Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Minimal mode and verbose mode #3

Open
spitfire55 opened this issue Oct 4, 2019 · 0 comments
Open

Minimal mode and verbose mode #3

spitfire55 opened this issue Oct 4, 2019 · 0 comments
Labels
enhancement New feature or request

Comments

@spitfire55
Copy link
Collaborator

If a user only wants to log Connection objects that have at least one analyzer, and ignore everything else, they should be able to.

For example, if someone wants to write an analyzer that filters for DNS traffic that contains domains ending in .io, they should be able to configure Gourmet to only log Connections that meet this filter, and ignore/drop everything else.

To implement this:

  1. Create a new config.yml option called capture_mode with three options: minimal, normal, and payloads.
  2. If minimal is set, only log connections that have met one or filters for the loaded analyzers
  3. If normal is set, log all connections objects and any analyzer results (default, current mode)
  4. If verbose is set, log all connection objects, a base64 dump of the connection payload, and any analyzer results
@spitfire55 spitfire55 added enhancement New feature or request Hacktoberfest Fix this issue to win a free T-Shirt! labels Oct 4, 2019
@spitfire55 spitfire55 removed the Hacktoberfest Fix this issue to win a free T-Shirt! label Nov 8, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant