Merge branch 'hotfix/update-versions' into 'master'
feat: update default conf See merge request galaxy/tsg_olap/sip-rtp-correlation!38
This commit is contained in:
File diff suppressed because it is too large
Load Diff
@@ -674,6 +674,11 @@ pipeline:
|
||||
rtp_pcap_path,
|
||||
rtp_originator_dir
|
||||
- TRUNCATE v1
|
||||
# Duplicate SIP inbound data, if discarded please comment out the following if:
|
||||
- if: STREAM_DIR(flags) != 3 && @v1.isNotNull && STREAM_DIR(@v1.$flags) == STREAM_DIR(flags)
|
||||
then:
|
||||
- |-
|
||||
OUTPUT fail FROM withColumns(recv_time to rtp_originator_dir)
|
||||
- if: STREAM_DIR(flags) != 3 && @v1.isNull
|
||||
then:
|
||||
- |-
|
||||
@@ -1371,6 +1376,139 @@ pipeline:
|
||||
key-by: vsys_id, SORT_ADDRESS( sip_originator_sdp_connect_ip, sip_originator_sdp_media_port, sip_responder_sdp_connect_ip, sip_responder_sdp_media_port ) AS address
|
||||
# SIP
|
||||
process:
|
||||
# Duplicate SIP inbound data, if discarded please comment out the following if:
|
||||
- if: '@sip.isNotNull'
|
||||
then:
|
||||
- |-
|
||||
OUTPUT fail FROM @sip.$recv_time AS recv_time,
|
||||
@sip.$log_id AS log_id,
|
||||
@sip.$decoded_as AS decoded_as,
|
||||
@sip.$session_id AS session_id,
|
||||
@sip.$start_timestamp_ms AS start_timestamp_ms,
|
||||
@sip.$start_timestamp AS start_timestamp,
|
||||
@sip.$end_timestamp_ms AS end_timestamp_ms,
|
||||
@sip.$duration_ms AS duration_ms,
|
||||
@sip.$tcp_handshake_latency_ms AS tcp_handshake_latency_ms,
|
||||
@sip.$ingestion_time AS ingestion_time,
|
||||
@sip.$processing_time AS processing_time,
|
||||
@sip.$insert_time AS insert_time,
|
||||
@sip.$device_id AS device_id,
|
||||
@sip.$out_link_id AS out_link_id,
|
||||
@sip.$in_link_id AS in_link_id,
|
||||
@sip.$device_tag AS device_tag,
|
||||
@sip.$data_center AS data_center,
|
||||
@sip.$device_group AS device_group,
|
||||
@sip.$sled_ip AS sled_ip,
|
||||
@sip.$address_type AS address_type,
|
||||
@sip.$direction AS direction,
|
||||
@sip.$vsys_id AS vsys_id,
|
||||
@sip.$t_vsys_id AS t_vsys_id,
|
||||
@sip.$flags AS flags,
|
||||
@sip.$flags_identify_info AS flags_identify_info,
|
||||
@sip.$c2s_ttl AS c2s_ttl,
|
||||
@sip.$s2c_ttl AS s2c_ttl,
|
||||
@sip.$security_rule_list AS security_rule_list,
|
||||
@sip.$security_action AS security_action,
|
||||
@sip.$monitor_rule_list AS monitor_rule_list,
|
||||
@sip.$shaping_rule_list AS shaping_rule_list,
|
||||
@sip.$proxy_rule_list AS proxy_rule_list,
|
||||
@sip.$statistics_rule_list AS statistics_rule_list,
|
||||
@sip.$sc_rule_list AS sc_rule_list,
|
||||
@sip.$sc_rsp_raw AS sc_rsp_raw,
|
||||
@sip.$sc_rsp_decrypted AS sc_rsp_decrypted,
|
||||
@sip.$proxy_action AS proxy_action,
|
||||
