Commit graph

393 commits

Author SHA1 Message Date
Simone Mainardi
348b9e5a56 Adds HASSH hyperlinks and application name when eBPF is available 2019-08-26 21:53:43 +02:00
Simone Mainardi
11aa854cba Handles hosts HASSH fingerprints 2019-08-26 16:55:39 +02:00
emanuele-f
69cd896a9f Implement engaged alerts and flow alerts timeseries 2019-08-21 16:57:14 +02:00
emanuele-f
2b2a74af79 Fix bad time resolution of values for some host exported timeseries
- active_flows.as_client
- active_flows.as_server
- total_flows.as_client
- total_flows.as_server
- contacts.as_client
- contacts.as_server
- DNS, TCP, ICMP stats

Fixes #2776
2019-08-21 15:37:17 +02:00
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
Simone Mainardi
42593fc9ac Allows host pool changes from the host_details page for view interfaces 2019-08-06 10:27:05 +02:00
emanuele-f
e82c66fb7c Fix mixed global/per-interface nindex checks
Fix #2725
2019-08-01 11:53:55 +02:00
emanuele-f
664d165b2f Add hosts alerts link into flow alerts 2019-07-26 13:24:05 +02:00
emanuele-f
988e3eaab6 Move alerts configuration under the triangle icon 2019-07-26 10:59:38 +02:00
Alfredo Cardigliano
ce1b9821de Removed 'Talkers' page from Host Details as it contains a subset of the info in 'Peers' 2019-07-25 15:05:19 +02:00
Simone Mainardi
e61a5ba85b Hides VLAN in the host details page when tag is zero 2019-07-24 13:34:54 +02:00
Simone Mainardi
4155bd69b5 Shows VLANs in view interfaces hosts page when tags are present 2019-07-24 13:33:24 +02:00
emanuele-f
bcc6a78af4 Improve alert enable/disable buttons and allow config edit on idle hosts 2019-07-23 14:30:26 +02:00
emanuele-f
e94bd45ca6 Improve disabled flow status alerts gui 2019-07-23 10:28:17 +02:00
emanuele-f
6a6cedc899 Add ability to disable host alerts on specific flow status 2019-07-22 12:16:12 +02:00
Simone Mainardi
5270d09490 Allows alerts to be configured on view interfaces 2019-07-19 12:43:31 +02:00
Alfredo Cardigliano
60cbc056e5 Fixed Talkers sankey when analysing a pcap file 2019-07-15 18:31:20 +02:00
Alfredo Cardigliano
374eebdccf Hiding traffic report when analysing pcap dump 2019-07-15 12:23:34 +02:00
Simone Mainardi
2ba6b6f4f9 Implements count events/sec algorithm interface with lua 2019-07-12 17:20:58 +02:00
Alfredo Cardigliano
54c783f236 Filter flows by L4 protocol 2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
e87ce25bfd Fixed dropdown alignment 2019-07-12 12:37:32 +02:00
Alfredo Cardigliano
45d1b4c788 Fixed Applications dropdown in Host Flows page 2019-07-12 12:30:14 +02:00
Alfredo Cardigliano
cb7fde54c7 Added active peers to the host details (#2387) 2019-07-11 10:51:54 +02:00
emanuele-f
a1a283d423 Change misbehaving flows ts label 2019-07-10 16:24:49 +02:00
Simone Mainardi
7136ff6fbf Group sources when the host name is the same
Fixes #2693
2019-07-02 14:32:47 +02:00
Simone Mainardi
1440fb1bb8 Fixes download JSON / download pcap buttons 2019-06-21 14:41:17 +02:00
emanuele-f
60d5f4e89c Fix host peers page
Fixes #2657
2019-06-17 11:16:08 +02:00
Salvatore Costantino
3c5389ed45 Splitted TCP Statistics (#2645)
* splitted TCP Statistics

* indentation fix

* indentation fix
2019-06-10 09:03:12 +02:00
Luca Deri
d74276bd28 Minor dropbox enhancement 2019-06-04 11:10:12 +02:00
emanuele-f
3ecc032c14 Hide system properties for restricted users
This will also hide SNMP devices
2019-06-03 12:42:23 +02:00
emanuele-f
e74f6ee3b7 Fix host timeseries first point problem.
An additional point is now stored on the ts database to address the issue.

Fixes #2184
2019-05-28 17:17:21 +02:00
emanuele-f
461ee43e16 Add UDP unicast vs non unicast breakdown 2019-05-22 17:36:24 +02:00
Alfredo Cardigliano
c3b19f5862 Host details label fix 2019-05-21 13:27:00 +02:00
Simone Mainardi
08f05fbb65 Improves layout of TCP seq analysis 2019-05-21 10:17:58 +02:00
Simone Mainardi
e22d13533a Implements sent and rcvd TCP seqs counters per host
Implements #2503
2019-05-20 20:02:06 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Luca Deri
2e30cb2535 JA3 host stats are now exported in JSON 2019-05-17 22:53:30 +02:00
Luca Deri
d7765bb32d Added JA3 note on SSL page 2019-05-14 16:02:42 +02:00
Luca Deri
7ec6b9f42c Improve JA3 support 2019-05-14 15:55:45 +02:00
Luca
b9cba0e04f Bound fingerprint to application name 2019-05-14 10:17:16 +02:00
Luca Deri
ad3cb076a4 Added SSL fingerprint classification 2019-05-13 23:59:16 +02:00
emanuele-f
372cb9eefe Show mac specific timeseries into the host menu
Closes #2557
2019-05-13 15:51:06 +02:00
Luca Deri
1f7d236315 Added ARP matrix to the menu 2019-04-30 15:22:49 +02:00
Francesco Staccini
1d9b35be42 ARP Map (#2540)
* arp matrix graph and fix

* bug fix

* graph fix

* bug fix

* tests on arp graph

* merged heatmap.js and map.js

* graph dinamic resize

* minor fix

* graph dinamic width

* graph performance improvement

* clean code

* fix manual refresh

* message for empty graph

* clean code

* more clean

* update arpMap and host details

* migrate to v4.min version of d3.js
2019-04-17 13:23:10 +02:00
Luca Deri
a10c6483a2 Minor fix for interfaces with no packets visibility 2019-04-15 14:33:23 +02:00
emanuele-f
2aeeb63142 Implmenent host total flows timeseries.
"host:flows" data will be dropped in favor of "host:active_flows", which has separated client and server counters

Closes #2528
2019-04-10 18:22:41 +02:00
Salvatore Costantino
1768d0b121 Modified ARP time series (#2520) 2019-04-09 15:28:29 +02:00
Salvatore Costantino
76dded229a Added ICMP ECHO time series (#2518)
* Added ICMP ECHO time series

* added icmp echo time series
2019-04-08 16:10:30 +02:00
Salvatore Costantino
f27f137c09 Added TCP packets time series (#2516) 2019-04-08 15:30:45 +02:00
Salvatore Costantino
dd24d2a932 Removed net unreachable counters (#2517) 2019-04-05 21:32:37 +02:00