Posts

Showing posts from August, 2017

installing and configuring ndpi-netfilter for traffic controlling on RedHat/CentOS 7

nDPI is a ntop-maintained superset of the popular OpenDPI  library. Lots of projects have been done using this NDPI( Open and Extensible LGPLv3 Deep Packet Inspection Library ).  nDPI is used for application-layer detection of protocols, regardless of the port being used. This means that it is possible to both detect known protocols on non-standard ports (e.g. detect http non ports other than 80), and also the opposite (e.g. detect Skype traffic on port 80). This is because nowadays the concept of port=application no longer holds. List of protocols that can be detected using ndpi can be seen on ndpi page here.( http://www.ntop.org/products/deep-packet-inspection/ndpi/ )   Here i explain how to set up your own traffic controller using ndpi-netfilter which is very handy open project on github. Here we are setting it on on RedHat/CentOS 7 as a linux kernel module and use with linux iptables.  If you want to setup it on Ubuntu follow this separate tutorial as it is little bit