Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Idea/Feature: Extensible decoder #77

Open
shyam334 opened this issue May 21, 2020 · 0 comments
Open

Idea/Feature: Extensible decoder #77

shyam334 opened this issue May 21, 2020 · 0 comments

Comments

@shyam334
Copy link
Contributor

Netflow, IPFIX support templates, which supports device, device-class, vendor specific fields.
These extended fields contain useful information, but it doesn't necessarily make sense to add to goflow's default list of supported fields.

The feature request is to have an extensible decoder for NFv9 and IPFIX, such that users are able to customise the decoder to support additional fields without having to maintain a full fledged fork of goflow.

As for implementation, I thought it could be :

  • Configuration driven system - which is good for simple mapping. (record field -> pb value)
  • Plugin system - decoder extension, which has access to the DataField and FlowMessage, which could enable complex transformations.
  • Other ideas.

What are your thoughts.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant