Alfredo Cardigliano
|
26f9f7a418
|
Add 'runtime' test scripts, in addition to pre and post
|
2022-08-24 17:13:30 +02:00 |
|
Alfredo Cardigliano
|
8816605841
|
Fix shutdown sequence with pcap to fix regression tests on historical data
|
2022-08-24 15:37:38 +02:00 |
|
Luca Deri
|
7b4a4acd5a
|
Improved service categorization
|
2022-08-20 19:34:47 +02:00 |
|
Luca Deri
|
db3cdd1d15
|
Added IMAP/POP stats
|
2022-08-18 19:17:38 +02:00 |
|
Alfredo Cardigliano
|
6b8e16151b
|
Cleanup unused functions
|
2022-08-18 15:37:31 +02:00 |
|
Luca Deri
|
f7180631f5
|
Added router information
|
2022-08-18 12:54:09 +02:00 |
|
Luca Deri
|
bee57c0f57
|
Changes in redis serialization key
|
2022-08-18 11:31:06 +02:00 |
|
Luca Deri
|
5c17fa1099
|
Improved asset management
|
2022-08-17 17:35:36 +02:00 |
|
Luca Deri
|
9be5d34f5c
|
Code clanup
|
2022-08-16 17:54:41 +02:00 |
|
Luca Deri
|
b046e3d748
|
Added --log-labels for creating a log of labels used by ntopng when learnt during traffic processing
|
2022-08-12 20:21:38 +02:00 |
|
Luca Deri
|
64233d94e2
|
Introdices nTap support
|
2022-08-11 19:18:00 +02:00 |
|
MatteoBiscosi
|
a1ed5d29f4
|
Fixes Redis trim
|
2022-08-09 16:32:26 +02:00 |
|
MatteoBiscosi
|
c330724455
|
Last fixes to connection/disconnection alert (#6801)
|
2022-08-08 17:40:33 +02:00 |
|
MatteoBiscosi
|
1009b30a99
|
Added directions to Periodicity Map (#6668)
|
2022-08-02 18:04:08 +02:00 |
|
Alfredo Cardigliano
|
8845ca8573
|
Add Utils::openSocket/Utils::closeSocket to label sockets
|
2022-07-29 10:11:57 +02:00 |
|
MatteoBiscosi
|
8e4f76c6ce
|
Changed traffic direction support to true by default (#6704)
|
2022-07-27 16:20:18 +02:00 |
|
MatteoBiscosi
|
74fcb75d78
|
Added asset management class
|
2022-07-26 18:15:19 +02:00 |
|
MatteoBiscosi
|
c3bb24a38b
|
Add num alerted flows in ASN (#6465)
|
2022-07-25 10:51:08 +02:00 |
|
MatteoBiscosi
|
fb6d7e1655
|
Added num alerted flows in Networks (#6465)
|
2022-07-25 10:50:42 +02:00 |
|
MatteoBiscosi
|
d8d14b8ab9
|
Final fix for #6790
|
2022-07-22 16:34:37 +02:00 |
|
Alfredo Cardigliano
|
61244379ea
|
Rename misleading file name (CH schema also includes flows)
|
2022-07-21 17:47:02 +02:00 |
|
Luca Deri
|
0e7f609957
|
Added Windows timezone handling
|
2022-07-19 15:19:30 +02:00 |
|
Alfredo Cardigliano
|
fe48f82631
|
Improve local hosts lookups by using cached info when the network ID is not required
|
2022-07-19 12:54:33 +02:00 |
|
MatteoBiscosi
|
687d508daa
|
Fixes IEC alerts triggered even when disabled (#6682)
|
2022-07-19 11:14:25 +02:00 |
|
Luca Deri
|
fac4572ad1
|
File rename
|
2022-07-18 17:53:28 +02:00 |
|
Alfredo Cardigliano
|
fb8e748679
|
