Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion src/core/ipfixprobe.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -94,7 +94,7 @@ static void printPluginsUsage(const std::vector<PluginManifest>& pluginsManifest
} else {
std::cout << pluginManifest.name << std::endl;
}
std::cout << "------------------\n";
std::cout << std::endl;
}
}

Expand Down
8 changes: 7 additions & 1 deletion src/plugins/process/basicplus/src/basicplus.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,13 @@ static const PluginManifest basicplusPluginManifest = {
.description = "Basicplus process plugin for parsing basicplus traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser(
"basicplus",
"Extend basic fields with TTL, TCP window, options, MSS and SYN size");
parser.usage(std::cout);
},
};

BASICPLUSPlugin::BASICPLUSPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/bstats/src/bstats.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest bstatsPluginManifest = {
.description = "Bstats process plugin for computing packet bursts stats.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("bstats", "Compute packet bursts stats");
parser.usage(std::cout);
},
};

const struct timeval BSTATSPlugin::min_packet_in_burst
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/dns/src/dns.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,11 @@ static const PluginManifest dnsPluginManifest = {
.description = "Dns process plugin for parsing dns traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("dns", "Parse DNS traffic");
parser.usage(std::cout);
},
};
// #define DEBUG_DNS

Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/flowHash/src/flow_hash.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest flowhashPluginManifest = {
.description = "flowhash process plugin for parsing flowhash value.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("flowhash", "Export flow hash as flow id");
parser.usage(std::cout);
},
};

FLOW_HASHPlugin::FLOW_HASHPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/http/src/http.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,11 @@ static const PluginManifest httpPluginManifest = {
.description = "http process plugin for parsing http traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("http", "Parse HTTP traffic");
parser.usage(std::cout);
},
};

// #define DEBUG_HTTP
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/icmp/src/icmp.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest icmpPluginManifest = {
.description = "ICMP process plugin for parsing icmp traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("icmp", "Parse ICMP traffic");
parser.usage(std::cout);
},
};

ICMPPlugin::ICMPPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/idpContent/src/idpcontent.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest idpcontentPluginManifest = {
.description = "Idpcontent process plugin for parsing idpcontent traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("idpcontent", "Parse first bytes of flow payload");
parser.usage(std::cout);
},
};

#define MIN(a, b) (((a) < (b)) ? (a) : (b))
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/mpls/src/mpls.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest mplsPluginManifest = {
.description = "Mpls process plugin for parsing mpls traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("mpls", "Parse MPLS traffic");
parser.usage(std::cout);
},
};

MPLSPlugin::MPLSPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/netbios/src/netbios.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,11 @@ static const PluginManifest netbiosPluginManifest = {
.description = "Netbios process plugin for parsing netbios traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("netbios", "Parse netbios traffic");
parser.usage(std::cout);
},
};
NETBIOSPlugin::NETBIOSPlugin(const std::string& params, int pluginID)
: ProcessPlugin(pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/nettisa/src/nettisa.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,11 @@ static const PluginManifest nettisaPluginManifest = {
.description = "Nettisa process plugin for parsing Nettisa flow.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("nettisa", "Parse NetTiSA flow");
parser.usage(std::cout);
},
};

NETTISAPlugin::NETTISAPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/ntp/src/ntp.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -31,7 +31,11 @@ static const PluginManifest ntpPluginManifest = {
.description = "Ntp process plugin for parsing ntp traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("ntp", "Parse NTP traffic");
parser.usage(std::cout);
},
};

// #define DEBUG_NTP
Expand Down
8 changes: 7 additions & 1 deletion src/plugins/process/osquery/src/osquery.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -30,7 +30,13 @@ static const PluginManifest osqueryPluginManifest = {
.description = "Osquery process plugin for parsing osquery traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser(
"osquery",
"Collect information about locally outbound flows from OS");
parser.usage(std::cout);
},
};

OSQUERYPlugin::OSQUERYPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/ovpn/src/ovpn.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -54,7 +54,11 @@ static const PluginManifest ovpnPluginManifest = {
.description = "Ovpn process plugin for parsing ovpn traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("ovpn", "OpenVPN detector plugin");
parser.usage(std::cout);
},
};

