Skip to content

Commit aba7361

Browse files
jpinsonneaujpinsonneau
committed
add cypress checks on fields
1 parent 48d9fbf commit aba7361

File tree

7 files changed

+224
-15
lines changed

7 files changed

+224
-15
lines changed

‎config/sample-config.yaml‎

Lines changed: 137 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -155,13 +155,15 @@ frontend:
155155
columns:
156156
- id: StartTime
157157
name: Start Time
158-
tooltip: Time of the first packet observed. Unlike End Time, it is not used in queries to select records in an interval.
158+
tooltip: Time of the first packet observed. Unlike End Time, it is not used in queries
159+
to select records in an interval.
159160
field: TimeFlowStartMs
160161
default: false
161162
width: 15
162163
- id: EndTime
163164
name: End Time
164-
tooltip: Time of the last packet observed. This is what is used in queries to select records in an interval.
165+
tooltip: Time of the last packet observed. This is what is used in queries to select
166+
records in an interval.
165167
field: TimeFlowEndMs
166168
default: true
167169
width: 15
@@ -305,6 +307,14 @@ frontend:
305307
default: false
306308
width: 15
307309
feature: zones
310+
- id: SrcSubnetLabel
311+
group: Source
312+
name: Subnet Label
313+
field: SrcSubnetLabel
314+
filter: src_subnet_label
315+
default: false
316+
width: 10
317+
feature: subnetLabels
308318
- id: DstK8S_Name
309319
group: Destination
310320
name: Name
@@ -425,6 +435,14 @@ frontend:
425435
default: false
426436
width: 15
427437
feature: zones
438+
- id: DstSubnetLabel
439+
group: Destination
440+
name: Subnet Label
441+
field: DstSubnetLabel
442+
filter: dst_subnet_label
443+
default: false
444+
width: 10
445+
feature: subnetLabels
428446
- id: K8S_Name
429447
name: Names
430448
calculated: getSrcOrDstValue(SrcK8S_Name,DstK8S_Name)
@@ -517,6 +535,9 @@ frontend:
517535
name: Type
518536
tooltip: The type of the ICMP message
519537
field: IcmpType
538+
fields:
539+
- Proto
540+
- IcmpType
520541
filter: icmp_type
521542
default: false
522543
width: 10
@@ -525,9 +546,20 @@ frontend:
525546
name: Code
526547
tooltip: The code of the ICMP message
527548
field: IcmpCode
549+
fields:
550+
- Proto
551+
- IcmpType
552+
- IcmpCode
528553
filter: icmp_code
529554
default: false
530555
width: 10
556+
- id: TCPFlags
557+
name: TCP Flags
558+
tooltip: Logical OR combination of unique TCP flags comprised in the flow, as per RFC-9293, with additional custom values.
559+
field: Flags
560+
filter: tcp_flags
561+
default: false
562+
width: 10
531563
- id: FlowDirection
532564
name: Node Direction
533565
tooltip: The interpreted direction of the flow observed at the Node observation point.
@@ -635,6 +667,14 @@ frontend:
635667
default: true
636668
width: 5
637669
feature: flowRTT
670+
- id: NetworkEvents
671+
name: Network Events
672+
tooltip: Network events flow monitor
673+
field: NetworkEvents
674+
filter: network_events
675+
default: true
676+
width: 15
677+
feature: networkEvents
638678
filters:
639679
- id: cluster_name
640680
name: Cluster
@@ -754,6 +794,16 @@ frontend:
754794
component: autocomplete
755795
category: destination
756796
hint: Specify a single zone.
797+
- id: src_subnet_label
798+
name: Subnet Label
799+
component: autocomplete
800+
category: source
801+
hint: Specify a subnet label, or an empty string to get unmatched sources.
802+
- id: dst_subnet_label
803+
name: Subnet Label
804+
component: autocomplete
805+
category: destination
806+
hint: Specify a subnet label, or an empty string to get unmatched destinations.
757807
- id: src_resource
758808
name: Resource
759809
component: autocomplete
@@ -912,6 +962,24 @@ frontend:
912962
name: ICMP code
913963
component: number
914964
hint: Specify an ICMP code value as integer number.
965+
- id: tcp_flags
966+
name: TCP flags
967+
component: autocomplete
968+
hint: Specify a TCP flags value as integer number.
969+
examples: |-
970+
Logical OR combination of unique TCP flags comprised in the flow, as per RFC-9293, with additional custom flags
971+
users can specify either numeric value or string representation of the flags as follows :
972+
- FIN or 1,
973+
- SYN or 2,
974+
- RST or 4,
975+
- PSH or 8,
976+
- ACK or 16,
977+
- URG or 32,
978+
- ECE or 64,
979+
- CWR or 128,
980+
- SYN_ACK or 256,
981+
- FIN_ACK or 512,
982+
- RST_ACK or 1024,
915983
- id: node_direction
916984
name: Node Direction
917985
component: autocomplete
