Luca Deri
074a08e7ce
Simplified ntopng when nEdge is used
2017-10-21 15:36:28 +02:00
Luca Deri
fef176ea5b
Reworked memory deallocation in collected flows with multiple elements
2017-10-15 07:57:45 +02:00
Luca Deri
4b01406137
Improved fingerprinting support
...
Disabled HTTP banned page support as in the current implementation is ambiguous
Fixed flow parsing leak
2017-10-15 07:46:20 +02:00
Luca Deri
3cfbfd4900
Fix ZMQ flow increment when multiple flows are delivered on the same ZMQ message
2017-10-13 15:24:47 +02:00
Luca Deri
594abe68ce
Implemented ZMQ flow buffering support for enhancing ZMQ performance and decreasing data exchanged
2017-10-10 10:45:25 +02:00
Luca Deri
124364c4a2
Initial work towards better flow serialization
2017-10-03 14:55:35 +02:00
Luca Deri
3f62a7f9c3
Implemented traffic direction in network interfaces
2017-09-16 18:35:06 +02:00
Simone Mainardi
906aff3e20
Implements use of post-nat src/dst addresses and ports
...
Implements https://github.com/ntop/ntopng/issues/1398
2017-09-07 16:24:53 +02:00
Simone Mainardi
0499fce4d3
Adds missing ZMQ fields
2017-09-07 12:29:47 +02:00
Simone Mainardi
5955ee576c
Handles multiple banaced ZMQ endpoints
2017-09-05 10:18:04 +02:00
Simone Mainardi
816965b1ac
Implements support of flow field FIREWALL_EVENT
2017-08-10 15:54:03 +02:00
Luca Deri
7226199819
Implemented async MDNS address resolution
2017-08-07 15:26:57 +02:00
Simone Mainardi
d172cafce3
Reworks CollectorInterfaces and adds remote nProbe stats
...
Fixes #572
2017-08-05 21:37:18 +02:00
Simone Mainardi
a0a457013f
Handles absolute bytes and packets counters received over ZMQ
2017-08-02 18:36:13 +02:00
Simone Mainardi
5aa94c05ab
Adjusts ZMQ event parser to the new format
2017-08-02 14:59:26 +02:00
Simone Mainardi
85da10af61
Implements new flow drill-down criteria: exporter ip and in/out interfaces
...
Implements #1326
2017-07-20 19:54:11 +02:00
Simone Mainardi
e4182969c4
Fixes some memory leaks
...
Possibly affects #1351 #1345 #1337 #1311
2017-07-10 18:39:19 +02:00
Simone Mainardi
4a8c108060
Implements Flow SNMP Localization
...
Implements #1325
2017-07-04 18:11:58 +02:00
emanuele-f
fae0177e26
Update nProbe field mappings and provide a script to automate the process
2017-05-30 12:01:36 +02:00
Luca Deri
7655356c35
Implemented VRF flow aggregation
2017-05-26 14:56:12 +02:00
Luca Deri
0582d77d0d
Added partial ingressVRFIF support
2017-05-25 19:11:35 +02:00
Simone Mainardi
392d31884b
Fixes sFlow deviceIP conversion
2017-04-10 16:20:24 +02:00
Simone Mainardi
7ea077d829
ntohl conversion for sFlow device IP
2017-04-01 11:30:08 +02:00
Simone Mainardi
ec4b7d6e9f
Adds support for nProbe field NPROBE_IPV4_ADDRESS
2017-03-28 16:10:09 +02:00
Simone Mainardi
642d3f68aa
Fixes ZMQ flows/hosts/macs idleness and purge
2017-03-09 00:57:39 +01:00
Luca Deri
e5e6ff6cd8
Fix for invalid host retrieval (no hosts returned while hosts were present)
...
Fixed invalid host first/last seen in colelctor interfaces
Enhanced usage of interface Ids in collected flows
2017-03-04 11:23:57 +01:00
Luca
30e1a75f98
(C) update
2017-01-10 15:03:16 -08:00
Luca
c44bfa8fdb
Implemented #98
...
Ingress data can now be kept aggregated (default) or explored based on various criteria
- ZMQ interfaces: disaggregate based on probeIP or ingress interfaceId
- packet interfaces: disaggregate on VLANId
2016-12-27 11:03:52 +01:00
emanuele-f
bc14efd102
Interpret ZMQ retransmissions/OOO and update counters
2016-10-26 14:32:02 +02:00
Luca Deri
603c642469
Improved mac address support
...
