Module scoped_parser 

Scoped parser for managing multiple NetFlow sources.

This module provides a convenient wrapper for handling NetFlow data from multiple sources (routers/exporters), ensuring template isolation per source.

Structs

AutoScopedParser

Automatically scoped parser that handles RFC-compliant template isolation.

IpfixSourceKey

RFC-compliant source key for IPFIX flows.

RouterScopedParser

A parser that maintains separate template caches for each NetFlow source.

SourceRemoval

Exact information about one implicitly removed scoped parser.

SourceRemovalMetrics

Aggregate source-removal metrics retained by a scoped parser.

V9SourceKey

RFC-compliant source key for NetFlow v9 flows.

Enums

AutoSourceKey

Exact source identity used by AutoScopedParser.

ScopingInfo

Information extracted from NetFlow packet headers for RFC-compliant scoping.

SourceRemovalCause

Why a scoped parser implicitly removed a source.

Constants

DEFAULT_MAX_SOURCES

Default maximum number of sources tracked by scoped parsers. Prevents unbounded memory growth from spoofed source addresses.

Functions

extract_scoping_info

Extract scoping information from a NetFlow packet header without full parsing.

Type Aliases

SourceRemovalReporterError

Error returned by a source-removal reporter.