Commit graph

40 commits

Author SHA1 Message Date
Alfredo Cardigliano
9352d0cdcd Update copyright 2025-01-02 09:09:56 +01:00
Matteo Biscosi
b92413f4bc Removed unused variable 2024-07-15 19:05:28 +02:00
Matteo Biscosi
13287d609e Added alert when dropping flows due to flow exporters limit exceeded 2024-07-15 18:58:36 +02:00
Luca Deri
3cc0aeddc5 Removed outdated unahandled flows that was casing fiscrepancies in flow accounting 2024-05-02 10:54:56 +02:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
lucaderi
d395deac4e Automated commit of clang-format CI changes. 2023-04-07 14:20:44 +00:00
Luca Deri
f726b867c7 Updated (C) 2023-01-01 16:37:57 +01:00
Alfredo Cardigliano
f2060f2488 Copyright update (C) 2022-01-03 09:35:09 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Alfredo Cardigliano
eaa98e6002 Show counters for unhandled flows 2020-09-16 18:52:19 +02:00
Simone Mainardi
1658074448 Allows custom protocols to be set on dynamic interfaces
Fixes #4071
2020-06-24 14:38:47 +02:00
Simone Mainardi
ebbe0155e3 Several ZMQ traffic and throughput calc fixes
Addresses #3863
2020-05-07 17:28:44 +02:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Simone Mainardi
b2c89117df Implements logic to discard ZMQ probing flows 2019-12-31 10:44:59 +01:00
Alfredo Cardigliano
a2e74e16a3 New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup 2019-10-10 12:49:32 +02:00
Alfredo Cardigliano
f8af84df2d SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928) 2019-08-27 17:53:34 +02:00
Alfredo Cardigliano
dc9978c68d Moved companion interface to ParserInterface to be used by any *ParserInterface 2019-08-27 16:24:46 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
4ed935547e Fixes memsets on Parsed_Flow members of type class
Fixes #2521
2019-04-09 16:17:07 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
Simone Mainardi
01bad09a88 Implements handling of PEN fields from nProbe 2019-02-11 18:14:13 +01:00
Simone Mainardi
300e6c4672 Parses new template ZMQ topic 2019-02-06 19:10:00 +01:00
Simone Mainardi
5317d23fc2 Disables ZMQ flow collection drop alerts (waiting to make them engaged)
Revert "Implements ZMQ flow collection drops alerts"

This reverts commit d21e8d6f3e.
2019-01-24 15:02:22 +01:00
Simone Mainardi
d21e8d6f3e Implements ZMQ flow collection drops alerts 2019-01-23 19:42:18 +01:00
Luca Deri
bedff2c8e2 Updated (C) 2019-01-07 19:28:49 +01:00
Simone Mainardi
d69237c0cd Initial work to add support to custom fields via ZMQ 2018-12-31 18:11:18 +01:00
Simone Mainardi
889729495e Implements support for collected custom applications 2018-10-01 00:22:49 +02:00
Luca Deri
f0c936c368 Updated (C) to 2018 2018-03-22 21:59:42 +01:00
Luca Deri
29ede6ff67 Added support for sFlow sample packet drops 2017-11-18 13:34:36 +01:00
Luca Deri
594abe68ce Implemented ZMQ flow buffering support for enhancing ZMQ performance and decreasing data exchanged 2017-10-10 10:45:25 +02:00
Luca Deri
3f62a7f9c3 Implemented traffic direction in network interfaces 2017-09-16 18:35:06 +02:00
Simone Mainardi
5955ee576c Handles multiple banaced ZMQ endpoints 2017-09-05 10:18:04 +02:00
Simone Mainardi
d172cafce3 Reworks CollectorInterfaces and adds remote nProbe stats
Fixes #572
2017-08-05 21:37:18 +02:00
Luca
30e1a75f98 (C) update 2017-01-10 15:03:16 -08:00
Luca Deri
194b3fdb88 Initial work towards supporting sFlow device/interface counters 2016-06-29 19:26:40 +02:00
Luca Deri
263f3123e2 Improved ZMQ handling by adding encryption and compression support 2016-03-15 17:08:23 +01:00
Luca Deri
2d8337496d Fix for #316 (latest nProbe dev is required) 2016-02-27 19:29:20 +01:00
Luca
3bea0a7bfc Fxi for #354
Added support for collecting flows specified in JSON with symbolic field labels
2016-01-14 14:52:15 -05:00
Luca Deri
d7c452f0a3 Moved to 2016 2016-01-01 09:27:39 +01:00
Luca Deri
b178cf4121 Added travis file for code testing
Added .gitignore file for ignoring selected files
Reworked src and include paths to organize the source better
Fixed bug with invalid git version caused in some settings that do not compile code extracting it from github
2015-05-01 19:40:52 +02:00
Renamed from ParserInterface.h (Browse further)