TRIVLA Agent

Deep visibility at the edge.

A high-performance C++ agent for Linux, FreeBSD/NetBSD, and Windows. Monitor every flow, enforce policy inline, and buffer telemetry locally when the portal is unreachable.

Installation guides Agent API

Core capabilities

Everything you need for network operations, security, and VoIP engineering — in one installable package.

↔

Traffic monitoring

Inbound/outbound bandwidth, connections, sessions, packets, and protocols with full 5-tuple tracking, Geo-IP, and ASN enrichment.

◉

Application detection

nDPI classifies HTTP, HTTPS, DNS, SIP, RTP, databases, VPNs, SaaS apps, and hundreds more protocols in real time.

⛨

Firewall engine

Block or allow by IP, CIDR, country, ASN, protocol, and rate limits. Backends: nftables + ipset (Linux), pf (BSD), WFP (Windows).

⚠

Threat intelligence

Auto-updated feeds for malicious IPs, spam sources, SIP attackers, scanners, and botnets with geo blocking via MaxMind GeoLite2.

Protocol & service monitoring

  • ✓ SIP/VoIP — UDP/TCP/TLS SIP, RTP, RTCP, HEP3, WebRTC metadata, call ladders, CDRs, MOS, jitter, packet loss
  • ✓ HTTP/HTTPS — method, host, URL, status, user-agent, latency, sizes; TLS SNI, version, cipher, certificates
  • ✓ DNS — queries, responses, NXDOMAIN, latency, response codes
  • ✓ Email — SMTP relay, TLS, message size; IMAP/POP3 auth events
  • ✓ SSH — login attempts, failed logins, session duration, source country
  • ✓ Databases — MySQL, MariaDB, PostgreSQL, Redis, MongoDB, MSSQL connections and errors
Detected applications nDPI

OpenVPN · WireGuard · IPSec · Teams · Zoom · GitHub · OpenAI · YouTube · Netflix · MQTT · WebSocket · NTP · SNMP · LDAP · SMB · OpenVPN …

Security monitoring & alerts

The agent detects attack patterns locally and generates alerts for the portal to process and notify on.

  • ✓ Port scans and SIP scans
  • ✓ SIP registration floods
  • ✓ SSH brute force and HTTP/DNS floods
  • ✓ SMTP abuse and suspicious connections
Local SQLite cache
  • ✓ License cache
  • ✓ Offline events buffer
  • ✓ Rules cache
  • ✓ Settings cache

Supported platforms

🐧 Linux

nftables + ipset firewall backend. Packages: libpcap, nDPI, MaxMind GeoLite2 installed by the agent installer.

Linux guide

🌊 FreeBSD / NetBSD

pf firewall integration with the same DPI and monitoring stack. Ideal for carrier and hosting environments.

BSD guide

🪟 Windows

Windows Filtering Platform (WFP) backend with Npcap capture. Full protocol monitoring and portal sync on Server and Desktop editions.

Windows guide