dst": ${utils.randomInt(1024,65535)?c},
"nat_event": ${utils.randomInt(1,65535)?c},
"mpls_label_top": ${utils.randomInt(1,65535)?c},
"mpls_label_bottom": ${utils.randomInt(1,65535)?c},
"mpls_stack_depth": ${utils.randomInt(1,65535)?c},
"timestamp_start": "${ts?number_to_datetime?string("dd-MM-yyyy 'T' HH:mm:ss")}",
"timestamp_end": "${ts?number_to_datetime?string("dd-MM-yyyy 'T' HH:mm:ss")}",
"timestamp_arrival": "${ts?number_to_datetime?string("dd-MM-yyyy 'T' HH:mm:ss")}",
"export_proto_seqno": ${utils.randomInt(1,65535)?c},
"export_proto_version": ${utils.randomInt(1,10)?c},
"custom_primitives": {
"primitive": "valuePrimitive"
},
"stamp_inserted": null,
"stamp_updated": null,
"packets": null,
"flows": null,
"bytes": {"long":${utils.randomInt(1,65535)?c}},
"writer_id": "testId"
}