Commit graph

7 commits

Author SHA1 Message Date
Anze 096c7d6f4f Fix failing tests (wrong index when accessing netflow records) 2020-02-22 23:20:36 +01:00
Dominik Pataky adb02eab24 Update to 2020 in file headers; update the analyzer file name in README
The analyzer is now found in analyzer.py and uses the '-f' flag for
GZIPed input files. Bundled with the previous PR commit, this update
should now be clearer.
2020-01-20 16:59:36 +01:00
Dominik Pataky 61439ec6ef Improve analyzer (handling of pairs, dropping noise)
Previously, the analyzer assumed that two consecutive flows would be a
pair. This proved unreliable, therefore a new comparison algorithm is
ussed. It utilizes the IP addresses and the 'first_switched' parameter
to identify two flows of the same connection.

More improvements can be done, especially filtering and in the
identification of the initiating peer.

Tests still fail, have to be adapted to the new dicts and gzip.
2019-11-03 15:58:40 +01:00
Dominik Pataky bfec3953e6 Bump version, fix small errors, decrease packet num in tests 2019-10-31 17:35:15 +01:00
Carey Metcalfe bf92f24669 Add test for invalid packets 2019-10-16 23:46:32 -04:00
Carey Metcalfe 186b648c4d Fix tests
Uses the analyzer's new stdin-reading capabilities to test the analysis
without having to write temporary files. Also removes most of the delays
because the listener can keep up now.
2019-10-16 23:44:28 -04:00
Dominik Pataky 8de110980c Add tests for the collector (main.py). 2019-03-31 21:23:24 +02:00