aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
* removed obsolete EXTRA_VERBOSE modeToni Uhlig2020-07-11
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* -fsanitize=enumToni Uhlig2020-07-11
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* use a string mapping table for event id to name conversionToni Uhlig2020-07-11
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* more write after read race conditions fixedToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* do not omit frame pointer in debug modeToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* enable thread snitizerToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* fixed some race conditionsToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* support json key w/o value filteringToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* compare&fetch for global flow_id counter, set missing variable on new flow, ↵Toni Uhlig2020-07-10
| | | | | | added struct padding for alignment Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* support for filter for specific json key/values, useful for debuggingToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* care more about DISABLE_JSONIZERToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* clang-format and set BreakBeforeBraces to AllmanzToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* json formatting/ stringification overhaulToni Uhlig2020-07-10
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* renamed EchoServer to JsonCollectorToni Uhlig2020-07-09
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* send json string to sink, added basic json event serialization fn callToni Uhlig2020-07-09
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* Revert "not using python script as collector"Toni Uhlig2020-07-08
| | | | | | This reverts commit f700457d9b3debc738559e5b656eb8c9b9b4cb33. Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* renamed: jsonize_basic_event_error -> jsonize_format_errorToni Uhlig2020-07-08
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* jsonize_basic_event // jsonize_basic_event_errorToni Uhlig2020-07-07
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* not using python script as collectorToni Uhlig2020-07-07
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* send JSON string on a per thread basis to a remote sink, means that no ↵Toni Uhlig2020-07-05
| | | | | | expensive locking required Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* UNIX socket connect, primitive cmdline parsingToni Uhlig2020-07-04
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* clang-format, use syslogToni Uhlig2020-07-03
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* store / calculate / jsonize per flow metrics e.g. min/max/avg l4 data lenToni Uhlig2020-07-03
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* print json string for FLOW_END / FLOW_IDLE as wellToni Uhlig2020-07-01
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* only printf() flow events #ifdef DISABLE_JSONIZER, print only json string ↵Toni Uhlig2020-07-01
| | | | | | otherwise Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* add configuration variable VERBOSE / EXTRA VERBOSE, print build ↵Toni Uhlig2020-06-30
| | | | | | configuration in Makefile Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* print event for idle flows as well, simplified jsonize_flow/flow2jsonToni Uhlig2020-06-30
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* init/close syslog loggingToni Uhlig2020-06-30
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* do not guess protocol if detection successful and completedToni Uhlig2020-06-30
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* json-serialize new flowToni Uhlig2020-06-30
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* generalized flow2json (IPv4 only for now)Toni Uhlig2020-06-30
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* serialize and print new flowToni Uhlig2020-06-28
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* unified logging prefixToni Uhlig2020-06-24
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* -Wl == CFLAGToni Uhlig2020-06-23
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* adding some comments, obey coding style, etcToni Uhlig2020-06-22
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* xcompile readyToni Uhlig2020-06-22
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* checking only IPv4/IPv6 header size, as rest is done through ↵Toni Uhlig2020-06-21
| | | | | | ndpi_detection_get_l4() Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* fixed possible crash (extra packet dissection is done via packet processing)Toni Uhlig2020-06-21
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* using ndpi_detection_get_l4 to do some additional checks and get L4 payloadToni Uhlig2020-06-20
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* more fine-tuning regarding TCP flow endToni Uhlig2020-06-20
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* some fine-tuning regarding flow fin/idle cleanup, still not perfectToni Uhlig2020-06-20
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* reduced MAX_FLOW_ROOTS_PER_THREAD to 2048 to safe some mem, print something ↵Toni Uhlig2020-06-19
| | | | | | to stderr if flow can't be classified at all (besides L3/L4) Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* improved console printing which is now more consistent any easier to readToni Uhlig2020-06-17
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* support for TCP-FINToni Uhlig2020-06-15
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* new features: l7/l7-dissect/l7-guess/tcp-midstream/ssl/tls detectionToni Uhlig2020-06-15
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* process extra packets if supported by protocol detection, prepare and print ↵Toni Uhlig2020-06-14
| | | | | | some statistics Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* do not print ThreadID during flow free'ingToni Uhlig2020-06-13
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* use ndpi_flowv(4|6)_flow_hash api call and only as fallback src + dstToni Uhlig2020-06-13
| | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* print total packets captured, reduced console spam and added VERBOSE mode to ↵Toni Uhlig2020-06-13
| | | | | | print some l3/l4 metadata, used ull instead of size_t as its size is architecture dependant Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
* read captured packets from a pcap savefile, check if file is EoF or an error ↵Toni Uhlig2020-06-13
| | | | | | occurred Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Powered by cgit, Themed by Ted Yin.