Skip to content

Support PF_RING and read/parse configuration files

Latest
Compare
Choose a tag to compare
@utoni utoni released this 21 Oct 13:58
· 25 commits to main since this release
1.7
9969f95
  • Bump jsmn and uthash
  • Read and parse configuration files for nDPId (+ libnDPI) and nDPIsrvd
  • Added loading risk domains from a file (-R, thanks to @UnveilTech)
  • Added Filebeat configuration file
  • Improved hostname handling; will now always be part of analyse/end/idle events (if dissected)
  • Improved Documentation (INSTALL / Schema)
  • Added PF_RING support
  • Improved nDPIsrvd-analyse to write global stats to a CSV
  • Added global (heap) memory stats for daemon status events (if enabled)
  • Fixed IPv6 address/netmask retrieval on some systems
  • Improved nDPIsrvd-collect; gauges and counters are now handled the right way
  • Added nDPId Grafana dashboard
  • Fixed detection-update event bug; was thrown even if nothing changed
  • Fixed not-detected event spam if detection not completed (in some rare cases)
  • Improved InfluxDB push daemon (severity parsing / gauge handling)
  • Improved zLib compression
  • Fixed nDPIsrvd-collectd missing escape character