Commit graph

3564 commits

Author SHA1 Message Date
Simone Mainardi
441857d34d Implements stateful network alerts 2016-09-02 14:59:54 +02:00
Simone Mainardi
a1d405baf5 Implements local hosts idle cache dump toggle and TTL
Local hosts cache dump can now be toggled from the command line
together with the cache TTL
2016-09-02 11:06:46 +02:00
Simone Mainardi
31415251b2 Makes the Local Hosts Cache duration configurable
Purged hosts are serialized to redis and are automatically cleared after an interval of 1 hour.
With this commit it is possible to configure this interval.
2016-09-01 19:29:33 +02:00
Simone Mainardi
667a63076f Fixes flows flood alert detection
Detection conditions were not properly evaluated, especially
upon threshold changes. This commit fixes the issue.

It also adds the new stateful alerts on the flows flood.
However, those alerts are still kept hidden from the main interface.
2016-09-01 19:06:33 +02:00
Simone Mainardi
2bba05150e Implemenst hosts 'stickyness' across ntopng restarts 2016-08-31 19:29:40 +02:00
Simone Mainardi
f73ffc65ec Additional work on the alerts manager 2016-08-31 13:08:20 +02:00
emanuele-f
22564ab1d7 Extend inter flow activity filter to twitter 2016-08-29 22:09:53 +02:00
Luca Deri
e7b08e2c73 Merge pull request #720 from emanuele-f/framework
Fix SSL data and add inter-flow data to detect user activity
2016-08-29 18:05:18 +02:00
emanuele-f
af4660e642 Improve Facebook detection by using interflow metrics 2016-08-29 17:11:30 +02:00
Simone Mainardi
ca83eb48a7 Fixes ZMQ interface type
Fixes #710
2016-08-29 12:40:30 +02:00
Simone Mainardi
74c4affc30 Implements ElasticSearch flow export statistics 2016-08-29 10:05:29 +02:00
Simone Mainardi
bca1e0a126 Implements MySQL flow export statistics 2016-08-29 09:41:55 +02:00
emanuele-f
f12711ab98 Exclude facebook web integration from Facebook traffix and fix default parameters 2016-08-27 17:16:02 +02:00
emanuele-f
a518f95c4c Separate Facebook activity and specilize some detection code 2016-08-27 13:14:46 +02:00
emanuele-f
179b7f72c8 Remove unsafe code and extend activity framework API 2016-08-27 10:58:58 +02:00
Simone Mainardi
e8707bcaa9 Implements counters for export dropped flows (wip)
ntopng optionally exports flows to MySQL or ES. This change
keeps track of possible drops (e.g., due to a slow mysql server)
and shows them to the user.
2016-08-26 19:27:46 +02:00
Luca Deri
c1f8d2f514 Handled hostFilter field in Paginator 2016-08-24 23:20:20 +02:00
Luca Deri
bed000ca3e Fix for invalid interface view selection 2016-08-24 19:08:09 +02:00
emanuele-f
d46c6f5de7 Implement HTTP content type extraction 2016-08-24 01:34:20 +02:00
emanuele-f
9889f12abb Add new user activity profiles and populate them 2016-08-23 01:36:33 +02:00
emanuele-f
8f9d4c55b9 Implement SMA and WMA filters and tune for VPN activity 2016-08-22 18:22:50 +02:00
emanuele-f
4d53a4c960 Implement web and metric filters 2016-08-21 20:14:28 +02:00
emanuele-f
fbb57433c6 Add SSL handshake detection support for ServerHello+CCS in one packet and one way encrypted data 2016-08-21 16:46:31 +02:00
Luca
274921ee5c Reimplemented view: interface, and Paginator code.
Minor code cleanup
2016-08-18 13:44:24 +02:00
Luca
650ce6e202 Removed Batman (mesh network) support as does not seem to be very popular in the ntopng community 2016-08-17 15:57:40 +02:00
emanuele-f
d700880fe5 Save and restore activity counters from redis 2016-08-17 03:39:46 +02:00
emanuele-f
d21681592a Update counters each minute and other changes 2016-08-16 01:39:41 +02:00
Luca Deri
9db98b5fc7 Minor code cleanup 2016-08-14 14:16:49 +02:00
emanuele-f
ce71fe65ef Merge remote-tracking branch 'upstream/dev' into framework 2016-08-14 02:03:38 +02:00
emanuele-f
97781044fd Implement command sequence filter and use it to perform IMAPS detection 2016-08-14 01:56:25 +02:00
emanuele-f
ed6c42d510 Export activity data to rrd 2016-08-13 23:56:59 +02:00
emanuele-f
9a30b69a34 Updating host counters 2016-08-13 22:21:21 +02:00
emanuele-f
528d7e85f8 Implement activity filters framework 2016-08-13 15:05:07 +02:00
emanuele-f
9b77721b3d Change activity script name and add some defines 2016-08-13 12:49:45 +02:00
emanuele-f
f974c350ea Add rrd activity log 2016-08-13 00:55:03 +02:00
emanuele-f
793b53c706 Add and expose host activity counters 2016-08-12 23:38:01 +02:00
Luca Deri
2d9fd00650 Merge pull request #689 from emanuele-f/tls
Implement SSL/TLS handshake detection
2016-08-12 23:20:11 +02:00
emanuele-f
b25a186d61 Implement activity framework skeleton 2016-08-12 19:46:11 +02:00
emanuele-f
2bb4dcc18b Rollback some changes and other changes 2016-08-12 15:06:03 +02:00
emanuele-f
8678bcf2bd Flow API and other changes 2016-08-12 14:30:56 +02:00
emanuele-f
8f67aa7d8a Enable TLS detection only when needed 2016-08-12 11:00:33 +02:00
Simone Mainardi
12f24a87b4 Implements stateful alerts in C and sqlite 2016-08-11 19:56:49 +02:00
Simone Mainardi
f1c25e7d77 Implements Redis-authentication
Implements #685
2016-08-11 11:34:36 +02:00
Simone Mainardi
12aa4c7399 Fixes after removal of the NetworkInterfaceView code 2016-08-10 11:21:08 +02:00
Luca
fdf1384081 Fixes after merge 2016-08-10 09:46:05 +02:00
Luca
bcadcf033f Removed view interface (work in progress will be reintroduced after cleanup) 2016-08-10 09:37:10 +02:00
Simone Mainardi
52abb7659a Handles per-interface alerts via the AlertsManager
This commit moves the global ntopng-wide alerts to
interfaces' AlertsManager s
2016-08-09 16:47:36 +02:00
emanuele-f
80e7d980f7 Improove TLS detection 2016-08-09 16:13:40 +02:00
Luca Deri
dab3c11681 Implemented flow update callback and extended flow information passed in callbacks
Selected cherry pick from https://github.com/ntop/ntopng/pull/677
2016-08-07 11:12:39 +02:00
Simone Mainardi
199b418037 Implements db-based new generation alerts with lua API (wip) 2016-08-05 19:11:34 +02:00