Commit graph

805 commits

Author SHA1 Message Date
Simone Mainardi
f61ffc045b Merge branch 'c-user-scripts' into dev 2021-03-22 10:36:13 +01:00
Simone Mainardi
aea9138bfb Implements flow callbacks and alerts in C++ 2021-03-22 09:51:36 +01:00
Luca Deri
8f37e1d77d Added anomaly counter 2021-03-18 19:08:17 +01:00
Luca Deri
e10a3a3135 Enhanced anomly debug messages
Cleaned up brodcast domain code
2021-03-18 15:46:58 +01:00
Simone Mainardi
76006d6250 Fixes IP reassignment code that is now per-interface
Implements #5038
2021-02-26 11:21:04 +01:00
Alfredo Cardigliano
db9adb9060 Add support for Malicious JA3 signature using nDPI (#5045) 2021-02-23 18:35:19 +01:00
Matteo Biscosi
9632c62bfa Implements cleanup IP reassignment code
Implements #5038
2021-02-19 15:36:27 +01:00
Alfredo Cardigliano
c658b8ed24 Full purge idle scan on shutdown when processing pcap 2021-02-11 15:56:43 +01:00
Simone Mainardi
265472728d Improves guess of local networks from broadcast traffic
Fixes #5011
2021-02-08 17:23:05 +01:00
Simone Mainardi
537bc5210a Adds Layer-7 Applications to Exporters (backend)
Addresses #4976
2021-02-04 11:01:22 +01:00
Matteo Biscosi
288463b5d0 Implements #4973 partial local broadcast domain calculation 2021-01-27 09:59:05 +01:00
Matteo Biscosi
c4dd51e9b6 Implements dynamic menu for periodicity and service map
Implements #4939
2021-01-22 16:18:57 +01:00
Alfredo Cardigliano
f2e64bb9ef Support 4-byte INPUT/OUTPUT SNMP 2021-01-22 10:24:56 +01:00
Matteo Biscosi
4c3d1d628d Implements Service/Periodicity map: add ageing an protocol filter
Implements #4939
2021-01-22 10:12:56 +01:00
Matteo Biscosi
f6fcce5e0b Fixed #4937 top sites generation is broken 2021-01-21 18:05:25 +01:00
Simone Mainardi
8a62783e2d Cleanup old partial host groups code
Fixes #1599
2021-01-21 11:27:17 +01:00
Matteo Biscosi
43fa8cf6e9 Implements OperatingSystem Hash
Implements #1599
2021-01-21 11:14:52 +01:00
Matteo Biscosi
864723c151 Fixed top sites problem and added a slice of top OS stats 2021-01-18 18:12:53 +01:00
Simone Mainardi
c183008859 Prints SNMP details in interfaces dropdown when available 2021-01-17 12:49:54 +01:00
Matteo Biscosi
acba25becb Added unicast filter to service/periodicity map 2021-01-13 18:31:23 +01:00
Matteo Biscosi
1d9b034974 Added host pool and vlan filter for periodicity map 2021-01-13 18:09:09 +01:00
Matteo Biscosi
faf44e0a64 Added vlan and host_pool_id for the service map 2021-01-13 11:57:49 +01:00
Matteo Biscosi
4586833114 Fixed #4896 service map nodes have numerical label even though a symbolic name exists 2021-01-11 17:42:49 +01:00
Matteo Biscosi
e1627733fe Reviewed top sites table graphic 2021-01-11 10:41:36 +01:00
Matteo Biscosi
023b7fd1df Reviewed Top Sites per host and Added Top Sites per Interface 2021-01-08 20:07:19 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Alfredo Cardigliano
351210be45 Use the interface mac to compute traffic direction when not available 2020-12-30 09:42:55 +01:00
Alfredo Cardigliano
9d8419ff29 Show traffic direction in mirror mode if mac-based direction is configured 2020-12-29 15:59:09 +01:00
Alfredo Cardigliano
33415ad2dd Add support for traffic direction based on the MAC address (implement #4852) 2020-12-29 09:36:51 +01:00
Simone Mainardi
9aed6f7bd9 Adds flow hooks Lua VM reload upon recipient/config changes
Fixes #4842
2020-12-18 12:07:47 +01:00
matteo
e9fb6a3b3a merged and resolved the conflict 2020-12-16 16:51:51 +01:00
Alfredo Cardigliano
b8cff9b5b5 Rename FifoStringsQueue to StringFifoQueue 2020-12-15 12:27:18 +01:00
Simone Mainardi
72502711ea Additional cleanup of unused volatile members 2020-11-26 19:00:19 +01:00
Simone Mainardi
d21fe7d6e1 Cleanup of unused volatile members 2020-11-26 18:50:19 +01:00
Simone Mainardi
a8340ff131 Implements per-interface engaged alert upon alert drops 2020-11-18 18:26:33 +01:00
Luca Deri
ef3d7e3e11 Fixes #4640 2020-10-28 19:02:42 +01:00
Simone Mainardi
a2705a8bda Implements header and drilldown of flow status severities 2020-10-19 19:26:30 +02:00
Simone Mainardi
a0056ef2b7 Unifies alerted and misbehaving flows on hosts
Fixes #4596
2020-10-19 10:19:22 +02:00
Luca Deri
236089d66c Optimized purging strategy to makes it more often and lighter 2020-10-18 21:16:49 +02:00
Luca Deri
abf30f74bc Improved periodicity handling of VLAN tagged traffic 2020-10-14 23:37:29 +02:00
Simone Mainardi
24839a7135 Alerted flows counter fixes 2020-10-14 16:46:09 +02:00
Simone Mainardi
d1f974857c Adds a condition variable for flows dump
Addresses #4576
2020-10-14 12:42:59 +02:00
Simone Mainardi
9a9b161662 Adds a condition variable for flow user script hooks execution
Addresses #4576
2020-10-14 11:36:48 +02:00
Simone Mainardi
d113e38642 Fixes reuse of flow hooks Lua engines
Addresses #4576
2020-10-13 18:32:37 +02:00
Luca Deri
60a238acb0 Various service and periodicty map improvements 2020-10-11 16:17:55 +02:00
Luca Deri
3af2b10a9f Reworked service and periodic map 2020-10-11 14:47:31 +02:00
Simone Mainardi
17ad258589 Fixes exporter stats displayed for invalid interfaces
Fixes #4559
2020-10-11 14:04:45 +02:00
Luca Deri
cfa3d08943 Service map
- Fixed filtering protocol menu
- Added reload button
- Added reset button (interface only)
2020-10-10 16:00:44 +02:00
Alfredo Cardigliano
bafccf2c06 Add malformed/dispatched syslog counters. Inc counters in the Suricata plugin. 2020-10-09 15:00:21 +02:00
Alfredo Cardigliano
fc8357ce6f Add support for Syslog stats (backend and lua API) 2020-10-09 12:00:55 +02:00