Alfredo Cardigliano
|
19310ffd06
|
Initial cleanup of useless consts towards migration to modern C++ (#6271)
|
2022-02-03 15:57:34 +01:00 |
|
Alfredo Cardigliano
|
f2060f2488
|
Copyright update (C)
|
2022-01-03 09:35:09 +01:00 |
|
Simone Mainardi
|
c105ade0c9
|
Implements ability to display all IE descriptions from nProbe
Addresses #6028
|
2021-11-09 13:58:48 +01:00 |
|
Luca Deri
|
e8a6c2387c
|
Added listening ports parsing
|
2021-10-26 00:32:09 +02:00 |
|
Luca Deri
|
e55f88faa2
|
ZMQ timeout optimizazion
|
2021-07-09 16:36:46 +02:00 |
|
Simone Mainardi
|
65769a7f42
|
Parses sflow samples via ZMQ, determines interfs. w/ sampled traff.
|
2021-07-09 15:57:26 +02:00 |
|
Luca Deri
|
e73adec924
|
Removed race conditions on the ZMQParserInterface
|
2021-07-07 08:54:13 +02:00 |
|
Luca Deri
|
4c27f6f98c
|
Implemented handlig of hello message from nprobe
|
2021-05-28 19:34:11 +02:00 |
|
Luca Deri
|
a1178a0791
|
Updated (C)
|
2021-01-02 12:08:23 +01:00 |
|
Alfredo Cardigliano
|
eaa98e6002
|
Show counters for unhandled flows
|
2020-09-16 18:52:19 +02:00 |
|
Luca Deri
|
192a1cf942
|
Fixed logic of flow purging with ZMQ interfaces
|
2020-08-07 23:31:43 +02:00 |
|
Alfredo Cardigliano
|
6e1e21f7ba
|
Fix interface type detection with sub interfaces
|
2020-07-20 12:20:13 +02:00 |
|
Alfredo Cardigliano
|
21462270e2
|
Fix use after free in zmq_remote_stats (#3496)
|
2020-03-03 13:50:02 +00:00 |
|
Alfredo Cardigliano
|
731278448a
|
Handle stats from multiple ZMQ producers in the same endpoint (fix #3409)
|
2020-02-18 12:26:50 +01:00 |
|
Luca Deri
|
57e6a93065
|
Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
|
2020-01-06 23:36:36 +01:00 |
|
Simone Mainardi
|
1eba832869
|
Fixes flow aggregation after hash tables rework
Fixes #3018
|
2019-10-29 17:49:52 +01:00 |
|
Alfredo Cardigliano
|
a2e74e16a3
|
New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup
|
2019-10-10 12:49:32 +02:00 |
|
Alfredo Cardigliano
|
d672d93750
|
Sub interfaces support (wip) (#2825)
|
2019-09-17 10:34:52 +02:00 |
|
Simone Mainardi
|
949d2a1025
|
Calculates flow idle timeouts using nProbe data for ZMQ interfaces
|
2019-09-10 18:05:16 +02:00 |
|
Simone Mainardi
|
5d380c39d0
|
Exposes interface stats update freq to lua
|
2019-09-05 10:27:25 +02:00 |
|
Simone Mainardi
|
ca56f94cef
|
Implements per-interface updateStats variable frequency
|
2019-09-04 19:27:55 +02:00 |
|
Alfredo Cardigliano
|
dc9978c68d
|
Moved companion interface to ParserInterface to be used by any *ParserInterface
|
2019-08-27 16:24:46 +02:00 |
|
Alfredo Cardigliano
|
e1b57831eb
|
Optimized getKeyId (25% performance boost with TLV)
|
2019-08-26 12:05:47 +02:00 |
|
Alfredo Cardigliano
|
55cad7ae43
|
Cleanup and comments to ZMQParserInterface
|
2019-08-12 09:44:53 +02:00 |
|
Alfredo Cardigliano
|
c11c144a68
|
Reworked ZMQ parser to use ParsedValue instead of string/int/float, JSON-C is now parsing the correct type instead of always string
|
2019-08-05 13:56:41 +02:00 |
|
Alfredo Cardigliano
|
fdcdff9156
|
TLV ingestion improvements
|
2019-07-19 16:16:39 +00:00 |
|
Alfredo Cardigliano
|
e073c65921
|
Changed defaultbatch size
|
2019-07-17 19:15:52 +02:00 |
|
Alfredo Cardigliano
|
43546d8629
|
Support for ingesting flow records in TLV format
|
2019-07-17 13:10:41 +00:00 |
|
Simone Mainardi
|
d068e817d1
|
Implements multiple companions per ZMQ interface
|
2019-05-14 16:41:52 +02:00 |
|
Simone Mainardi
|
ab92ee7926
|
Converts ZMQ PODs to classes
|
2019-05-10 19:32:34 +02:00 |
|
Simone Mainardi
|
1813aa23dd
|
Prevents unnecessary strdups when parsing ZMQ flows
|
2019-05-03 21:47:20 +02:00 |
|
Simone Mainardi
|
336782aa0e
|
Parses container info and ifName from ZMQ topic counters
|
2019-04-29 12:21:24 +02:00 |
|
Simone Mainardi
|
2309e6df5e
|
Initial work to parse nProbe mini eBPF fields via ZMQ
|
2019-04-23 20:18:01 +02:00 |
|
Alfredo Cardigliano
|
61a8ce9a76
|
Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
|
2019-04-02 18:32:52 +02:00 |
|