-
Notifications
You must be signed in to change notification settings - Fork 2
/
netflow_sample_b.json
44 lines (44 loc) · 1.37 KB
/
netflow_sample_b.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
{
"event_type": "purge",
"tag": 0,
"tag2": 0,
"label": "xxx",
"class": "unknown",
"mac_src": "00:00:00:00:00:00",
"mac_dst": "00:00:00:00:00:00",
"vlan": 0,
"cos": 0,
"etype": "800",
"peer_ip_src": "${utils.randomIP()}",
"iface_in": 11,
"iface_out": 0,
"ip_src": "${utils.randomIP()}",
"net_src": "${utils.randomIP()}",
"ip_dst": "${utils.randomIP()}",
"net_dst": "${utils.randomIP()}",
"mask_src": 0,
"mask_dst": 0,
"port_src": ${utils.randomInt(1024,65535)?c},
"port_dst": ${utils.randomInt(1024,65535)?c},
"tcp_flags": 2,
"ip_proto": "tcp",
"tos": 0,
"sampling_rate": 0,
"post_nat_ip_src": "${utils.randomIP()}",
"post_nat_ip_dst": "${utils.randomIP()}",
"post_nat_port_src": ${utils.randomInt(1024,65535)?c},
"post_nat_port_dst": ${utils.randomInt(1024,65535)?c},
"nat_event": 0,
"mpls_label_top": 0,
"mpls_label_bottom": 0,
"mpls_stack_depth": 0,
"timestamp_start": "${ts?number_to_datetime?string("yyyy-MM-dd HH:mm:ss.SSSSSS")}",
"timestamp_end": "${ts?number_to_datetime?string("yyyy-MM-dd HH:mm:ss.SSSSSS")}",
"timestamp_arrival": "${ts?number_to_datetime?string("yyyy-MM-dd HH:mm:ss.SSSSSS")}",
"export_proto_seqno": 1111111,
"export_proto_version": 9,
"flows": ${utils.randomInt(1,10)?c},
"packets": ${utils.randomInt(1,65535)?c},
"bytes": ${utils.randomInt(1,65535)?c},
"writer_id": "nflw-json/11111"
}