openeuler/ndpi repository overview

⁠Quick reference

• The official npdi docker image.

• Maintained by: openEuler CloudNative SIG⁠.

• Where to get help: openEuler CloudNative SIG⁠, openEuler⁠.

⁠nDPI | openEuler

Current nDPI docker images are built on the openEuler⁠. This repository is free to use and exempted from per-user rate limits.

nDPI® is an open source LGPLv3 library for deep-packet inspection.

Learn more on nDPI website⁠.

⁠Supported tags and respective Dockerfile links

The tag of each npdi docker image is consist of the version of npdi and the version of basic image. The details are as follows

⁠Usage

In this usage, users can select the corresponding {Tag} based on their requirements.

• Pull the openeuler/npdi image from docker

  docker pull openeuler/npdi:{Tag}
  

  Copy

• Run with an interactive shell

  You can start the container with an interactive shell to use npdi.

  docker run -it --rm openeuler/npdi:{Tag} bash
  

  Copy

• Download a sample PCAP

  wget https://wiki.wireshark.org/uploads/__moin_import__/attachments/SampleCaptures/dns_port.pcap
  

  Copy

  Node:

  • This file contains DNS packets captured on a non-standard port.
  • It is commonly used to test how deep packet inspection works when protocols run on unusual ports.

• Run ndpiReader to analyze the PCAP

  /nDPI/example/ndpiReader -i dns_port.pcap
  

  Copy

  Note:

  • -i specifies the input interface or PCAP file.
  • The tool will parse the packets, classify detected protocols, and output basic statistics.

⁠Question and answering

If you have any questions or want to use some special features, please submit an issue or a pull request on openeuler-docker-images⁠.