diff options
author | Toni Uhlig <matzeton@googlemail.com> | 2024-10-08 13:51:59 +0200 |
---|---|---|
committer | Toni Uhlig <matzeton@googlemail.com> | 2024-10-16 13:03:41 +0200 |
commit | d70d3cff8f0295b93c2035114aef2fa705177748 (patch) | |
tree | 7503c4206052c4b721773d2e2786faf5e3f6ffd0 /ndpid.conf.example | |
parent | 4d9e11a66c37d1c0b7f52c17061a2f04c3c2348d (diff) |
Fixed missing `set_config_from()`.
* added additional missing config options
* added some documentation in the config file
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Diffstat (limited to 'ndpid.conf.example')
-rw-r--r-- | ndpid.conf.example | 35 |
1 files changed, 31 insertions, 4 deletions
diff --git a/ndpid.conf.example b/ndpid.conf.example index 8cb4cd4ac..0d980d4b7 100644 --- a/ndpid.conf.example +++ b/ndpid.conf.example @@ -1,6 +1,12 @@ [general] +# Set the network interface from which packets are captured and processed. +# Leave it empty to let nDPId choose the default network interface. #netif = eth0 + +# Set a Berkeley Packet Filter. +# This will work for libpcap as well as with PF_RING. #bpf = udp or tcp + pidfile = /tmp/ndpid.pid user = nobody #group = nogroup @@ -8,12 +14,33 @@ user = nobody #categories = /path/to/libnDPI/example/categories.txt #ja3 = /path/to/libnDPI/example/ja3_fingerprints.csv #sha1 = /path/to/libnDPI/example/sha1_fingerprints.csv -# Collector endpoint as UNIX socket -#collector = /tmp/ndpid-collector.sock -# Collector endpoint as UDP socket -collector = 127.0.0.1:7777 + +# Collector endpoint as UNIX socket (usually nDPIsrvd) +collector = /var/run/ndpisrvd-collector +# Collector endpoint as UDP socket (usually a custom application) +#collector = 127.0.0.1:7777 + +# Set a name for this nDPId instance #alias = myhostname +# Process only internal initial connections +#internal = true + +# Process only external initial connections +#external = true + +# Enable zLib compression of flow memory for long lasting flows +compression = true + +# Enable "analyse" events, which can be used for machine learning +analysis = true + +# Force poll() on systems that support epoll() as well +#poll = false + +# Enable PF_RING packet capture instead of libpcap +#pfring = false + [tuning] max-flows-per-thread = 2048 max-idle-flows-per-thread = 64 |