OVPNPlugin::OVPNPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/passiveDns/src/passivedns.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -38,7 +38,11 @@ static const PluginManifest passivednsPluginManifest = {
.description = "Passivedns process plugin for parsing DNS A and AAAA records.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("passivedns", "Parse A, AAAA and PTR records from DNS traffic");
parser.usage(std::cout);
},
};

// #define DEBUG_PASSIVEDNS
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/quic/src/quic.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -27,7 +27,11 @@ static const PluginManifest quicPluginManifest = {
.description = "Quic process plugin for parsing quic traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("quic", "Parse QUIC traffic");
parser.usage(std::cout);
},
};

QUICPlugin::QUICPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/rtsp/src/rtsp.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -32,7 +32,11 @@ static const PluginManifest rtspPluginManifest = {
.description = "Rtsp process plugin for parsing rtsp traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("rtsp", "Parse RTSP traffic");
parser.usage(std::cout);
},
};

// #define DEBUG_RTSP
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/sip/src/sip.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,11 @@ static const PluginManifest sipPluginManifest = {
.description = "Sip process plugin for parsing sip traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("sip", "Parse SIP traffic");
parser.usage(std::cout);
},
};

SIPPlugin::SIPPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/smtp/src/smtp.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -28,7 +28,11 @@ static const PluginManifest smtpPluginManifest = {
.description = "Smtp process plugin for parsing smtp traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("smtp", "Parse SMTP traffic");
parser.usage(std::cout);
},
};

SMTPPlugin::SMTPPlugin(const std::string& params, int pluginID)
Expand Down
8 changes: 7 additions & 1 deletion src/plugins/process/ssaDetector/src/ssadetector.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -25,7 +25,13 @@ static const PluginManifest ssadetectorPluginManifest = {
.description = "Ssadetector process plugin for parsing vpn_automaton traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser(
"ssadetector",
"Check traffic for SYN-SYNACK-ACK sequence to find possible network tunnels.");
parser.usage(std::cout);
},
};

SSADetectorPlugin::SSADetectorPlugin(const std::string& params, int pluginID)
Expand Down
4 changes: 2 additions & 2 deletions src/plugins/process/ssaDetector/src/ssadetector.hpp
Original file line number Diff line number Diff line change
Expand Up @@ -148,10 +148,10 @@ class SSADetectorPlugin : public ProcessPlugin {
OptionsParser* get_parser() const
{
return new OptionsParser(
"SSADetector",
"ssadetector",
"Check traffic for SYN-SYNACK-ACK sequence to find possible network tunnels.");
}
std::string get_name() const { return "SSADetector"; }
std::string get_name() const { return "ssadetector"; }
RecordExt* get_ext() const { return new RecordExtSSADetector(m_pluginID); }
ProcessPlugin* copy();

Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/ssdp/src/ssdp.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest ssdpPluginManifest = {
.description = "Ssdp process plugin for parsing ssdp traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("ssdp", "Parse SSDP traffic");
parser.usage(std::cout);
},
};

// #define DEBUG_SSDP
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/tls/src/tls.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -33,7 +33,11 @@ static const PluginManifest tlsPluginManifest = {
.description = "Tls process plugin for parsing tls traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("tls", "Parse TLS traffic");
parser.usage(std::cout);
},
};

// Print debug message if debugging is allowed.
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/vlan/src/vlan.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -24,7 +24,11 @@ static const PluginManifest vlanPluginManifest = {
.description = "Vlan process plugin for parsing vlan traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("vlan", "Parse VLAN traffic");
parser.usage(std::cout);
},
};

VLANPlugin::VLANPlugin(const std::string& params, int pluginID)
Expand Down
6 changes: 5 additions & 1 deletion src/plugins/process/wg/src/wg.cpp
Original file line number Diff line number Diff line change
Expand Up @@ -26,7 +26,11 @@ static const PluginManifest wgPluginManifest = {
.description = "Wg process plugin for parsing wg traffic.",
.pluginVersion = "1.0.0",
.apiVersion = "1.0.0",
.usage = nullptr,
.usage =
[]() {
OptionsParser parser("wg", "Parse WireGuard traffic");
parser.usage(std::cout);
},
};

WGPlugin::WGPlugin(const std::string& params, int pluginID)
Expand Down