Relevant telegraf documentation: https://github.com/influxdata/telegraf/blob/release-1.31/plugins/outputs/loki/README.md

It will be easy to add; you need to generate a new CLI like with "prometheus-client" for example https://github.com/vyos/vyos-1x/blob/03d8c16a12d182a2fb2ab9f7acec5d8cb83937ba/interface-definitions/service_monitoring_telegraf.xml.in#L188-L250
And add template changes https://github.com/vyos/vyos-1x/blob/03d8c16a12d182a2fb2ab9f7acec5d8cb83937ba/data/templates/telegraf/telegraf.j2#L45-L58

https://github.com/vyos/vyos-1x/pull/3610

The suggested change as in matching number of "x" with number of characters in each octet/hextet in the IPv4/IPv6 address will be less anonymizing than todays method.

Draft PR Added: https://github.com/vyos/vyos-1x/pull/3599

Added PR: https://github.com/vyos/vyos-1x/pull/3591

In T6439#190868, @Viacheslav wrote:

Should be fixed in T6373

Should be fixed in T6373

https://github.com/vyos/vyos-build/pull/624

It is not backported to 1.4
So for 1.3, it won't be backported

Is there any way to get this ported to 1.3?

https://github.com/vyos/vyos-1x/pull/3263

Handling of the above migration scripts are all correct and this is a false assumption.

PR for Sagitta: https://github.com/vyos/vyos-1x/pull/3239

Personally I dont think its a good idea to be able to use VyOS as a jumphost towards victims of scanning.

ok, i'll change a port list and nmap scenario

I'm not sure that a list of ports will be helpful in this way.
From time to time, we need to scan specific ports.
What about

force scan-port-host <x.x.x.x> proto <tcp|udp> port '8080-8081,9200'
force port--discovery-host <x.x.x.x> proto <tcp|udp> port '8080'
force port-scan host <x.x.x.x> proto <tcp|udp> port '8080'

And use native nmap binaries (as python3 nmap module is not installed by default)
Also, it has XML format if you want a custom table:

sudo nmap -oX - 127.0.0.1

I think the wrapping should be left for the output to select since you can either be in a regular serialconsole of 80x25 or some highresmode which brings more characters per line or even through SSH with a 4k monitor which will be plenty of lines.

Since descriptions can be very long I assume there will be a linewrap at the end?

Since descriptions can be very long I assume there will be a linewrap at the end?

Added PR:
https://github.com/vyos/vyos-1x/pull/3219

@sever what do you think about it?

PR for current: https://github.com/vyos/vyos-1x/pull/3188