Toni Uhlig
102b61175c
All colors are beautiful for py-flow-info.
...
* instance alias is now mandatory (will be required for future use-cases)
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2021-01-26 19:07:16 +01:00
Toni Uhlig
ba179cc724
Increased serialization buffer size as required for recent nDPI builds.
...
* added .gitignore to prevent SCM check-ins of unwanted files
* fixed invalid include path for python examples
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-11-18 18:12:38 +01:00
Toni Uhlig
8cbac2ac88
cosmetics, exception verbosity
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-10-17 12:42:26 +02:00
Toni Uhlig
ec9dc251d2
py-flow-info: Print BasicEvents.
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-10-12 20:02:20 +02:00
Toni Uhlig
9ea078b05e
Improved python event validation with focus on readability.
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-30 20:35:28 +02:00
Toni Uhlig
2f7a052f43
Centralized some python code parts to make future modifications easier.
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-29 18:37:24 +02:00
Toni Uhlig
04bbbcd055
Improved event parsing for Python scripts.
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-26 15:15:15 +02:00
Toni Uhlig
8c61f88362
Added event validation functions and fixed Python scripts.
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-26 11:19:21 +02:00
Toni Uhlig
84712686a7
Centralized EventName validation and moved code parts.
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-26 00:49:34 +02:00
Toni Uhlig
6c0ac8b045
Added new flow event: FLOW_EVENT_DETECTION_UPDATE
...
* This event will be triggered when nDPI detection has some new information for us (hopefully).
* Detection change is based on hashing with 32-bit murmur3 certain members of the ndpi flow struct.
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-25 20:43:23 +02:00
Toni Uhlig
370ca7c00d
Process extra packets with nDPI, still not perfect but results in a more accurate detection.
...
* set default user used for setuid()
* added 2 TODOs
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-09-24 23:41:12 +02:00
Toni Uhlig
e6c2bc6373
merged code to reduce code duplicates
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-08-18 16:48:01 +02:00
Toni Uhlig
68fb4030ee
flow-info.py, flow-undetected-to-pcap.py: throw socket error runtime exception if disconnect received
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-08-13 10:55:04 +02:00
Toni Uhlig
67407a8a39
flow-info.py: fixed buffering issue
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-08-08 19:41:44 +02:00
Toni Uhlig
9ae4aa7ce9
flow-info.py overhaul, terminal color support, ndpi protocol/category/flow-risk output
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-08-07 15:21:24 +02:00
Toni Uhlig
0c2b2a9750
added python flow info script, improved IPv4/IPv6 string conversion
...
Signed-off-by: Toni Uhlig <matzeton@googlemail.com >
2020-08-06 16:48:45 +02:00