@@ -982,109 +1050,152 @@ frontend:
9821050
name: Flow RTT
9831051
component: number
9841052
hint: Specify a TCP smoothed Round Trip Time in nanoseconds.
1053+
- id: network_events
1054+
name: Network events flow monitoring
1055+
component: text
1056+
hint: Specify a single network event.
9851057
fields:
9861058
- name: TimeFlowStartMs
9871059
type: number
9881060
description: Start timestamp of this flow, in milliseconds
1061+
cardinalityWarn: avoid
9891062
- name: TimeFlowEndMs
9901063
type: number
9911064
description: End timestamp of this flow, in milliseconds
1065+
cardinalityWarn: avoid
9921066
- name: TimeReceived
9931067
type: number
9941068
description: Timestamp when this flow was received and processed by the flow collector, in seconds
1069+
cardinalityWarn: avoid
9951070
- name: SrcK8S_Name
9961071
type: string
9971072
description: Name of the source Kubernetes object, such as Pod name, Service name or Node name.
1073+
cardinalityWarn: careful
9981074
- name: SrcK8S_Type
9991075
type: string
10001076
description: Kind of the source Kubernetes object, such as Pod, Service or Node.
10011077
lokiLabel: true
1078+
cardinalityWarn: fine
10021079
- name: SrcK8S_OwnerName
10031080
type: string
10041081
description: Name of the source owner, such as Deployment name, StatefulSet name, etc.
10051082
lokiLabel: true
1083+
cardinalityWarn: fine
10061084
- name: SrcK8S_OwnerType
10071085
type: string
10081086
description: Kind of the source owner, such as Deployment, StatefulSet, etc.
1087+
cardinalityWarn: fine
10091088
- name: SrcK8S_Namespace
10101089
type: string
10111090
description: Source namespace
10121091
lokiLabel: true
1092+
cardinalityWarn: fine
10131093
- name: SrcAddr
10141094
type: string
10151095
description: Source IP address (ipv4 or ipv6)
1096+
cardinalityWarn: avoid
10161097
- name: SrcPort
10171098
type: number
10181099
description: Source port
1100+
cardinalityWarn: careful
10191101
- name: SrcMac
10201102
type: string
10211103
description: Source MAC address
1104+
cardinalityWarn: avoid
10221105
- name: SrcK8S_HostIP
10231106
type: string
10241107
description: Source node IP
1108+
cardinalityWarn: fine
10251109
- name: SrcK8S_HostName
10261110
type: string
10271111
description: Source node name
1112+
cardinalityWarn: fine
10281113
- name: SrcK8S_Zone
10291114
type: string
10301115
description: Source availability zone
10311116
lokiLabel: true
1117+
cardinalityWarn: fine
1118+
- name: SrcSubnetLabel
1119+
type: string
1120+
description: Source subnet label
1121+
cardinalityWarn: fine
10321122
- name: DstK8S_Name
10331123
type: string
10341124
description: Name of the destination Kubernetes object, such as Pod name, Service name or Node name.
1125+
cardinalityWarn: careful
10351126
- name: DstK8S_Type
10361127
type: string
10371128
description: Kind of the destination Kubernetes object, such as Pod, Service or Node.
10381129
lokiLabel: true
1130+
cardinalityWarn: fine
10391131
- name: DstK8S_OwnerName
10401132
type: string
10411133
description: Name of the destination owner, such as Deployment name, StatefulSet name, etc.
10421134
lokiLabel: true
1135+
cardinalityWarn: fine
10431136
- name: DstK8S_OwnerType
10441137
type: string
10451138
description: Kind of the destination owner, such as Deployment, StatefulSet, etc.
1139+
cardinalityWarn: fine
10461140
- name: DstK8S_Namespace
10471141
type: string
10481142
description: Destination namespace
10491143
lokiLabel: true
1144+
cardinalityWarn: fine
10501145
- name: DstAddr
10511146
type: string
10521147
description: Destination IP address (ipv4 or ipv6)
1148+
cardinalityWarn: avoid
10531149
- name: DstPort
10541150
type: number
10551151
description: Destination port
1152+
cardinalityWarn: careful
10561153
- name: DstMac
10571154
type: string
10581155
description: Destination MAC address
1156+
cardinalityWarn: avoid
10591157
- name: DstK8S_HostIP
10601158
type: string
10611159
description: Destination node IP
1160+
cardinalityWarn: fine
10621161
- name: DstK8S_HostName
10631162
type: string
10641163
description: Destination node name
1164+
cardinalityWarn: fine
10651165
- name: DstK8S_Zone
10661166
type: string
10671167
description: Destination availability zone
10681168
lokiLabel: true
1169+
cardinalityWarn: fine
1170+
- name: DstSubnetLabel
1171+
type: string
1172+
description: Destination subnet label
1173+
cardinalityWarn: fine
10691174
- name: K8S_FlowLayer
10701175
type: string
10711176