Added host icons with their role in the netwokr
2016-10-03 23:16:40 +02:00
Luca Deri
97b19c1461
Introduced the concept of Mac hosts (it used to be mixed with L3 hosts). More work is needed to add L2 stats
...
Host activities are now enabled (and memory allocated) only for local hosts. Fixed bug in activities preferences
Cleaned up various methods
Removed some old unused code
2016-10-02 19:43:13 +02:00
Simone Mainardi
7d86f1f6ff
Raises a warning when overwriting an IP address over ZMQ
2016-09-22 16:52:40 +02:00
Simone Mainardi
6af6ed00fb
Prevents empty addresses to overwrite valid addresses in ZMQ
...
This can happen when nProbe is configured to export a template
that contains both IPv4 and IPv6. In these cases nprobe can
send a template such as
payload=0x7f67e9a66aa0 "{\"1\":80,\"2\":2,\"4\":6,\"5\":0,\"6\":2,\"7\":64196,\"8\":\"134.249.163.101\",\"10\":0,\"11\":23,\"12\":\"81.19.152.170\",\"14\":0,\"15\":\"0.0.0.0\",\"16\":15895,\"17\":38955,\"21\":1474542213,\"22\":1474542202,\"23\":0,\"24\":0,\"27\":\"::\","..., payload_size=309, source_id=0 '\000', data=0x2477560) at src/ParserInterface.cpp:560
where both the IPv6 (field "27") and IPv4 (field "8") can be exported simultaneousy.
Before this commit the empty IPv6 could overwrite the non-empty IPv4
2016-09-22 15:35:19 +02:00
Luca Deri
a923973043
Changed tracing to debug
2016-07-28 21:44:37 +02:00
Simone Mainardi
0de66219d0
Sets flow vlan to DOT1Q if no inner vlan is detected
...
If no {SRC,DST}_VLAN field is set, then the outer vlan values
found in Q-in-Q DOT1Q_{SRC,DST}_VLAN are used (if set) to populate
flow vlan.
Fixes #650
2016-07-24 14:26:08 +02:00
Luca Deri
5088fe0f33
Flow collection improvements
2016-07-04 17:50:23 +02:00
Luca Deri
ef62c85bc7
Implemented host deviceIP/port binding
2016-07-04 00:04:32 +02:00
Luca Deri
194b3fdb88
Initial work towards supporting sFlow device/interface counters
2016-06-29 19:26:40 +02:00
Simone Mainardi
6544854eba
Logs possible JSON parse error descriptions
...
Addresses #522
2016-06-07 10:17:36 +02:00
Luca Deri
89ea597be3
Added ability to report ZMQ bps/pps as exported in latest nProbe
2016-04-24 15:05:06 +02:00
Luca Deri
561d6c8161
Added support for BT Hash and SSL host name via ZMQ
2016-04-23 00:45:16 +02:00
Luca Deri
5618c4489f
Implemented support for clock drift when collecting flows from remote probes with clock time screw
2016-03-30 16:19:36 +02:00
Luca Deri
5c418ae0e9
Fixed invalid bytes/pkts update on ZMQ interfaces
2016-03-29 01:38:11 +02:00
Luca Deri
0aa87b7c9b
Spring cleaning
2016-03-28 14:16:27 +02:00
valentina
c973a28752
Added management of latitude and longitude parameters (SRC_IP_LONG, SRC_IP_LAT, DST_IP_LONG and DST_IP_LAT)
2016-03-20 21:06:49 +01:00
Luca Deri
07c839489e
Various ZMQ enhancementent
...
Set the icon size of some external links to the correct size
2016-03-15 19:51:38 +01:00
Luca Deri
263f3123e2
Improved ZMQ handling by adding encryption and compression support
2016-03-15 17:08:23 +01:00
Luca Deri
2d8337496d
Fix for #316 (latest nProbe dev is required)
2016-02-27 19:29:20 +01:00
Luca
3bea0a7bfc
Fxi for #354
...
Added support for collecting flows specified in JSON with symbolic field labels
2016-01-14 14:52:15 -05:00
Luca Deri
d7c452f0a3
Moved to 2016
2016-01-01 09:27:39 +01:00