netcap | A framework for secure and scalable network traffic

by dreadl0ck Go Version: v0.6.11 License: GPL-3.0

X-Ray Key Features Code Snippets Community Discussions(4)Vulnerabilities Install Support

kandi X-RAY | netcap Summary

netcap is a Go library. netcap has no bugs, it has no vulnerabilities, it has a Strong Copyleft License and it has medium support. You can download it from GitHub.

the netcap (network capture) framework efficiently converts a stream of network packets into platform neutral type-safe structured audit records that represent specific protocols or custom abstractions. these audit records can be stored on disk or exchanged over the network, and are well suited as a data source for machine learning algorithms. since parsing of untrusted input can be dangerous and network data is potentially malicious, a programming language that provides a garbage collected memory safe runtime is used for the implementation. it was developed for a series of experiments in my bachelor thesis: implementation and evaluation of secure and scalable anomaly-based network intrusion detection. slides from my presentation at the leibniz supercomputing centre of the bavarian academy of sciences and humanities are available on researchgate. the project won the 2nd place at kaspersky labs securit cup 2018 in budapest. netcap uses google's protocol buffers to encode its output, which allows accessing it across a wide range of

Support

Quality

Security

License

Reuse

Support

netcap has a medium active ecosystem.

It has 1590 star(s) with 150 fork(s). There are 32 watchers for this library.

It had no major release in the last 12 months.

There are 2 open issues and 15 have been closed. On average issues are closed in 172 days. There are no pull requests.

It has a neutral sentiment in the developer community.

The latest version of netcap is v0.6.11

Quality

netcap has no bugs reported.

Security

netcap has no vulnerabilities reported, and its dependent libraries have no vulnerabilities reported.

License

netcap is licensed under the GPL-3.0 License. This license is Strong Copyleft.

Strong Copyleft licenses enforce sharing, and you can use them when creating open source projects.

Reuse

netcap releases are available to install and integrate.

Top functions reviewed by kandi - BETA

kandi's functional review helps you automatically verify the functionalities of the libraries and avoid rework.
Currently covering the most popular Java, JavaScript and Python libraries. See a Sample of netcap

Get all kandi verified functions for this library.

netcap Key Features

No Key Features are available at this moment for netcap.

netcap Examples and Code Snippets

No Code Snippets are available at this moment for netcap.

Community Discussions

Trending Discussions on netcap

after called BindProcessToNetwork(network). APP never connect to internet through mobile data

How to execute docker-entrypoint-initdb.d/init.sql files AFTER database is created?

Allow incoming connection on Port 502 with bidirectional port forwarding

Xamarin/special wifi permissions for android 10?

QUESTION

after called BindProcessToNetwork(network). APP never connect to internet through mobile data

Asked 2020-Nov-20 at 14:33

My APP use WifiNetworkSpecifier to connect to a router.

And once connect to the router. APP called

connection_manager.BindProcessToNetwork(network);

After called this function. Even I turn off the WiFi. And turn on the mobile data.

The APP will not able to connect to internet anymore.

If this function is not called. APP will be able to connect to internet through mobile data.

What is the mechanism of BindProcessToNetwork()?

Here is my code. (ref from ref 1 ref 2)

...

ANSWER

Answered 2020-Nov-20 at 14:33

Once BindProcessToNetwork is called, ALL networking sockets are bound to that network for the lifecycle of that app (this is mainly a security feature so packets will not "leak" another network).

You can clear that network binding by calling BindProcessToNetwork again, but passing in null as your network type.

Source https://stackoverflow.com/questions/64913185

QUESTION

How to execute docker-entrypoint-initdb.d/init.sql files AFTER database is created?

Asked 2020-Oct-01 at 14:25

I have a Django app with Docker

I want to initialize my database based on init.sql file when running docker-compose up

2 containers are correctly built and init.sql file is available in db_container

but docker logs db_container show an error indicating that database has not been migrated yet:

ERROR: relation table1 does not exist

Database is created when entrypoint.sh files is executed (command python manage.py migrate)

I do not understand when init.db is executed?

Dockerfile

...

ANSWER

Answered 2020-Sep-30 at 14:49

/docker-entrypoint-initdb.d/init.sql is executed the moment your database container starts running, while your entrypoint.sh is executed the moment your web container starts running. Since your web container depends on your database container, the SQL script will always be executed ahead of your entrypoint.

In other words, what you want is impossible.

You need to either create the database and table1 in init.sql and tell Django not to attempt creating them if they already exists or somehow add your INSERT.. to the list of migrations to be run.

I've never used Django, so I do not know if either of the above is possible.

Source https://stackoverflow.com/questions/64139963

QUESTION

Allow incoming connection on Port 502 with bidirectional port forwarding

Asked 2020-Apr-20 at 15:17

Working on an embedded Linux system (with some limited resources), my current application demands that external device talk to this board via Ethernet TCP/IP, on port 502. By default, ports under 1024 are blocked under *nix environments.

So, lets suppose that external device opens a port on 502, and embedded device listens on 8502. How can I transparently allow a bidirectional communication in between those devices?

Good news is that ROOT access is granted to implement this Port Forwarding solution, which will reside inside the embedded Linux device on continuous run, but haven't found what is the correct command for such.

I have tried using iptables, with different combinations of the following commands:

...

ANSWER

Answered 2017-Jul-24 at 21:37

In case someone else stumbles on this very issue: unfortunately, my iptables version hasn't support for REDIRECT, which was crucial to make it work. So the solution was to compile another application for my hardware. And in this case socat.

The command to make my application work was:

socat TCP-LISTEN:502,fork TCP-CONNECT:127.0.0.1:8502

Hope it can be helpful for future needs.

Source https://stackoverflow.com/questions/45202850

QUESTION

Xamarin/special wifi permissions for android 10?

Asked 2020-Feb-06 at 23:30

I've got an app that connects to a wifi access point, then connects to a local server on port 50,000. Works fine on API < 29. But in 29, I have to use ConnectivityManager instead of WifiManager. Got that working no problem. The problem is connecting to the server afterwards. The device acts like port 50,000 is closed, yet I have other devices right here that are connecting without problem. But if I tell the device to connect to the same server on port 80 (which is also open), boom, instant connection. So I am connected to the access point and the server is accessible, I just can't get it to connect to 50,000. Is there some special permission I need to request to access ports >1024 maybe? I tried adding the internet permission to my manifest, but if I add the capability NetCapability.Internet then the callback gets instantly called with OnUnavailable. Doesn't even try. I've also got capabilities NotRestricted and Trusted in there too. Anyone know what I'm missing here?

...

ANSWER

Answered 2020-Feb-06 at 23:30

After the wifi switch succeeds and OnAvailable gets called, you must call ConnectivityManager.BindProcessToNetwork().

Source https://stackoverflow.com/questions/60102413

Community Discussions, Code Snippets contain sources that include Stack Exchange Network

Vulnerabilities

No vulnerabilities reported

Install netcap

You can download it from GitHub.

Support

Contributions welcome, there's plenty of stuff to do, from simple additions to low level framework engineering!. Please see the Contributing Page for more information.

Find more information at: