35 commits

Author	SHA1	Message	Date
lucaderi	d395deac4e	Automated commit of clang-format CI changes.	2023-04-07 14:20:44 +00:00
Luca Deri	f726b867c7	Updated (C)	2023-01-01 16:37:57 +01:00
Alfredo Cardigliano	bbf2edb5d5	Add process/container/tcp info for both client and server. Parse container id.	2022-06-08 18:27:17 +02:00
Alfredo Cardigliano	b5566ee3de	Set parsed ebpf info flag	2022-06-08 12:07:17 +02:00
Luca Deri	0ae4341d9b	Added %L7_CONFIDENCE support	2022-06-06 14:05:42 +02:00
Luca Deri	930a2ac34d	Added support for FlowRiskInfo via nProbe	2022-05-31 11:29:32 +02:00
Luca Deri	0e05c21d9f	Added support for error code	2022-05-02 13:04:01 +02:00
Luca Deri	adf97e5e9b	HTTP User Agent is now exported in nProbe and collected by ntopng. Implements ##6325	2022-02-16 23:47:54 +01:00
Alfredo Cardigliano	f2060f2488	Copyright update (C)	2022-01-03 09:35:09 +01:00
Simone Mainardi	00787c0e7e	Implements support for nProbe field L7_INFO ... Addresses #5844	2021-09-06 14:35:16 +02:00
Luca Deri	3dda9ba905	Added FLOW_VERDICT handling	2021-04-19 23:49:23 +02:00
Luca Deri	a1178a0791	Updated (C)	2021-01-02 12:08:23 +01:00
Simone Mainardi	941da6819f	Implements HTTP method using enum ndpi_http_method	2020-08-27 10:04:58 +02:00
Luca Deri	0bd6f1353a	Added support for flow risk over ZMQ	2020-08-26 23:03:00 +02:00
Luca Deri	57e6a93065	Improved scheduling algorithm to guarantee minimum service time when number of entries allow ... Updated (C)	2020-01-06 23:36:36 +01:00
Alfredo Cardigliano	e38835a603	Rename SSL to TLS (fix #3013)	2019-11-15 12:40:01 +01:00
Alfredo Cardigliano	d05777df1e	External alerts API update and cleanup	2019-10-22 15:08:06 +02:00
Alfredo Cardigliano	a2e74e16a3	New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup	2019-10-10 12:49:32 +02:00
Alfredo Cardigliano	256fec9283	Importing http metadata from Suricata	2019-10-05 12:15:16 +02:00
Alfredo Cardigliano	b7d459dd2b	Moved strdup for JSON/TLV strings from Flow to Parser to handle non-null-terminated strings	2019-09-13 12:36:19 +02:00
Alfredo Cardigliano	1a98a04cdf	Optimized additional elements allocation with TLV	2019-09-11 16:14:39 +02:00
Alfredo Cardigliano	9bd00fa0ee	Support for encoding additional fields to TLV	2019-09-10 20:50:34 +02:00
Alfredo Cardigliano	2c81afd678	Setting severity for IDS alerts	2019-08-28 03:38:01 +02:00
Alfredo Cardigliano	f8af84df2d	SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928)	2019-08-27 17:53:34 +02:00
Alfredo Cardigliano	babab56394	Handling http ret code, dns query type and ret code from the ZMQ parser	2019-07-26 16:12:35 +00:00
Alfredo Cardigliano	dc435fd7a3	Parsing missing IE from the default cento/nprobe template to avoid using 'additional fields' (performance boost +35% - 195Kfps)	2019-07-26 15:30:35 +00:00
Alfredo Cardigliano	289e787da7	Creating the flow additional fields json object only when required	2019-07-26 12:54:40 +00:00
Simone Mainardi	f2b90f5c48	Fixes flows direction when receiving eBPF events	2019-06-17 15:02:36 +02:00
Simone Mainardi	9cbd7caabe	Additional fixes for eBPF client/server processes	2019-06-14 17:33:53 +02:00
Simone Mainardi	ae8d1b828e	Fixes eBPF client/server processes	2019-06-14 16:04:15 +02:00
Simone Mainardi	ace94bd786	Prevents eBPF events from being set for standard nProbe flows	2019-05-15 17:59:52 +02:00
Simone Mainardi	7eedde24e3	Dispatches eBPF events using class ParsedFlow	2019-05-13 13:04:06 +02:00
Simone Mainardi	c95bdc7aa4	Implements class ParsedeBPF to handle eBPF events	2019-05-13 11:56:24 +02:00
Simone Mainardi	16c4772c03	Code cleanup	2019-05-10 19:51:52 +02:00
Simone Mainardi	ab92ee7926	Converts ZMQ PODs to classes	2019-05-10 19:32:34 +02:00