Commit graph

34 commits

Author SHA1 Message Date
Alfredo Cardigliano
19310ffd06 Initial cleanup of useless consts towards migration to modern C++ (#6271) 2022-02-03 15:57:34 +01:00
Alfredo Cardigliano
f2060f2488 Copyright update (C) 2022-01-03 09:35:09 +01:00
Simone Mainardi
c105ade0c9 Implements ability to display all IE descriptions from nProbe
Addresses #6028
2021-11-09 13:58:48 +01:00
Luca Deri
e8a6c2387c Added listening ports parsing 2021-10-26 00:32:09 +02:00
Luca Deri
e55f88faa2 ZMQ timeout optimizazion 2021-07-09 16:36:46 +02:00
Simone Mainardi
65769a7f42 Parses sflow samples via ZMQ, determines interfs. w/ sampled traff. 2021-07-09 15:57:26 +02:00
Luca Deri
e73adec924 Removed race conditions on the ZMQParserInterface 2021-07-07 08:54:13 +02:00
Luca Deri
4c27f6f98c Implemented handlig of hello message from nprobe 2021-05-28 19:34:11 +02:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Alfredo Cardigliano
eaa98e6002 Show counters for unhandled flows 2020-09-16 18:52:19 +02:00
Luca Deri
192a1cf942 Fixed logic of flow purging with ZMQ interfaces 2020-08-07 23:31:43 +02:00
Alfredo Cardigliano
6e1e21f7ba Fix interface type detection with sub interfaces 2020-07-20 12:20:13 +02:00
Alfredo Cardigliano
21462270e2 Fix use after free in zmq_remote_stats (#3496) 2020-03-03 13:50:02 +00:00
Alfredo Cardigliano
731278448a Handle stats from multiple ZMQ producers in the same endpoint (fix #3409) 2020-02-18 12:26:50 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Simone Mainardi
1eba832869 Fixes flow aggregation after hash tables rework
Fixes #3018
2019-10-29 17:49:52 +01:00
Alfredo Cardigliano
a2e74e16a3 New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup 2019-10-10 12:49:32 +02:00
Alfredo Cardigliano
d672d93750 Sub interfaces support (wip) (#2825) 2019-09-17 10:34:52 +02:00
Simone Mainardi
949d2a1025 Calculates flow idle timeouts using nProbe data for ZMQ interfaces 2019-09-10 18:05:16 +02:00
Simone Mainardi
5d380c39d0 Exposes interface stats update freq to lua 2019-09-05 10:27:25 +02:00
Simone Mainardi
ca56f94cef Implements per-interface updateStats variable frequency 2019-09-04 19:27:55 +02:00
Alfredo Cardigliano
dc9978c68d Moved companion interface to ParserInterface to be used by any *ParserInterface 2019-08-27 16:24:46 +02:00
Alfredo Cardigliano
e1b57831eb Optimized getKeyId (25% performance boost with TLV) 2019-08-26 12:05:47 +02:00
Alfredo Cardigliano
55cad7ae43 Cleanup and comments to ZMQParserInterface 2019-08-12 09:44:53 +02:00
Alfredo Cardigliano
c11c144a68 Reworked ZMQ parser to use ParsedValue instead of string/int/float, JSON-C is now parsing the correct type instead of always string 2019-08-05 13:56:41 +02:00
Alfredo Cardigliano
fdcdff9156 TLV ingestion improvements 2019-07-19 16:16:39 +00:00
Alfredo Cardigliano
e073c65921 Changed defaultbatch size 2019-07-17 19:15:52 +02:00
Alfredo Cardigliano
43546d8629 Support for ingesting flow records in TLV format 2019-07-17 13:10:41 +00:00
Simone Mainardi
d068e817d1 Implements multiple companions per ZMQ interface 2019-05-14 16:41:52 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
1813aa23dd Prevents unnecessary strdups when parsing ZMQ flows 2019-05-03 21:47:20 +02:00
Simone Mainardi
336782aa0e Parses container info and ifName from ZMQ topic counters 2019-04-29 12:21:24 +02:00
Simone Mainardi
2309e6df5e Initial work to parse nProbe mini eBPF fields via ZMQ 2019-04-23 20:18:01 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00