ParseNetflowv5 2.0.0

Bundle
org.apache.nifi | nifi-network-processors-nar
Description
Parses netflowv5 byte ingest and add to NiFi flowfile as attributes or JSON content.
Tags
attributes, byte, datagram, netflow, network, packet, v5
Input Requirement
REQUIRED
Supports Sensitive Dynamic Properties
false
  • Additional Details for ParseNetflowv5 2.0.0

    Netflowv5Parser

    Netflowv5Parser processor parses the ingress netflowv5 datagram format and transfers it either as flowfile attributes or JSON object. Netflowv5 format has predefined schema named “template” for parsing the netflowv5 record. More information: RFC-netflowv5

    Netflowv5 JSON Output Schema

    {
  "port": int,
  "format": string,
  "header": {
    "version": int,
    "count": int,
    "sys_uptime": long,
    "unix_secs": long,
    "unix_nsecs": long,
    "flow_sequence": long,
    "engine_type": short,
    "engine_id": short,
    "sampling_interval": int
  },
  "record": {
    "srcaddr": string,
    "dstaddr": string,
    "nexthop": string,
    "input": int,
    "output": int,
    "dPkts": long,
    "dOctets": long,
    "first": long,
    "last": long,
    "srcport": int,
    "dstport": int,
    "pad1": short,
    "tcp_flags": short,
    "prot": short,
    "tos": short,
    "src_as": int,
    "dst_as": int,
    "src_mask": short,
    "dst_mask": short,
    "pad2": int
  }
}
Properties
Relationships
Name Description
success Any FlowFile that is successfully parsed as a netflowv5 data will be transferred to this Relationship.
failure Any FlowFile that could not be parsed as a netflowv5 message will be transferred to this Relationship without any attributes being added
original The original raw content
Reads Attributes
Name Description
udp.port Optionally read if packets are received from UDP datagrams.
Writes Attributes
Name Description
netflowv5.header.* The key and value generated by the parsing of the header fields.
netflowv5.record.* The key and value generated by the parsing of the record fields.