Commit graph

610 commits

Author SHA1 Message Date
Luca
a7a074a0a8 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2018-02-09 16:22:55 +01:00
Luca
f4ea4491c0 When flows are idle form more than 5 sec with a unknown L7 protocol, we guess the DPI protocol without further delaying it
When enabling under interfaces -> dump packets to disk + unknown flows, individual unknown flows are saved under /var/tmp/ntopng/X/pcap/ndpi_unknown
2018-02-09 16:10:49 +01:00
emanuele-f
99b67b16ad Remove old nedge define and move to new one 2018-02-09 13:01:08 +01:00
emanuele-f
77c4625845 nedge policy improvements 2018-01-11 18:36:48 +01:00
emanuele-f
8ad7b4ce08 Quotas fixes and improvements
- Fix concurrency issue while resetting quotas
  - Fix quota serialization issues
  - Add missing total stats serialization
  - Add per-pool quotas reset
  - Fix missing string cast on cross application quotas
  - Fix quota reset after midnight when ntopng is restarted
2018-01-05 10:16:50 +01:00
Emanuele Faranda
36c77163e7 nedge block of active flows 2018-01-02 18:24:54 +01:00
Luca Deri
c9ecd931d9 Code cleanup 2017-12-16 08:23:56 +01:00
emanuele-f
acac84a6b3 Fix flow pass verdict report with quotas 2017-12-15 18:00:04 +01:00
Simone Mainardi
aeeb0fa261 Reworks flow alerts with JSON and extra info 2017-12-13 20:18:39 +01:00
Simone Mainardi
236af04194 Improves accuracy of hosts active flows counters 2017-12-13 13:00:55 +01:00
Luca Deri
cc623029e5 Added extra flow methods 2017-11-14 16:23:26 +01:00
Emanuele Faranda
49676e5523 Fix network interface stats on conntrack 2017-11-05 02:35:42 +01:00
emanuele-f
7281fd0d5d Implement per protocol schedule 2017-11-02 12:49:22 +01:00
Simone Mainardi
4bbe36c957 Removes unused DNS-based categorization 2017-10-31 13:53:17 +01:00
Luca Deri
bf6371cbc5 Added check for DHCP traffic 2017-10-30 17:40:51 +01:00
Simone Mainardi
a67205af77 Implements per-host traffic shapers 2017-10-23 15:01:34 +02:00
Luca Deri
70767d3189 Simplified nEdge build 2017-10-22 12:10:08 +02:00
Luca Deri
7f6e9f6913 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2017-10-13 21:30:31 +02:00
Luca Deri
67c027bdb5 Flow: ICMP improvements 2017-10-13 21:29:55 +02:00
Simone Mainardi
2292a1e339 Hanldes invalid DNS query alerts 2017-10-13 17:59:20 +02:00
Simone Mainardi
7a1a28f5e8 Implement per-host/mac/pool drop flow count (backend)
Implements #1500
2017-10-06 16:43:42 +02:00
Luca
d9d1ad7d5b Implemented per-pool routing policy id 2017-09-26 17:12:49 -05:00
Luca Deri
32894420f0 Implemented flow stats set 2017-09-21 00:39:47 +02:00
Luca Deri
2405449029 Removed the concept of secondary mac: one mac fits all
Removed activity heatmap: it will be soon replaces with host timeseries
2017-08-16 11:06:15 +02:00
Simone Mainardi
85da10af61 Implements new flow drill-down criteria: exporter ip and in/out interfaces
Implements #1326
2017-07-20 19:54:11 +02:00
Simone Mainardi
eaa7a0d313 Separates L3 IPs from L2 MACs
Before this commit, multiple L3 hosts were allocated if the same ip
address was seen with multiple mac addresses. We have decided to keep
ip and macs logically sepatated. For this reason, after this commit,
the L3 ip always remains the same even if there are changes in the
mac. A user who wants to monitor mac addresses can use the L2 section
as well as the host pools.

