danieledesensi / peafowl Goto Github PK
View Code? Open in Web Editor NEWHigh performance Deep Packet Inspection (DPI) framework to identify L7 protocols and extract and process data and metadata from network traffic.
License: MIT License
peafowl's People
Contributors
Stargazers
Watchers
Forkers
kspviswa lxiong lmangani zhangli88 max197616 kaowul zhangjinde manjusry chixsh spring371327 laurent192 x-sangeeth kyrol01 mzhumakhanov chenff insdi nazarimas xuacker fabiodepin qingchen1984 battlemoon sinofeng lanxingjue gptshubham595 andruxa-smirnov borisvanhoof trotux cldavid superice119 dreamflychen mmanoj kelemu7 havsah softathome no1welldone ajunlonglive data-gami wwwlkkpeafowl's Issues
Packet check with Libtins
Can you, please, give an example how can I get a packet from live capture with pcap and classify it? For example:
if(packet.protocol == IP_ICMP){ dosomething(); }
I would like to use the peaflow.c / peaflow.h functions and not use js
issues compiling
Hi Daniele,
Is this project still considered active? I'd like to try add a few protocols but I can't quite bootstrap.
Since the original repo in the makefile is gone and info is vague, any indication where to get:
#include <ff/multinode.hpp>
#include <ff/fftree.hpp>
Also requirement for libboost-dev is undeclared
Thanks & Buon Weekend
Inspect HTTPs packet
Is it possible to inspect the HTTPs packet (its data/headers/complete URL)?
TODO list
Patch to add
- VxLAN
- Websocket
Dissector to add
- Diameter
- RTSP
- Megaco (H248)
Dissector to update or check
- SIP
- RTP
- RTCP
Dissector probably wrong or incomplete
- Tor
- Viber
- Telegram
RTCP fields not extracted
RTCP fields not extracted unless a RTCP_*_ALL field is specified
Typo error
I think what is the typo here:
Line 1124 in 4c479fe
Should be (*(tmp + 1) == 'I' || *(tmp + 1) == 'i') &&
TCP reusing port
Library had some problems when received tcp packet with new syn flag (new session) on already established session. In this case dpi thinks that protocol already detected. I think needed some code to handle this situation.
DPDK Example
Hi,
Can you provide any working example with DPDK and classify traffic using peafowl.
Thank you,
Manoj
Failing build
Building on arm64 Ubuntu Xenial fails with:
[ 94%] Building CXX object demo/http_pattern_matching/CMakeFiles/http_pm_seq.dir/http_pm_seq.cpp.o
In file included from /usr/src/peafowl/include/peafowl/external/fastflow/ff/dynqueue.hpp:46:0,
from /usr/src/peafowl/include/peafowl/external/fastflow/ff/ubuffer.hpp:73,
from /usr/src/peafowl/demo/http_pattern_matching/http_pm_seq.cpp:53:
/usr/src/peafowl/include/peafowl/external/fastflow/ff/buffer.hpp: In member function ‘bool ff::SWSR_Ptr_Buffer::push(void*)’:
/usr/src/peafowl/include/peafowl/external/fastflow/ff/buffer.hpp:225:17: error: ‘WMB’ was not declared in this scope
WMB();
^
/usr/src/peafowl/include/peafowl/external/fastflow/ff/buffer.hpp: In member function ‘bool ff::SWSR_Ptr_Buffer::multipush(void* const*, int)’:
/usr/src/peafowl/include/peafowl/external/fastflow/ff/buffer.hpp:257:17: error: ‘WMB’ was not declared in this scope
WMB();
^
/usr/src/peafowl/include/peafowl/external/fastflow/ff/buffer.hpp: In member function ‘bool ff::Lamport_Buffer::push(void*)’:
/usr/src/peafowl/include/peafowl/external/fastflow/ff/buffer.hpp:456:17: error: ‘WMB’ was not declared in this scope
WMB();
^
In file included from /usr/src/peafowl/include/peafowl/external/fastflow/ff/ubuffer.hpp:73:0,
from /usr/src/peafowl/demo/http_pattern_matching/http_pm_seq.cpp:53:
/usr/src/peafowl/include/peafowl/external/fastflow/ff/dynqueue.hpp: In member function ‘bool ff::dynqueue::push(void*)’:
/usr/src/peafowl/include/peafowl/external/fastflow/ff/dynqueue.hpp:168:13: error: ‘WMB’ was not declared in this scope
WMB();
^
demo/http_pattern_matching/CMakeFiles/http_pm_seq.dir/build.make:62: recipe for target 'demo/http_pattern_matching/CMakeFiles/http_pm_seq.dir/http_pm_seq.cpp.o' failed
make[2]: *** [demo/http_pattern_matching/CMakeFiles/http_pm_seq.dir/http_pm_seq.cpp.o] Error 1
CMakeFiles/Makefile2:520: recipe for target 'demo/http_pattern_matching/CMakeFiles/http_pm_seq.dir/all' failed
make[1]: *** [demo/http_pattern_matching/CMakeFiles/http_pm_seq.dir/all] Error 2
Makefile:127: recipe for target 'all' failed
make: *** [all] Error 2
```
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.