Skip to content

Latest commit

 

History

History
45 lines (33 loc) · 1.22 KB

File metadata and controls

45 lines (33 loc) · 1.22 KB

##User ID intermediate plugin ###Plugin description

Plugin uses sqlite3 database and fills user information according to source and destination address for each IPFIX data record.

####SQL database

SQL database file must contain table logs with these columns:

  • id - integer, primary key
  • name - string to be copied into the metadata structure
  • ip - IP address in text format
  • action - numerical value, 1 == login, 0 == logout
  • time - unix timestamp in seconds

###Configuration

Default plugin configuration in internalcfg.xml:

<intermediatePlugin>
    <name>profiler</name>
    <file>/usr/share/ipfixcol/plugins/ipfixcol-profiler-inter.so</file>
    <threadName>profiler</threadName>
</intermediatePlugin>

Or as ipfixconf output:

     Plugin type         Name/Format     Process/Thread         File        
 ----------------------------------------------------------------------------
	 intermediate            uid              uid           /usr/share/ipfixcol/plugins/ipfixcol-uid-inter.so

Example startup.xml configuration:

<uid>
	<path>/path/to/dbfile.db</path>
</uid>
  • path is path to the SQL database file.

Back to Top