This commit also reverts:
"Add MAC address to the serialized hosts key to fix bad MAC address association and stats"

This reverts commit 89a756fb9a.
2017-07-04 01:41:31 +02:00
Luca
3f933ae11c Implemented MDNS dissection for better characterizing hosts 2017-06-18 18:07:34 -04:00
Luca
bf0f7f68b1 Implemented initia; Lua discovery call
Dissected SSDP location header and reported in host info page
2017-06-18 15:25:18 -04:00
Luca Deri
7655356c35 Implemented VRF flow aggregation 2017-05-26 14:56:12 +02:00
Simone Mainardi
d7b929bdc1 Implements DNS searches and reworks INFO column 2017-05-23 14:00:19 +02:00
emanuele-f
9c973ca439 Move host activity detection code to attic 2017-05-17 22:19:37 +02:00
Simone Mainardi
1b313d2932 Implements periodic flow aggregation 2017-05-09 15:07:20 +02:00
Luca Deri
1f38534561 Flows are not set idle (and thus later purged) in periodic activities 2017-05-09 00:39:31 +02:00
Luca Deri
412d4afe64 Implemented in-memory flow aggregation 2017-05-02 15:48:43 +02:00
Luca Deri
de060d3470 Minor code rework 2017-04-30 23:28:32 +02:00
emanuele-f
eb7fae8c4c Visualize flow quota status information 2017-04-10 11:07:07 +02:00
Simone Mainardi
d5e73f423c Compilation fix 2017-04-07 17:44:32 +02:00
Simone Mainardi
258858cec6 Implements inline quota checks for bridged interfaces
Quotas are now checked inline to avoid unacceptable over-quota transmissions.

Quotas were previously checked every 5 minutes and that was causing
unacceptable transmissions. For example, an host sending at 10MB/sec could have
sent 50MB in 5 seconds.

Checking quotas inline also required to keep host pool statistics updated inline.
To preserve the software efficiency, host pool statistics are updated inline only
for bridged interfaces.
2017-04-07 17:16:40 +02:00
Simone Mainardi
997f83aa10 Traffic policing fixes
Fixes:
- Ingress and egress shapers were swapped for cli2srv direction
- Empty redis was causing bad shapers initialization leading to unpredictable behavior

Improvements:
- incPoolsStats factorized to allow reuse inline
2017-04-07 14:25:38 +02:00
Simone Mainardi
b2d906a31c Packet bridge fixes
- fixes wrongly overriden flow pass verdict
- fixes use of uninitialized variable for the quotas
2017-04-06 20:21:03 +02:00
emanuele-f
b7e0669c33 Implement flow status and unidirectional flows filters 2017-03-30 13:01:54 +02:00
Luca Deri
1854b884a2 Improved ICMP stats, added last peer, made them available interface wide 2017-03-30 12:37:03 +02:00
emanuele-f
42904dd034 Implement HostPool time and bytes quota limit in inline mode 2017-03-29 19:42:31 +02:00
Luca Deri
8d66bf1d30 Implemented ICMP detailed stats for local hosts 2017-03-29 13:02:08 +02:00
Luca Deri
669cbc2b46 Implemented fix for #1091 (Address Re-association Blindness) 2017-03-27 22:03:22 +02:00
Luca Deri
ddda50dfee An alert is now generated when SSL certificates don't match 2017-03-21 01:20:36 +01:00
Campus
5f63a808f8 change from protocol to app_protocol to sync with ndpi commit 5de6a96af5754c13846883b556f58fc79831c61d 2017-03-15 18:19:40 +01:00
emanuele-f
30a4bd8679 Fixes #1027
IP address sort function was reversed wrt qsort convention
2017-03-10 10:41:12 +01:00
Josh Soref
1280b26f96 spelling: egress 2017-03-07 05:04:02 +00:00
Luca Deri
68531870eb Various fixes to implement per-category blocks 2017-03-05 23:43:24 +01:00