Plugin uses sqlite3 database and fills user information according to source and destination address for each IPFIX data record.
SQL database file must contain table logs with these columns:
- id - integer, primary key
- name - string to be copied into the metadata structure
- ip - IP address in text format
- action - numerical value, 1 == login, 0 == logout
- time - unix timestamp in seconds
Default plugin configuration in internalcfg.xml:
<intermediatePlugin>
<name>profiler</name>
<file>/usr/share/ipfixcol/plugins/ipfixcol-profiler-inter.so</file>
<threadName>profiler</threadName>
</intermediatePlugin>
Or as ipfixconf
output:
Plugin type Name/Format Process/Thread File
----------------------------------------------------------------------------
intermediate uid uid /usr/share/ipfixcol/plugins/ipfixcol-uid-inter.so
Example startup.xml configuration:
<uid>
<path>/path/to/dbfile.db</path>
</uid>
- path is path to the SQL database file.