Fixbuf

This is a role for installing the fixbuf library from netsa tools. The libfixbuf library offers a C implementation of the IPFIX Protocol, which helps build processes for collecting and exporting IPFIX data. For more information, including how to build it and any known issues, check the API documentation.

Requirements

For RockyLinux and Alma:

You need community.general.dnf_config_manager, which requires the Ansible community.general version 8.2.0 or higher.

Red Hat-based distributions need the EPEL repository.

Role Variables

Here are the available variables along with their default values (see defaults/main.yml):

• fixbuf_version: This specifies the version of fixbuf to install. The master branch will always have the latest version.

• fixbuf_name: "libfixbuf-{{fixbuf_version}}"

• fixbuf_tgz: "{{fixbuf_name}}.tar.gz"

• fixbuf_url: "http://tools.netsa.cert.org/releases/{{fixbuf_tgz}}"

• fixbuf_timeout: 10 seconds

• fixbuf_checksums: Contains checksums for specific versions:

  • '2.4.0': sha256:bf20f9f7986a525ea6cc648d32f4ba30bfeb2a83f8c830bc39c48dfa7a415175
  • '2.3.0': sha256:ed63314f21a7a6bbf0d08da416403237a867c3f3496d061f10e148e6d8ecea63

• fixbuf_checksum: '{{fixbuf_checksums[fixbuf_version]}}'

These helper variables are used to download the fixbuf release from the netsa tools site:

• silk_ldconfig_template: "silkconf.j2"
• silk_ldconfig_file_path: /etc/ld.so.conf.d/silk.conf

These are used to set up the dynamic loader to look for silk libraries.

The variable files in vars/ include the necessary packages needed for this and other netsa tools roles that depend on it.

Example Playbook

Here's an example playbook:

- hosts: servers
  roles:
     - role: fixbuf
       tags: [ 'fixbuf' ]

License

Copyright 2020 Carnegie Mellon University. No warranty is provided. This material is given "as-is" without any guarantees. Carnegie Mellon University does not provide any kind of warranty regarding the materials, including fitness for any purpose. They also do not guarantee freedom from patent or copyright issues.

This role is released under an MIT (SEI)-style license. For full terms, see license.txt or contact permission@sei.cmu.edu for more information.

This material is approved for public release and unlimited distribution. Check the copyright notice for restrictions on non-US Government use.

CERT® is a registered trademark of Carnegie Mellon University.

This software includes third-party software, each subject to its own license:

1. ansible (Copyright 2019 Red Hat, Inc.) - link
2. molecule (Copyright 2018 Red Hat, Inc.) - link
3. testinfra (Copyright 2020 Philippe Pepiot) - link

Author Information

This role was created in 2019 by Matt Heckathorn.