Pavel Odintsov
|
f5488153fe
|
Introduce L2TP support; Closes #71
|
2014-12-10 15:44:33 +03:00 |
|
Pavel Odintsov
|
016963c674
|
L2TP decapsulation support
|
2014-12-09 18:58:37 +03:00 |
|
Pavel Odintsov
|
9e41222be4
|
Add dkms into dependecies
|
2014-12-08 12:04:16 +03:00 |
|
Pavel Odintsov
|
6bd4a50a5f
|
Add come magic with current path of Travis
|
2014-12-06 19:22:19 +03:00 |
|
Pavel Odintsov
|
2378cb2bd4
|
Restore current folder for Tarvis
|
2014-12-06 19:18:01 +03:00 |
|
Pavel Odintsov
|
c8952a5e33
|
Fix path for PF_RING again
|
2014-12-06 19:12:57 +03:00 |
|
Pavel Odintsov
|
a6f0c0c3c7
|
Sepcify path for wget in Travis CI
|
2014-12-06 19:10:05 +03:00 |
|
Pavel Odintsov
|
d66ebedb60
|
Add PF_RING deps for TRAVIS_CI
|
2014-12-06 19:06:38 +03:00 |
|
Pavel Odintsov
|
5e1fb4812e
|
Fix travis for cmake
|
2014-12-06 18:39:34 +03:00 |
|
Pavel Odintsov
|
ea1bc45a13
|
Add Travis config file
|
2014-12-06 18:35:50 +03:00 |
|
Pavel Odintsov
|
1a6a0d5a8b
|
Fix handling of unsigned types
|
2014-12-05 22:44:24 +03:00 |
|
Pavel Odintsov
|
3f8a6d7b39
|
Fix CentOS 6 featur with libstdcpp
/usr/src/fastnetmon/fastnetmon.cpp: In function ‘void execute_ip_ban(uint32_t, map_element, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, unsigned int, std::string)’:
/usr/src/fastnetmon/fastnetmon.cpp:2333: ошибка: вызов перегруженной функции ‘abs(unsigned int)’ неоднозначен
/usr/include/stdlib.h:771: замечание: претенденты: int abs(int)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cmath:102: замечание: long double std::abs(long double)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cmath:98: замечание: float std::abs(float)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cmath:94: замечание: double std::abs(double)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cstdlib:170: замечание: long long int __gnu_cxx::abs(long long int)
/usr/lib/gcc/x86_64-redhat-linux/4.4.7/../../../../include/c++/4.4.7/cstdlib:139: замечание: long int std::abs(long int)
make[2]: *** [CMakeFiles/fastnetmon.dir/fastnetmon.cpp.o] Ошибка 1
make[1]: *** [CMakeFiles/fastnetmon.dir/all] Ошибка 2
|
2014-12-05 22:41:29 +03:00 |
|
Pavel Odintsov
|
89f81f7afe
|
Introduce stable attack protocol detection; Closes #59
|
2014-12-05 18:48:12 +03:00 |
|
Pavel Odintsov
|
feed0d8c38
|
Introduce more intellegent alforithm for attack direction
|
2014-12-05 18:13:53 +03:00 |
|
Pavel Odintsov
|
1892f5eb7c
|
Prettify attack handler code
|
2014-12-05 18:01:17 +03:00 |
|
Pavel Odintsov
|
0a076f18b3
|
Introduce per protocol counters
|
2014-12-05 17:34:59 +03:00 |
|
Pavel Odintsov
|
e73aaa39a0
|
Revrite monkey code for speed counters
|
2014-12-05 16:47:57 +03:00 |
|
Pavel Odintsov
|
4b334741c7
|
Optimize speed calculation
|
2014-12-05 16:31:55 +03:00 |
|
Pavel Odintsov
|
0e0d85b365
|
Replace copy & paste fields with inheritance
|
2014-12-05 16:17:04 +03:00 |
|
Pavel Odintsov
|
f47a40ab4b
|
Introduce icmp tracking
|
2014-12-05 16:09:25 +03:00 |
|
Pavel Odintsov
|
2b723a1eb8
|
Now we save attack details in separate files
|
2014-12-05 14:02:46 +03:00 |
|
Pavel Odintsov
|
0e14d3437d
|
Add explicit type conversion for number of flows
|
2014-12-05 12:54:54 +03:00 |
|
Pavel Odintsov
|
2c9f36c2c2
|
Replace EVN variable with configuration param
|
2014-12-05 12:46:01 +03:00 |
|
Pavel Odintsov
|
b87bf264f9
|
We should process even zeroed traffic!
