History

Terrtia 7078f341ae fix: [README]		2020-03-12 11:15:35 +01:00
..
analyzer	chg: [exporter TLS] add client cert	2020-03-10 15:04:29 +01:00
configs	chg: [Analyzer Queues] Add queue by group of sensors (TODO: add sensor uuid in the UI)	2020-02-28 16:52:48 +01:00
documentation	chg: [core] add redis server in config	2019-11-25 16:28:20 +01:00
gen_cert	chg: [install] copy crt and key to Flash folder	2019-09-23 11:32:05 +02:00
lib	fix: [Analyzer queue 254] fix metatype: push to queue	2020-03-03 15:34:51 +01:00
update	chg: [Analyzer Queue] add template: edit queue	2020-03-03 14:14:35 +01:00
web	chg: [Analyzer Queue] add template: edit queue	2020-03-03 14:14:35 +01:00
workers	chg: [Metatype default] send data to analyzer queues by default	2020-03-03 10:57:04 +01:00
.gitignore	chg: [server + workers] add config file + add option to specify save directory	2019-03-26 15:21:36 +01:00
Dockerfile.analyzer-d4-passivedns	use d4 github. Will works if pull request is accepted and Environmental variables allowed to control REDIS servers config	2019-06-11 16:41:31 -06:00
Dockerfile.d4-server	use d4 github. Will works if pull request is accepted and Environmental variables allowed to control REDIS servers config	2019-06-11 16:41:31 -06:00
LAUNCH.sh	chg: [TLS Exporter] add new analyzer: tls export, fix: #35	2020-03-10 14:43:45 +01:00
README.md	fix: [README]	2020-03-12 11:15:35 +01:00
docker-compose.yml	that works	2019-06-11 16:37:11 -06:00
install_server.sh	fix: [install script] cp default config	2019-12-03 10:29:15 +01:00
requirement.txt	chg: [UI] add user management	2019-08-14 12:53:51 +02:00
server.py	chg: [core] add redis server in config	2019-11-25 16:28:20 +01:00

README.md

D4 core

D4 core server

D4 core server is a complete server to handle clients (sensors) including the decapsulation of the D4 protocol, control of sensor registrations, management of decoding protocols and dispatching to adequate decoders/analysers.

Requirements

Python 3.6
GNU/Linux distribution

Installation

Install D4 server

cd server
./install_server.sh

Create or add a pem in d4-core/server :

cd gen_cert
./gen_root.sh
./gen_cert.sh
cd ..

Launch D4 server

./LAUNCH.sh -l

The web interface is accessible via http://127.0.0.1:7000/

Updating web assets

To update javascript libs run:

cd web
./update_web.sh

API

API Documentation

Notes

All server logs are located in d4-core/server/logs/
Close D4 Server: ./LAUNCH.sh -k

D4 core server

Dashboard:

Connected Sensors:

Sensors Status:

Server Management:

analyzer Queues:

Troubleshooting

Worker 1, tcpdump: Permission denied

Could be related to AppArmor:

sudo cat /var/log/syslog | grep denied

Run the following command as root:

aa-complain /usr/sbin/tcpdump