Commit graph

879 commits

Author SHA1 Message Date
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
81a9963e46 Implement alerts based on potentially dangerous flows nDPI classification 2019-08-07 14:29:06 +02:00
emanuele-f
3ab6ff7901 Add support for on/off alert configuration 2019-08-06 17:29:35 +02:00
emanuele-f
ba91b62f0a Allow spaces in password fields
Fixes #2732
2019-08-01 11:12:30 +02:00
emanuele-f
6a6cedc899 Add ability to disable host alerts on specific flow status 2019-07-22 12:16:12 +02:00
emanuele-f
1d9a8951db Initial modular alerts config gui implementation 2019-07-11 12:42:25 +02:00
Luca Deri
4166f442ab Prometheus support (work in progress) 2019-06-30 23:25:24 +02:00
emanuele-f
f9f341b2ca Add preference to enable l7 total flow timeseries 2019-06-27 10:01:12 +02:00
Luca Deri
ec4d55ff04 Added hosts explored on the main menu 2019-06-25 19:56:56 +02:00
Alfredo Cardigliano
f67791c34f Locale and lint update 2019-06-11 17:54:45 +02:00
emanuele-f
6aa72b53f7 Implemement RTT monitoring configuration page 2019-06-11 17:30:46 +02:00
emanuele-f
6234245773 Move InfluxDB monitoring to separate entry 2019-06-10 12:47:10 +02:00
Alfredo Cardigliano
43d03c96ac Lint and locales update 2019-06-10 11:33:23 +02:00
emanuele-f
2d2566135d Properly escape spaces in InfluxDB tags 2019-06-04 10:45:36 +02:00
Alfredo Cardigliano
99aa386a12 Implements alerts on SNMP port load exceeding a configured threshold (%) based on port speed (#2223) 2019-05-30 15:18:46 +02:00
emanuele-f
74952edb27 Fix manage data host search 2019-05-29 12:21:46 +02:00
emanuele-f
1c9a4d3461 Implement ICMP data exfiltration alerts
Closes #256
2019-05-28 10:37:59 +02:00
Simone Mainardi
9252ead5a5 Implements telemetry data with options and contact email 2019-05-27 18:59:55 +02:00
Simone Mainardi
c7e8c32559 Implements telemetry data POST 2019-05-23 16:43:16 +02:00
Alfredo Cardigliano
7590f629fe Alerts on duplex status change on SNMP interface (#2349) 2019-05-23 12:23:45 +02:00
Simone Mainardi
bbb81ceddd Optionally determines (and swaps) ZMQ src and dst using port numbers
Implements #1978
2019-05-22 16:58:58 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d Implements traffic profile filter in the active flows page (#2598) 2019-05-20 12:43:51 +02:00
emanuele-f
359d359d09 Add ICMP flow filter
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
a4ed782486 Add option to disable flow dump on a network interface
Closes #2576
2019-05-13 17:18:16 +02:00
Simone Mainardi
9898c49a15 Initial work to add the companion interface 2019-04-30 19:43:23 +02:00
emanuele-f
8e546e904d Add event exporters charts 2019-04-29 15:11:01 +02:00
emanuele-f
6fb921d68a Implement Pods and Containers page 2019-04-24 18:46:07 +02:00
emanuele-f
14a9d83a30 Move local broadcast domain preference to the interface settings and show warnings
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
emanuele-f
21f202ccb2 Implement protos.txt editing via the gui.
Editor is only enabled if the -p option is specified.
Also added an hook in the flow to easily add domain.

Closes #1837
2019-04-10 16:16:39 +02:00
Alfredo Cardigliano
a892c825c0 toggle_ids_alerts liny 2019-04-05 15:55:53 +02:00
Simone Mainardi
23c5d92b10 Proper validation of base64-encoded license keys 2019-03-29 20:02:54 +01:00
emanuele-f
79543c6207 Flows table improvements 2019-03-25 16:04:29 +01:00
Simone Mainardi
091e89d5a3 Implements hosts walker by address CIDR 2019-03-21 15:25:00 +01:00
Simone Mainardi
2c50c66532 Fixes locales ordering 2019-03-18 16:37:55 +01:00
Simone Mainardi
5a67bf6e43 [Security] Fixes possible XSS in login.lua referer param
Fixes

XSS1 | Reflected

URL
http://192.168.2.200:3000/lua/login.lua?referer=%27%3E%3Cscript%3Ealert(1)%3C/script%3E

METHOD
Get

PARAMETER
referer

PAYLOAD
'><script>alert(1)</script>
2019-03-14 11:35:35 +01:00
Simone Mainardi
4b3ae0e652 Makes the ARP matrix generation optional using a pref 2019-03-12 14:53:06 +01:00
Simone Mainardi
a9db8e8c1e Adds validation for host pool assoc via API 2019-03-03 11:28:15 +01:00
emanuele-f
c2c10ed491 Implement dhcp hosts filter 2019-02-27 16:20:55 +01:00
emanuele-f
b778e77207 Initial support for DHCP range configuration 2019-02-26 18:08:02 +01:00
emanuele-f
4a97017f35 Fix mac-based serialization key and add a preference to enabled it (disabled by default) 2019-02-22 16:01:58 +01:00
emanuele-f
5089e4dabe Timeseries charts fixes 2019-02-22 11:16:41 +01:00
Simone Mainardi
c40bfb1a8e Implements custom column in the hosts stats page 2019-02-20 12:14:34 +01:00
Simone Mainardi
9a413a5d72 Implements TCP states filtering (est., connecting, closed and rst)
Implements #2385
2019-02-16 18:19:25 +01:00
emanuele-f
6bbb828ead Implement Category Lists editor to manage ip/domain lists 2019-02-11 15:47:17 +01:00
Simone Mainardi
e5eff5b30f Initial sprobe code cleanup 2019-02-11 14:22:36 +01:00
Simone Mainardi
3dd9f11628 Implements flow TCP states filters 2019-02-08 15:57:03 +01:00
emanuele-f
139c7d4bae nEdge port forwarding validation and localization 2019-02-07 17:30:31 +01:00
Luca Deri
937ee52de7 Disabled some debug messages in tracings
Added ability to avoid parsing JSON payload when specifying ignore_post_payload_parse = something. This is useful in case of a HTTP post where you do not want to parse it.

Example:
local dirs = ntop.getDirs()
package.path = dirs.installdir .. "/scripts/lua/modules/?.lua;" .. package.path
local json = require "dkjson"

-- Use ignore_post_payload_parse BEFORE calling 'require "lua_utils"'
ignore_post_payload_parse = 1
require "lua_utils"

sendHTTPContentTypeHeader('application/json')
local info, pos, err = json.decode(_POST["payload"], 1, nil)
2019-02-06 15:28:18 +01:00
emanuele-f
4f60243338 Implement timeseries data read from aggregated retention policies
Aggregation selector can be shown by setting "ntopng.prefs.influxdb.debug_aggregation" = "1"
2019-02-04 13:26:22 +01:00