Commit Graph

1826 Commits

Author SHA1 Message Date
Daniel
5802cb2bf7 Improve account matching data 2023-07-28 16:49:41 +02:00
Daniel
2452a92b8b Fix history database URI on windows 2023-07-28 16:48:38 +02:00
Daniel
b882b910ca Fix PID detection via eBPF 2023-07-28 16:47:52 +02:00
Daniel
8e9f96d3fd Improve ebpf permanent failure detection 2023-07-28 16:47:36 +02:00
Daniel
84ee0b11f5 Bump core version 2023-07-22 20:51:05 +02:00
Daniel Hovie
2c9bb8d86e Merge pull request #1255 from safing/feature/history-module
feature/history module
2023-07-22 20:50:24 +02:00
Daniel
e18d7ade3d Add missing method comment 2023-07-22 20:42:26 +02:00
Daniel
c6569e64b1 Update SPN to v0.6.9 2023-07-22 20:23:59 +02:00
Daniel
3cc12a3d69 Increase timeout of self-check 2023-07-22 20:23:33 +02:00
Daniel
a5a5a15112 Improve updating allowed features on connection 2023-07-21 16:06:47 +02:00
Daniel
daa33c1a88 Improve network history setting 2023-07-21 16:06:21 +02:00
Daniel
07f4253e0b Improve logging and make linter happy 2023-07-21 16:05:57 +02:00
Daniel
f0ebc6e72f Update BytesReceived/Sent field names 2023-07-21 16:05:13 +02:00
Daniel
e70fd9abd7 Reduce noisy logging 2023-07-21 16:04:02 +02:00
Daniel
49adef242e Update links in README 2023-07-21 16:03:26 +02:00
Patrick Pacher
5dcb6b268f Persist bandwidth data in netquery DBs when enabled 2023-07-21 11:38:05 +02:00
Daniel
b7fd1fc76a Update config annotation 2023-07-21 10:56:50 +02:00
Patrick Pacher
dbffa8827b Update netquery to support history module 2023-07-20 16:24:13 +02:00
Patrick Pacher
cf2b8f26b9 Make history module optional 2023-07-20 16:21:52 +02:00
Patrick Pacher
135b68c008 Better utilize database indexes for UNION selects 2023-07-20 16:21:52 +02:00
Patrick Pacher
e9e9b54364 Research on possible history module implementation using sqlite ATTACH DATABASE 2023-07-20 16:21:52 +02:00
Daniel
45117c630f Bump core version 2023-07-20 15:14:21 +02:00
Daniel Hovie
cc2a66351a Merge pull request #1256 from safing/feature/reboot-on-restart
Add switch to reboot on internal restart
2023-07-20 15:13:38 +02:00
Daniel
d037b00ff9 Add switch to reboot on internal restart 2023-07-20 15:07:16 +02:00
Daniel Hovie
8b65b2328d Merge pull request #1234 from safing/fix/process-detection
Improve process detection
2023-07-20 15:06:13 +02:00
Daniel
1cd6db817e Update deps 2023-07-20 14:59:34 +02:00
Daniel
1449a9639a Update golangci-lint config 2023-07-20 14:05:29 +02:00
Daniel
0670956bbd Fix parsing tagged windows service names 2023-07-20 14:05:16 +02:00
Daniel
fce1a7ac33 Do not suggest using stale DNS cache when disabled by user 2023-07-20 14:04:56 +02:00
Daniel
5fe78dbad5 Match connections without PID only using UndefinedProcessID 2023-07-20 14:04:16 +02:00
Daniel
41ffb2c72d Improve windows kext bandwidth stats monitor 2023-07-20 14:02:50 +02:00
Daniel
6d569ca346 Improve epbf bandwidth stats monitor 2023-07-20 14:02:21 +02:00
Daniel
4c21c87b8a Improve ebpf connection listener 2023-07-20 14:01:58 +02:00
Daniel
dc033c3933 Add InfoPacket and BandwidthUpdate structs for cross platform usage 2023-07-20 13:47:39 +02:00
Daniel
688b2de26e Rename files for clarity 2023-07-20 13:46:18 +02:00
Daniel
ec85816577 Move interception module and better integrate workers 2023-07-20 13:43:55 +02:00
Daniel
41c5266315 Use reported PIDs for DNS requests and improve data gathering process 2023-07-20 13:37:01 +02:00
Daniel
5d7caeb4bb Expose connection ID creation 2023-07-20 13:36:09 +02:00
Daniel
28d3d24988 Add and improve InfoOnly and ExpectInfo packet flags 2023-07-18 16:16:41 +02:00
Vladimir Stoilov
83479acc95 Add example for getting bandwidth stats 2023-06-30 16:56:39 +03:00
Vladimir Stoilov
95716dbb47 Add missing ebpf compiled object 2023-06-26 11:43:30 +03:00
Vladimir Stoilov
74b4ce0869 Make default pid to be -1 and remove unsafe code 2023-06-23 16:41:21 +03:00
Vladimir Stoilov
daeafa406d Add ebpf bandwidth monitoring 2023-06-23 10:06:31 +03:00
Daniel
8a09ba6045 Revamp connection handling flow to fix race condition and support info-only packets 2023-06-21 15:31:45 +02:00
Vladimir Stoilov
83b084959e Fix ebpf return on error 2023-06-14 18:51:20 +03:00
Vladimir Stoilov
2b65e8efe1 Add ebpf check for failed kernel functions 2023-06-14 17:56:01 +03:00
Vladimir Stoilov
cecce3ffcb Fix ebpf source port, add event validation and simpify tcp monitoring 2023-06-14 17:35:09 +03:00
Vladimir Stoilov
f754555979 Add reading of the pid from the kext 2023-06-13 18:03:22 +03:00
Vladimir Stoilov
cee7e9b0c8 Add ebpf compiled programs 2023-06-09 11:33:30 +03:00
Vladimir Stoilov
169a5a1303 Use datagram_connect for udp ebpf process detection 2023-06-09 11:31:24 +03:00