Welcome to intake_netflow’s documentation!

This package enables Intake to read Netflow v9-format files.

Quickstart

This guide will show you how to get started using Intake to read IP flow records.

Installation

For conda users, the Intake Netflow plugin is installed with the following commands:

conda install -c intake intake-netflow

API Reference

intake_netflow.source.NetflowSource(urlpath)

Attributes

intake_netflow.v9.PacketStream(source)

A read-only representation of serialized packets.

intake_netflow.v9.RecordStream(source)

A read-only representation of serialized data records.

class intake_netflow.source.NetflowSource(urlpath, metadata=None)[source]
Attributes
cache_dirs
classname
datashape
description
has_been_persisted
hvplot

Returns a hvPlot object to provide a high-level plotting API.

is_persisted
plot

Returns a hvPlot object to provide a high-level plotting API.

plots

List custom associated quick-plots

Methods

close(self)

Close open resources corresponding to this data source.

discover(self)

Open resource and populate the source attributes.

export(self, path, \*\*kwargs)

Save this data for sharing with other people

persist(self[, ttl])

Save data from this source to local persistent storage

read(self)

Load entire dataset into a container and return it

read_chunked(self)

Return iterator over container fragments of data source

read_partition(self, i)

Return a part of the data corresponding to i-th partition.

to_dask(self)

Return a dask container for this data source

to_spark(self)

Provide an equivalent data object in Apache Spark

yaml(self[, with_plugin])

Return YAML representation of this data-source

get_persisted

set_cache_dir

read(self)[source]

Load entire dataset into a container and return it

to_dask(self)[source]

Return a dask container for this data source

class intake_netflow.v9.PacketStream(source)[source]

A read-only representation of serialized packets.

Parameters:
sourcefile-like object

Read-only input for packets.

Methods

close

next

class intake_netflow.v9.RecordStream(source)[source]

A read-only representation of serialized data records.

Parameters:
sourcefile-like object

Read-only input for data records.

Methods

close

next

Indices and tables