Commit graph

66 commits

Author SHA1 Message Date
Simone Mainardi
949d2a1025 Calculates flow idle timeouts using nProbe data for ZMQ interfaces 2019-09-10 18:05:16 +02:00
Simone Mainardi
5d380c39d0 Exposes interface stats update freq to lua 2019-09-05 10:27:25 +02:00
Simone Mainardi
ca56f94cef Implements per-interface updateStats variable frequency 2019-09-04 19:27:55 +02:00
Alfredo Cardigliano
dc9978c68d Moved companion interface to ParserInterface to be used by any *ParserInterface 2019-08-27 16:24:46 +02:00
Alfredo Cardigliano
e1b57831eb Optimized getKeyId (25% performance boost with TLV) 2019-08-26 12:05:47 +02:00
Alfredo Cardigliano
55cad7ae43 Cleanup and comments to ZMQParserInterface 2019-08-12 09:44:53 +02:00
Alfredo Cardigliano
c11c144a68 Reworked ZMQ parser to use ParsedValue instead of string/int/float, JSON-C is now parsing the correct type instead of always string 2019-08-05 13:56:41 +02:00
Alfredo Cardigliano
fdcdff9156 TLV ingestion improvements 2019-07-19 16:16:39 +00:00
Alfredo Cardigliano
e073c65921 Changed defaultbatch size 2019-07-17 19:15:52 +02:00
Alfredo Cardigliano
43546d8629 Support for ingesting flow records in TLV format 2019-07-17 13:10:41 +00:00
Simone Mainardi
d068e817d1 Implements multiple companions per ZMQ interface 2019-05-14 16:41:52 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
1813aa23dd Prevents unnecessary strdups when parsing ZMQ flows 2019-05-03 21:47:20 +02:00
Simone Mainardi
336782aa0e Parses container info and ifName from ZMQ topic counters 2019-04-29 12:21:24 +02:00
Simone Mainardi
2309e6df5e Initial work to parse nProbe mini eBPF fields via ZMQ 2019-04-23 20:18:01 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00