@sip.$proxy_pinning_status AS proxy_pinning_status,
|
||||
@sip.$proxy_intercept_status AS proxy_intercept_status,
|
||||
@sip.$proxy_passthrough_reason AS proxy_passthrough_reason,
|
||||
@sip.$proxy_client_side_latency_ms AS proxy_client_side_latency_ms,
|
||||
@sip.$proxy_server_side_latency_ms AS proxy_server_side_latency_ms,
|
||||
@sip.$proxy_client_side_version AS proxy_client_side_version,
|
||||
@sip.$proxy_server_side_version AS proxy_server_side_version,
|
||||
@sip.$proxy_cert_verify AS proxy_cert_verify,
|
||||
@sip.$proxy_intercept_error AS proxy_intercept_error,
|
||||
@sip.$monitor_mirrored_pkts AS monitor_mirrored_pkts,
|
||||
@sip.$monitor_mirrored_bytes AS monitor_mirrored_bytes,
|
||||
@sip.$client_ip AS client_ip,
|
||||
@sip.$client_port AS client_port,
|
||||
@sip.$client_os_desc AS client_os_desc,
|
||||
@sip.$client_geolocation AS client_geolocation,
|
||||
@sip.$client_country AS client_country,
|
||||
@sip.$client_super_administrative_area AS client_super_administrative_area,
|
||||
@sip.$client_administrative_area AS client_administrative_area,
|
||||
@sip.$client_sub_administrative_area AS client_sub_administrative_area,
|
||||
@sip.$client_asn AS client_asn,
|
||||
@sip.$subscriber_id AS subscriber_id,
|
||||
@sip.$imei AS imei,
|
||||
@sip.$imsi AS imsi,
|
||||
@sip.$phone_number AS phone_number,
|
||||
@sip.$apn AS apn,
|
||||
@sip.$server_ip AS server_ip,
|
||||
@sip.$server_port AS server_port,
|
||||
@sip.$server_os_desc AS server_os_desc,
|
||||
@sip.$server_geolocation AS server_geolocation,
|
||||
@sip.$server_country AS server_country,
|
||||
@sip.$server_super_administrative_area AS server_super_administrative_area,
|
||||
@sip.$server_administrative_area AS server_administrative_area,
|
||||
@sip.$server_sub_administrative_area AS server_sub_administrative_area,
|
||||
@sip.$server_asn AS server_asn,
|
||||
@sip.$server_fqdn AS server_fqdn,
|
||||
@sip.$server_domain AS server_domain,
|
||||
@sip.$fqdn_category_list AS fqdn_category_list,
|
||||
@sip.$app_transition AS app_transition,
|
||||
@sip.$app AS app,
|
||||
@sip.$app_category AS app_category,
|
||||
@sip.$app_debug_info AS app_debug_info,
|
||||
@sip.$app_content AS app_content,
|
||||
@sip.$app_extra_info AS app_extra_info,
|
||||
@sip.$ip_protocol AS ip_protocol,
|
||||
@sip.$decoded_path AS decoded_path,
|
||||
@sip.$sent_pkts AS sent_pkts,
|
||||
@sip.$received_pkts AS received_pkts,
|
||||
@sip.$sent_bytes AS sent_bytes,
|
||||
@sip.$received_bytes AS received_bytes,
|
||||
@sip.$tcp_c2s_ip_fragments AS tcp_c2s_ip_fragments,
|
||||
@sip.$tcp_s2c_ip_fragments AS tcp_s2c_ip_fragments,
|
||||
@sip.$tcp_c2s_lost_bytes AS tcp_c2s_lost_bytes,
|
||||
@sip.$tcp_s2c_lost_bytes AS tcp_s2c_lost_bytes,
