Network traffic classification using OpenWrt

[alimarefat69]

Hi All,

I configured the openWRT as the edge of my wireless netwrok. I aim to inspect al the network trafic and do some classification based on the result. So far I am using TCPDUMP which is giving me a naive information about packet header info. I need more detailed data. I was looking for some Deep Packet Inspections to run on openWRT and saw netfy but it seems all the features are not free. Can anyone helps me a better solution for my objective?

Thanks

[hnyman]

@alimarefat69

aim to inspect al the network trafic and do some classification based on the result.

How about the qosify package ?

See

Qosify: new package for DSCP marking + cake

Hi, I've made a new package for OpenWrt called qosify, which implements many features also found in this script. Instead of using iptables and ipset, it implements classification as a single configurable eBPF module. It supports port based rules and DNS hostname wildcard/regex matching for classification. You can find some details about it in this readme: https://git.openwrt.org/?p=project/qosify.git;a=blob;f=README The package is in OpenWrt master.

[Hudra]

If you are on x86 you can use ntopng as a docker container for dpi.