description: "Flow layer: 'app' or 'infra'"
1177+
cardinalityWarn: fine
10721178
- name: Proto
10731179
type: number
10741180
description: L4 protocol
1181+
cardinalityWarn: fine
10751182
- name: Dscp
10761183
type: number
10771184
description: Differentiated Services Code Point (DSCP) value
1185+
cardinalityWarn: fine
10781186
- name: IcmpType
10791187
type: number
10801188
description: ICMP type
1189+
cardinalityWarn: fine
10811190
- name: IcmpCode
10821191
type: number
10831192
description: ICMP code
1193+
cardinalityWarn: fine
10841194
- name: Duplicate
10851195
type: boolean
10861196
description: Indicates if this flow was also captured from another interface on the same host
10871197
lokiLabel: true
1198+
cardinalityWarn: fine
10881199
- name: FlowDirection
10891200
type: number
10901201
description: |
@@ -1093,71 +1204,95 @@ frontend:
10931204
- 1: Egress (outgoing traffic, from the node observation point) +
10941205
- 2: Inner (with the same source and destination node)
10951206
lokiLabel: true
1207+
cardinalityWarn: fine
10961208
- name: IfDirections
10971209
type: number
10981210
description: |
10991211
Flow directions from the network interface observation point. Can be one of: +
11001212
- 0: Ingress (interface incoming traffic) +
11011213
- 1: Egress (interface outgoing traffic)
1214+
cardinalityWarn: fine
11021215
- name: Interfaces
11031216
type: string
11041217
description: Network interfaces
1218+
cardinalityWarn: careful
11051219
- name: Flags
11061220
type: number
11071221
description: |
11081222
Logical OR combination of unique TCP flags comprised in the flow, as per RFC-9293, with additional custom flags to represent the following per-packet combinations: +
11091223
- SYN+ACK (0x100) +
11101224
- FIN+ACK (0x200) +
11111225
- RST+ACK (0x400)
1226+
cardinalityWarn: fine
11121227
- name: Bytes
11131228
type: number
11141229
description: Number of bytes
1230+
cardinalityWarn: avoid
11151231
- name: Packets
11161232
type: number
11171233
description: Number of packets
1234+
cardinalityWarn: avoid
11181235
- name: PktDropBytes
11191236
type: number
11201237
description: Number of bytes dropped by the kernel
1238+
cardinalityWarn: avoid
11211239
- name: PktDropPackets
11221240
type: number
11231241
description: Number of packets dropped by the kernel
1242+
cardinalityWarn: avoid
11241243
- name: PktDropLatestState
11251244
type: string
11261245
description: TCP state on last dropped packet
11271246
filter: pkt_drop_state # couldn't guess from config
1247+
cardinalityWarn: fine
11281248
- name: PktDropLatestDropCause
11291249
type: string
11301250
description: Latest drop cause
11311251
filter: pkt_drop_cause # couldn't guess from config
1252+
cardinalityWarn: fine
11321253
- name: PktDropLatestFlags
11331254
type: number
11341255
description: TCP flags on last dropped packet
1256+
cardinalityWarn: fine
11351257
- name: DnsId
11361258
type: number
11371259
description: DNS record id
1260+
cardinalityWarn: avoid
11381261
- name: DnsLatencyMs
11391262
type: number
11401263
description: Time between a DNS request and response, in milliseconds
1264+
cardinalityWarn: avoid
11411265
- name: DnsFlags
11421266
type: number
11431267
description: DNS flags for DNS record
1268+
cardinalityWarn: fine
11441269
- name: DnsFlagsResponseCode
11451270
type: string
11461271
description: Parsed DNS header RCODEs name
1272+
cardinalityWarn: fine
11471273
- name: DnsErrno
11481274
type: number
11491275
description: Error number returned from DNS tracker ebpf hook function
1276+
cardinalityWarn: fine
11501277
- name: TimeFlowRttNs
11511278
type: number
11521279
description: TCP Smoothed Round Trip Time (SRTT), in nanoseconds
1280+
cardinalityWarn: avoid
1281+
- name: NetworkEvents
1282+
type: string
1283+
description: Network events flow monitoring
1284+
cardinalityWarn: avoid
11531285
- name: K8S_ClusterName
11541286
type: string
11551287
description: Cluster name or identifier
11561288
lokiLabel: true
1289+
cardinalityWarn: fine
11571290
- name: _RecordType
11581291
type: string
11591292
description: "Type of record: 'flowLog' for regular flow logs, or 'newConnection', 'heartbeat', 'endConnection' for conversation tracking"
11601293
lokiLabel: true
1294+
cardinalityWarn: fine
11611295
- name: _HashId
11621296
type: string
11631297
description: In conversation tracking, the conversation identifier
1298+
cardinalityWarn: avoid

0 commit comments

Comments
 (0)