|
||||
@sip.$tcp_c2s_o3_pkts AS tcp_c2s_o3_pkts,
|
||||
@sip.$tcp_s2c_o3_pkts AS tcp_s2c_o3_pkts,
|
||||
@sip.$tcp_c2s_rtx_pkts AS tcp_c2s_rtx_pkts,
|
||||
@sip.$tcp_s2c_rtx_pkts AS tcp_s2c_rtx_pkts,
|
||||
@sip.$tcp_c2s_rtx_bytes AS tcp_c2s_rtx_bytes,
|
||||
@sip.$tcp_s2c_rtx_bytes AS tcp_s2c_rtx_bytes,
|
||||
@sip.$tcp_rtt_ms AS tcp_rtt_ms,
|
||||
@sip.$tcp_client_isn AS tcp_client_isn,
|
||||
@sip.$tcp_server_isn AS tcp_server_isn,
|
||||
@sip.$packet_capture_file AS packet_capture_file,
|
||||
@sip.$in_src_mac AS in_src_mac,
|
||||
@sip.$out_src_mac AS out_src_mac,
|
||||
@sip.$in_dest_mac AS in_dest_mac,
|
||||
@sip.$out_dest_mac AS out_dest_mac,
|
||||
@sip.$encapsulation AS encapsulation,
|
||||
@sip.$dup_traffic_flag AS dup_traffic_flag,
|
||||
@sip.$tunnel_id_list AS tunnel_id_list,
|
||||
@sip.$tunnel_endpoint_a_desc AS tunnel_endpoint_a_desc,
|
||||
@sip.$tunnel_endpoint_b_desc AS tunnel_endpoint_b_desc,
|
||||
@sip.$sip_call_id AS sip_call_id,
|
||||
@sip.$sip_originator_description AS sip_originator_description,
|
||||
@sip.$sip_responder_description AS sip_responder_description,
|
||||
@sip.$sip_user_agent AS sip_user_agent,
|
||||
@sip.$sip_server AS sip_server,
|
||||
@sip.$sip_originator_sdp_connect_ip AS sip_originator_sdp_connect_ip,
|
||||
@sip.$sip_originator_sdp_media_port AS sip_originator_sdp_media_port,
|
||||
@sip.$sip_originator_sdp_media_type AS sip_originator_sdp_media_type,
|
||||
@sip.$sip_originator_sdp_content AS sip_originator_sdp_content,
|
||||
@sip.$sip_responder_sdp_connect_ip AS sip_responder_sdp_connect_ip,
|
||||
@sip.$sip_responder_sdp_media_port AS sip_responder_sdp_media_port,
|
||||
@sip.$sip_responder_sdp_media_type AS sip_responder_sdp_media_type,
|
||||
@sip.$sip_responder_sdp_content AS sip_responder_sdp_content,
|
||||
@sip.$sip_duration_s AS sip_duration_s,
|
||||
@sip.$sip_bye AS sip_bye,
|
||||
@sip.$sip_bye_reason AS sip_bye_reason,
|
||||
@sip.$rtp_payload_type_c2s AS rtp_payload_type_c2s,
|
||||
@sip.$rtp_payload_type_s2c AS rtp_payload_type_s2c,
|
||||
@sip.$rtp_pcap_path AS rtp_pcap_path,
|
||||
@sip.$rtp_originator_dir AS rtp_originator_dir
|
||||
- SET sip FROM withColumns(recv_time to rtp_originator_dir)
|
||||
- if: '@rtp.isNotNull && @rtp.cardinality > 0'
|
||||
then:
|
||||
|
||||
@@ -3,6 +3,7 @@
|
||||
### ${project.version}
|
||||
|
||||
- [TSG-23174](https://jira.geedge.net/browse/TSG-23174) 测试完成,升级为稳定版本。
|
||||
- 重复数据不再进行去重操作,未关联的全部输出。
|
||||
|
||||
| Easy Stream | UDF Jar | Job |
|
||||
|-------------| ------------------------------------------------------------ | ------------------------------------------------------------ |
|
||||
|
||||
Reference in New Issue
Block a user