Commit graph

80 commits

Author SHA1 Message Date
Luca Deri
389e832d1c (C) update 2026-01-19 16:23:53 +01:00
Luca Deri
81907d8df8 Implemented historical TCP flow stats formatting
Changed TCP flags color to make them easier to detect
2025-11-04 12:45:36 +01:00
Luca Deri
20b5a4ac11 Added support for %TCP_STATS_SRC_TO_DST %TCP_STATS_DST_TO_SRC (WiP) 2025-11-03 23:41:27 +01:00
Alfredo Cardigliano
53bd57aebc Rework (simplify) nedge shapers configuration 2025-08-29 10:15:39 +02:00
Alfredo Cardigliano
5f48441ee7 Check max flow size in nedge (when configured) 2025-08-12 16:53:05 +02:00
Luca Deri
241de655d3 Added space among uicons 2025-08-09 11:03:05 +02:00
Alfredo Cardigliano
fb0696fa2b Export drop reason and show it under flow details 2025-02-18 14:43:50 +01:00
Luca Deri
f1b2ad7832 Added support for %WLAN_SSID %WTP_MAC_ADDRESS 2024-08-22 23:14:20 +02:00
Matteo Biscosi
d795bf3474 Added NAT info in clickhouse (#8384) 2024-05-10 10:22:55 -04:00
Luca Deri
e3bbe090e0 Improved SIP call display 2024-05-04 12:27:37 +02:00
Nicolò Maio
2d150103b7
Add TCP flow connection state (#8210)
* Add TCP flow connection state (#8140)

* Add Major and Minor connection states (#8140)

* Remove ZMQ connection state parsing. (#8140)

* Update doc with major and minor conn states. (#8140)
2024-02-28 14:45:49 +01:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
Luca Deri
bdd95ff988 Added support for %NPROBE_INSTANCE_NAME 2023-09-12 23:59:23 +02:00
Luca
11cff335b0 Improvements for handlign Cisco NBAR collection 2022-11-05 22:18:32 +01:00
Luca Deri
790af4c9e1 Fixed nProbe template flow mapping 2022-06-27 20:08:38 +02:00
MatteoBiscosi
57a85de50e Cleaned up the code from plugin_utils 2022-02-11 12:07:23 +01:00
Luca Deri
e38114b75f Added missing cento flow labels 2022-02-02 13:45:01 +01:00
Alfredo Cardigliano
257ece18c0 Copyright update (Lua) 2022-01-03 09:42:33 +01:00
Luca Deri
e65e9f9304 Syslog collection fixes 2021-12-12 18:15:47 +01:00
Luca Deri
e22a8d31dc Extensions for handling syslog flows 2021-12-02 18:12:25 +01:00
Luca Deri
5e03ad7e2f Updated probe template 2021-10-27 18:29:29 +02:00
MatteoBiscosi
0c3bfd54c4 Changed name from probe to exporter (#5970) 2021-10-11 16:54:01 +02:00
MatteoBiscosi
a23babe57d Changed Exporter name into Probe (#5668) 2021-07-14 12:43:13 +02:00
Luca Deri
195fe9578c Improved observation point id support and flow reporting 2021-06-19 00:16:48 +02:00
Luca Deri
3dda9ba905 Added FLOW_VERDICT handling 2021-04-19 23:49:23 +02:00
Simone Mainardi
da943e0dff Reduces the maximum cli/srv score per callback to 128 2021-03-23 14:54:32 +01:00
Luca Deri
a3990cd904 Added Some IPFIX stanndard fields collected by ntopng/nProbe in pass throught mode 2021-02-23 12:33:07 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Simone Mainardi
16e2c9efe2 Cleanup to remove flow_consts no longer needed 2020-12-22 17:59:51 +01:00
Simone Mainardi
636ac2e804 Cleanup parametric alert severities from flow status definitions 2020-11-12 12:12:25 +01:00
Simone Mainardi
8b7a99aa94 Fixes for flow-status-dependent severity 2020-11-12 12:02:27 +01:00
Simone Mainardi
93920ccdce Implements example of simplified flow alerts 2020-11-10 15:10:54 +01:00
Simone Mainardi
d42057baf5 Additional fixes for Zero TCP window detection 2020-11-07 15:38:39 +01:00
Simone Mainardi
357f11900f Fixes exceptions upon plugins reload
Fixes #4633
2020-10-27 17:35:14 +01:00
Luca Deri
51ea9c53cf Reworked alert icon colors 2020-10-16 19:38:04 +02:00
Simone Mainardi
d3dda0bb82 Unifies misbehaving with alerted flows
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
cbe28fb750 Makes loadDefinition local to flow_consts
Possible fix for #4560
2020-10-11 19:02:52 +02:00
Simone Mainardi
b82738330c Adds extra indications upon plugin load failures
Fixes #4549
2020-10-09 09:23:11 +02:00
Luca Deri
c7b7f2ee1b Minor cleanup 2020-09-23 09:35:32 +02:00
Alfredo Cardigliano
721a32b9a4 Indentation 2020-09-18 18:27:21 +02:00
Simone Mainardi
ec9d092423 Fixes DNS stats when collecting from ZMQ
Fixes #4148
2020-07-29 10:40:53 +02:00
Simone Mainardi
0b894bcec9 Typo 2020-07-24 13:22:17 +02:00
Simone Mainardi
c3bf89e984 Improves loading of flow definitions (uses require in place of dofile) 2020-07-23 14:31:09 +02:00
Alfredo Cardigliano
2364e73345 DSCP utiliti functions 2020-07-17 10:40:38 +02:00
Simone Mainardi
83c4d36e34 Simplifies flow.triggerStatus using internal flow status reference 2020-04-27 17:48:56 +02:00
Simone Mainardi
290175b16f Refactors alrt builders into creators
Refactors builders into creators: calls
2020-04-27 15:53:56 +02:00
Simone Mainardi
ab1690ad9e Implements builders for each flow status definition
[FlowsK] alert_blacklisted_country.lua

[FlowsK] alert_flow_blacklisted.lua

[FlowsK] alert_device_protocol_not_allowed.lua

[FlowsK] external_alert.lua

[FlowsK] alert_potentially_dangerous_protocol.lua

[FlowsK] tls_certificate_mismatch.lua

[FlowsK] tls_certificate_expired.lua

[FlowsK] tls_malicious_signature.lua

[FlowsK] elephant_flows.lua

[FlowsK] not_purged.lua

[FlowsK] web_mining.lua

[FlowsK] potentially_dangerous.lua

[FlowsK] alert_flow_blocked.lua
2020-04-27 12:43:37 +02:00
Simone Mainardi
78b334e4eb Refactors alerts and flow statuses in builtin and plugins
Implements #3811
Implements #3812

Refactors builtin alerts

Refactors builtin flow statuses
2020-04-21 22:27:49 +02:00
Simone Mainardi
0a9a7015e0 Unifies status_id and status_key 2020-04-15 14:29:03 +02:00
Simone Mainardi
4177ee61ab Implements constant flow and alert ids
Enlarges AlertType size

Changes alerts database
2020-04-14 22:20:44 +02:00