Skip to content

Commit 2718759

Browse files
Zainullin DamirZainullin Damir
authored andcommitted
Process plugins - Introduce Wireguard process plugin
1 parent eaa5a3b commit 2718759

File tree

11 files changed

+557
-388
lines changed

11 files changed

+557
-388
lines changed

src/plugins/process/wg/CMakeLists.txt

Lines changed: 11 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -1,17 +1,25 @@
11
project(ipfixprobe-process-wg VERSION 1.0.0 DESCRIPTION "ipfixprobe-process-wg plugin")
22

33
add_library(ipfixprobe-process-wg MODULE
4-
src/wg.cpp
5-
src/wg.hpp
4+
src/wireguard.cpp
5+
src/wireguard.hpp
6+
src/wireguardContext.hpp
7+
src/wireguardFields.hpp
8+
src/wireguardPacketSize.hpp
9+
src/wireguardPacketType.hpp
610
)
711

812
set_target_properties(ipfixprobe-process-wg PROPERTIES
913
CXX_VISIBILITY_PRESET hidden
1014
VISIBILITY_INLINES_HIDDEN YES
1115
)
1216

13-
target_include_directories(ipfixprobe-process-wg PRIVATE
17+
target_include_directories(ipfixprobe-process-wg PRIVATE
1418
${CMAKE_SOURCE_DIR}/include/
19+
${CMAKE_SOURCE_DIR}/include/ipfixprobe/processPlugin
20+
${CMAKE_SOURCE_DIR}/include/ipfixprobe/pluginFactory
21+
${CMAKE_SOURCE_DIR}/src/plugins/process/common
22+
${adaptmon_SOURCE_DIR}/lib/include/public/
1523
)
1624

1725
if(ENABLE_NEMEA)

src/plugins/process/wg/README.md

Lines changed: 32 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,32 @@
1+
# Wireguard Plugin
2+
3+
Analyzes connections to identify WireGuard traffic.
4+
5+
## Features
6+
7+
- Calculates and exports confidence that given flow is WireGuard with extracted peer information.
8+
9+
## Output Fields
10+
11+
| Field Name | Data Type | Description |
12+
| --------------- | ---------- | ---------------------------------------------------------------- |
13+
| `WG_CONF_LEVEL` | `uint8_t` | Confidence that given flow is WireGuard as a percentage (0-100). |
14+
| `WG_SRC_PEER` | `uint32_t` | Extracted WireGuard peer identifier from source IP address. |
15+
| `WG_DST_PEER` | `uint32_t` | Extracted WireGuard peer identifier from destination IP address. |
16+
17+
## Usage
18+
19+
### YAML Configuration
20+
21+
Add the plugin to your ipfixprobe YAML configuration:
22+
23+
```yaml
24+
process_plugins:
25+
- wg
26+
```
27+
28+
### CLI Usage
29+
30+
You can also enable the plugin directly from the command line:
31+
32+
`ipfixprobe -p wg ...`

src/plugins/process/wg/src/wg.cpp

Lines changed: 0 additions & 237 deletions
This file was deleted.

0 commit comments

Comments
 (0)