Commit graph

3564 commits

Author SHA1 Message Date
emanuele-f
9097333cf1 Always show IPv6 suffix in IPv6 host names 2017-05-04 21:28:11 +02:00
Simone Mainardi
9c0f7499e7 Reduces redis traffic for alerts checks 2017-05-03 13:23:28 +02:00
emanuele-f
2c53dda60b Fix slack alerts notifications 2017-05-03 13:10:16 +02:00
Simone Mainardi
0586a814ea Optimizes oldest alerts cleanup 2017-05-03 12:41:36 +02:00
emanuele-f
086b580cdb Modify isAlertEngaged to return existing alert fields 2017-05-03 11:57:04 +02:00
emanuele-f
8537b2cc0a Fix host alert counter 2017-05-02 18:32:46 +02:00
Simone Mainardi
d85302d80f Fixes host activity alert 2017-05-02 17:19:06 +02:00
Luca Deri
0d15c513ed Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2017-05-02 15:48:59 +02:00
Luca Deri
412d4afe64 Implemented in-memory flow aggregation 2017-05-02 15:48:43 +02:00
emanuele-f
a5e528047d Use a single redis key to read all host anomalies configuration 2017-05-02 15:38:39 +02:00
emanuele-f
9aa7b31552 Add SafeSearch and Global DNS in traffic bridge preferences. 2017-05-02 12:47:33 +02:00
Luca Deri
24f0808c23 Merge pull request #1197 from emanuele-f/password_change
Force default admin password change
2017-05-02 12:14:48 +02:00
Luca Deri
2d5dd2c9f0 Compilation fix 2017-05-01 18:08:44 +02:00
Luca Deri
73b3a3ded6 Added child safe information in host pools
Minor code rework
2017-05-01 15:53:23 +02:00
Luca Deri
de060d3470 Minor code rework 2017-04-30 23:28:32 +02:00
emanuele-f
21594b834d Separate syn/flow attacker and victim alert thresholds 2017-04-30 20:07:58 +02:00
emanuele-f
284dfcd4cd Specify hosts role in malware detected alerts 2017-04-30 18:24:56 +02:00
Emanuele Faranda
8b8974e56c Alerts improvements (#1204)
* Implement flow flood alert

* Remove alerts general settings

* Implement global threshold alerts for hosts, networks and interfaces

* Implement global anomaly alert configuration, lua side

* Make the global thresholds not bound to the interface

* Implement global anomaly alert configuration, C side

* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
emanuele-f
011b7f5cdf Force default admin password change 2017-04-27 21:15:58 +02:00
emanuele-f
7d12a5b58a Fix alert counter thresholdTrepassed flag reset too early 2017-04-27 13:30:43 +02:00
emanuele-f
cc3191bc4f Remove flapping-checking code in alert counter 2017-04-27 11:13:40 +02:00
emanuele-f
8b72607c38 Migrate interface alerts to lua logic 2017-04-27 11:07:04 +02:00
Emanuele Faranda
7d8d26efdc Merge pull request #1182 from emanuele-f/alerts_with_cache
Alerts with cache
2017-04-26 20:32:46 +02:00
emanuele-f
1545dcb73e Host Flows alert becomes a threshold alert 2017-04-26 15:50:54 +02:00
emanuele-f
4afe4328eb Enable SYN flood/victim alert generation 2017-04-26 11:23:23 +02:00
Simone Mainardi
7b13e2e6a1 Adds an engine id to the engaged alerts 2017-04-24 12:22:47 +02:00
Simone Mainardi
2873438712 Handles VLAN statistics in both UI and backend
VLAN statistics are now properly accounted both in the front and
in the backend.

It is now required to add a toggle preference to save their
statistics (presently statistics are always saved) and it is
also requested to browse their historical protocols.
2017-04-23 12:58:10 +02:00
emanuele-f
43b3a7f078 Fix AlertCounter based host alerts 2017-04-22 19:48:09 +02:00
Simone Mainardi
0c40af5863 Implements VLANs hash table 2017-04-21 18:44:48 +02:00
Simone Mainardi
a07ce941ee Fixes a crash introduced by a91781f 2017-04-21 17:35:05 +02:00
emanuele-f
a91781f66c Add hide findHostsByIP to enforce purge lock on hosts hash 2017-04-21 16:57:34 +02:00
emanuele-f
5892319880 Update in-memory hosts alert configuration when the configuration changes
Also fixes invalid redis key used to check host alerts trigger
2017-04-20 19:09:52 +02:00
Simone Mainardi
9fb24219e4 Passes host detected anomalies to lua 2017-04-20 18:50:05 +02:00
Simone Mainardi
0c1fd6071f Defines some MySQL constants 2017-04-20 16:46:01 +02:00
Simone Mainardi
a43636bdb0 Fixes AS stats in the GUI 2017-04-20 11:56:33 +02:00
Simone Mainardi
5014669d12 Implements Autonomous Systems hash table 2017-04-19 23:19:16 +02:00
Luca
7013c21581 Added method for figuring out when we're above a threshold 2017-04-19 19:14:11 +02:00
Emanuele Faranda
1fbbe86e39 Prevent assigning a network to the multiple Host Pools (#1150)
* Prevent assigning a network to the multiple Host Pools

* Simplify host pool search interface

* Fix for MAC addresses bugs and add user notifications

* Fix issues caused by the use of non normalized network keys

* Changes a warning message
2017-04-14 12:17:16 +02:00
emanuele-f
97afda88b8 Visualize host blocking status 2017-04-10 12:10:29 +02:00
emanuele-f
eb7fae8c4c Visualize flow quota status information 2017-04-10 11:07:07 +02:00
Luca Deri
fc53648a2b Implemented data anonymization #1068 2017-04-09 11:37:24 +02:00
Simone Mainardi
d5e73f423c Compilation fix 2017-04-07 17:44:32 +02:00
Simone Mainardi
258858cec6 Implements inline quota checks for bridged interfaces
Quotas are now checked inline to avoid unacceptable over-quota transmissions.

Quotas were previously checked every 5 minutes and that was causing
unacceptable transmissions. For example, an host sending at 10MB/sec could have
sent 50MB in 5 seconds.

Checking quotas inline also required to keep host pool statistics updated inline.
To preserve the software efficiency, host pool statistics are updated inline only
for bridged interfaces.
2017-04-07 17:16:40 +02:00
Simone Mainardi
997f83aa10 Traffic policing fixes
Fixes:
- Ingress and egress shapers were swapped for cli2srv direction
- Empty redis was causing bad shapers initialization leading to unpredictable behavior

Improvements:
- incPoolsStats factorized to allow reuse inline
2017-04-07 14:25:38 +02:00
Simone Mainardi
b2d906a31c Packet bridge fixes
- fixes wrongly overriden flow pass verdict
- fixes use of uninitialized variable for the quotas
2017-04-06 20:21:03 +02:00
Simone Mainardi
ca20b0d3e8 Implements continent support to the geolocation
Partially implements #1088
2017-04-05 20:06:23 +02:00
emanuele-f
a439d9c2bd Implement host TCP flags distribution 2017-04-04 16:51:35 +02:00
emanuele-f
aa7bab5fee Add sent/received ARP stats for NetworkInterfaces and add a sent/recv pie chart for hosts 2017-04-04 13:24:04 +02:00
Simone Mainardi
886df5e319 Test and rework of logstash export 2017-04-03 23:58:12 +02:00
emanuele-f
d8d0d4e381 Enable HostPools statistics dump and quota for Not Assigned pool. 2017-04-03 12:33:20 +02:00