Commit graph

51 commits

Author SHA1 Message Date
Luca Deri
c3c59ba036 Reworked SNMO interface roles in flows
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CIFuzz / Fuzzing (undefined) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-08-14 12:46:26 +02:00
Luca Deri
4847350eb0 Variable rename 2026-05-28 17:37:17 +02:00
Luca Deri
e557b0a0fe Changes for implementing full IPv6 Support in Flow Exporters (#10325)
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
2026-05-06 00:28:22 +02:00
Luca Deri
cd03985891 Exporter code cleanup
Some checks are pending
Build / build (push) Waiting to run
CIFuzz / Fuzzing (address) (push) Waiting to run
CodeQL / Analyze-1 (push) Waiting to run
CodeQL / Analyze (push) Waiting to run
2026-05-04 23:03:54 +02:00
Luca Deri
edee5e5cda Code format 2026-03-15 10:50:50 +01:00
Luca Deri
cd3e6bde4a Improved flow roles imolementation 2026-03-11 23:32:44 +01:00
Luca Deri
e96ebc5a24 Deduplication code cleanup 2026-01-04 11:10:57 +01:00
Luca Deri
e1fd7237eb Implemented flow deduplication 2026-01-03 20:14:33 +01:00
Alfredo Cardigliano
0dd78b4958 Update (c) 2026-01-02 09:11:30 +01:00
Alfredo Cardigliano
9508c56471 Major rework of exporters stats support (second iteration) 2025-10-27 09:41:41 +01:00
Alfredo Cardigliano
6341316d8e Flow collection code cleanup and utility functions 2025-10-23 11:47:03 +02:00
Alfredo Cardigliano
9352d0cdcd Update copyright 2025-01-02 09:09:56 +01:00
Matteo Biscosi
b92413f4bc Removed unused variable 2024-07-15 19:05:28 +02:00
Matteo Biscosi
13287d609e Added alert when dropping flows due to flow exporters limit exceeded 2024-07-15 18:58:36 +02:00
Luca Deri
3cc0aeddc5 Removed outdated unahandled flows that was casing fiscrepancies in flow accounting 2024-05-02 10:54:56 +02:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
lucaderi
d395deac4e Automated commit of clang-format CI changes. 2023-04-07 14:20:44 +00:00
Luca Deri
f726b867c7 Updated (C) 2023-01-01 16:37:57 +01:00
Alfredo Cardigliano
f2060f2488 Copyright update (C) 2022-01-03 09:35:09 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Alfredo Cardigliano
eaa98e6002 Show counters for unhandled flows 2020-09-16 18:52:19 +02:00
Simone Mainardi
1658074448 Allows custom protocols to be set on dynamic interfaces
Fixes #4071
2020-06-24 14:38:47 +02:00
Simone Mainardi
ebbe0155e3 Several ZMQ traffic and throughput calc fixes
Addresses #3863
2020-05-07 17:28:44 +02:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Simone Mainardi
b2c89117df Implements logic to discard ZMQ probing flows 2019-12-31 10:44:59 +01:00
Alfredo Cardigliano
a2e74e16a3 New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup 2019-10-10 12:49:32 +02:00
Alfredo Cardigliano
f8af84df2d SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928) 2019-08-27 17:53:34 +02:00
Alfredo Cardigliano
dc9978c68d Moved companion interface to ParserInterface to be used by any *ParserInterface 2019-08-27 16:24:46 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
4ed935547e Fixes memsets on Parsed_Flow members of type class
Fixes #2521
2019-04-09 16:17:07 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
Simone Mainardi
01bad09a88 Implements handling of PEN fields from nProbe 2019-02-11 18:14:13 +01:00
Simone Mainardi
300e6c4672 Parses new template ZMQ topic 2019-02-06 19:10:00 +01:00
Simone Mainardi
5317d23fc2 Disables ZMQ flow collection drop alerts (waiting to make them engaged)
Revert "Implements ZMQ flow collection drops alerts"

This reverts commit d21e8d6f3e.
2019-01-24 15:02:22 +01:00
Simone Mainardi
d21e8d6f3e Implements ZMQ flow collection drops alerts 2019-01-23 19:42:18 +01:00
Luca Deri
bedff2c8e2 Updated (C) 2019-01-07 19:28:49 +01:00
Simone Mainardi
d69237c0cd Initial work to add support to custom fields via ZMQ 2018-12-31 18:11:18 +01:00
Simone Mainardi
889729495e Implements support for collected custom applications 2018-10-01 00:22:49 +02:00
Luca Deri
f0c936c368 Updated (C) to 2018 2018-03-22 21:59:42 +01:00
Luca Deri
29ede6ff67 Added support for sFlow sample packet drops 2017-11-18 13:34:36 +01:00
Luca Deri
594abe68ce Implemented ZMQ flow buffering support for enhancing ZMQ performance and decreasing data exchanged 2017-10-10 10:45:25 +02:00
Luca Deri
3f62a7f9c3 Implemented traffic direction in network interfaces 2017-09-16 18:35:06 +02:00
Simone Mainardi
5955ee576c Handles multiple banaced ZMQ endpoints 2017-09-05 10:18:04 +02:00
Simone Mainardi
d172cafce3 Reworks CollectorInterfaces and adds remote nProbe stats
Fixes #572
2017-08-05 21:37:18 +02:00
Luca
30e1a75f98 (C) update 2017-01-10 15:03:16 -08:00
Luca Deri
194b3fdb88 Initial work towards supporting sFlow device/interface counters 2016-06-29 19:26:40 +02:00
Luca Deri
263f3123e2 Improved ZMQ handling by adding encryption and compression support 2016-03-15 17:08:23 +01:00
Luca Deri
2d8337496d Fix for #316 (latest nProbe dev is required) 2016-02-27 19:29:20 +01:00
Luca
3bea0a7bfc Fxi for #354
Added support for collecting flows specified in JSON with symbolic field labels
2016-01-14 14:52:15 -05:00
Luca Deri
d7c452f0a3 Moved to 2016 2016-01-01 09:27:39 +01:00