Commit graph

101 commits

Author SHA1 Message Date
Daniel
4ffc6e53b7 Remove connection prompts when applicable settings are changed by user 2023-12-22 11:00:14 +01:00
Daniel
bed5c72a6b Finalize profile merging, add profile metadata state handling, re-attribute connections after profile deletion 2023-10-25 13:54:06 +02:00
Daniel
d58abe563f Do not get process+profile for info only packets
In order to stop creating profiles for processes within docker.
2023-09-19 16:42:54 +02:00
Daniel
21cd8cb9e5 Improve entity metadata initialization 2023-09-06 11:07:31 +02:00
Daniel
f3e7abf908 Use DNS request connections to attribute DNS requests 2023-08-18 16:49:45 +02:00
Daniel
3b70c5587c Do not add internal and localhost connections to history 2023-08-11 11:56:22 +02:00
Daniel
cf70c55ab5 Improve history purging 2023-08-09 14:45:56 +02:00
Daniel
805a8e9e85 Fix cleaning up incomplete connections 2023-08-07 21:55:31 +02:00
Daniel
2a41240212 Fix updating feature flags 2023-08-07 21:54:58 +02:00
Daniel
37fbc4b74c Update all connection feature flags on account update 2023-08-07 16:49:12 +02:00
Daniel
aa0b42dd01 Fix race condition when setting firewall handler and starting worker 2023-08-04 21:44:45 +02:00
Daniel
b645e440ad Copy resolver IPScope to DNS connection IPScope 2023-08-04 21:41:37 +02:00
Daniel
4fcfb424c9 Fix and improve packet handling procedures 2023-07-28 23:26:10 +02:00
Daniel
3e8c330775 Improve logging and fix linter errors 2023-07-28 16:50:56 +02:00
Daniel
a33526a976 Fix handling of connections without process 2023-07-28 16:50:35 +02:00
Daniel
a5a5a15112 Improve updating allowed features on connection 2023-07-21 16:06:47 +02:00
Daniel
f0ebc6e72f Update BytesReceived/Sent field names 2023-07-21 16:05:13 +02:00
Patrick Pacher
5dcb6b268f Persist bandwidth data in netquery DBs when enabled 2023-07-21 11:38:05 +02:00
Daniel
41c5266315 Use reported PIDs for DNS requests and improve data gathering process 2023-07-20 13:37:01 +02:00
Daniel
28d3d24988 Add and improve InfoOnly and ExpectInfo packet flags 2023-07-18 16:16:41 +02:00
Daniel
8a09ba6045 Revamp connection handling flow to fix race condition and support info-only packets 2023-06-21 15:31:45 +02:00
Vladimir Stoilov
834282cb0e Fix process identification key 2023-03-30 14:43:38 +02:00
Daniel
c6de741ed8 Disable prompting when re-evaluating connections 2023-01-30 13:57:58 +01:00
Daniel
afa696bb48 Classify unidentified localhost connections as unidentified instead of unsolicited 2022-10-13 11:18:12 +02:00
Daniel
fd0ce5732d Add first tag handlers for svchost, app image, net 2022-10-10 22:36:39 +02:00
Daniel
e00131e937 Stop tunnels if they are not needed anymore due to verdict change 2022-10-10 13:40:06 +02:00
Daniel
f63df67d23 Improve verdict handling and switch to immediate re-evaluation 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
5ed133d578 Small fixes 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
ddfa3722be Fixes 2022-10-10 13:40:06 +02:00
Vladimir Stoilov
b8bfbf14e4 Removed comments 2022-10-10 13:38:56 +02:00
Vladimir Stoilov
6fdc6c0a4f Refactoring 2022-10-10 13:38:26 +02:00
Vladimir Stoilov
edcb93bf5c Tunnel flag bugfix and refactoring 2022-10-10 13:37:08 +02:00
Vladimir Stoilov
fdc8ef5698 issue new verdict on configuration change 2022-10-10 13:37:08 +02:00
Vladimir Stoilov
0423dfbbbf Reset connection PoC 2022-10-10 13:34:00 +02:00
Daniel
efe174f605 Implement review suggestion 2022-09-21 15:08:13 +02:00
Daniel
e562e196c9 Reset connection handling channel when firewall handler is stopped 2022-09-15 12:20:08 +02:00
Patrick Pacher
6c4faa3d3c
Removed duplicated field SPNUsed from netquery module 2022-08-02 08:58:06 +02:00
Patrick Pacher
15f85b5ae9
Add support for free-text search and minor bug fixes in netquery 2022-06-21 11:02:36 +02:00
Daniel
ec09c8a948 Fix connection locking in firewall packet handler 2022-03-31 10:01:56 +02:00
Daniel
7a9001b7de Split unattributed connections into to Unidentified App and Network Noise 2022-03-09 15:44:54 +01:00
Daniel
6cbe33ae70 Only hide successful queries of the system resolver 2022-02-25 15:35:21 +01:00
Daniel
60d8664e7b Fix tests and linters 2022-02-02 12:48:42 +01:00
Daniel
b9b33ed2b3 Use separate DNSRequestContext struct for adding DNS context to connections 2021-10-19 10:25:49 +02:00
Daniel
ff31b7c8c5 Add dns and tunnel context to conntection 2021-10-14 15:54:42 +02:00
Daniel
960101d3a9 Add custom routing for DNS server connections 2021-10-12 16:18:36 +02:00
Daniel
b3f3d0ef7c Submit connection trace log earlier for correct log order 2021-10-04 16:52:21 +02:00
Daniel
42cafe33ed Fix profile source fetching 2021-09-27 17:13:48 +02:00
Daniel
48e9a35a07 Implement review suggestions 2021-09-27 14:11:37 +02:00
Daniel
67e02ecc1e Remove connection reason when none is given in a verdict update 2021-09-26 13:47:58 +02:00
Daniel
4c5461a788 Remove dependence on network.Connection.Scope 2021-04-16 17:44:40 +02:00