Toni Uhlig
59caa5231e
Dockerfile: build for ArchLinux as well
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-24 09:39:51 +02:00
Toni Uhlig
9c0f5141bc
Fix "Potentially Dangerous" breed in c-notifyd
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-23 12:05:41 +02:00
Toni Uhlig
e8ef267e0a
bump libnDPI to 560a4e4954e2db38d995d3cba2c1dcc4276f92d5
...
* fix some SonarCloud issues
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-17 10:37:51 +02:00
Toni Uhlig
2651833c58
CMake/CI: more robust against deprecations
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-16 11:19:02 +02:00
Toni Uhlig
bd7df393fe
CI: ENABLE_CRYPTO for some builds
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-16 10:34:46 +02:00
Toni Uhlig
88cfecdf95
Remove CMake limitation
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 16:34:19 +02:00
Toni Uhlig
a91aab493c
fixed spelling issue
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 15:09:18 +02:00
Toni Uhlig
fe42e998d0
fixed SonarCloud issues
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
22e44c1e0b
removed crypto example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
d8cad33a70
restored nio code
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
37989db0bb
make TLS handshakes great again
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
19f80ba163
Added TLS ncrypt I/O
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
c8c58e0b16
nDPId crypto handshake done
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
6d3dc99fad
Switch to OpenSSL for all crypto stuff
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
b8d3cf9e8f
Added send packets with type i.e. keyex / json-data
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
510b03cbcd
Added preps for different packet types + AAD (type+size)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
66aca303b6
Added HKDF to uniform distirbute a X25519 shared key
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
0e7e5216d8
Added preps for AAD/KeyEx
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
7ab7bb3772
Added some stats printing to c-decrypt
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
a47bc9caa3
Modified crypto to support multiple peers (multiple sender / multiple receiver) per ncrypt context
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:47 +02:00
Toni Uhlig
7d94632811
nDPId decryption example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
2c81f116bf
nDPId decryption example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
49b058d2d3
Updated OpenWrt In-Source build patch
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
fea52d98ca
Added nDPId decryption example
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
02b686241e
initial nDPId UDP crypto [WiP!]
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 12:33:46 +02:00
Toni Uhlig
2cb0d7941b
Improved/Updated Grafana Dashboard
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 10:22:17 +02:00
Toni Uhlig
97e60ad7ec
Add security vuln reporting guide
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-15 08:07:48 +02:00
Toni Uhlig
eea5a49638
Fixed some example inconsistencies due to recent libnDPI / nDPId updates
...
* removed unused, unmaintained and erroneous py-flow-dashboard
* adjusted Grafana dashboard flow breeds (flow categories will be done separately)
* (C) update (a bit late)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-10 09:54:40 +02:00
Toni Uhlig
a9934e9c9e
Removed nDPI/nDPId version/api serialization for nDPId-test to reduce result diff's
...
* fixed some SonarCloud complains
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:52:58 +02:00
Toni Uhlig
644fa2dfb3
bump libnDPI to 1c1894720e3827857cfe1afd19bb7fb4618ee594
...
* fixes a build error with clang on ubuntu due to missing `static inline`s in header files
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
1a6b1feda9
Print NDPI_(C|LD)FLAGS
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
648dedc7ba
bump libnDPI to 70536876f2f97b977ed43474872195bf756de67d
...
* fixes upstream compilation warning due to string truncation
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
19036951c7
bump libnDPI to 1216ec6a2719408a487f696f5b601bdb9eec727d
...
* incorporated upstream API changes related to detection protocol bitmasks
* added missing flow detection categories
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-09-09 12:05:26 +02:00
Toni Uhlig
4e7e361d84
bump libnDPI to f8869cd670adc439cc41bde0bd04960e1befafc5
...
* fix API issue due to changed name of a public struct
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-20 11:05:53 +02:00
Toni Uhlig
9809ae4ea0
rs-simple: improved readability and stability
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-20 09:55:21 +02:00
Toni Uhlig
97387d0f1c
rs-simple: added argh command line parser and "stable" flow table index
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-18 14:58:32 +02:00
Toni Uhlig
46ef266139
rs-simple: added DaemonEventStatus deserialization and statistics mgmt
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-16 17:48:51 +02:00
Toni Uhlig
ae6864d4e4
CI: build Rust examples
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-15 09:23:35 +02:00
Toni Uhlig
f3c8ffe6c1
rs-simple: added first/last seen and timeout in
...
* prettify unit's
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-15 08:10:14 +02:00
Toni Uhlig
07d6018109
rs-simple: make primitive flow table work
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-14 12:36:38 +02:00
Toni Uhlig
dd909adeb8
rs-simple: add flow mgmt w/ TTL hash maps (moka-future)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-05-03 15:22:57 +02:00
Toni Uhlig
8848420a72
CI: use FreeBSD vmactions main branch
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-30 23:00:53 +02:00
Toni Uhlig
f8181d7f6a
Fix CI build with PF_RING (build userspace lib only)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-30 22:33:51 +02:00
Toni Uhlig
b747255a5d
Add simple rust example (WiP)
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-30 22:05:52 +02:00
Toni Uhlig
a52a37ef78
Fix CI
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-04-17 11:00:27 +02:00
Toni Uhlig
ae95c95617
bump libnDPI to c49d126d3642d5b1f5168d049e3ebf0ee3451edc
...
* fix API issue with a changed function signature
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-03-06 19:00:23 +01:00
Toni
42c54d3755
Initial tunnel decoding (GRE - Layer4 only atm) ( #55 )
...
Initial tunnel decoding (GRE - Layer4 only atm). Fixes #53
* make finally use of the thread distribution seed
* Handle GRE/PPP subprotocol the right way
* Add `-t` command line / config option
* Removed duplicated and obsolete IP{4,6}_SIZE_SMALLER_THAN_HEADER which is the same as IP{4,6}_PACKET_TOO_SHORT
* Updated error event schema
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-02-25 15:17:16 +01:00
Toni Uhlig
bb870cb98f
Add FreeBSD CI build
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-02-01 10:54:27 +01:00
Alex Eganov
e262227d65
Fix missing header file for build on freebsd (macos) ( #60 )
2025-01-31 23:02:13 +01:00
Toni Uhlig
899e5a80d6
CI: Fixed config tests
...
* set max dots per line to improve CI output
* commented `flow_risk.crawler_bot.list.load` out
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2025-01-26 09:58:22 +01:00