I wanted to use flow starring/marking functionality, so fixed code and made it working.
When working with big number of flows refetch (required to update info) is slow, so I added FORCE_REFETCH_ON_STAR constant (change default behavior if necessary).
In the process I have changed some hotkeys (see frontend/src/pages/Home.tsx) to be more closely located and memorable.
I made reset scroll on flow switch as a default behavior. It makes sense when working with big flows so that I start from the first message in the flow.
The bug remains when opening graph by pressing g, then clicking on the point. Selected flow will be shown, but navigation is difficult. To make navigation usable, when flow is not focused, I added hotkey (w) to fix it and added helpful message in Graph view.
After successful run with Suricata tagging of analyzed pcaps, I added Docker deployment file and documentation.
Fixed tag dropping code in wipe_tags.py, added information in README. Because old suricata rules were repopulated from logs (signatures) I changed this "dirty wipe code".
Thank you for making useful open source tool!
I wanted to use flow starring/marking functionality, so fixed code and made it working.
When working with big number of flows refetch (required to update info) is slow, so I added
FORCE_REFETCH_ON_STARconstant (change default behavior if necessary).In the process I have changed some hotkeys (see
frontend/src/pages/Home.tsx) to be more closely located and memorable.I made
reset scroll on flow switchas a default behavior. It makes sense when working with big flows so that I start from the first message in the flow.The bug remains when opening graph by pressing
g, then clicking on the point. Selected flow will be shown, but navigation is difficult. To make navigation usable, when flow is not focused, I added hotkey (w) to fix it and added helpful message in Graph view.After successful run with Suricata tagging of analyzed pcaps, I added Docker deployment file and documentation. Fixed tag dropping code in
wipe_tags.py, added information in README. Because old suricata rules were repopulated from logs (signatures) I changed this "dirty wipe code".Also improved README with more information.