|
2014-12-05 12:01:52 +03:00 |
|
Pavel Odintsov
|
911d57a7e8
|
Fix calculation of percent drop
|
2014-12-05 11:46:26 +03:00 |
|
Pavel Odintsov
|
c3977b0dc3
|
Optimize speed structs
|
2014-12-05 00:01:08 +03:00 |
|
Pavel Odintsov
|
4e508c89de
|
Now we use average value for detecting ddos
|
2014-12-04 23:45:00 +03:00 |
|
Pavel Odintsov
|
22ea1a6522
|
Print flags only for tcp protocol
|
2014-12-04 19:29:31 +03:00 |
|
Pavel Odintsov
|
b21b78f6a7
|
We can update screen every second! Nice
|
2014-12-04 19:12:45 +03:00 |
|
Pavel Odintsov
|
9372e4955f
|
Introduce limits printer
|
2014-12-04 19:07:44 +03:00 |
|
Pavel Odintsov
|
8161b1bdd3
|
Add average counters to attack details
|
2014-12-04 18:48:11 +03:00 |
|
Pavel Odintsov
|
c730b21a41
|
Rewrite sorter functions
|
2014-12-04 17:45:42 +03:00 |
|
Pavel Odintsov
|
8a80ac7ae0
|
Remove TODO from code, it moved to GitHub issues
|
2014-12-03 19:13:04 +03:00 |
|
Pavel Odintsov
|
bb661fedf2
|
Add scrip for reset redis stats
|
2014-12-03 18:59:15 +03:00 |
|
Pavel Odintsov
|
fadd343985
|
Move ban_time to configuration file
|
2014-12-03 19:03:47 +04:00 |
|
Pavel Odintsov
|
e208c5e1fb
|
Move hardware locking features to separate function
|
2014-12-03 18:56:08 +04:00 |
|
Pavel Odintsov
|
7713f0beb9
|
Fix bug with parameter name ban_threshold_flows
|
2014-12-03 18:25:49 +04:00 |
|
Pavel Odintsov
|
3342f08585
|
Small fix
|
2014-12-02 19:34:49 +04:00 |
|
Pavel Odintsov
|
17cc3c85f2
|
Enable flows average counter
|
2014-12-02 19:30:25 +04:00 |
|
Pavel Odintsov
|
9d7f165267
|
Add flow average calculation
|
2014-12-02 19:15:26 +04:00 |
|
Pavel Odintsov
|
5147f6c964
|
Introduce ability to enable/disable different types of attack detection algorithms
|
2014-12-02 19:07:33 +04:00 |
|
Pavel Odintsov
|
5818d6d36e
|
Enable ability for enable/disable ban per some type of attack detection type
|
2014-12-02 18:46:46 +04:00 |
|
Pavel Odintsov
|
9d970a9c87
|
Prettify average speed counter
|
2014-12-02 18:11:27 +04:00 |
|
Pavel Odintsov
|
503ea26183
|
Add manual about sFLOW
|
2014-12-02 17:42:40 +04:00 |
|
Pavel Odintsov
|
f52fe11367
|
Clean code; Introduce sFLOW support
|
2014-12-02 17:05:16 +04:00 |
|
Pavel Odintsov
|
e76cc1bfc0
|
Production ready sFLOW support
|
2014-12-02 16:43:34 +04:00 |
|
Pavel Odintsov
|
26eec97f29
|
Replace if/else with switch/case; Introduce ability to disable cnnection tracking in runtime
|
2014-12-02 14:50:05 +04:00 |
|
Pavel Odintsov
|
774ad70414
|
Introduce sampled packages support
|
2014-12-02 13:30:20 +04:00 |
|
Pavel Odintsov
|
3ffb2b875f
|
Add headr files for plugin API
|
2014-12-02 01:15:16 +04:00 |
|
Pavel Odintsov
|
bbbd14d203
|
Introduce sFLOW collector
|
2014-12-02 01:08:38 +04:00 |
|