ez_netflow_lib 0.1.0

EZ-Netflow is an all-in-one netflow server and library that's really easy to use. This is the lib crate, which contains the core server and database code. Use this crate directly if you want to incorporate EZ-Netflow into your project.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111

use std::net::Ipv4Addr;
use serde::Serialize;

#[derive(Copy, Clone)]
pub enum NetflowVersion {
    V5(u16),
    V9(u16)
}

#[derive(PartialEq, Clone, Serialize)]
pub enum TrafficType {
    Unicast,
    Multicast,
    Broadcast
}

pub enum PacketType {
    Template,
    Data
}

//enabled is the order
//value is actual payload
#[derive(Copy, Clone)]
pub enum U8Field {
    Disabled,
    Enabled,
    Value(u8),
}

#[derive(Copy, Clone)]
pub enum U64Field {
    Disabled,
    Enabled,
    Value(u64),
}


#[derive(Copy, Clone)]
pub enum U16Field {
    Disabled,
    Enabled,
    Value(u16),
}

#[derive(Copy, Clone)]
pub enum U32Field {
    Disabled,
    Enabled,
    Value(u32),
}

#[derive(Copy, Clone, Serialize)]
pub enum Ipv4Field {
    Disabled,
    Enabled,
    Value(Ipv4Addr),
}

#[derive(Copy, Clone, Default)]
pub enum FlowField {
   #[default]
   None,
   TemplateID(Option<u16>),
   FieldCount(Option<u16>),
   InOctets,
   InPkts,
   Flows,
   Protocol,
   SrcTOS,
   TCPFlags,
   SrcPort,
   SrcAddr,
   SrcMask,
   InputSNMP,
   DstPort,
   DstAddr,
   DstMask,
   OutputSNMP,
   NextHop,
   MulDstPkts,
   MulDstBytes,
   LastSwitched,
   FirstSwitched,
   OutBytes,
   OutPkts,
   MinPktLength,
   MaxPktLength,
   IcmpType,
   MulIgmpType,
   MinTTL,
   MaxTTL,
   Ident,
   DstTOS,
   InSrcMac,
   OutDstMac,
   SrcVLAN,
   DstVLAN,
   IpVersion,
   Direction,
   InDstMac,
   OutSrcMac,
   //missing 5 last
   

}



//best resource for cisco flexible netflow fields
//https://www.cisco.com/en/US/technologies/tk648/tk362/technologies_white_paper09186a00800a3db9.html