github-personal/nDPId
1
0
Fork 0
mirror of https://github.com/outbackdingo/nDPId.git synced 2026-01-27 18:19:39 +00:00
Code Issues Packages Projects Releases Wiki Activity
858 Commits 7 Branches 11 Tags
main
Commit Graph

251 Commits

Author SHA1 Message Date
Toni Uhlig
d629fda779 bump libnDPI to 75db1a8a66476b3c16cc1a8bf63ca2b0e2fba3ed 
* incorporate upstream changes:
    - nDPI supports build directories now
    - set memory wrapper
    - classification states
    - process packet signature change

 * disabled fuzz-* test pcaps
    - cause timestamp diff's for some libpcap builds

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-11-18 09:54:15 +01:00
Toni Uhlig
9c0f5141bc Fix "Potentially Dangerous" breed in c-notifyd 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-23 12:05:41 +02:00
Toni Uhlig
22e44c1e0b removed crypto example 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:47 +02:00
Toni Uhlig
b8d3cf9e8f Added send packets with type i.e. keyex / json-data 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:47 +02:00
Toni Uhlig
7ab7bb3772 Added some stats printing to c-decrypt 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:47 +02:00
Toni Uhlig
a47bc9caa3 Modified crypto to support multiple peers (multiple sender / multiple receiver) per ncrypt context 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:47 +02:00
Toni Uhlig
7d94632811 nDPId decryption example 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:46 +02:00
Toni Uhlig
2c81f116bf nDPId decryption example 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:46 +02:00
Toni Uhlig
fea52d98ca Added nDPId decryption example 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 12:33:46 +02:00
Toni Uhlig
2cb0d7941b Improved/Updated Grafana Dashboard 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-15 10:22:17 +02:00
Toni Uhlig
eea5a49638 Fixed some example inconsistencies due to recent libnDPI / nDPId updates 
* removed unused, unmaintained and erroneous py-flow-dashboard
 * adjusted Grafana dashboard flow breeds (flow categories will be done separately)
 * (C) update (a bit late)

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-10 09:54:40 +02:00
Toni Uhlig
19036951c7 bump libnDPI to 1216ec6a2719408a487f696f5b601bdb9eec727d 
* incorporated upstream API changes related to detection protocol bitmasks
 * added missing flow detection categories

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-09-09 12:05:26 +02:00
Toni Uhlig
9809ae4ea0 rs-simple: improved readability and stability 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-05-20 09:55:21 +02:00
Toni Uhlig
97387d0f1c rs-simple: added argh command line parser and "stable" flow table index 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-05-18 14:58:32 +02:00
Toni Uhlig
46ef266139 rs-simple: added DaemonEventStatus deserialization and statistics mgmt 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-05-16 17:48:51 +02:00
Toni Uhlig
f3c8ffe6c1 rs-simple: added first/last seen and timeout in 
* prettify unit's

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-05-15 08:10:14 +02:00
Toni Uhlig
07d6018109 rs-simple: make primitive flow table work 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-05-14 12:36:38 +02:00
Toni Uhlig
dd909adeb8 rs-simple: add flow mgmt w/ TTL hash maps (moka-future) 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-05-03 15:22:57 +02:00
Toni Uhlig
b747255a5d Add simple rust example (WiP) 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-04-30 22:05:52 +02:00
Toni Uhlig
471ea83493 bump libnDPI to e946f49aca13e4447a7d7b2acae6323a4531fb55 
* incorporated upstream changes

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2025-01-25 10:07:25 +01:00
Toni Uhlig
acd9e871b6 Added --no-blink and --hide-risk-info 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-12-09 11:09:34 +01:00
Toni Uhlig
bd269c9ead Added global stats diff test 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-14 14:33:27 +01:00
Toni Uhlig
7e4c69635a Use chmod_chown() API from utils 
* `chmod_chown()` returns EINVAL if path is NULL

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-14 13:47:46 +01:00
Toni Uhlig
9105b393e1 Fixed some SonarCloud issues 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-14 10:21:35 +01:00
Toni Uhlig
9fc35e7a7e Add NUL to risks, not needed but better be safe then sorry 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-05 14:20:30 +01:00
Toni Uhlig
ce9752af16 Fixed some SonarCloud issues 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-05 13:43:23 +01:00
Toni Uhlig
f7933d0fdb Slightly unified C example's logging 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-05 12:48:36 +01:00
Toni Uhlig
ce5f448d3b Switched OpenWrt GitHub Actions SDK to main branch 
* fixed some SonarCloud complaints
 * added more systemd CI tests
 * fixed debian package scripts to obey remove/purge
 * changed `chmod_chown()` error handling