Handle ndpi failures loading host lists. Print failing entries
|
2022-07-18 15:23:45 +02:00 |
|
Alfredo Cardigliano
|
80a4acab95
|
Add Flow Checks profiling (execution time in System -> Health -> Behavioural Checks)
|
2022-07-15 16:22:48 +02:00 |
|
Alfredo Cardigliano
|
e4e7c4e89f
|
Rework profiling macros
|
2022-07-15 11:56:19 +02:00 |
|
Alfredo Cardigliano
|
14e2ae834c
|
Add alert type for missing flow risks
|
2022-07-15 10:57:02 +02:00 |
|
Alfredo Cardigliano
|
cdd4a41bd5
|
Rename FlowRisk Simple to Generic
|
2022-07-14 17:23:06 +02:00 |
|
Alfredo Cardigliano
|
86e475b292
|
Add notes and cleanup support for unhandled flow risks. Add flow_alert_ndpi_desktop_or_file_sharing_session
|
2022-07-14 17:15:08 +02:00 |
|
Alfredo Cardigliano
|
deb52c5894
|
Fix typo
|
2022-07-14 15:10:15 +02:00 |
|
Luca
|
58478f0c42
|
Flow risks code cleanup
|
2022-07-14 11:04:02 +02:00 |
|
Luca
|
888be4858f
|
Cosmetic changes
|
2022-07-12 11:40:31 +02:00 |
|
Luca Deri
|
7bb3d1480f
|
No idea why we're still usinge const
|
2022-07-06 14:52:38 +02:00 |
|
Alfredo Cardigliano
|
72b19f8c64
|
Clear all risks for flows matching the IssuerDN Exclusion for self-signed certificates
|
2022-07-06 10:47:21 +00:00 |
|
Luca Deri
|
49c15bac20
|
Added DGA domain handling received via ZMQ
|
2022-07-04 22:30:37 +02:00 |
|
Luca Deri
|
bdbc84fef6
|
Implemented issuerDN exception handling
|
2022-07-04 21:39:36 +02:00 |
|
MatteoBiscosi
|
6905398633
|
Fixes servers not correctly working in view interface (#6742)
|
2022-06-30 13:02:18 +02:00 |
|
MatteoBiscosi
|
bf080c9407
|
Implement network matrix (#6679)
|
2022-06-30 10:47:30 +02:00 |
|
MatteoBiscosi
|
e73e2c9fc6
|
Added support to ELK version 8 (#6651)
|
2022-06-28 14:52:04 +02:00 |
|
MatteoBiscosi
|
a34164bf67
|
Added ELK dump frequency to settings (#6725)
|
2022-06-27 16:51:14 +02:00 |
|
MatteoBiscosi
|
755c90e0c2
|
Changed from UDP unidirection to unidirectiont traffic
|
2022-06-21 15:11:54 +02:00 |
|
MatteoBiscosi
|
4f8c5c6cec
|
Moved UDP unidirection to nDPI alerts
|
2022-06-21 11:37:46 +02:00 |
|
Alfredo Cardigliano
|
0fa2ce01e4
|
Compilation fix
|
2022-06-20 22:58:07 +02:00 |
|
Alfredo Cardigliano
|
89b19f8134
|
Add listening ports from nprobe agent to hosts
|
2022-06-20 18:24:05 +02:00 |
|
Luca Deri
|
5de07dc827
|
Added support for nDPI unidirectional traffic risk
|
2022-06-20 00:46:51 +02:00 |
|
Luca Deri
|
d634f461d3
|
Reworked network initialization
|
2022-06-17 23:57:02 +02:00 |
|
MatteoBiscosi
|
614e91b70f
|
Added category to elasticsearch flow dump
|
2022-06-15 12:40:16 +02:00 |
|
Alfredo Cardigliano
|
62171c516c
|
Handle package information from nprobe
|
2022-06-15 12:25:05 +02:00 |
|