private void CreateReassembledL7Conversation()
{
this._l7Conversation = new L7Conversation(this._sourceEndPoint, this._destinationEndPoint, this._ipProtocolType,
this._upL7Flow, this._downL7Flow);
}
public ThirdQuartileInterArrivalTimePacketsBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection) { }
public SYNPacketsUp(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.up)
{
}
public MeanInterArrivalTimePacketsDownFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public MedianInterArrivalTimeUpFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.up)
{
}
public BytePairsReoccuringDownFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public MinInterArrivalTimePacketsUpAndDownFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.non)
{
}
public MeanInterArrivalTimePacketsBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
private void OnL7Conversation(L7Conversation l7Conversation)
{
this._l7ConversationStreamSourceQueue.OfferAsync(l7Conversation).PipeTo(this.Self);
}
public MaxPacketLengthBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
public MaxSegmentSizeDown(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public FirstQuartileControlBytesDown(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public MaxSegmentSizeBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
public NumberOfPacketsDownFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
// This constructor is also needed (called from FeatureBaseTests)
public FirstPayloadSize(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, DaRFlowDirection.non)
{
}
private Task <SnooperExportCollection> ProcessConversationAsync(L7Conversation conversation, SnooperRunner snooperRunner)
{
return(Task.Run(() => snooperRunner.Run(conversation)));
}
public MeanControlBytesDown(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public MaxInterArrivalTimeDownFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public override IReadOnlyList <NBAR2TaxonomyProtocol> RecognizeConversation(L7Conversation conversation) => this.ApplicationRecognizerNBAR.RecognizeConversation(conversation) ?? this.ApplicationRecognizerRTP.RecognizeConversation(conversation);
public FirstQuartileInterArrivalTimeBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
protected TFeature ComputeFeature(L7Conversation l7Conversation, DaRFlowDirection direction)
{
return(Activator.CreateInstance(typeof(TFeature), l7Conversation, direction) as TFeature);
}
public FINPacketsBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
public SYNPacketsDown(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.down)
{
}
public MaxSegmentSizeUp(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.up)
{
}
public MinControlBytesUpAndDown(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.non)
{
}
public NumberOfPacketsPerTimeUp(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.up)
{
}
public EntropyUpFlow(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.up)
{
}
public FirstBitPositionBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
public MeanControlBytesUp(L7Conversation l7Conversation) : base(l7Conversation, DaRFlowDirection.up)
{
}
public First3BytesEqualBase(L7Conversation l7Conversation, DaRFlowDirection flowDirection) : base(l7Conversation, flowDirection)
{
}
