vrr/nDPI
2
0
Fork 0
mirror of https://github.com/vel21ripn/nDPI.git synced 2026-05-02 00:40:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 5
nDPI/example
History
Luca Deri 98a548c642 Improved DGA detection
2022-03-31 11:29:30 +02:00
..
MacOS Fix the Xcode project 2019-05-15 09:56:10 +08:00
categories.txt Add categories test PCAP 2019-09-27 10:15:20 +02:00
ja3_fingerprints.csv Added NDPI_MALICIOUS_JA3 flow risk 2021-02-22 23:19:23 +01:00
Makefile.dpdk.in Improved libm check via Autoconf. (#1263) 2021-07-28 22:24:03 +02:00
Makefile.in build: respect environment options more (#1392) 2022-01-18 14:30:14 +01:00
mining_hosts.txt Implemented custom category loading. 2018-04-26 21:10:59 +02:00
ndpi2timeline.py Implemented nDPI timeline visualizer 2019-12-15 23:35:43 +01:00
ndpiReader.c Improved DGA detection 2022-03-31 11:29:30 +02:00
ndpiSimpleIntegration.c Increment current/total number of active flows on successful flow insertion (#1434) 2022-02-09 11:43:10 +01:00
protos.txt Adds some risk exceptions for popular services and domain names 2022-01-17 09:00:25 +01:00
reader_util.c reader_util: add support for userAgent in SSDP (#1502) 2022-03-28 04:25:34 +02:00
reader_util.h fuzz: purge old sessions (#1451) 2022-02-21 20:32:50 +01:00
README.DPDK Added DPDK support to ndpiReader 2018-11-10 16:10:22 +01:00
risky_domains.txt Added risky domain flow-risk support 2021-02-21 21:45:46 +01:00
sha1_fingerprints.csv Added NDPI_MALICIOUS_SHA1 flow risk. (#1142) 2021-02-26 17:00:05 +01:00

README.DPDK 

Prerequisites
-------------

You need to install and compile DPDK in your HOME directory as explained in
See http://core.dpdk.org/doc/quick-start/ for DPDK installation and setup

Once DPDK is built make sure to create a symbolic link

$ cd
$ ln -s dpdk-18.08 DPDK

so the build process will use the DPDK directory letting you have multiple
DPDK versions available on your system


Build
-----
Everything will happen automagically but if you want to do it by hand
do: make -f Makefile.dpdk


Run Application
---------------
Supposing to capture packets from device eno1 you can start the
application as follows:

sudo ./build/ndpiReader -c 1 --vdev=net_pcap0,iface=eno1 -- -v 1

NOTE:
- ndpiReader without DPDK support sits in this directory
- ndpiReader with DPDK support can be found inside the ./build directory