search

ntop / nDPI

Open Source Deep Packet Inspection Software Toolkit
http://www.ntop.org
GNU Lesser General Public License v3.0
3.8k stars 892 forks source link

nDPI integration #1848

Closed 0xA50C1A1 closed 1 year ago

0xA50C1A1 commented 1 year ago

Hi guys! Are there any stuff that can help to figure out about the nDPI integration? Except for ndpiReader (it looks too complicated) and ndpiSimpleIntegration (well, it's much more clear), of course.

Do I need to implement my own connection tracker (similar to _ndpi_flowinfo & _ndpiworkflow from ndpiSimpleIntegration) to integrate nDPI into my project?

IvanNardi commented 1 year ago

Are there any stuff that can help to figure out about the nDPI integration? Except for ndpiReader (it looks too complicated) and ndpiSimpleIntegration (well, it's much more clear), of course.

Not much; ndpiReader and ndpiSimpleIntegration are the reference implementations. Some basic (outdated) information are available in a pdf file under doc\guide and you could take a look at some projects that are using nDPI: ntopng, nDPId, nfstream (you can find them on github) If you are starting from scratch, I advise you to start from ndpiSimpleIntegration

Do I need to implement my own connection tracker (similar to _ndpi_flowinfo & _ndpiworkflow from ndpiSimpleIntegration) to integrate nDPI into my project?

Yes, you do. Flow management (and packet dissection) is not performed by nDPI itself.

Sorry for not being more useful

0xA50C1A1 commented 1 year ago

tyvm for help