scottk/nDPId
1
0
Fork 0
mirror of https://github.com/optim-enterprises-bv/nDPId.git synced 2025-10-29 09:22:23 +00:00
Code Issues Packages Projects Releases Wiki Activity
783 Commits 1 Branch 0 Tags
f7933d0fdbb47035c27316bd17d3d746af546ac7
Commit Graph

20 Commits

Author SHA1 Message Date
Toni Uhlig
f7933d0fdb Slightly unified C example's logging 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-11-05 12:48:36 +01:00
Toni Uhlig
25944e2089 Fixed some SonarCloud issues 
* fixed dependabot werkzeug (3.0.3 to 3.0.6)

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-26 11:35:30 +02:00
Toni
efed6f196e Read and parse configuration files. Fixes #41. (#42) 
Read and parse configuration files. Fixes #41.

 * supports nDPId / nDPIsrvd via command line parameter `-f`
 * nDPId: read general/tuning and libnDPI settings
 * support for settings risk domains libnDPI option via config file or via `-R` (Fixes #45, thanks to @UnveilTech)
 * added some documentation in the config file
 * adjusted Systemd and Debian packaging to make use of config files

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-16 14:13:55 +02:00
Toni Uhlig
0e792ba301 Generate global stats with microseconds precision. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-10-01 11:58:39 +02:00
Toni Uhlig
f6f3a4daab Extended analyse application to write global stats to a CSV. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2024-08-16 12:33:46 +02:00
Toni Uhlig
f5c5bc88a7 Replaced ambiguous naming of "JSON string" to more accurate "JSON message". #2 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2023-12-04 13:13:05 +01:00
Toni Uhlig
44adfc0b7d Sonarcloud integration 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2023-10-05 17:37:42 +02:00
Toni Uhlig
b01498f011 Fix some GCC-12 warnings. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2023-08-27 12:49:39 +02:00
Toni Uhlig
4236aafa0d py-machine-learning: Print CSV line numbers for invalid lines (SKLearn Random Forest Classificator). 
* c-analysed: fix wrong length check

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2023-01-30 22:36:17 +01:00
Toni Uhlig
23816f1403 Revert "Revert "Minor fixes."" 
This reverts commit 42aad33ec8.
 2023-01-27 12:48:20 +01:00
Toni Uhlig
42aad33ec8 Revert "Minor fixes." 
This reverts commit 58439a6761.
 2023-01-27 02:02:16 +01:00
Toni Uhlig
58439a6761 Minor fixes. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2023-01-27 01:39:03 +01:00
Toni Uhlig
57c5d8532b Test for diff's in flow-analyse CSV generator daemon. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-11-16 23:06:37 +01:00
Toni Uhlig
e629dd59cd nDPIsrvd.h: Provide two additional convenient API functions. 
* nDPIsrvd_json_buffer_string
 * nDPIsrvd_json_buffer_length

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-11-06 13:19:29 +01:00
Toni Uhlig
25f4ef74ac Improved examples. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-11-02 00:01:57 +01:00
Toni Uhlig
4654faf381 Improved py-machine-learning example. 
* c-analysed: fixed quoting bug
 * nDPId: fixed invalid iat storing/serialisation
 * nDPId: free data analysis after event was sent

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
Signed-off-by: lns <matzeton@googlemail.com>
 2022-10-09 18:31:45 +02:00
Toni Uhlig
b7a17d62c7 Improved OpenWrt UCI/Initscript 
* c-analysed: chuser()/chgroup()

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-10-06 06:54:01 +02:00
Toni Uhlig
b6060b897e c-analysed: improved feature extraction from "analyse" events 
* c-captured: update detected risks on "detection-update" events
 * c-collectd: added missing flow breed
 * c-collectd: PUTVAL macros are more flexible now

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-10-01 18:01:56 +02:00
Toni Uhlig
14f6b87551 Added nDPIsrvd-analysed to generate CSV files from analyse events. 
* nDPIsrvd.h: iterate over JSON arrays
 * nDPId: calculate l3 payload packet entropies for analysis

Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-09-30 19:28:49 +02:00
Toni Uhlig
74f71643da nDPId-test: Force collector blocking mode. 
Signed-off-by: Toni Uhlig <matzeton@googlemail.com>
 2022-09-25 16:24:05 +02:00