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-02 18:36:54 +01:00
Toni Uhlig
2b48eb0514 Added vlan_id dissection of the most outer (first) 802.1Q header. Fixes #50 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-02 15:48:45 +01:00
Toni Uhlig
25944e2089 Fixed some SonarCloud issues 
* fixed dependabot werkzeug (3.0.3 to 3.0.6)

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-26 11:35:30 +02:00
Toni Uhlig
f9d9849300 Updated Grafana dashboard to make correct use of gauge max values. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-17 12:14:28 +02:00
Toni
efed6f196e Read and parse configuration files. Fixes #41. (#42) 
Read and parse configuration files. Fixes #41.

 * supports nDPId / nDPIsrvd via command line parameter `-f`
 * nDPId: read general/tuning and libnDPI settings
 * support for settings risk domains libnDPI option via config file or via `-R` (Fixes #45, thanks to @UnveilTech)
 * added some documentation in the config file
 * adjusted Systemd and Debian packaging to make use of config files

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-16 14:13:55 +02:00
Naix
3e2ce661f0 Added Filebeat Configuration (#44) 
Added Filebeat Configuration

Co-authored-by: Toni <matzeton@googlemail.com>
 2024-10-06 11:09:54 +02:00
Toni Uhlig
76e1ea0598 Updated Grafana dashboard. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-02 19:29:14 +02:00
Toni Uhlig
0e792ba301 Generate global stats with microseconds precision. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-01 11:58:39 +02:00
Toni Uhlig
a230eaf061 Improved Keras Autoencoder hyper parameter. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-08-16 13:20:35 +02:00
Toni Uhlig
f6f3a4daab Extended analyse application to write global stats to a CSV. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-08-16 12:33:46 +02:00
Toni Uhlig
762e6d36bf Some small fixes. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-08-09 11:09:39 +02:00
Toni Uhlig
165b18c829 Fixed OpenWrt nDPId-testing build. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-06-12 15:07:17 +02:00
dependabot[bot]
1fbfd46fe8 Bump werkzeug from 3.0.1 to 3.0.3 in /examples/py-flow-dashboard (#37) 
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.0.1 to 3.0.3.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](https://github.com/pallets/werkzeug/compare/3.0.1...3.0.3)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2024-05-29 14:03:11 +02:00
Toni Uhlig
5290f76b5f flow-info.py: Set min risk severity required to print a risk. 
* ReadMe update

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-05-08 00:25:31 +02:00
Toni Uhlig
4c91038274 Removed unmaintained C JSON dumper. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-04-17 01:47:31 +02:00
Toni Uhlig
33560d64d2 Fix example build error if memory profiling enabled. 
* CI: build against libnDPI with `-DNDPI_NO_PKGCONFIG=ON` and `-DSTATIC_LIBNDPI_INSTALLDIR=/usr`
 * CI: `ENABLE_DBUS=ON` for most builds

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-03-21 07:26:22 +01:00
Toni Uhlig
717d66b0e7 Fixed missing statistics updating for unknown mapping keys in collectd/influxd. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-02-20 23:16:31 +01:00
Toni Uhlig
8949ba39e6 Added test mode for influx push daemon. 
* required for regression testing
 * added new confidence value (match by custom rule)
 * updated / tweaked grafana exported dashboard

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-02-08 01:01:35 +01:00
Toni Uhlig
feb2583ef6 bump libnDPI to 4543385d107fcc5a7e8632e35d9a60bcc40cb4f4 
* incorporated API changes from nDPI

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-02-06 10:34:52 +01:00
Toni Uhlig
7368f222db Fixed broken "not-detected" event/packet capture in captured example. 
* aligned it with influxd example

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-01-29 18:11:34 +01:00
Toni Uhlig
a007a907da Fixed invalid flow risk aggregation in collectd/influxd examples. 
* CI: build single nDPId executable with `-Wall -Wextra -std=gnu99`
 * fixed missing error events in influxd example
 * added additional test cases for collectd
 * extended grafana dashboard

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-01-06 19:32:47 +01:00
Toni Uhlig
876aef98e1 Improved collectd example. 
* similiar behavior to influxd example
 * gauges and counters are now handled properly

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-01-05 11:26:53 +01:00
Toni Uhlig
88cf57a16f Added Grafana example dashboard image. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2023-12-20 19:19:08 +01:00