Jump to content
Калькуляторы
Блокировка веб ресурса  

541 members have voted

  1. 1. Для блокировка используем



Блокировка сайтов провайдерами маневры с DNS

/lib

libnetfilter_queue.so.1 -> libnetfilter_queue.so.1.3.0

libnfnetlink.so.0 -> libnfnetlink.so.0.2.0

 

Что-то у вас некорректно установлено, т.к. если система x86_64, то этих библиотек не должно быть в /lib

Это я их сам доставил, думал нехватает 32 битных, их небыло все равно не ставилось

Share this post


Link to post
Share on other sites

Ставить надо не просто голые либы, а -devel к ним.

Спасибо, с -devel компилируется

Share this post


Link to post
Share on other sites

Если кому нужно.

Вот тут патчик для nfqfilter, что бы компилился на старых OS,

у меня на Slackware 13.37.0 64bit компилисться и работает.

Может автор nfqfilter вставит его в существующий проект.

 

diff -uNr ./nfqfilter/include/sender.h ./nfqfilter.new/include/sender.h

--- ./nfqfilter/include/sender.h 2016-05-24 10:18:57.000000000 +0300

+++ ./nfqfilter.new/include/sender.h 2016-05-24 10:18:42.000000000 +0300

@@ -41,7 +41,7 @@

struct params

{

std::string redirect_url;

- std::string code="302 Moved Temporarily";

+ static std::string code;

};

CSender( std::string url );

CSender(struct params &prm);

diff -uNr ./nfqfilter/src/main.cpp ./nfqfilter.new/src/main.cpp

--- ./nfqfilter/src/main.cpp 2016-05-24 10:18:57.000000000 +0300

+++ ./nfqfilter.new/src/main.cpp 2016-05-24 10:18:42.000000000 +0300

@@ -17,6 +17,7 @@

*

*/

 

+#include <sys/signal.h>

#include <iostream>

#include <Poco/NumberParser.h>

#include "main.h"

diff -uNr ./nfqfilter/src/sender.cpp ./nfqfilter.new/src/sender.cpp

--- ./nfqfilter/src/sender.cpp 2016-05-24 10:18:57.000000000 +0300

+++ ./nfqfilter.new/src/sender.cpp 2016-05-24 10:18:42.000000000 +0300

@@ -22,6 +22,8 @@

#include <netinet/ip6.h>

#include <Poco/FileStream.h>

 

+std::string CSender::params::code="302 Moved Temporarily";

+

struct pseudo_header

{

u_int32_t source_address;

Edited by Стич

Share this post


Link to post
Share on other sites

Периодически падает процесс таки...

 

Не могу подтвердить, у себя не наблюдаю падений. Есть что-то в логах самого nfqfilter ?

 

В логах ничего не вижу подозрительного, но падать так же продолжает периодически.

 

journalctl:

 

Jun 06 12:38:19 nfqfilter systemd[1]: nfqfilter.service: main process exited, code=killed, status=6/ABRT
Jun 06 12:38:19 nfqfilter systemd[1]: Unit nfqfilter.service entered failed state.
Jun 06 12:38:19 nfqfilter systemd[1]: nfqfilter.service failed.
Jun 06 13:04:17 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 13:04:17 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 13:34:18 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 13:34:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 13:34:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 14:04:17 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 14:04:17 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 14:04:17 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 14:34:17 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 14:34:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 14:34:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 15:04:16 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 15:04:16 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 15:04:16 nfqfilter systemd[1]: PID file /var/run/nfqfilter.pid not readable (yet?) after start.
Jun 06 15:04:16 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 15:34:18 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 15:34:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 15:34:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 16:04:17 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 16:04:17 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 16:04:17 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 16:34:17 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 16:34:17 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 16:34:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 17:04:17 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 17:04:17 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 17:04:17 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 17:34:18 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 17:34:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 17:34:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 18:04:18 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 18:04:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 18:04:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 18:34:18 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 18:34:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 18:34:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 19:04:18 nfqfilter systemd[1]: Stopping Nfqilter filtering daemon...
Jun 06 19:04:18 nfqfilter systemd[1]: Starting Nfqilter filtering daemon...
Jun 06 19:04:18 nfqfilter systemd[1]: Started Nfqilter filtering daemon.
Jun 06 19:15:18 nfqfilter systemd[1]: nfqfilter.service: main process exited, code=killed, status=6/ABRT
Jun 06 19:15:18 nfqfilter systemd[1]: Unit nfqfilter.service entered failed state.
Jun 06 19:15:18 nfqfilter systemd[1]: nfqfilter.service failed.

 

 

nfqfilter log:

 

2016-06-06 19:04:18.314 [22836] Information Application - State of task NFQStatisticTask is 3
2016-06-06 19:04:18.314 [22836] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 76, marked ssl: 0, marked hosts: 0, rst send: 21
2016-06-06 19:04:18.314 [22836] Information Application - State of task nfqThread is 3
2016-06-06 19:04:18.401 [25857] Information Application - Starting up on queue: 0
2016-06-06 19:04:18.409 [25857] Warning Application - Pattern xn--80aafc2bcqz.xn--p1ai already present in domains list
2016-06-06 19:04:18.410 [25857] Warning Application - Pattern xn--e1awew.xn--p1ai already present in domains list
2016-06-06 19:04:18.525 [25857] Warning Application - Pattern muzofon.com/search/íññìáëüü%20ððññò%20ïàññòòë  %20%20àòòü%20ûûð%20åìë  %20åçàòòü%20õõ%20ñûòû%20ðæè already present in URL database
2016-06-06 19:04:18.583 [25857] Warning Application - Pattern high-stone-forum.info/index.php/topic/1609-àê-ûûðññòòòü-ññëîööáèíîâûû-ððáûû/ already present in URL database
2016-06-06 19:04:18.602 [25857] Warning Application - Pattern song5.ru/text/ëåêññíäðð-õðð÷êîâ-à÷÷ì-õõõûû-àì-÷ððîìîððñèé-ôîòò already present in URL database
2016-06-06 19:04:18.625 [25857] Warning Application - Pattern kolifornia.ru/ððéññ.html already present in URL database
2016-06-06 19:04:18.677 [25857] Warning Application - Pattern ru.videosection.com/îäððññòè.html already present in URL database
2016-06-06 19:04:18.682 [25857] Warning Application - Pattern kalefornea.ru/ððéññ.html already present in URL database
2016-06-06 19:04:18.708 [25857] Warning Application - Pattern klad4u.biz/óóèòòü-ìôôòòìèí_åòòððîôô already present in URL database
2016-06-06 19:04:18.712 [25857] Warning Application - Pattern nurr.ru/content/ïððâåððåíèå-ïàññîãî-àáëóóäåíè  -õçá-óò-òõõððð-ñ-ñòððíûû-õõüü-ññ-ñóíà-à-üü-æàìàà--îï already present in URL database
2016-06-06 19:04:18.720 [25857] Warning Application - Pattern antanartia.tumblr.com/post/85745447369/ññððûòå-åí-íññòðóöö  -ç  ò-ç-ñòò already present in URL database
2016-06-06 19:04:18.721 [25857] Warning Application - Pattern sneg.audio/show/îëîâððòò-ðäèêàëüüûû-îëîññ already present in URL database
2016-06-06 19:04:18.726 [25857] Warning Application - Pattern song5.ru/text/åîíèä-îððèëîâ-àññîððò-åç-ððôôû-àööîíàëüüîññòü already present in URL database
2016-06-06 19:04:18.916 [25857] Warning Application - Pattern song5.ru/text/ëåêññíäðð-õðð÷êîâ-à÷÷ì-õõõûû-àì-÷ððîìîððñèé-ôîòò already present in URL database
2016-06-06 19:04:18.921 [25857] Warning Application - Pattern vkmp3.su/mp3/áððùùíèå%20àëèôô%20ððâîâåððûûõ./ already present in URL database
2016-06-06 19:04:18.922 [25857] Warning Application - Pattern troe-v-goa.org/óóèòòü-ñìåíà-îíîïëè/semena-konopli-marixuany-kanabisa.html already present in URL database
2016-06-06 19:04:18.923 [25857] Warning Application - Pattern 247.caivp.biz/?îððä_ûûððí/ already present in URL database
2016-06-06 19:04:18.925 [25857] Warning Application - Pattern lurkmore.to/þþòèí already present in URL database
2016-06-06 19:04:18.931 [25857] Warning Application - Pattern song5.ru/text/ñéòòðð-òû-åëûû-èã-õéëüü already present in URL database
2016-06-06 19:04:18.947 [25857] Warning Application - Pattern song5.ru/text/warriors-of-zion--ô-îéööû already present in URL database
2016-06-06 19:04:18.951 [25857] Warning Application - Pattern lurkmore.to/àéë:Moe_77869_sample.jpg already present in URL database
2016-06-06 19:04:18.966 [25857] Warning Application - Pattern legalc.biz/óóèòòü-ñàéññ-åãàë_ôô already present in URL database
2016-06-06 19:04:18.969 [25857] Warning Application - Pattern legalc.biz/óóèòòü-ñàéññ-ñëè-èêññû_åãèîí already present in URL database
2016-06-06 19:04:18.971 [25857] Warning Application - Pattern mix-rc.biz/ððññòëë-åãàë-ôô already present in URL database
2016-06-06 19:04:18.998 [25857] Warning Application - Pattern kalefarnia.ru/ððéññ.html already present in URL database
2016-06-06 19:04:18.999 [25857] Warning Application - Pattern kriminall.biz/index.php?/topic/90-ððäàì-ôëüüøâûû-óóþþðû-ðñññéññèõõ-àíêîâ/ already present in URL database
2016-06-06 19:04:19.000 [25857] Warning Application - Pattern muzofon.com/search/íññìáëüü%20ððññò%20ïàññòòë  %20%20àòòü%20ûûð%20åìë  %20åçàòòü%20õõ%20ñûòû%20ðæè already present in URL database
2016-06-06 19:04:22.799 [25857] Information nfqThread - NFQ: Binding to queue 0
2016-06-06 19:04:22.799 [25857] Information nfqThread - Setting queue length to 4096
2016-06-06 19:04:22.799 [25857] Information nfqThread - Setting nfnl bufsize to 6144000
2016-06-06 19:04:32.799 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:04:32.799 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:04:32.799 [25857] Information Application - nDPI current memory usage: 1.76 MB
2016-06-06 19:04:32.800 [25857] Information Application - nDPI maximum memory usage: 1.76 MB
2016-06-06 19:04:32.800 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:04:32.800 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:04:32.800 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:04:32.800 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:04:42.800 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:04:42.800 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:04:42.800 [25857] Information Application - nDPI current memory usage: 1.76 MB
2016-06-06 19:04:42.800 [25857] Information Application - nDPI maximum memory usage: 1.76 MB
2016-06-06 19:04:42.800 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:04:42.800 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:04:42.800 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:04:42.800 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:04:52.800 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:04:52.800 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:04:52.800 [25857] Information Application - nDPI current memory usage: 1.76 MB
2016-06-06 19:04:52.800 [25857] Information Application - nDPI maximum memory usage: 1.76 MB
2016-06-06 19:04:52.801 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:04:52.801 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:04:52.801 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:04:52.801 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:05:02.801 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:05:02.801 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:05:02.801 [25857] Information Application - nDPI current memory usage: 1.76 MB
2016-06-06 19:05:02.801 [25857] Information Application - nDPI maximum memory usage: 1.76 MB
2016-06-06 19:05:02.801 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:05:02.801 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:05:02.801 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:05:02.801 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:05:12.801 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:05:12.801 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:05:12.801 [25857] Information Application - nDPI current memory usage: 1.76 MB
2016-06-06 19:05:12.801 [25857] Information Application - nDPI maximum memory usage: 1.76 MB
2016-06-06 19:05:12.801 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:05:12.801 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:05:12.802 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:05:12.802 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:05:22.802 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:05:22.802 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:05:22.802 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:05:22.802 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:05:22.802 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:05:22.802 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:05:22.802 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:05:22.802 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:05:32.802 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:05:32.802 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:05:32.802 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:05:32.802 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:05:32.802 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:05:32.802 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:05:32.802 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:05:32.803 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:05:42.803 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:05:42.803 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:05:42.803 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:05:42.803 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:05:42.803 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:05:42.803 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:05:42.803 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:05:42.803 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:05:52.803 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:05:52.803 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:05:52.803 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:05:52.803 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:05:52.803 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:05:52.803 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:05:52.803 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:05:52.803 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:06:02.804 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:06:02.804 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:06:02.804 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:06:02.804 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:06:02.804 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:06:02.804 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:06:02.804 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:06:02.804 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:06:12.804 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:06:12.804 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:06:12.804 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:06:12.804 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:06:12.804 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:06:12.804 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:06:12.804 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:06:12.804 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:06:22.804 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:06:22.805 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:06:22.805 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:06:22.805 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:06:22.805 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:06:22.805 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:06:22.805 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:06:22.805 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:06:32.805 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:06:32.805 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:06:32.805 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:06:32.805 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:06:32.805 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:06:32.805 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:06:32.805 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:06:32.805 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:06:42.805 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:06:42.805 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:06:42.806 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:06:42.806 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:06:42.806 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:06:42.806 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:06:42.806 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:06:42.806 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:06:52.806 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:06:52.806 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:06:52.806 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:06:52.806 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:06:52.806 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:06:52.806 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:06:52.806 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:06:52.806 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:07:02.806 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:07:02.806 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:07:02.806 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:07:02.806 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:07:02.807 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:07:02.807 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:07:02.807 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:07:02.807 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:07:12.807 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:07:12.807 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:07:12.807 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:07:12.807 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:07:12.807 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:07:12.807 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:07:12.807 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:07:12.807 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:07:22.807 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:07:22.807 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:07:22.807 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:07:22.807 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:07:22.807 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:07:22.807 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:07:22.807 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:07:22.808 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:07:32.808 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:07:32.808 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:07:32.808 [25857] Information Application - nDPI current memory usage: 1.77 MB
2016-06-06 19:07:32.808 [25857] Information Application - nDPI maximum memory usage: 1.77 MB
2016-06-06 19:07:32.808 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:07:32.808 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:07:32.808 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:07:32.808 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:07:42.808 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:07:42.808 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:07:42.808 [25857] Information Application - nDPI current memory usage: 1.79 MB
2016-06-06 19:07:42.808 [25857] Information Application - nDPI maximum memory usage: 1.79 MB
2016-06-06 19:07:42.808 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:07:42.808 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:07:42.808 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:07:42.808 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:07:52.809 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:07:52.809 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:07:52.809 [25857] Information Application - nDPI current memory usage: 1.79 MB
2016-06-06 19:07:52.809 [25857] Information Application - nDPI maximum memory usage: 1.79 MB
2016-06-06 19:07:52.809 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:07:52.809 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:07:52.809 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:07:52.809 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:08:02.809 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:08:02.809 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:08:02.809 [25857] Information Application - nDPI current memory usage: 1.80 MB
2016-06-06 19:08:02.809 [25857] Information Application - nDPI maximum memory usage: 1.80 MB
2016-06-06 19:08:02.809 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:08:02.809 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:08:02.809 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:08:02.809 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:08:12.809 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:08:12.810 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:08:12.810 [25857] Information Application - nDPI current memory usage: 1.80 MB
2016-06-06 19:08:12.810 [25857] Information Application - nDPI maximum memory usage: 1.80 MB
2016-06-06 19:08:12.810 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:08:12.810 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:08:12.810 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:08:12.810 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:08:22.810 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:08:22.810 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:08:22.810 [25857] Information Application - nDPI current memory usage: 1.80 MB
2016-06-06 19:08:22.810 [25857] Information Application - nDPI maximum memory usage: 1.80 MB
2016-06-06 19:08:22.810 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:08:22.810 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:08:22.810 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:08:22.810 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:08:32.810 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:08:32.810 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:08:32.811 [25857] Information Application - nDPI current memory usage: 1.81 MB
2016-06-06 19:08:32.811 [25857] Information Application - nDPI maximum memory usage: 1.81 MB
2016-06-06 19:08:32.811 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:08:32.811 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:08:32.811 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:08:32.811 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:08:42.811 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:08:42.811 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:08:42.811 [25857] Information Application - nDPI current memory usage: 1.82 MB
2016-06-06 19:08:42.811 [25857] Information Application - nDPI maximum memory usage: 1.82 MB
2016-06-06 19:08:42.811 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:08:42.811 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:08:42.811 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:08:42.811 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:08:52.811 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:08:52.811 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:08:52.811 [25857] Information Application - nDPI current memory usage: 1.82 MB
2016-06-06 19:08:52.811 [25857] Information Application - nDPI maximum memory usage: 1.82 MB
2016-06-06 19:08:52.812 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:08:52.812 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:08:52.812 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:08:52.812 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:09:02.812 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:09:02.812 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:09:02.812 [25857] Information Application - nDPI current memory usage: 1.82 MB
2016-06-06 19:09:02.812 [25857] Information Application - nDPI maximum memory usage: 1.82 MB
2016-06-06 19:09:02.812 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:09:02.812 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:09:02.812 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:09:02.812 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:09:12.812 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:09:12.812 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:09:12.812 [25857] Information Application - nDPI current memory usage: 1.83 MB
2016-06-06 19:09:12.812 [25857] Information Application - nDPI maximum memory usage: 1.83 MB
2016-06-06 19:09:12.812 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:09:12.813 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:09:12.813 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:09:12.813 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:09:22.813 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:09:22.813 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:09:22.813 [25857] Information Application - nDPI current memory usage: 1.84 MB
2016-06-06 19:09:22.813 [25857] Information Application - nDPI maximum memory usage: 1.84 MB
2016-06-06 19:09:22.813 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:09:22.813 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:09:22.813 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:09:22.813 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:09:32.813 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:09:32.813 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:09:32.813 [25857] Information Application - nDPI current memory usage: 1.84 MB
2016-06-06 19:09:32.813 [25857] Information Application - nDPI maximum memory usage: 1.84 MB
2016-06-06 19:09:32.813 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:09:32.814 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:09:32.814 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:09:32.814 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:09:42.814 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:09:42.814 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:09:42.814 [25857] Information Application - nDPI current memory usage: 1.85 MB
2016-06-06 19:09:42.814 [25857] Information Application - nDPI maximum memory usage: 1.85 MB
2016-06-06 19:09:42.814 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:09:42.814 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:09:42.814 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:09:42.814 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:09:52.814 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:09:52.814 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:09:52.814 [25857] Information Application - nDPI current memory usage: 1.86 MB
2016-06-06 19:09:52.814 [25857] Information Application - nDPI maximum memory usage: 1.86 MB
2016-06-06 19:09:52.814 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:09:52.814 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:09:52.815 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:09:52.815 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:10:02.815 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:10:02.815 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:10:02.815 [25857] Information Application - nDPI current memory usage: 1.87 MB
2016-06-06 19:10:02.815 [25857] Information Application - nDPI maximum memory usage: 1.87 MB
2016-06-06 19:10:02.815 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:10:02.815 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:10:02.815 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:10:02.815 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:10:12.815 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:10:12.815 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:10:12.815 [25857] Information Application - nDPI current memory usage: 1.87 MB
2016-06-06 19:10:12.815 [25857] Information Application - nDPI maximum memory usage: 1.87 MB
2016-06-06 19:10:12.815 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:10:12.815 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:10:12.816 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:10:12.816 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:10:22.816 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:10:22.816 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:10:22.816 [25857] Information Application - nDPI current memory usage: 1.87 MB
2016-06-06 19:10:22.816 [25857] Information Application - nDPI maximum memory usage: 1.87 MB
2016-06-06 19:10:22.816 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:10:22.816 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:10:22.816 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:10:22.816 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:10:32.816 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:10:32.816 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:10:32.816 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:10:32.816 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:10:32.816 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:10:32.816 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:10:32.816 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:10:32.816 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:10:42.817 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:10:42.817 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:10:42.817 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:10:42.817 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:10:42.817 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:10:42.817 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:10:42.817 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:10:42.817 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:10:52.817 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:10:52.817 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:10:52.817 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:10:52.817 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:10:52.817 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:10:52.817 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:10:52.817 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:10:52.817 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:11:02.817 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:11:02.818 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:11:02.818 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:11:02.818 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:11:02.818 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:11:02.818 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:11:02.818 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:11:02.818 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:11:12.818 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:11:12.818 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:11:12.818 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:11:12.818 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:11:12.818 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:11:12.818 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:11:12.818 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:11:12.818 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:11:22.818 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:11:22.818 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:11:22.819 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:11:22.819 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:11:22.819 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:11:22.819 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:11:22.819 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:11:22.819 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:11:32.819 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:11:32.819 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:11:32.819 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:11:32.819 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:11:32.819 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:11:32.819 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:11:32.819 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:11:32.819 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:11:42.819 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:11:42.819 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:11:42.819 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:11:42.819 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:11:42.820 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:11:42.820 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:11:42.820 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:11:42.820 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:11:52.820 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:11:52.820 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:11:52.820 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:11:52.820 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:11:52.820 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:11:52.820 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:11:52.820 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:11:52.820 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:12:02.820 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:12:02.820 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:12:02.820 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:12:02.820 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:12:02.820 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:12:02.821 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:12:02.821 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:12:02.821 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:12:12.821 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:12:12.821 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:12:12.821 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:12:12.821 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:12:12.821 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:12:12.821 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:12:12.821 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:12:12.821 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:12:22.821 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:12:22.821 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:12:22.821 [25857] Information Application - nDPI current memory usage: 1.88 MB
2016-06-06 19:12:22.821 [25857] Information Application - nDPI maximum memory usage: 1.88 MB
2016-06-06 19:12:22.821 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:12:22.821 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:12:22.821 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:12:22.821 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:12:32.822 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:12:32.822 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:12:32.822 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:12:32.822 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:12:32.822 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:12:32.822 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:12:32.822 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:12:32.822 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:12:42.822 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:12:42.822 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:12:42.822 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:12:42.822 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:12:42.822 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:12:42.822 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:12:42.822 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:12:42.822 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:12:52.823 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:12:52.823 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:12:52.823 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:12:52.823 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:12:52.823 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:12:52.823 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:12:52.823 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:12:52.823 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:13:02.823 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:13:02.823 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:13:02.823 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:13:02.823 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:13:02.823 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:13:02.823 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:13:02.823 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:13:02.823 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:13:12.823 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:13:12.824 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:13:12.824 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:13:12.824 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:13:12.824 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:13:12.824 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:13:12.824 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:13:12.824 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:13:22.824 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:13:22.824 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:13:22.824 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:13:22.824 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:13:22.824 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:13:22.824 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:13:22.824 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:13:22.824 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:13:32.824 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:13:32.824 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:13:32.824 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:13:32.825 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:13:32.825 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:13:32.825 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:13:32.825 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:13:32.825 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:13:42.825 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:13:42.825 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:13:42.825 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:13:42.825 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:13:42.825 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:13:42.825 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:13:42.825 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:13:42.825 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:13:52.825 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:13:52.825 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:13:52.825 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:13:52.825 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:13:52.825 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:13:52.826 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:13:52.826 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:13:52.826 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:14:02.826 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:14:02.826 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:14:02.826 [25857] Information Application - nDPI current memory usage: 1.89 MB
2016-06-06 19:14:02.826 [25857] Information Application - nDPI maximum memory usage: 1.89 MB
2016-06-06 19:14:02.826 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:14:02.826 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:14:02.826 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:14:02.826 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:14:12.826 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:14:12.826 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:14:12.826 [25857] Information Application - nDPI current memory usage: 1.90 MB
2016-06-06 19:14:12.826 [25857] Information Application - nDPI maximum memory usage: 1.90 MB
2016-06-06 19:14:12.826 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:14:12.826 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:14:12.826 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:14:12.827 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:14:22.827 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:14:22.827 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:14:22.827 [25857] Information Application - nDPI current memory usage: 1.90 MB
2016-06-06 19:14:22.827 [25857] Information Application - nDPI maximum memory usage: 1.90 MB
2016-06-06 19:14:22.827 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:14:22.827 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:14:22.827 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:14:22.827 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:14:32.827 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:14:32.827 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:14:32.827 [25857] Information Application - nDPI current memory usage: 1.90 MB
2016-06-06 19:14:32.827 [25857] Information Application - nDPI maximum memory usage: 1.90 MB
2016-06-06 19:14:32.827 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:14:32.827 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 0, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:14:32.827 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:14:32.827 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:14:42.828 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:14:42.828 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:14:42.828 [25857] Information Application - nDPI current memory usage: 1.90 MB
2016-06-06 19:14:42.828 [25857] Information Application - nDPI maximum memory usage: 1.90 MB
2016-06-06 19:14:42.828 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:14:42.828 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 1, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:14:42.828 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:14:42.828 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:14:52.828 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:14:52.828 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:14:52.828 [25857] Information Application - nDPI current memory usage: 1.90 MB
2016-06-06 19:14:52.828 [25857] Information Application - nDPI maximum memory usage: 1.90 MB
2016-06-06 19:14:52.828 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:14:52.828 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 1, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:14:52.828 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:14:52.828 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:15:02.829 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:15:02.829 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:15:02.829 [25857] Information Application - nDPI current memory usage: 1.90 MB
2016-06-06 19:15:02.829 [25857] Information Application - nDPI maximum memory usage: 1.90 MB
2016-06-06 19:15:02.829 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:15:02.829 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 1, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:15:02.829 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:15:02.829 [25857] Information Application - State of task SenderTask is 2
2016-06-06 19:15:12.829 [25857] Information Application - nDPI memory (once): 104.60 KB
2016-06-06 19:15:12.829 [25857] Information Application - nDPI memory per flow: 1.91 KB
2016-06-06 19:15:12.829 [25857] Information Application - nDPI current memory usage: 1.91 MB
2016-06-06 19:15:12.829 [25857] Information Application - nDPI maximum memory usage: 1.91 MB
2016-06-06 19:15:12.829 [25857] Information Application - State of task NFQStatisticTask is 2
2016-06-06 19:15:12.829 [25857] Information Application - Thread 'nfqThread': redirected domains 0, redirected urls: 1, marked ssl: 0, marked hosts: 0, rst send: 0
2016-06-06 19:15:12.829 [25857] Information Application - State of task nfqThread is 2
2016-06-06 19:15:12.829 [25857] Information Application - State of task SenderTask is 2

 

 

Ловить дебаг логом, или дело может в файле запуска?

 

[unit]
Description=Nfqilter filtering daemon
Requires=network.target
After=network.target

[service]
Type=forking
ExecStart=/usr/local/bin/nfqfilter --daemon --pidfile=/var/run/nfqfilter.pid -c /etc/nfqfilter/nfqfilter.ini
PIDFile=/var/run/nfqfilter.pid
ExecReload=/bin/kill -HUP $MAINPID

[install]
WantedBy=multi-user.target

 

UPD:

 

А под вечер вообще что-то странное началось...

 

Samples: 83K of event 'cycles', Event count (approx.): 34432196305
 Children      Self  Shared Object        Symbol
+   97.76%    97.39%  nfqfilter            [.] ac_automata_finalize
+   12.68%     0.00%  [unknown]            [.] 0x0000000008464f80
+   12.67%     0.00%  [unknown]            [.] 0x00000000083d4f70
+    0.67%     0.00%  [kernel]             [k] worker_thread
+    0.63%     0.63%  [kernel]             [k] memcpy
+    0.55%     0.00%  perf                 [.] hist_entry_iter__add
+    0.40%     0.02%  [kernel]             [k] apic_timer_interrupt
+    0.36%     0.00%  [kernel]             [k] smp_apic_timer_interrupt
+    0.26%     0.12%  perf                 [.] __hists__add_entry
+    0.25%     0.01%  [kernel]             [k] irq_exit

 

top - 22:56:56 up 13 days, 20:46,  3 users,  load average: 2.07, 2.07, 1.61
Tasks: 160 total,   1 running, 159 sleeping,   0 stopped,   0 zombie
%Cpu(s): 50.0 us,  0.0 sy,  0.0 ni, 49.9 id,  0.0 wa,  0.0 hi,  0.1 si,  0.0 st
KiB Mem :  4036068 total,  2904288 free,   768312 used,   363468 buff/cache
KiB Swap: 16777208 total, 16777208 free,        0 used.  3031784 avail Mem

 PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
14067 root      20   0  525560 116308   2540 S 200.0  2.9  43:43.24 /usr/local/bin/nfqfilter --daemon --pidfile=/var/run/nfqfilter.pid -c /etc/nfqfilter/nfqfilter.ini

Edited by hsvt

Share this post


Link to post
Share on other sites

+   97.76%    97.39%  nfqfilter            [.] ac_automata_finalize

 

Эта функция вызывается после прочтения данных из конфигов (при старте программы или получения сигнала на перечитывание конфигов) и занимает достаточно много процессорного времени в виду большого количества url.

 

В логах ничего не вижу подозрительного, но падать так же продолжает периодически.

 

Запускайте программу с возможностью создания core dump. Как только получите core dump, разберемся в причинах падения.

Share this post


Link to post
Share on other sites

Добрый день!

Есть такой сайт tv.jw.org, nfqfilter успешно блокирует его, хотя в реестре запрещенных ресурсов этот сайт отсутствует, есть записи с информацией о блокировке сайта jw.org, и тип блокировки у записей не указан, значит, как я понимаю, должны блокироваться только URL с указанным доменом, а поддомены должны открываться:

 

 

/reg:register/content

/reg:register/content/@id=141011

/reg:register/content/@includeTime=2015-01-26T19:05:28

/reg:register/content/@entryType=1

/reg:register/content/@hash=0673BC97A6213115CE7B4A542CE668A3

/reg:register/content/decision/@date=2013-08-07

/reg:register/content/decision/@number=2-1926/2013

/reg:register/content/decision/@org=суд

/reg:register/content/url=http://www.jw.org

/reg:register/content/domain=www.jw.org

--

/reg:register/content

/reg:register/content/@id=141051

/reg:register/content/@includeTime=2015-01-26T19:05:28

/reg:register/content/@entryType=1

/reg:register/content/@hash=A92D3899A68541CFE0588FE21D7341C2

/reg:register/content/decision/@date=2013-08-07

/reg:register/content/decision/@number=2-1926/2013

/reg:register/content/decision/@org=суд

/reg:register/content/url=http://jw.org

/reg:register/content/domain=jw.org

--

/reg:register/content

/reg:register/content/@id=165732

/reg:register/content/@includeTime=2015-04-02T10:24:51

/reg:register/content/@entryType=1

/reg:register/content/@hash=368AFA43A10E72CF6DC918A710C6EB57

/reg:register/content/decision/@date=2013-08-07

/reg:register/content/decision/@number=2-1926/2013

/reg:register/content/decision/@org=суд

/reg:register/content/url=http://www.jw.org/ru/

/reg:register/content/domain=www.jw.org

--

/reg:register/content

/reg:register/content/@id=165966

/reg:register/content/@includeTime=2015-04-02T10:27:03

/reg:register/content/@entryType=1

/reg:register/content/@hash=794A73EA73A33F50DA71CE1354CD9838

/reg:register/content/decision/@date=2013-08-07

/reg:register/content/decision/@number=2-1926/2013

/reg:register/content/decision/@org=суд

/reg:register/content/url=https://www.jw.org

/reg:register/content/domain=www.jw.org

--

/reg:register/content

/reg:register/content/@id=165967

/reg:register/content/@includeTime=2015-04-02T10:27:08

/reg:register/content/@entryType=1

/reg:register/content/@hash=E38BECDA27EAD4581B7F55D84B66992E

/reg:register/content/decision/@date=2013-08-07

/reg:register/content/decision/@number=2-1926/2013

/reg:register/content/decision/@org=суд

/reg:register/content/url=https://jw.org

/reg:register/content/domain=jw.org

 

 

Подскажите, должен ли блокироваться поддомен tv.jw.org? И если не должен - то из-за чего он может блокироваться и как исправить?

Share this post


Link to post
Share on other sites

Подскажите, должен ли блокироваться поддомен tv.jw.org? И если не должен - то из-за чего он может блокироваться и как исправить?

 

Попробуйте выставить в настройках

match_host_exactly=true

Share this post


Link to post
Share on other sites

Запускайте программу с возможностью создания core dump. Как только получите core dump, разберемся в причинах падения.

 

Как это сделать не подскажите ?

 

kernel.core_uses_pid = 1
kernel.core_pattern = /root/core-%e-%p
ulimit -c unlimited

Share this post


Link to post
Share on other sites

Запускайте программу с возможностью создания core dump. Как только получите core dump, разберемся в причинах падения.

 

Как это сделать не подскажите ?

 

kernel.core_uses_pid = 1
kernel.core_pattern = /root/core-%e-%p
ulimit -c unlimited

 

Обычно перед строкой запуска делаете

ulimit -c unlimited

Share this post


Link to post
Share on other sites

Для nfqfilter.

 

Есть ли возможность вставлять сети, а не ip,

в файл с ip адресами для блокировки ssl по ip.

 

Хочется для того что бы блочить а ля vulcan-club-online.com которые

используют случайные ip c сети 52.0.0.0/10, если в ssl пакете нет server_name

Share this post


Link to post
Share on other sites

Для nfqfilter.

 

Есть ли возможность вставлять сети, а не ip,

в файл с ip адресами для блокировки ssl по ip.

 

Хочется для того что бы блочить а ля vulcan-club-online.com которые

используют случайные ip c сети 52.0.0.0/10, если в ssl пакете нет server_name

 

Необходимо добавить поддержку ip/mask в код, т.к. сейчас поддерживается только один хост (ip/32).

Share this post


Link to post
Share on other sites

Для nfqfilter.

 

Есть ли возможность вставлять сети, а не ip,

в файл с ip адресами для блокировки ssl по ip.

 

Хочется для того что бы блочить а ля vulcan-club-online.com которые

используют случайные ip c сети 52.0.0.0/10, если в ssl пакете нет server_name

 

Необходимо добавить поддержку ip/mask в код, т.к. сейчас поддерживается только один хост (ip/32).

Да, было бы неплохо в sslips

Edited by Стич

Share this post


Link to post
Share on other sites

Да, было бы неплохо в sslips

 

Добавил данный функционал, можете проверить.

Share this post


Link to post
Share on other sites

Запустили ПА Ревизор у себя. Сотрудники РЧЦ в тесте запустили проверку всего реестра. Не прошли проверку следующие ресурсы:

 

http://danbooru.donmai.us/posts/1864170%3Ftags%3Dpanties&usg=ALkJrhjCxgdAjwzW802H13O9rpUoGO0bvg

http://www.torrentdownloads.me/torrent/1660191821/%D0%9D%D0%B0%D1%81%D1%82%D0%BE%D1%8F%D1%89%D0%B8%D0%B9+%D0%B4%D0%B5%D1%82%D0%B5%D0%BA%D1%82%D0%B8%D0%B2+2+%D1%81%D0%B5%D0%B7%D0%BE%D0%BD+Am++%5Bscarabey+%5D

http://lurkmore.co/%D0%A2%D1%83%D1%81%D1%81%D0%B8%D0%BD%2B

http://media.clarionproject.org/files/islamic-state/isis-isil-islamic-state-magazine-issue%2B9-they-plot-and-allah-plots-sex-slavery.pdf

http://sky2be.com/onlayn/187411761_171526625/02.07.15+Яценюк+–+дерьмо%2C+даешь+хаос+и+наступление+на+Брянщину

http://news-cinema.com/o/187411761_171526625/02.07.15+%D0%AF%D1%86%D0%B5%D0%BD%D1%8E%D0%BA+%E2%80%93+%D0%B4%D0%B5%D1%80%D1%8C%D0%BC%D0%BE%2C+%D0%B4%D0%B0%D0%B5%D1%88%D1%8C+%D1%85%D0%B0%D0%BE%D1%81+%D0%B8+%D0%BD%D0%B0%D1%81%D1%82%D1%83%D0%BF%D0%BB%D0%B5%D0%BD%D0%B8%D0%B5+%D0%BD%D0%B0+%D0%91%D1%80%D1%8F%D0%BD%D1%89%D0%B8%D0%BD%D1%83

http://www.torrentdownloads.me/torrent/1660191959/%D0%9D%D0%B0%D1%81%D1%82%D0%BE%D1%8F%D1%89%D0%B8%D0%B9+%D0%B4%D0%B5%D1%82%D0%B5%D0%BA%D1%82%D0%B8%D0%B2+2+%D1%81%D0%B5%D0%B7%D0%BE%D0%BD+Am+%5Bscarabey+%5D

http://stuffstore.biz/city_id%3d23.html

 

 

Хотя в конфигурационных файлах nfqfilter`а все эти ссылки присутствуют. Трафик идет 100% через nfqfilter. В чем может быть проблемма?

 

ЗЫ

nfqfilter последней сборки.

Share this post


Link to post
Share on other sites

В чем может быть проблемма?

 

Проблема в корявости заполнения реестра. На днях подкорректирую код конфигуратора для решения такого рода проблем.

Share this post


Link to post
Share on other sites

В чем может быть проблемма?

 

Проблема в корявости заполнения реестра. На днях подкорректирую код конфигуратора для решения такого рода проблем.

 

Я что-то такое пилил себе для обхода таких "корявостей" - https://gist.github.com/strizhechenko/179fcbd6541995245cdc63ab3749b6a5. Может пригодится. Но вообще - libcostyl, да и только :(

Edited by weirded

Share this post


Link to post
Share on other sites

В чем может быть проблемма?

 

Проблема в корявости заполнения реестра. На днях подкорректирую код конфигуратора для решения такого рода проблем.

 

Я что-то такое пилил себе для обхода таких "корявостей" - https://gist.github.com/strizhechenko/179fcbd6541995245cdc63ab3749b6a5. Может пригодится. Но вообще - libcostyl, да и только :(

 

Ещё, к сожалению, и браузеры чудят. IE кодирует url по своим "алгоритмам".

Share this post


Link to post
Share on other sites

Для nfqfilter.

 

при блокировки по домену

https не блокируется при наличии server_name естественно.

 

Что вообще делать при блокировке по домену,

по идее надо ж все протоколы блокировать,

может фильтровать запросы на DNS резолвинг?

Share this post


Link to post
Share on other sites

Последним своим постом Вы наступили на мою мысль, уважаемый Стич, которую я реализовал у себя.

Решение от max1976 конечно прекрасное. Но врятли правильно весь "блокинг" вешать на nfqfilter.

Дамп реестра я разделяю на 3 части:

1. ип , которые надо блочить ( blocktype=ip ), засовываю их в ipset, и отправляю их на бордере с помощью iptables -t nat -I PREROUTING -i <входящий интерфейс> -p tcp -m set match-set blocklist dst -j DNAT --to <ip с заглушкой>

2. домены с (blocktype=domain) + домены урлы которых совпадают с доменами ("короткие урлы"). их я направляю на кеширующий резолвер который в /var/cache/bind содержит туеву тучу зон вида:

$ttl 300
@       IN      SOA     dns.gameflex.marathonbet6.com. admin.gameflex.marathonbet6.com. (
                       2016061710
                       10800
                       3600
                       604800
                       38400 )
@       IN      NS      dns.gameflex.marathonbet6.com.
@       IN      MX      10 mail.gameflex.marathonbet6.com.
@       IN      A       <ип с заглушкой>
*       IN      A       <ип с заглушкой>

В данный момент на резолвере 9448 зон, шуршит и не стонет. ( да ! на его входящем интерфейсе сидят все ипы известных мне открытых рекурсивных резолверов, а что делать .... :( )

 

Для nfqfilter готовлю файл только с urla-ми, заново резолвю их, агрегирую суммарный файл с ипами в префиксы с масками от 29 до 17 ( что не попадает - остаётся с маской 32 )

вот таким кодом :

......

r=/dev/shm

D2B=({0..1}{0..1}{0..1}{0..1}{0..1}{0..1}{0..1}{0..1})

while read line7 ; do

IFS=./ read -r a1 a2 a3 a4 m <<< $line7

b="${D2B[$a1]}${D2B[$a2]}${D2B[$a3]}${D2B[$a4]}"

echo "$b" >> $r/ips/sum_ips_b.txt

done < $r/ips/summary_dump_ips.txt

#############################################

for i in $(seq 29 -1 17) ; do

echo "end" >> $r/ips/sum_ips_b.txt

while : ; do

line8=`head -n 1 $r/ips/sum_ips_b.txt`

if [ "$line8" == end ] ; then sed -i "/^end/d" $r/ips/sum_ips_b.txt ; break ; fi

patt=`echo ${line8:0:$i}`

count=`grep -c "^$patt" $r/ips/sum_ips_b.txt`

if [ $count -gt 1 ] ; then

echo "$patt $i" >> $r/ips/agr0.txt

sed -i "/^$patt/d" $r/ips/sum_ips_b.txt

else

sed -n '1p' $r/ips/sum_ips_b.txt >> $r/ips/sum_ips_b.txt && sed -i '1d' $r/ips/sum_ips_b.txt

fi

done

done

###############################################

while read line9 ; do

echo "$line9 32" >> $r/ips/agr0.txt

done < $r/ips/sum_ips_b.txt

while read line10 ; do

read bina mask <<< $line10

k=$((32-$mask))

fill=`printf '%*s' $k|tr " " "0"`

newipb="${bina}${fill}"

newip="$((2#${newipb:0:8})).$((2#${newipb:8:8})).$((2#${newipb:16:8})).$((2#${newipb:24:8}))/$mask"

echo "$newip" >> $r/ips/agregated_dump_ips.txt

done < $r/ips/agr0.txt

......

файл agregated_dump_ips.txt скармливаю на бордере в другой ипсет, который редиректю на машинку с nfqfilter.

 

"короткие урлы" отделяю от "длинных" вот так :

r=/dev/shm
xmlstarlet sel -t -m '//content' -v 'url' -n $r/dump.xml|sed '/^\s*$/d' > $r/urls/u0.txt
while read line1 ; do
echo "${line1}"|grep -qE "^https|http://"
if [ $? -eq 0 ] ; then
 a0=`echo "${line1}"|sed -e 's/http.*:\/\///'`
 a1=$(dirname "${a0}")
 if [ "${a1}" == "." ] ; then echo "${a0}"|tr -d '/' >> $r/doms/short_urls.txt ; else echo "${line1%/}" >> $r/urls/long_urls.txt ; fi
fi
done < $r/urls/u0.txt.

 

Потом "длинные урлы" делю на http и на https, с русскими буквами конвертю в cp1251 и utf8 (какому браузеру как нравиться) и готовлю списки для резовлинга вот так :

....
function urlencode() {
   local data
   local u777
   local p777
   local suffix
p777=`echo "${1}"|awk -F ">" '{print $1}'`
u777=`echo "${1}"|awk -F ">" '{print $2}'`
suffix=`echo "${1}"|awk -F ">" '{print $3}'`
   data="$(curl -s -o /dev/null -w %{url_effective} --get --data-urlencode "${u777}" "")"
#set +x
   echo "${p777}${data##/?}" >> $r/urls/u2${suffix}.txt
   return 0
}
xmlstarlet sel -t -m '//content' -v '@id' -o "_" -v 'ip/text()' -o ";" $r/dump.xml|tr "[\n_]" " "|tr ";" "\n" > $r/ips/id_ip.txt
xmlstarlet sel -t -m '//content' -v 'url' -o " " -v '@id' -n $r/dump.xml > $r/urls/url_id0.txt
while read url_id ; do
nof=`echo "${url_id}"|awk -F " " '{print NF}'`
if [ $nof -eq 2 ] ; then echo "${url_id}" >> $r/urls/url_id.txt ; fi
done < $r/urls/url_id0.txt
#
# proto://user:password@host:port/path?query#fragment
while read line3 ; do
s=""
id=`grep -F "${line3}" $r/urls/url_id.txt|awk '{print $2}'`
ip=`grep -w "^${id}" $r/ips/id_ip.txt|awk '{$1=""; print $0}'`
#
res_1=$(dirname "${line3}")
abc=`echo "${res_1}/"`
proto0="`echo "${line3}"|grep '://' | sed -e's,^\(.*://\).*,\1,g'`"
 proto=`echo $proto0 | sed -e s,://,,g`
url=`echo "${line3}"|sed -e s,$proto0,,g`
 path="`echo $url | grep / | cut -d/ -f2-`"
  res="`echo "${path}"|awk -F '/' '{print $NF}'`"
 uphp="`echo $url | grep / | cut -d/ -f1`"
  userpass="`echo $uphp | grep @ | cut -d@ -f1`"
   hostport=`echo $uphp | sed -e s,$userpass@,,g`
    port0=`echo $hostport | grep : | cut -d: -f2`
     if [ -n "$port0" ]; then  host0=`echo $hostport | grep : | cut -d: -f1` ; port=`echo "${port0}"` ; else host0=$hostport ; port=80 ; fi
      host1=`echo "${host0}"|idn`
 if [ "$proto" == "https" ] ; then s=`echo "s"` ; fi
echo "$ip" >> $r/ips/xml_ips_${s}0.txt
echo "$host1" >> $r/urls/urls_${s}0.txt
nn=`grep -c -Fx "${host1}" $r/doms/d5.txt`
if [ $nn -eq 0 ] ;  then  echo "$host1" >> $r/urls/for_dig${s}0.txt ; fi
echo "${res}"|egrep -qi [а-я]
   if [ $? -eq 0 ]
    then
     echo "${line3}" >> $r/urls/u2${s}.txt
     urlencode "${abc}>${res}>${s}" ; res_w=`echo "${res}"|iconv -f utf8 -t cp1251` ; urlencode "${abc}>${res_w}>${s}"
    else
     echo "${line3}" >> $r/urls/u2${s}.txt
   fi
done < $r/urls/long_urls.txt
.....

