emanuele-f
dd37cafa12
Store and restore local broadcast domain hosts from their mac key
...
Charts now display the mac based data when browsing a local broadcast domain host.
This is an important change to avoid mixing historical information of different hosts in a dynamic network.
More changes will follow to migrate other historical elements, like flows, alerts and top stats.
2019-02-21 18:42:57 +01:00
Simone Mainardi
8f1c8831bc
Properly sets initial values to prevent large RSI after deserializations
2019-02-21 17:48:13 +01:00
Simone Mainardi
1f349c5dee
Implements DNS monitored counters
2019-02-21 17:41:57 +01:00
emanuele-f
6f94f7b132
Add thread names for debugging
2019-02-21 11:51:57 +01:00
emanuele-f
a486d2c19f
Implement host counter of total triggered alerts
...
Closes #2391
2019-02-20 20:12:44 +01:00
Simone Mainardi
7e2ac7fbaa
Implements timeseries of per-host misbehaving flows
...
Implements #2409
2019-02-20 16:31:37 +01:00
Simone Mainardi
c40bfb1a8e
Implements custom column in the hosts stats page
2019-02-20 12:14:34 +01:00
emanuele-f
02371ad963
Add ability to mask MAC addresses
...
Closes #2399
2019-02-19 16:34:47 +01:00
Simone Mainardi
4bb6a7a64e
OS X compilation fixes
2019-02-16 18:35:22 +01:00
Simone Mainardi
9a413a5d72
Implements TCP states filtering (est., connecting, closed and rst)
...
Implements #2385
2019-02-16 18:19:25 +01:00
Simone Mainardi
ae23ebcd1c
Implements visibility of ICMP port-unreachable flows IPv4
2019-02-15 18:59:01 +01:00
emanuele-f
e6c4a5ad7e
Avoid setting os for router devices
2019-02-15 14:20:42 +01:00
Simone Mainardi
86e4157b16
Adds mark in Flow to count if it has been aggregated
2019-02-14 16:16:39 +01:00
Luca Deri
278758a3bb
Reworked ArpStats datatype
2019-02-14 10:47:08 +01:00
emanuele-f
f801aa4902
Implement beta anomaly index alerts generation
...
Enable with "redis-cli set ntopng.prefs.beta_anomaly_index_alerts 1"
2019-02-13 15:57:32 +01:00
Simone Mainardi
2b2b37e624
Adds anomalous flows to the looking glass
2019-02-13 13:01:31 +01:00
Simone Mainardi
be84653570
Fixes failing SYN-scan detection
2019-02-12 19:01:51 +01:00
emanuele-f
62eded2bfb
Fix ZMQ host name match
2019-02-12 18:15:06 +01:00
Simone Mainardi
1d9107bdc5
Simplifies detection of SYN-only flows
2019-02-12 18:07:04 +01:00
emanuele-f
f267875fb8
Fix ZMQ host category detection
2019-02-12 17:29:14 +01:00
emanuele-f
a09e8efed0
Add hosts anomalous flows counter
2019-02-12 12:05:30 +01:00
emanuele-f
2525b82ca4
Update blacklisted hosts when lists are reloaded
2019-02-12 11:00:04 +01:00
Luca Deri
38c0341106
Fixes #2343
2019-02-11 18:57:46 +01:00
Simone Mainardi
fb7a2aa5b6
Converts unknown pen and IE to u_ints
2019-02-11 18:24:23 +01:00
Simone Mainardi
01bad09a88
Implements handling of PEN fields from nProbe
2019-02-11 18:14:13 +01:00
Simone Mainardi
19a4b03478
ParserInterface sprobe cleanup
2019-02-11 15:15:48 +01:00
Simone Mainardi
e5eff5b30f
Initial sprobe code cleanup
2019-02-11 14:22:36 +01:00
emanuele-f
7e0117fd12
Initial work for category lists customization
2019-02-08 19:14:57 +01:00
Simone Mainardi
a3b342219c
Simplifies and improves handling of TCP flow states
2019-02-08 17:33:52 +01:00
Simone Mainardi
3dd9f11628
Implements flow TCP states filters
2019-02-08 15:57:03 +01:00
Simone Mainardi
7a1b2dc887
Parses nProbe options topic and handles custom applications
2019-02-07 16:11:11 +01:00
Simone Mainardi
300e6c4672
Parses new template ZMQ topic
2019-02-06 19:10:00 +01:00
Luca Deri
cadf58e3fc
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
2019-02-06 15:32:14 +01:00
Luca Deri
937ee52de7
Disabled some debug messages in tracings
...
Added ability to avoid parsing JSON payload when specifying ignore_post_payload_parse = something. This is useful in case of a HTTP post where you do not want to parse it.
Example:
local dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
local json = require "dkjson"
-- Use ignore_post_payload_parse BEFORE calling 'require "lua_utils"'
ignore_post_payload_parse = 1
require "lua_utils"
sendHTTPContentTypeHeader('application/json')
local info, pos, err = json.decode(_POST["payload"], 1, nil)
2019-02-06 15:28:18 +01:00
Simone Mainardi
4a0f18038e
Fixes anomaly index serialization issues
2019-02-06 12:13:42 +01:00
Simone Mainardi
500964c457
Improves anomaly index on active flows
2019-02-06 11:31:56 +01:00
Simone Mainardi
b4f1660b0a
Implements monitored gauges and metrics
2019-02-05 17:13:22 +01:00
Simone Mainardi
4cbb9450f9
Fixes WARNING: Internal error: invalid counter value
2019-02-05 10:06:03 +01:00
Luca Deri
0108eaf473
Added debug code for evaluating anomalies
2019-02-04 13:15:35 +01:00
Luca Deri
a28af66e40
Initial export of anomaly index
2019-02-04 12:07:52 +01:00
Luca
509df6a1fc
Improved counter monitoring algorithm
2019-02-03 23:30:07 +01:00
Luca Deri
db20663a57
Minor update
2019-02-03 18:59:51 +01:00
Luca
1638a36ec7
Initial experiments on counters monitoring
2019-02-03 15:32:32 +01:00
emanuele-f
0ac8368ea7
Abort nindex query when client connection is closed
...
Fixes #2329
2019-01-30 16:01:47 +01:00
Simone Mainardi
0ee599d052
Adds MDNS/MDNS TXT/resolved names to the host details page
2019-01-30 14:36:33 +01:00
Alfredo Cardigliano
3381ddbcf5
REST endpoints update
...
get_alerts_data.lua -> rest/get/alert/data.lua, host_get_json.lua -> rest/get/host/data.lua, get_interface_data.lua -> rest/get/interface/data.lua, live_traffic_extraction.lua -> rest/get/pcap/live_extraction.lua
2019-01-30 14:18:45 +01:00
Simone Mainardi
183dfa41f9
Handles IPv6 NDP to detect broadcast domain
2019-01-30 11:49:47 +01:00
Simone Mainardi
92b722e6f3
Uses ARP do determine hosts in the same bcast domain
2019-01-29 18:07:43 +01:00
Simone Mainardi
5110b1cadf
Prevents certain races when no heap mem is avaiable
2019-01-29 12:31:06 +01:00
Simone Mainardi
9b336937df
Properly handles host names with concurrency
2019-01-28 17:56:40 +01:00
