Simone Mainardi
ca48edd07e
Removes slow rrd writes status which is no longer used
2020-03-06 18:35:17 +01:00
emanuele-f
94f175194b
Initial changes for MUD recording
2020-03-04 17:05:53 +01:00
Simone Mainardi
5a03e1196f
Fixes missing timeseries.lua from dropdown menu
...
Fixes #3476
2020-03-02 10:20:36 +01:00
Simone Mainardi
6fbf5d0bc4
Fix to count drops when the RRD queue is full
2020-03-01 12:31:46 +01:00
Simone Mainardi
cce4dcf568
Implements in-mem RRD writes queue, avoids json enc/dec
2020-02-29 22:30:00 +01:00
Simone Mainardi
9fd86de371
Reworks timeseries export into classes {InfluxDB,RRD}TimeseriesExporter
2020-02-29 18:25:33 +01:00
Simone Mainardi
488165c592
Adds drops counter when the RRD export queue is full
2020-02-29 10:09:02 +01:00
Simone Mainardi
d41c0104d3
Generalizes rrd stats into timeseries stats
2020-02-27 19:11:44 +01:00
emanuele-f
297195abab
Add dropped/stored/queries system stats for alerts
2020-02-27 13:27:47 +01:00
emanuele-f
7b6ce10940
Improve empty RRD files detection for faster recovery
2020-02-26 19:09:08 +01:00
emanuele-f
c694035da3
Add check to delete empty RRD files
2020-02-26 18:52:33 +01:00
emanuele-f
a6dab125d5
Improve dropped alerts information
...
- Add informative label
- Add dropped alerts timeseries and chart
- Generate a system alert whenever alerts are dropped on a network interface
- Add a periodic activity warning when some alerts are dropped on that activity
Closes #3025
2020-02-26 16:05:19 +01:00
emanuele-f
8abdb926cd
Handle /proc/net/dev counters wrapping on 32bit platforms.
...
Fixes #3398
2020-02-25 16:56:58 +01:00
Simone Mainardi
55cdb6c5ea
Reworks slow rrd calc for periodic activites
2020-02-25 13:30:10 +01:00
Simone Mainardi
8e9ea63e8b
Resets rrd state before checking last updates as documented
...
Resets RRD states as documented in https://oss.oetiker.ch/rrdtool/prog/rrdthreads.en.html
Affects #3423
2020-02-24 15:26:38 +01:00
Simone Mainardi
a2237266ee
Adds total rrd writes and drops to periodic scripts timeseries
2020-02-24 12:54:43 +01:00
emanuele-f
a428bb665f
Add work completion indicator to ht_stats/stats/5min dump
2020-02-21 17:43:07 +01:00
Simone Mainardi
a0612895fe
Implements slow rrd checks and updates in C
2020-02-19 19:28:07 +01:00
Simone Mainardi
1cd375d756
Implements per-activity rrd writes duration
2020-02-19 15:34:29 +01:00
Simone Mainardi
5b70db90ad
Handles deadlines for flow user scripts
2020-02-19 10:46:44 +01:00
Simone Mainardi
0e64fd94d6
Implements deadlines for periodic and user scripts
2020-02-18 18:44:41 +01:00
Simone Mainardi
7f449f8e64
Implements deadline-related ntopng methods
2020-02-18 15:47:28 +01:00
emanuele-f
33ece28868
Fix bad category names in Device Applications
...
Fixes #3431
2020-02-18 09:51:49 +01:00
Simone Mainardi
00158e8bc2
Implements error handling in line protocol generation
2020-02-16 14:30:08 +01:00
emanuele-f
54a4ef8b30
Fix use-after-free of the Host (as AlertableEntity)
2020-02-13 12:59:10 +01:00
Luca Deri
aea228e376
Compilation fixes
2020-02-08 10:16:56 +00:00
emanuele-f
e3d3d3992f
Replace an existing flow alert if a more critical problem is found
...
Also add the flow score into the database
2020-02-07 19:20:57 +01:00
emanuele-f
0a0a3c4537
Rework flow status accounting
2020-02-07 19:17:07 +01:00
Luca Deri
1b7b831b85
Added getPackets() function
...
Added localization strings for DNS data exfiltration
2020-02-06 22:36:41 +01:00
emanuele-f
00b4fe17a6
Implement multitenant alerts support for in-memory alerts
2020-02-06 15:18:50 +01:00
emanuele-f
f2baada758
Initial multitenant alerts support
...
Now the user allowed networks are honored when retrieving alerts. Non-flow alerts still need to be fixed.
2020-02-05 23:10:37 +01:00
emanuele-f
70b13aeb99
Split query filter and aggregation
2020-02-05 23:10:37 +01:00
Simone Mainardi
05750cf3ef
Fixes and cleanup
2020-02-05 18:07:54 +01:00
Luca Deri
70dc07c3f1
ArpMatrix code moved to attic
2020-01-30 09:57:32 +01:00
Alfredo Cardigliano
8829e79489
Show update/restart when running from systemd only ( fix #3346 )
2020-01-28 18:17:03 +01:00
Luca Deri
ada61e1807
Warnign fixes
2020-01-28 17:17:26 +01:00
Simone Mainardi
7f6e69653e
Fixes reload of scripts upon license changes or expiration
...
Fixes #3213
2020-01-27 14:07:50 +01:00
emanuele-f
52f392625f
Add flow protocol/category getters
2020-01-22 13:45:35 +01:00
Simone Mainardi
be167a6dcb
Adds per-interface option to only allocate flows
2020-01-21 10:50:30 +01:00
emanuele-f
23f7d90ee4
Move interface.computeHostsScore in the Score script
2020-01-17 10:44:38 +01:00
emanuele-f
566b9ece0b
Score changes
...
- Move score from status definition to user scripts
- Separate flow score counter from the peers score
- Create a new HostScore class to hold the score data
2020-01-16 18:11:14 +01:00
Alfredo Cardigliano
2a285ff7d3
Allocate only the required memory on POST instead of max. Increased max a bit.
2020-01-15 19:05:01 +01:00
emanuele-f
c336cca0e7
Improve host score calculation
2020-01-15 18:42:48 +01:00
emanuele-f
33828c55e8
Fix score chart
2020-01-15 15:43:25 +01:00
Simone Mainardi
03a4b14dda
User scripts now read view configsets for viewed interfaces
...
Implements #3225
2020-01-15 15:40:44 +01:00
emanuele-f
d7528e1628
Score improvements
...
The score is now calculated differently on the client and on the server of the flow.
The hosts flow is updated every minute and charted.
It's now possible to trigger an alert when the score threshold is exceeded
2020-01-15 12:34:16 +01:00
Alfredo Cardigliano
f4a4c07d80
Add ability to extract traffic to users with permission (direct extraction only)
2020-01-13 17:39:12 +01:00
Alfredo Cardigliano
da6b521d53
Computing restricted filter for users allowed to capture live traffic based allowed subnets
2020-01-13 13:02:57 +01:00
Alfredo Cardigliano
a86aaa61e6
Add configuration of user permission for downloading pcap (hidden for the time being)
2020-01-10 18:16:01 +01:00
emanuele-f
5b05b06c96
Use extended icon classes.
...
Also fixes mining alert icon
2020-01-10 17:02:11 +01:00
