Commit graph

435 commits

Author SHA1 Message Date
Luca Deri
5c17fa1099 Improved asset management 2022-08-17 17:35:36 +02:00
Luca Deri
b046e3d748 Added --log-labels for creating a log of labels used by ntopng when learnt during traffic processing 2022-08-12 20:21:38 +02:00
Alfredo Cardigliano
0fa2ce01e4 Compilation fix 2022-06-20 22:58:07 +02:00
Alfredo Cardigliano
89b19f8134 Add listening ports from nprobe agent to hosts 2022-06-20 18:24:05 +02:00
Luca Deri
c57364a00d Added hostname cleanup 2022-06-07 15:40:59 +02:00
MatteoBiscosi
0ac8da733f Fixed server name not used for server ips (#6623) 2022-05-25 11:29:08 +02:00
MatteoBiscosi
7b51a4ca61 Added Fin Scan check (#5903) 2022-05-16 17:18:11 +02:00
Luca Deri
b2f20317b8 Reworked host map 2022-04-27 16:37:26 +02:00
Luca Deri
f721fdc653 Added NetworkInterface::findHostByMac() method 2022-04-10 13:07:18 +02:00
Luca Deri
1fe96bc73b Initial work for implementing host/port scan detection (#6327) (#6328) 2022-02-20 23:17:04 +01:00
Luca Deri
835f57ac3c Added Process/UserName placeholder code 2022-02-18 12:41:35 +01:00
Luca Deri
c724f0fbb2 Implemented spider/bot detection risk
Fixes for double flag visualization
2022-02-17 21:06:44 +01:00
MatteoBiscosi
d54fb4b3f0 Simplified view interface mac concept (#6290) 2022-02-09 21:56:02 +01:00
Alfredo Cardigliano
19310ffd06 Initial cleanup of useless consts towards migration to modern C++ (#6271) 2022-02-03 15:57:34 +01:00
Luca Deri
b66d9c83ec Reworked alert exclusions 2022-01-28 13:06:47 +01:00
Luca
e3b4a21a0f Cosmetic changes 2022-01-24 14:42:07 +01:00
Alfredo Cardigliano
f2060f2488 Copyright update (C) 2022-01-03 09:35:09 +01:00
MatteoBiscosi
a4b8e712a0 Added Observation points stats and timeseries (#6085) 2021-11-19 16:30:11 +01:00
Simone Mainardi
4425cc54a8 Fixes buffer overflow in host alerts
Fixes #5959
2021-10-07 13:50:38 +02:00
MatteoBiscosi
7c10fba84b Implements ICMP flood check (#5904) 2021-10-07 11:40:51 +02:00
MatteoBiscosi
4e693dc9f1 Added probes filter to host page (#5157) 2021-09-30 12:15:25 +02:00
MatteoBiscosi
c1ccd2098f Fixed stashed unwanted changes (#5156) 2021-09-30 09:25:54 +02:00
MatteoBiscosi
7329de1bca Fixes concurrency problems with hosts probes(#5156) 2021-09-29 17:34:48 +02:00
MatteoBiscosi
d0fbfa8e12 Added exporter ip address to host informations (#5156) 2021-09-28 18:42:09 +02:00
Francesco Amodeo
de27966413
Implemented countries host check (#5713)
* Added check and alert implementation

* Fixed size of estimation and some typo

* Added HLL counters and DES structure
Co-authored-by: Paolo Junior Mollica <p.mollica@studenti.unipi.it>

* fixes according comments of PR

* decreased memory footprint

* resolved conflicts

* fixed HostCheckID

* Removed wrongly committed file

Co-authored-by: paolo-junior-mollica <paolo.junior.mollica@gmail.com>
Co-authored-by: Matteo Biscosi <49585191+MatteoBiscosi@users.noreply.github.com>
2021-08-25 15:50:07 +02:00
Gaetano Barresi
f650a3700a
Domain Names host check (#5723)
* Adding/modifying .cpp for Domain Names host check

* Adding/modifying .h/.lua for Domain Names host check

* minor synstax fix

* dns_contacts

Co-authored-by: Stefano Russo <55586218+D0kken@users.noreply.github.com>
Co-authored-by: Stefano Russo <s.russo41@studenti.unipi.it>
2021-08-25 11:22:41 +02:00
Simone Mainardi
b8dc6653fa Reworks handling of HTTP host names
Addresses #5706
2021-07-23 12:34:19 +02:00
Simone Mainardi
71089c8270 Reworks handling of TLS host names
Addresses #5706
2021-07-23 12:23:32 +02:00
Simone Mainardi
132b2cb7c4 Minor score cleanup
Addresses #5694 along with companion pro commit
2021-07-20 12:32:22 +02:00
Luca Deri
e55f88faa2 ZMQ timeout optimizazion 2021-07-09 16:36:46 +02:00
Luca
112c931226 Observation point code cleanup (WIP) 2021-07-01 23:26:15 +02:00
Luca
336f1f3d9f Adding observationPoint support (WIP) 2021-06-30 20:03:37 +02:00
Simone Mainardi
40f5c4e821 Refactors {flow,host}callbacks into {flow,host}checks (C++) 2021-06-16 15:27:38 +02:00
Luca Deri
846d24c5e9 Initial VLANid rework 2021-06-15 23:01:59 +02:00
Matteo Biscosi
bcc717689f Partially Implements traffic blocking (#5387) 2021-05-21 18:40:49 +02:00
Luca Deri
7b52a9c268 Improved host resolution via indirect HTTP/TLS/QUIC/MDNS naming 2021-05-18 07:20:13 +02:00
Simone Mainardi
6ae7664de0 Fixes missing interface and host score timeseries
Fixes #5300
2021-05-12 17:17:57 +02:00
Matteo Biscosi
3cb65f4b49 Added reset button for blacklisted flow stats 2021-04-19 18:46:02 +02:00
Luca Deri
76afff76d1 Created timeseries for blacklisted hosts 2021-04-18 15:28:31 +02:00
Luca Deri
adc00cbdc3 Added counter for tracking flows with balcklisted hosts 2021-04-18 11:44:38 +02:00
Matteo Biscosi
87d5cd2ff0 Added nDPI stats per host getter 2021-04-16 10:23:09 +02:00
Matteo Biscosi
90b306ae76 Re-added lower/upper bound to flow/score anomaly alert 2021-04-14 12:27:47 +02:00
Matteo Biscosi
090374926f Fixes uninitialized value into host remote access alert 2021-04-12 17:58:34 +02:00
Matteo Biscosi
fa5910c06f Implemented flow and host alert for remote access 2021-04-12 16:34:36 +02:00
Alfredo Cardigliano
700ccac48d Keep track of max score 2021-04-12 11:00:36 +02:00
Luca Deri
8b2faf21f5 Added script for checking flow number anomalies 2021-04-11 13:59:47 +02:00
Alfredo Cardigliano
921b67ee5e Move and rename counters used by alerts 2021-04-09 17:17:48 +02:00
Alfredo Cardigliano
b67f0ed89c Cleanup alerts_map which is not used 2021-04-09 12:05:41 +02:00
Alfredo Cardigliano
bcf003dad4 Cleanup release API 2021-04-09 11:28:37 +02:00
Alfredo Cardigliano
db6746e1a3 Enqueue host alert release status to avoid concurrency issues. Change SPSCQueue dequeue to behave similar to std lists. 2021-04-09 09:45:11 +02:00