Simone Mainardi
441857d34d
Implements stateful network alerts
2016-09-02 14:59:54 +02:00
Simone Mainardi
a1d405baf5
Implements local hosts idle cache dump toggle and TTL
...
Local hosts cache dump can now be toggled from the command line
together with the cache TTL
2016-09-02 11:06:46 +02:00
Simone Mainardi
31415251b2
Makes the Local Hosts Cache duration configurable
...
Purged hosts are serialized to redis and are automatically cleared after an interval of 1 hour.
With this commit it is possible to configure this interval.
2016-09-01 19:29:33 +02:00
Simone Mainardi
667a63076f
Fixes flows flood alert detection
...
Detection conditions were not properly evaluated, especially
upon threshold changes. This commit fixes the issue.
It also adds the new stateful alerts on the flows flood.
However, those alerts are still kept hidden from the main interface.
2016-09-01 19:06:33 +02:00
Simone Mainardi
2bba05150e
Implemenst hosts 'stickyness' across ntopng restarts
2016-08-31 19:29:40 +02:00
Simone Mainardi
f73ffc65ec
Additional work on the alerts manager
2016-08-31 13:08:20 +02:00
emanuele-f
22564ab1d7
Extend inter flow activity filter to twitter
2016-08-29 22:09:53 +02:00
Luca Deri
e7b08e2c73
Merge pull request #720 from emanuele-f/framework
...
Fix SSL data and add inter-flow data to detect user activity
2016-08-29 18:05:18 +02:00
emanuele-f
af4660e642
Improve Facebook detection by using interflow metrics
2016-08-29 17:11:30 +02:00
Simone Mainardi
ca83eb48a7
Fixes ZMQ interface type
...
Fixes #710
2016-08-29 12:40:30 +02:00
Simone Mainardi
74c4affc30
Implements ElasticSearch flow export statistics
2016-08-29 10:05:29 +02:00
Simone Mainardi
bca1e0a126
Implements MySQL flow export statistics
2016-08-29 09:41:55 +02:00
emanuele-f
f12711ab98
Exclude facebook web integration from Facebook traffix and fix default parameters
2016-08-27 17:16:02 +02:00
emanuele-f
a518f95c4c
Separate Facebook activity and specilize some detection code
2016-08-27 13:14:46 +02:00
emanuele-f
179b7f72c8
Remove unsafe code and extend activity framework API
2016-08-27 10:58:58 +02:00
Simone Mainardi
e8707bcaa9
Implements counters for export dropped flows (wip)
...
ntopng optionally exports flows to MySQL or ES. This change
keeps track of possible drops (e.g., due to a slow mysql server)
and shows them to the user.
2016-08-26 19:27:46 +02:00
Luca Deri
c1f8d2f514
Handled hostFilter field in Paginator
2016-08-24 23:20:20 +02:00
Luca Deri
bed000ca3e
Fix for invalid interface view selection
2016-08-24 19:08:09 +02:00
emanuele-f
d46c6f5de7
Implement HTTP content type extraction
2016-08-24 01:34:20 +02:00
emanuele-f
9889f12abb
Add new user activity profiles and populate them
2016-08-23 01:36:33 +02:00
emanuele-f
8f9d4c55b9
Implement SMA and WMA filters and tune for VPN activity
2016-08-22 18:22:50 +02:00
emanuele-f
4d53a4c960
Implement web and metric filters
2016-08-21 20:14:28 +02:00
emanuele-f
fbb57433c6
Add SSL handshake detection support for ServerHello+CCS in one packet and one way encrypted data
2016-08-21 16:46:31 +02:00
Luca
274921ee5c
Reimplemented view: interface, and Paginator code.
...
Minor code cleanup
2016-08-18 13:44:24 +02:00
Luca
650ce6e202
Removed Batman (mesh network) support as does not seem to be very popular in the ntopng community
2016-08-17 15:57:40 +02:00
emanuele-f
d700880fe5
Save and restore activity counters from redis
2016-08-17 03:39:46 +02:00
emanuele-f
d21681592a
Update counters each minute and other changes
2016-08-16 01:39:41 +02:00
Luca Deri
9db98b5fc7
Minor code cleanup
2016-08-14 14:16:49 +02:00
emanuele-f
ce71fe65ef
Merge remote-tracking branch 'upstream/dev' into framework
2016-08-14 02:03:38 +02:00
emanuele-f
97781044fd
Implement command sequence filter and use it to perform IMAPS detection
2016-08-14 01:56:25 +02:00
emanuele-f
ed6c42d510
Export activity data to rrd
2016-08-13 23:56:59 +02:00
emanuele-f
9a30b69a34
Updating host counters
2016-08-13 22:21:21 +02:00
emanuele-f
528d7e85f8
Implement activity filters framework
2016-08-13 15:05:07 +02:00
emanuele-f
9b77721b3d
Change activity script name and add some defines
2016-08-13 12:49:45 +02:00
emanuele-f
f974c350ea
Add rrd activity log
2016-08-13 00:55:03 +02:00
emanuele-f
793b53c706
Add and expose host activity counters
2016-08-12 23:38:01 +02:00
Luca Deri
2d9fd00650
Merge pull request #689 from emanuele-f/tls
...
Implement SSL/TLS handshake detection
2016-08-12 23:20:11 +02:00
emanuele-f
b25a186d61
Implement activity framework skeleton
2016-08-12 19:46:11 +02:00
emanuele-f
2bb4dcc18b
Rollback some changes and other changes
2016-08-12 15:06:03 +02:00
emanuele-f
8678bcf2bd
Flow API and other changes
2016-08-12 14:30:56 +02:00
emanuele-f
8f67aa7d8a
Enable TLS detection only when needed
2016-08-12 11:00:33 +02:00
Simone Mainardi
12f24a87b4
Implements stateful alerts in C and sqlite
2016-08-11 19:56:49 +02:00
Simone Mainardi
f1c25e7d77
Implements Redis-authentication
...
Implements #685
2016-08-11 11:34:36 +02:00
Simone Mainardi
12aa4c7399
Fixes after removal of the NetworkInterfaceView code
2016-08-10 11:21:08 +02:00
Luca
fdf1384081
Fixes after merge
2016-08-10 09:46:05 +02:00
Luca
bcadcf033f
Removed view interface (work in progress will be reintroduced after cleanup)
2016-08-10 09:37:10 +02:00
Simone Mainardi
52abb7659a
Handles per-interface alerts via the AlertsManager
...
This commit moves the global ntopng-wide alerts to
interfaces' AlertsManager s
2016-08-09 16:47:36 +02:00
emanuele-f
80e7d980f7
Improove TLS detection
2016-08-09 16:13:40 +02:00
Luca Deri
dab3c11681
Implemented flow update callback and extended flow information passed in callbacks
...
Selected cherry pick from https://github.com/ntop/ntopng/pull/677
2016-08-07 11:12:39 +02:00
Simone Mainardi
199b418037
Implements db-based new generation alerts with lua API (wip)
2016-08-05 19:11:34 +02:00