файлы :

for_digs.txt - ипы для резолвига https хостов

for_digs.txt - ипы для резолвига http хостов

u2s.txt - "длинные" урлы https хостов

u2s.txt - "длинные" урлы http хостов

 

Ну как-то так..

Конечно в итоге задействованы :

- бордер

- машина с nfqfiter

- кеширующий резолвер со спуфингом

Но зато машина с nfqfilter загружена только тем чем только она и может заниматься.

 

#################

 

Пы.Сы"

Домены для резольвера готовим так:

 

r=/dev/shm

xmlstarlet sel -t -m '//content[@blockType=domain]' -v 'domain/text()' -n $r/dump.xml > $r/doms/d0.txt

############# отделяем домены от ип-ов в поле домен, переводим русские домены в puny-код, большие бунвы делаем маленькими

while read line0 ; do

dom0=`echo "${line0}"|idn|sed -e 's/\.$//g'`

echo "${dom0}"|egrep -qvi [a-z]

if [ $? -ne 0 ] ; then echo "${dom0}"|tr '[:upper:]' '[:lower:]' >> $r/doms/d1.txt ; fi

done < $r/doms/d0.txt

############ тоже самое делаем с короткими урлами

while read line2 ; do

line2a=`echo "${line2}"|idn|sed -e 's/\.$//g'`

echo "${line2a}"|egrep -qvi [a-z]

if [ $? -ne 0 ] ; then echo "${line2a}"|tr '[:upper:]' '[:lower:]' >> $r/doms/d3.txt ; fi

done < $r/doms/short_urls.txt

# сортирум/юникуем:

cat $r/doms/d1.txt $r/doms/d3.txt > $r/doms/d4.txt ; cat $r/doms/d4.txt|sort|uniq > $r/doms/d5.txt

#

#Если есть домен "второго уровня", то нахрен нам 3, 4 ... уровней ?

#

while read line3a ; do

counta=`echo "${line3a}"|awk -F "." '{print NF}'`

case $counta in

2)

echo "${line3a}" >> $r/doms/d6.txt

;;

3)

domain2a=`echo "${line3a}"|awk -F "." '{print $(NF-1)"."$(NF)}'`

n2=`grep -c -Fx "${domain2a}" $r/doms/d5.txt`

if [ $n2 -eq 0 ] ; then echo "${line3a}" >> $r/doms/d6.txt ; else echo "${domain2a}" >> $r/doms/d6.txt ; fi

;;

4|5|6)

domain2a=`echo "${line3a}"|awk -F "." '{print $(NF-1)"."$(NF)}'`

domain3a=`echo "${line3a}"|awk -F "." '{print $(NF-2)"."$(NF-1)"."$(NF)}'`

n2=`grep -c -Fx "${domain2a}" $r/doms/d5.txt`

n3=`grep -c -Fx "${domain3a}" $r/doms/d5.txt`

if [ $n2 -ne 0 ]

then

echo "${domain2a}" >> $r/doms/d6.txt

else

if [ $n3 -ne 0 ]

then

echo "${domain3a}" >> $r/doms/d6.txt

else

echo "${line3a}" >> $r/doms/d6.txt

fi

fi

;;

esac

done < $r/doms/d5.txt

cat $r/doms/d6.txt|sort|uniq > $r/doms/d7.txt

#

#Боремся с доменами типа "graniru" их там туева туча, все идут лесом...., кого больше сорока..

#Но незабываем что под это дело может попасть "соцуха" типа livejournal, их не надо трогать

#

while read line4a ; do

count=`echo "${line4a}"|awk -F "." '{print NF}'`

if [ $count -eq 3 ]

then

d2=`echo "${line4a}"|awk -F "." '{print $(NF-1)"."$(NF)}'`

n2=`grep -c "\.${d2}$" $r/doms/d7.txt`

if [ $n2 -ge 40 ]

then

if [[ "${d2}" != @(livejournal.com|co.uk|com.ua) ]]

then

echo "${d2}" >> $r/doms/d8.txt

else

echo "${line4a}" >> $r/doms/d8.txt

fi

else

echo "${line4a}" >> $r/doms/d8.txt

fi

else

echo "${line4a}" >> $r/doms/d8.txt

fi

done < $r/doms/d7.txt

cat $r/doms/d8.txt|sort|uniq > $r/doms/dom.rep

 

dom.rep "кормим" нашему кеширующему резольверу с спуфингом

Edited by OK-2004

Share this post


Link to post
Share on other sites

2. домены с (blocktype=domain) + домены урлы которых совпадают с доменами ("короткие урлы"). их я направляю на кеширующий резолвер который в /var/cache/bind содержит туеву тучу зон вида:

На бинде удобнее использовать специальную фичу для подмен - RPZ.

Один файл со списком доменов, и один файл зоны.

Share this post


Link to post
Share on other sites

На бинде удобнее использовать специальную фичу для подмен - RPZ.

Дя, я знаю, но мне так удобнее по другим причинам, не зависящим от "провайдерского" спуфинга, хотя наверное в общем случае можно конечно и с RPZ

Edited by OK-2004

Share this post


Link to post
Share on other sites

У кого есть красивая страница блокировки с перечнем инструментов обхода и ссылкой на роскомсвободу? Хотим запилить, не хочется изобретать велосипед.

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now