Alfredo Cardigliano
|
21462270e2
|
Fix use after free in zmq_remote_stats (#3496)
|
2020-03-03 13:50:02 +00:00 |
|
Alfredo Cardigliano
|
731278448a
|
Handle stats from multiple ZMQ producers in the same endpoint (fix #3409)
|
2020-02-18 12:26:50 +01:00 |
|
Luca Deri
|
57e6a93065
|
Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
|
2020-01-06 23:36:36 +01:00 |
|
Simone Mainardi
|
1eba832869
|
Fixes flow aggregation after hash tables rework
Fixes #3018
|
2019-10-29 17:49:52 +01:00 |
|
Alfredo Cardigliano
|
a2e74e16a3
|
New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup
|
2019-10-10 12:49:32 +02:00 |
|
Alfredo Cardigliano
|
d672d93750
|
Sub interfaces support (wip) (#2825)
|
2019-09-17 10:34:52 +02:00 |
|
Simone Mainardi
|
949d2a1025
|
Calculates flow idle timeouts using nProbe data for ZMQ interfaces
|
2019-09-10 18:05:16 +02:00 |
|
Simone Mainardi
|
5d380c39d0
|
Exposes interface stats update freq to lua
|
2019-09-05 10:27:25 +02:00 |
|
Simone Mainardi
|
ca56f94cef
|
Implements per-interface updateStats variable frequency
|
2019-09-04 19:27:55 +02:00 |
|
Alfredo Cardigliano
|
dc9978c68d
|
Moved companion interface to ParserInterface to be used by any *ParserInterface
|
2019-08-27 16:24:46 +02:00 |
|
Alfredo Cardigliano
|
e1b57831eb
|
Optimized getKeyId (25% performance boost with TLV)
|
2019-08-26 12:05:47 +02:00 |
|
Alfredo Cardigliano
|
55cad7ae43
|
Cleanup and comments to ZMQParserInterface
|
2019-08-12 09:44:53 +02:00 |
|
Alfredo Cardigliano
|
c11c144a68
|
Reworked ZMQ parser to use ParsedValue instead of string/int/float, JSON-C is now parsing the correct type instead of always string
|
2019-08-05 13:56:41 +02:00 |
|
Alfredo Cardigliano
|
fdcdff9156
|
TLV ingestion improvements
|
2019-07-19 16:16:39 +00:00 |
|
Alfredo Cardigliano
|
e073c65921
|
Changed defaultbatch size
|
2019-07-17 19:15:52 +02:00 |
|
Alfredo Cardigliano
|
43546d8629
|
Support for ingesting flow records in TLV format
|
2019-07-17 13:10:41 +00:00 |
|
Simone Mainardi
|
d068e817d1
|
Implements multiple companions per ZMQ interface
|
2019-05-14 16:41:52 +02:00 |
|
Simone Mainardi
|
ab92ee7926
|
Converts ZMQ PODs to classes
|
2019-05-10 19:32:34 +02:00 |
|
Simone Mainardi
|
1813aa23dd
|
Prevents unnecessary strdups when parsing ZMQ flows
|
2019-05-03 21:47:20 +02:00 |
|
Simone Mainardi
|
336782aa0e
|
Parses container info and ifName from ZMQ topic counters
|
2019-04-29 12:21:24 +02:00 |
|
Simone Mainardi
|
2309e6df5e
|
Initial work to parse nProbe mini eBPF fields via ZMQ
|
2019-04-23 20:18:01 +02:00 |
|
Alfredo Cardigliano
|
61a8ce9a76
|
Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
|
2019-04-02 18:32:52 +02:00 |
|