Skip to content

Latest commit

 

History

History
24 lines (16 loc) · 701 Bytes

README.md

File metadata and controls

24 lines (16 loc) · 701 Bytes
Raw

Flow Log Parser

This Python program parses flow log data and a lookup table, maps each flow log entry to a tag, and generates an output file with:

  1. The count of matches for each tag.
  2. The count of matches for each port/protocol combination.

Assumptions

  • Supported Log Version: Only version 2.
  • Protocols: Supports TCP (6), UDP (17), and ICMP (1).
  • Unknown Entries: Entries with no match are tagged as Untagged.
  • Lookup Table: CSV format with dstport, protocol, and tag.

Run the Program

  1. Place flow_logs.csv and lookup_table.csv in the same directory as the program.
  2. Run the program:
python main.py
  1. Output file flow_log_analysis_output.txt will be generated.