pakon-heavy-guts issueshttps://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues2020-11-12T02:23:38+01:00https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/17The balance-queue thing seems to produce strange results2020-11-12T02:23:38+01:00Ghost UserThe balance-queue thing seems to produce strange resultsA fast experiment with `--queue-balance` and putting the multiple queues onto the same bisector seems to produce some strange results. Look into them, if it really happens, if it was caused by a misconfiguration, or if there's some actua...A fast experiment with `--queue-balance` and putting the multiple queues onto the same bisector seems to produce some strange results. Look into them, if it really happens, if it was caused by a misconfiguration, or if there's some actual problem (and possibly fix it).
Basically, this means to use something like `--queue-balance 0:2` in the `launch` script and doing a corresponding changes in the `test.lua`. The observed problem seemed to be packets accounted in the wrong direction, or something that could be explain by it.https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/15Fuzzing2020-11-12T02:23:38+01:00Ghost UserFuzzingDo some fuzzing, to test if it can be crashed by arbitrary packets. It should be possible to inject packets somehow, with reasonably small changes.Do some fuzzing, to test if it can be crashed by arbitrary packets. It should be possible to inject packets somehow, with reasonably small changes.https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/10Coverity scan2017-11-20T09:55:36+01:00Ghost UserCoverity scanRegister it with coverity scan and submit. Later on provide an automated gitlab submission.Register it with coverity scan and submit. Later on provide an automated gitlab submission.https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/8Integrate libunwind2017-11-20T09:56:13+01:00Ghost UserIntegrate libunwindIf we crash, we may want to generate stack traces. This might help us.If we crash, we may want to generate stack traces. This might help us.https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/5Detect more info about flows2017-11-20T09:56:46+01:00Ghost UserDetect more info about flowsPerform more analysis and detection of the flows:
- [ ] The reverse DNS cache
* [ ] #14 Pick a DNS library
* [ ] !27 (DNS name handling)
* [ ] !28 (Provide the names to the flows)
- [x] #12 Reverse ARP cache (so we know MAC ...Perform more analysis and detection of the flows:
- [ ] The reverse DNS cache
* [ ] #14 Pick a DNS library
* [ ] !27 (DNS name handling)
* [ ] !28 (Provide the names to the flows)
- [x] #12 Reverse ARP cache (so we know MAC addresses for IP addresses if we don't get them and we can assign the computers to them)
- [ ] NDPI matching
- [x] #11 Trace the flow status (eg. when it gets closed).https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/3Configure what shall be blocked2017-11-20T09:53:13+01:00Ghost UserConfigure what shall be blockedAllow registering the callback/filter functions from lua and run them. Decide if the flow should be blocked or not.
Both the timed and flow-specific ones need to be done.
For now, having functions only is enough. We shall do the table-...Allow registering the callback/filter functions from lua and run them. Decide if the flow should be blocked or not.
Both the timed and flow-specific ones need to be done.
For now, having functions only is enough. We shall do the table-based filters and results later on as a performance (TODO: Create the issue for that).https://gitlab.nic.cz/turris/pakon-heavy-guts/-/issues/2The nfq_handle_packet sometimes returns error2020-11-12T02:23:38+01:00Ghost UserThe nfq_handle_packet sometimes returns errorFind out why that happens. Or at least make it non-fatal to the thread (because if the thread dies, we block anything that would be handled by that thread).
```
ERRORsrc/worker.cpp 72void Pakon::Worker::run() ...Find out why that happens. Or at least make it non-fatal to the thread (because if the thread dies, we block anything that would be handled by that thread).
```
ERRORsrc/worker.cpp 72void Pakon::Worker::run() 139856801949440Lost thread due to exception: nfq_handle_packet(handle, data, recvHeaders[i].msg_len) == 0 failed at src/nfq.cpp:131:bool Pakon::NFQ::process()(error: 0/Success)
```