| Commit message (Collapse) | Author | Age |
... | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed "unused function" warning in `roaring.h`
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed "unused function" warning in `gcrypt_light.c`
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* incorporated API changes from 41eef9246c6a3055e3876e3dd7aeaadecb4b76c0
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* CI: build against libnDPI with `-DNDPI_NO_PKGCONFIG=ON` and `-DSTATIC_LIBNDPI_INSTALLDIR=/usr`
* CI: `ENABLE_DBUS=ON` for most builds
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* CI: build against libpcre2 / libmaxminddb
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
build `nDPId`.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Runner.
* removed arch condition (c&p mistake)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
Runner.
* See: https://github.com/actions/runner-images/issues/9491
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* required for regression testing
* added new confidence value (match by custom rule)
* updated / tweaked grafana exported dashboard
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
`/proc/net/if_inet6`.
* fixes a compatibility issue with Mac OSX
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* set min required nDPI version to 4.9.0
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* incorporated API changes from nDPI
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* aligned it with influxd example
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* CI: build single nDPId executable with `-Wall -Wextra -std=gnu99`
* fixed missing error events in influxd example
* added additional test cases for collectd
* extended grafana dashboard
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* similiar behavior to influxd example
* gauges and counters are now handled properly
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* added proper gauge handling that enables pushing data w/o missing out
anything e.g. short flows with a lifetime in-between two InfluxDB intervals
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* a "detection-update" event was thrown even if nothing changed
* in some cases "not-detected" events were spammed if detection not completed
* tell `libnDPI` how many packets per flow we want to dissect
* `nDPId-test` validates total active flows in the right way
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed severity parsing and gauge handling
* added flow state gauges
* flow related gauges are only increased/decreased if a "new" event was seen (except for bytes xfer)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed missing flow active gauge
* fixed invalid flow risk severity gauges
* fixed missing flow risk gauges
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* CI: ArchLinux build should now instrument `-Werror`
* CI: Increased OpenWrt build verbosity
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
L4 payload seen so far.
* added JsonDecodeError to provide more information if builtin JSON decoder fails
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | | |
Sp/gr.
Co-authored-by: Toni <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* 1.6-release
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed two other "bugs"
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
'22.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* cfg file path defaults to PREFIX/etc/default/ndpid
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* fixed/improved c-captured logging
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* Some logging related modifications were required to achieve this.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* fix ndpi data anylsis struct min/max issue
* py-flow-info cosmetics in printing some information
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
after the first packet. Nonsense.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | | |
* caused by recently added serializing some nDPI data even packet processing is still ongoing
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | |
| | |
| | |
| | | |
* Fixed risk hash value calculation, which was only done lower 32 bits.
* Reduced default reader threads count to two if cross compiling.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|
| | |
| | |
| | |
| | | |
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
|