d4633c1192
* The goal was to provide a separate event for extracted feature that are not required and only useful for a few (e.g. someone who wants do ML). * Increased network buffer size to 32kB (8192 * 4). * Switched timestamp precision from ms to us for *ALL* timestamps. Signed-off-by: Toni Uhlig <matzeton@googlemail.com> |
||
|---|---|---|
| .. | ||
| c-captured | ||
| c-collectd | ||
| c-json-stdout | ||
| c-simple | ||
| js-rt-analyzer@e0402c64c8 | ||
| py-flow-dashboard | ||
| py-flow-info | ||
| py-flow-muliprocess | ||
| py-ja3-checker | ||
| py-json-stdout | ||
| py-schema-validation | ||
| py-semantic-validation | ||
| ndpid_install_and_run.gif | ||
| README.md | ||
examples
Some ready-2-use/ready-2-extend examples/utils. All examples are prefixed with their used LANG.
c-captured
A capture daemon suitable for low-resource devices.
It saves flows that were guessed/undetected/risky/midstream to a PCAP file for manual analysis.
Basicially a combination of py-flow-undetected-to-pcap and py-risky-flow-to-pcap.
c-collectd
A collecd-exec compatible middleware that gathers statistic values from nDPId.
c-json-stdout
Tiny nDPId json dumper. Does not provide any useful funcationality besides dumping parsed JSON objects.
c-simple
Very tiny integration example.
go-dashboard (DISCONTINUED!)
A discontinued tty UI nDPId dashboard.
Removed with commit 29c72fb30b.
js-rt-analyzer
py-flow-info
Prints prettyfied information about flow events.
py-flow-dashboard
A realtime web based graph using Plotly/Dash. Probably the most informative example.
py-flow-multiprocess
Simple Python Multiprocess example spawning two worker processes, one connecting to nDPIsrvd and one printing flow id's to STDOUT.
py-flow-undetected-to-pcap
Captures and saves undetected flows to a PCAP file.
py-json-stdout
Dump received and parsed JSON strings.
py-risky-flow-to-pcap
Captures and saves risky flows to a PCAP file.
py-schema-validation
Validate nDPId JSON strings against pre-defined JSON schema's.
See schema/.
Required by tests/run_tests.sh
py-semantic-validation
Validate nDPId JSON strings against internal event semantics.
Required by tests/run_tests.sh
py-ja3-checker
Captures JA3 hashes from nDPIsrvd and checks them against known hashes from ja3er.com.