1
0
mirror of https://github.com/pavel-odintsov/fastnetmon synced 2024-11-23 13:22:36 +01:00
Commit Graph

544 Commits

Author SHA1 Message Date
Pavel Odintsov
f5488153fe Introduce L2TP support; Closes #71 2014-12-10 15:44:33 +03:00
Pavel Odintsov
016963c674 L2TP decapsulation support 2014-12-09 18:58:37 +03:00
Pavel Odintsov
9e41222be4 Add dkms into dependecies 2014-12-08 12:04:16 +03:00
Pavel Odintsov
6bd4a50a5f Add come magic with current path of Travis 2014-12-06 19:22:19 +03:00
Pavel Odintsov
2378cb2bd4 Restore current folder for Tarvis 2014-12-06 19:18:01 +03:00
Pavel Odintsov
c8952a5e33 Fix path for PF_RING again 2014-12-06 19:12:57 +03:00
Pavel Odintsov
a6f0c0c3c7 Sepcify path for wget in Travis CI 2014-12-06 19:10:05 +03:00
Pavel Odintsov
d66ebedb60 Add PF_RING deps for TRAVIS_CI 2014-12-06 19:06:38 +03:00
Pavel Odintsov
5e1fb4812e Fix travis for cmake 2014-12-06 18:39:34 +03:00
Pavel Odintsov
ea1bc45a13 Add Travis config file 2014-12-06 18:35:50 +03:00
Pavel Odintsov
1a6a0d5a8b Fix handling of unsigned types 2014-12-05 22:44:24 +03:00
Pavel Odintsov
3f8a6d7b39 Fix CentOS 6 featur with libstdcpp
/usr/src/fastnetmon/fastnetmon.cpp: In function ‘void execute_ip_ban(uint32_t, map_element, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, std::string)’:
/usr/src/fastnetmon/fastnetmon.cpp:2333: ошибка: вызов перегруженной функции ‘abs(unsigned int)’ неоднозначен
/usr/include/stdlib.h:771: замечание: претенденты: int abs(int)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cmath:102: замечание:              long double std::abs(long double)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cmath:98: замечание:              float std::abs(float)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cmath:94: замечание:              double std::abs(double)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cstdlib:170: замечание:              long long int __gnu_cxx::abs(long long int)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cstdlib:139: замечание:              long int std::abs(long int)
make[2]: *** [CMakeFiles/fastnetmon.dir/fastnetmon.cpp.o] Ошибка 1
make[1]: *** [CMakeFiles/fastnetmon.dir/all] Ошибка 2
2014-12-05 22:41:29 +03:00
Pavel Odintsov
89f81f7afe Introduce stable attack protocol detection; Closes #59 2014-12-05 18:48:12 +03:00
Pavel Odintsov
feed0d8c38 Introduce more intellegent alforithm for attack direction 2014-12-05 18:13:53 +03:00
Pavel Odintsov
1892f5eb7c Prettify attack handler code 2014-12-05 18:01:17 +03:00
Pavel Odintsov
0a076f18b3 Introduce per protocol counters 2014-12-05 17:34:59 +03:00
Pavel Odintsov
e73aaa39a0 Revrite monkey code for speed counters 2014-12-05 16:47:57 +03:00
Pavel Odintsov
4b334741c7 Optimize speed calculation 2014-12-05 16:31:55 +03:00
Pavel Odintsov
0e0d85b365 Replace copy & paste fields with inheritance 2014-12-05 16:17:04 +03:00
Pavel Odintsov
f47a40ab4b Introduce icmp tracking 2014-12-05 16:09:25 +03:00
Pavel Odintsov
2b723a1eb8 Now we save attack details in separate files 2014-12-05 14:02:46 +03:00
Pavel Odintsov
0e14d3437d Add explicit type conversion for number of flows 2014-12-05 12:54:54 +03:00
Pavel Odintsov
2c9f36c2c2 Replace EVN variable with configuration param 2014-12-05 12:46:01 +03:00
Pavel Odintsov
b87bf264f9 We should process even zeroed traffic! 2014-12-05 12:01:52 +03:00
Pavel Odintsov
911d57a7e8 Fix calculation of percent drop 2014-12-05 11:46:26 +03:00
Pavel Odintsov
c3977b0dc3 Optimize speed structs 2014-12-05 00:01:08 +03:00
Pavel Odintsov
4e508c89de Now we use average value for detecting ddos 2014-12-04 23:45:00 +03:00
Pavel Odintsov
22ea1a6522 Print flags only for tcp protocol 2014-12-04 19:29:31 +03:00
Pavel Odintsov
b21b78f6a7 We can update screen every second! Nice 2014-12-04 19:12:45 +03:00
Pavel Odintsov
9372e4955f Introduce limits printer 2014-12-04 19:07:44 +03:00
Pavel Odintsov
8161b1bdd3 Add average counters to attack details 2014-12-04 18:48:11 +03:00
Pavel Odintsov
c730b21a41 Rewrite sorter functions 2014-12-04 17:45:42 +03:00
Pavel Odintsov
8a80ac7ae0 Remove TODO from code, it moved to GitHub issues 2014-12-03 19:13:04 +03:00
Pavel Odintsov
bb661fedf2 Add scrip for reset redis stats 2014-12-03 18:59:15 +03:00
Pavel Odintsov
fadd343985 Move ban_time to configuration file 2014-12-03 19:03:47 +04:00
Pavel Odintsov
e208c5e1fb Move hardware locking features to separate function 2014-12-03 18:56:08 +04:00
Pavel Odintsov
7713f0beb9 Fix bug with parameter name ban_threshold_flows 2014-12-03 18:25:49 +04:00
Pavel Odintsov
3342f08585 Small fix 2014-12-02 19:34:49 +04:00
Pavel Odintsov
17cc3c85f2 Enable flows average counter 2014-12-02 19:30:25 +04:00
Pavel Odintsov
9d7f165267 Add flow average calculation 2014-12-02 19:15:26 +04:00
Pavel Odintsov
5147f6c964 Introduce ability to enable/disable different types of attack detection algorithms 2014-12-02 19:07:33 +04:00
Pavel Odintsov
5818d6d36e Enable ability for enable/disable ban per some type of attack detection type 2014-12-02 18:46:46 +04:00
Pavel Odintsov
9d970a9c87 Prettify average speed counter 2014-12-02 18:11:27 +04:00
Pavel Odintsov
503ea26183 Add manual about sFLOW 2014-12-02 17:42:40 +04:00
Pavel Odintsov
f52fe11367 Clean code; Introduce sFLOW support 2014-12-02 17:05:16 +04:00
Pavel Odintsov
e76cc1bfc0 Production ready sFLOW support 2014-12-02 16:43:34 +04:00
Pavel Odintsov
26eec97f29 Replace if/else with switch/case; Introduce ability to disable cnnection tracking in runtime 2014-12-02 14:50:05 +04:00
Pavel Odintsov
774ad70414 Introduce sampled packages support 2014-12-02 13:30:20 +04:00
Pavel Odintsov
3ffb2b875f Add headr files for plugin API 2014-12-02 01:15:16 +04:00
Pavel Odintsov
bbbd14d203 Introduce sFLOW collector 2014-12-02 01:08:38 +04:00