Commit message (Collapse) | Author | Age | |
---|---|---|---|
* | minor improvments regarding flow guessing on flow end/idle and other not ↵ | Toni Uhlig | 2020-08-16 |
| | | | | | | worth to mention Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | error handling enhancements | Toni Uhlig | 2020-08-15 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | several fixes and improvments | Toni Uhlig | 2020-08-14 |
| | | | | | | | | - set errno to 0 if it is checked right after a libc call - ignore SIGPIPE as we want to avoid signal handling where possible - fixed another issue in nDPIsrvd/c-json-stdout which caused buffering errors Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | nDPId: removed unused code, process remaining flows on shutdown (useful for ↵ | Toni Uhlig | 2020-08-14 |
| | | | | | | replaying pcap files) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | set detection_completed = 1 if guessed/not-detected event thrown | Toni Uhlig | 2020-08-13 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | improved TCP-FIN/TCP-RST and TCP-keepalive/-idle timeout handling | Toni Uhlig | 2020-08-13 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | replaced deprecated pcap_lookupdev with pcap_findalldevs | Toni Uhlig | 2020-08-12 |
| | |||
* | moved PACKET_EVENT_PAYLOAD_FLOW after FLOW_EVENT_NEW (and before ↵ | Toni Uhlig | 2020-08-09 |
| | | | | | | FLOW_EVENT_END/IDLE) Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | event consistency: call ndpi_dpi2json only for GUESSED, DETECTED, ↵ | Toni Uhlig | 2020-08-08 |
| | | | | | | | | NOT-DETECTED flow events - force generation of GUESSED, NOT-DETECTED events on flow idle/end if detection finished Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | nDPId: do not serialize flow riskm twice | Toni Uhlig | 2020-08-07 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | added python flow info script, improved IPv4/IPv6 string conversion | Toni Uhlig | 2020-08-06 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | added utils module to share some code parts with other apps | Toni Uhlig | 2020-08-05 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | nDPId daemonize / pidfile support + improved syslog logging | Toni Uhlig | 2020-08-05 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | introduced NETWORK_BUFFER_MAX_SIZE to replace BUFSIZ as this might change ↵ | Toni Uhlig | 2020-08-04 |
| | | | | | | depending on the arch/libc used Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | print snprintf retval and buffer size if buffer preparation failed | Toni Uhlig | 2020-08-04 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | clang-format | Toni Uhlig | 2020-08-04 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | moved more default config options into config.h | Toni Uhlig | 2020-08-04 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | merged some pre-processor macros which are used in multiple executables | Toni Uhlig | 2020-08-04 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | prefix every generated json string with the length of itself in bytes | Toni Uhlig | 2020-08-03 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | added %zu format string, so CC won't complain if size types used | Toni Uhlig | 2020-07-16 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | serialize flow risk, send information about how much raw pkts are sent to ↵ | Toni Uhlig | 2020-07-15 |
| | | | | | | the json endpoint, send also a json thread init complete event Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | added packet based events | Toni Uhlig | 2020-07-14 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | shutdown socket reading end as we just want to send json strings and never ↵ | Toni Uhlig | 2020-07-13 |
| | | | | | | read something Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | replaced fprintf with syslog calls | Toni Uhlig | 2020-07-11 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | removed obsolete DISABLE_JSONIZER mode | Toni Uhlig | 2020-07-11 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | removed obsolete EXTRA_VERBOSE mode | Toni Uhlig | 2020-07-11 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | use a string mapping table for event id to name conversion | Toni Uhlig | 2020-07-11 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | more write after read race conditions fixed | Toni Uhlig | 2020-07-10 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | fixed some race conditions | Toni Uhlig | 2020-07-10 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | compare&fetch for global flow_id counter, set missing variable on new flow, ↵ | Toni Uhlig | 2020-07-10 |
| | | | | | | added struct padding for alignment Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | care more about DISABLE_JSONIZER | Toni Uhlig | 2020-07-10 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | clang-format and set BreakBeforeBraces to Allmanz | Toni Uhlig | 2020-07-10 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | json formatting/ stringification overhaul | Toni Uhlig | 2020-07-10 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | send json string to sink, added basic json event serialization fn call | Toni Uhlig | 2020-07-09 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | renamed: jsonize_basic_event_error -> jsonize_format_error | Toni Uhlig | 2020-07-08 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | jsonize_basic_event // jsonize_basic_event_error | Toni Uhlig | 2020-07-07 |
| | | | | Signed-off-by: Toni Uhlig <matzeton@googlemail.com> | ||
* | send JSON string on a per thread basis to a remote sink, means that no ↵ | Toni Uhlig | 2020-07-05 |
expensive locking required Signed-off-by: Toni Uhlig <matzeton@googlemail.com> |