Commit graph

3564 commits

Author SHA1 Message Date
Alfredo Cardigliano
26f9f7a418 Add 'runtime' test scripts, in addition to pre and post 2022-08-24 17:13:30 +02:00
Alfredo Cardigliano
8816605841 Fix shutdown sequence with pcap to fix regression tests on historical data 2022-08-24 15:37:38 +02:00
Luca Deri
7b4a4acd5a Improved service categorization 2022-08-20 19:34:47 +02:00
Luca Deri
db3cdd1d15 Added IMAP/POP stats 2022-08-18 19:17:38 +02:00
Alfredo Cardigliano
6b8e16151b Cleanup unused functions 2022-08-18 15:37:31 +02:00
Luca Deri
f7180631f5 Added router information 2022-08-18 12:54:09 +02:00
Luca Deri
bee57c0f57 Changes in redis serialization key 2022-08-18 11:31:06 +02:00
Luca Deri
5c17fa1099 Improved asset management 2022-08-17 17:35:36 +02:00
Luca Deri
9be5d34f5c Code clanup 2022-08-16 17:54:41 +02:00
Luca Deri
b046e3d748 Added --log-labels for creating a log of labels used by ntopng when learnt during traffic processing 2022-08-12 20:21:38 +02:00
Luca Deri
64233d94e2 Introdices nTap support 2022-08-11 19:18:00 +02:00
MatteoBiscosi
a1ed5d29f4 Fixes Redis trim 2022-08-09 16:32:26 +02:00
MatteoBiscosi
c330724455 Last fixes to connection/disconnection alert (#6801) 2022-08-08 17:40:33 +02:00
MatteoBiscosi
1009b30a99 Added directions to Periodicity Map (#6668) 2022-08-02 18:04:08 +02:00
Alfredo Cardigliano
8845ca8573 Add Utils::openSocket/Utils::closeSocket to label sockets 2022-07-29 10:11:57 +02:00
MatteoBiscosi
8e4f76c6ce Changed traffic direction support to true by default (#6704) 2022-07-27 16:20:18 +02:00
MatteoBiscosi
74fcb75d78 Added asset management class 2022-07-26 18:15:19 +02:00
MatteoBiscosi
c3bb24a38b Add num alerted flows in ASN (#6465) 2022-07-25 10:51:08 +02:00
MatteoBiscosi
fb6d7e1655 Added num alerted flows in Networks (#6465) 2022-07-25 10:50:42 +02:00
MatteoBiscosi
d8d14b8ab9 Final fix for #6790 2022-07-22 16:34:37 +02:00
Alfredo Cardigliano
61244379ea Rename misleading file name (CH schema also includes flows) 2022-07-21 17:47:02 +02:00
Luca Deri
0e7f609957 Added Windows timezone handling 2022-07-19 15:19:30 +02:00
Alfredo Cardigliano
fe48f82631 Improve local hosts lookups by using cached info when the network ID is not required 2022-07-19 12:54:33 +02:00
MatteoBiscosi
687d508daa Fixes IEC alerts triggered even when disabled (#6682) 2022-07-19 11:14:25 +02:00
Luca Deri
fac4572ad1 File rename 2022-07-18 17:53:28 +02:00
Alfredo Cardigliano
fb8e748679 Handle ndpi failures loading host lists. Print failing entries 2022-07-18 15:23:45 +02:00
Alfredo Cardigliano
80a4acab95 Add Flow Checks profiling (execution time in System -> Health -> Behavioural Checks) 2022-07-15 16:22:48 +02:00
Alfredo Cardigliano
e4e7c4e89f Rework profiling macros 2022-07-15 11:56:19 +02:00
Alfredo Cardigliano
14e2ae834c Add alert type for missing flow risks 2022-07-15 10:57:02 +02:00
Alfredo Cardigliano
cdd4a41bd5 Rename FlowRisk Simple to Generic 2022-07-14 17:23:06 +02:00
Alfredo Cardigliano
86e475b292 Add notes and cleanup support for unhandled flow risks. Add flow_alert_ndpi_desktop_or_file_sharing_session 2022-07-14 17:15:08 +02:00
Alfredo Cardigliano
deb52c5894 Fix typo 2022-07-14 15:10:15 +02:00
Luca
58478f0c42 Flow risks code cleanup 2022-07-14 11:04:02 +02:00
Luca
888be4858f Cosmetic changes 2022-07-12 11:40:31 +02:00
Luca Deri
7bb3d1480f No idea why we're still usinge const 2022-07-06 14:52:38 +02:00
Alfredo Cardigliano
72b19f8c64 Clear all risks for flows matching the IssuerDN Exclusion for self-signed certificates 2022-07-06 10:47:21 +00:00
Luca Deri
49c15bac20 Added DGA domain handling received via ZMQ 2022-07-04 22:30:37 +02:00
Luca Deri
bdbc84fef6 Implemented issuerDN exception handling 2022-07-04 21:39:36 +02:00
MatteoBiscosi
6905398633 Fixes servers not correctly working in view interface (#6742) 2022-06-30 13:02:18 +02:00
MatteoBiscosi
bf080c9407 Implement network matrix (#6679) 2022-06-30 10:47:30 +02:00
MatteoBiscosi
e73e2c9fc6 Added support to ELK version 8 (#6651) 2022-06-28 14:52:04 +02:00
MatteoBiscosi
a34164bf67 Added ELK dump frequency to settings (#6725) 2022-06-27 16:51:14 +02:00
MatteoBiscosi
755c90e0c2 Changed from UDP unidirection to unidirectiont traffic 2022-06-21 15:11:54 +02:00
MatteoBiscosi
4f8c5c6cec Moved UDP unidirection to nDPI alerts 2022-06-21 11:37:46 +02:00
Alfredo Cardigliano
0fa2ce01e4 Compilation fix 2022-06-20 22:58:07 +02:00
Alfredo Cardigliano
89b19f8134 Add listening ports from nprobe agent to hosts 2022-06-20 18:24:05 +02:00
Luca Deri
5de07dc827 Added support for nDPI unidirectional traffic risk 2022-06-20 00:46:51 +02:00
Luca Deri
d634f461d3 Reworked network initialization 2022-06-17 23:57:02 +02:00
MatteoBiscosi
614e91b70f Added category to elasticsearch flow dump 2022-06-15 12:40:16 +02:00
Alfredo Cardigliano
62171c516c Handle package information from nprobe 2022-06-15 12:25:05 +02:00