v058

Cargo.toml

@@ -1,7 +1,7 @@
 [package]
 name = "netflow_parser"
 description = "Parser for Netflow Cisco V5, V7, V9, IPFIX"
-version = "0.5.7"
+version = "0.5.8"
 edition = "2024"
 authors = ["michael.mileusnich@gmail.com"]
 license = "MIT OR Apache-2.0"

RELEASES.md

@@ -1,3 +1,26 @@
+# 0.5.8
+* V9 Found and fixed divide by 0 issue.
+* IPFix Protocol Identifier now parsers as ProtocolIdentifier Field Type and not UnsignedDataNumber.
+* IPFix added Application ID Data Type.
+* Enterprise Fields are no longer classified as an "enterprise" field type.
+* IPFix now supports some Cisco PEN fields listed below:
+```
+    CiscoServerBytesNetwork = 8337,
+    CiscoClientBytesNetwork = 8338,
+    CiscoServicesWaasSegment = 9252,
+    CiscoServicesWaasPassthroughReason = 9253,
+    CiscoAppHttpUriStatistics = 9357,
+    CiscoAppCategoryName = 12232,
+    CiscoAppGroupName = 12234,
+    CiscoAppHttpHost = 12235,
+    CiscoClientIpv4Address = 12236,
+    CiscoServerIpv4Address = 12237,
+    CiscoClientL4Port = 12240,
+    CiscoServerL4Port = 12241,
+    CiscoConnectionId = 12242,
+    CiscoAppBusiness = 12244,
+```
+
 # 0.5.7
 * Fix Scope Data Parsing.
 

src/snapshots/netflow_parser__tests__base_tests__it_parses_ipfix_enterprise_bit_in_non_options_template.snap

@@ -19,10 +19,11 @@ expression: "NetflowParser::default().parse_bytes(&packet)"
             field_count: 2
             fields:
               - field_type_number: 103
-                field_type: Enterprise
+                field_type: Layer2packetSectionSize
                 field_length: 65535
                 enterprise_number: 407732327
               - field_type_number: 32767
-                field_type: Enterprise
+                field_type:
+                  Unknown: 32767
                 field_length: 0
                 enterprise_number: 407732544