| Commit message (Collapse) | Author | Age |
... | |
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* added proper gauge handling that enables pushing data w/o missing out
anything e.g. short flows with a lifetime in-between two InfluxDB intervals
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* a "detection-update" event was thrown even if nothing changed
* in some cases "not-detected" events were spammed if detection not completed
* tell `libnDPI` how many packets per flow we want to dissect
* `nDPId-test` validates total active flows in the right way
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed severity parsing and gauge handling
* added flow state gauges
* flow related gauges are only increased/decreased if a "new" event was seen (except for bytes xfer)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed missing flow active gauge
* fixed invalid flow risk severity gauges
* fixed missing flow risk gauges
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* CI: ArchLinux build should now instrument `-Werror`
* CI: Increased OpenWrt build verbosity
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
L4 payload seen so far.
* added JsonDecodeError to provide more information if builtin JSON decoder fails
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | | |
Sp/gr.
Co-authored-by: Toni <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* 1.6-release
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed two other "bugs"
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
'22.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* cfg file path defaults to PREFIX/etc/default/ndpid
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed/improved c-captured logging
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* Some logging related modifications were required to achieve this.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fix ndpi data anylsis struct min/max issue
* py-flow-info cosmetics in printing some information
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
after the first packet. Nonsense.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* caused by recently added serializing some nDPI data even packet processing is still ongoing
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Fixed risk hash value calculation, which was only done lower 32 bits.
* Reduced default reader threads count to two if cross compiling.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Add MacOS to Github CI builds.
* Fixed libnDPI-4.8 CI build.
* Fixed missing include for `struct sockaddr*`.
* Reworked IPv4 address and netmask retrieval.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Finalize Event I/O abstraction layer.
* Fix possible fd leakage, Gitlab-CI build and error logging.
* Fixed possible uninitialized signalfd variable.
* Fixed possible memory leak.
* Fixed some SonarCloud complaints.
* Fixed nDPId-test nDPIsrvd-arpa-mockup stuck indefinitely.
* Add nDPId / nDPIsrvd command line option to use poll() on Linux instead of the default epoll().
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* nDPIsrvd.h: support for closing/resetting a nDPIsrvd_socket (required for a reconnect)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* see #29
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* use `ss` to make sure that the socket is not available anymore after every single test
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
write buffer not.
* may cause nDPIsrvd to hang indefinitly if no more data received from a collector
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed missing log level for non-error message, causes systemd to send broadcast messages
* completly removed logging to stderr while started via systemd
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* ToDo: Fix and Re-Enable?
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* forcibly disable epoll even if available
* nDPId-test event I/O selftest
* CI event I/O tests
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* systemd: add post stop hook to forcefully remove the collector unix socket
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|