vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-08-15 03:13:29 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 3
5621 commits 26 branches 19 tags 475 MiB
Commit graph

2949 commits

Author SHA1 Message Date
Alfredo Cardigliano
599a88db97 Hide interface live traffic download when not a packet interface 2019-12-12 11:28:15 +01:00
Alfredo Cardigliano
9137716946 Hide host live traffic download when not a packet interface 2019-12-12 11:23:25 +01:00
emanuele-f
2c6a3fe342 Remove debug string 2019-11-11 14:18:43 +01:00
Simone Mainardi
759e405b01 Fixes escaping of influxdb timeseries 
Fixes #2996
 2019-11-04 14:49:09 +01:00
Alfredo Cardigliano
89651977c0 os_utils.hasService check fix (root has also permissions) 2019-10-02 20:31:04 +02:00
emanuele-f
7fd3325fd2 Fix n2disk license validation error 
Fixes #2872
 2019-09-20 12:13:11 +02:00
emanuele-f
f45e68bb95 Fix host peers page 
Backport of 60d5f4e89c with additional URL fix
 2019-08-05 10:09:08 +02:00
Alfredo Cardigliano
eaee98346e n2disk service check fix in case of non valid interface (e.g. zmq) as first interface 2019-07-02 18:58:21 +02:00
Alfredo Cardigliano
02e23dccc2 Refreshing traffic recording availability at runtime 2019-06-27 18:34:10 +02:00
emanuele-f
ae2231f12a Delete ts export queue on startup and add missing error 2019-06-19 11:23:03 +02:00
Luca Deri
29e64d8c8c Script error fix 2019-06-05 09:38:50 +02:00
emanuele-f
d11c9a1c16 Fix timeseries storage label 2019-05-21 18:36:45 +02:00
Simone Mainardi
bfab18c5d0 Fixes throughput alerts format 2019-05-02 10:57:14 +02:00
emanuele-f
ee67f85323 Properly handle pre-computed "Other" in top talkers 
Fixes duplicate other entry and link
Fixes #2545
 2019-04-23 11:37:25 +02:00
emanuele-f
8d18ddf3b6 Fix received bytes not accounted in host L4 pie chart 2019-04-23 10:38:11 +02:00
Simone Mainardi
4a81a1c134 Proper validation of base64-encoded license keys 2019-03-30 16:47:44 +01:00
Simone Mainardi
ee06ec5b0d [Security] Fixes possible stored XSS in runtime.lua 
XSS attempts were output to the ntopng logs for example as:

14/Mar/2019 12:53:07 [LuaEngine.cpp:9164] WARNING: Script failure [/home/simone/ntopng/scripts/lua/about.lua][/home/simone/ntopng/scripts/lua/modules/http_lint.lua:1555: [LINT] _POST["ntopng_license"] = "'><script>alert(2)</script>" parameter error: Validation error]

When page runtime.lua was reading logs to show them, the JS was interpreted and scripts were executed.

Fixes

XSS3 | Stored

URL
http://192.168.2.200:3000/lua/runtime.lua

METHOD
Get
 2019-03-14 13:05:04 +01:00
Simone Mainardi
ccafdf6a81 [Security] Fixes possible XSS in login.lua referer param 
Fixes

XSS1 | Reflected

URL
http://192.168.2.200:3000/lua/login.lua?referer=%27%3E%3Cscript%3Ealert(1)%3C/script%3E

METHOD
Get

PARAMETER
referer

PAYLOAD
'><script>alert(1)</script>
 2019-03-14 11:40:03 +01:00
emanuele-f
76f35c4a3e Fix missing host name during first resolution 2019-01-31 13:34:09 +01:00
emanuele-f
3c2d3bfbe3 Fix network discovery using HTTP authentication 
Fixes #2303
 2019-01-11 15:09:44 +01:00
emanuele-f
1c23ff2650 Fix missing interface selection in footer 2019-01-11 15:08:08 +01:00
Simone Mainardi
649356f777 Changes n2disk-ntopng files to prevent overwrites 2019-01-04 12:53:35 +01:00
emanuele-f
c45822d8c3 Fix users and other prefs deleted during nEdge data reset 2019-01-03 16:23:43 +01:00
emanuele-f
8469acdade Fix database migration page redirection 
Fix #2285
 2019-01-03 11:21:35 +01:00
emanuele-f
21fd1d0ddd Fix tracker error aborting data delete on nEdge 2019-01-02 16:32:39 +01:00
emanuele-f
f9ff640514 Remove user language selector in user add dialog in nEdge 2019-01-02 16:32:33 +01:00
Simone Mainardi
dac8d5be54 Fixes historical data explorer with view interfaces 
Fixes #2264
 2018-12-27 15:11:39 +01:00
Simone Mainardi
f23b086da5 Minor host/interface/network reports fix 2018-12-24 15:09:07 +01:00
Simone Mainardi
ad10d52c21 Adds host/interface/network reports to nEdge 2018-12-24 15:09:02 +01:00
emanuele-f
8d1a268a75 Hide timeseries table views if step is too small 2018-12-22 16:10:22 +01:00
Simone Mainardi
55a05c2bb7 Limits the maximum number of nIndex interfaces 2018-12-21 17:41:03 +01:00
emanuele-f
2223289c24 Fix top hosts links 2018-12-20 18:39:31 +01:00
emanuele-f
cbb21f000c Remove unused js/css files 2018-12-20 18:15:58 +01:00
Simone Mainardi
b738e73ea5 Fixes missing storage utilization on Windows 2018-12-20 17:24:15 +01:00
emanuele-f
a6f9dd2704 Temporary hide delete data tab for oem 2018-12-20 16:26:05 +01:00
emanuele-f
6e4f44ba5a Fix empty top talkers table 2018-12-20 15:52:42 +01:00
emanuele-f
75f4ee0fe0 Fix SNMP errors in network discovery with nEdge 
Also hide language selector since nEdge is not localized yet
 2018-12-20 15:41:31 +01:00
emanuele-f
657084e7d0 Properly handle L4 protocols charts 2018-12-20 12:16:46 +01:00
emanuele-f
067bf60602 localization tool now sorts the en lang before performing diff 2018-12-20 10:52:44 +01:00
emanuele-f
46b950b521 Improve alert time format 2018-12-20 10:32:05 +01:00
Simone Mainardi
19052bcd62 Minor localization updates 2018-12-20 10:23:54 +01:00
Luca
15efe2fd44 Added nIndex version 2018-12-19 19:38:59 +01:00
emanuele-f
cc6f7915e4 Temporary disable InfluxDB on Windows as not working 
The problem may be related to libcurl
 2018-12-19 19:03:29 +01:00
emanuele-f
ed05294aa8 Reduce pam auth message logs 2018-12-19 18:51:33 +01:00
emanuele-f
a650f3f27e Fix error with floating point numbers 2018-12-19 17:13:43 +01:00
Alfredo Cardigliano
d5e93da5e8 Safety check 2018-12-19 14:40:38 +01:00
emanuele-f
33daf0866a Avoid submiting delete data when form is invalid 2018-12-19 11:31:13 +01:00
emanuele-f
ff3df0bb90 Fix LDAP and Radius menu entries visilibity 2018-12-18 18:53:19 +01:00
emanuele-f
f8c074bf03 Use cross platform ntop.msleep 2018-12-18 18:53:19 +01:00
emanuele-f
57f8f6f54e RRD error handling 2018-12-18 18:53:19 +01:00