Simone Mainardi
7a8878a886
Adds bidirectional flags in host_get_json TCP flows
...
An excerpt of the json returned is:
{"srv.ip":"a.b.c.d","cli.port":50559,"srv.port":443,
"cli2srv.tcp_flags":{"SYN":1,"RST":0,"PSH":1,"FIN":0,"URG":0,"ACK":1},"cli2srv.throughput_bps":0,"bytes":2869,"srv2cli.throughput_bps":0,"cli2srv.throughput_pps":0,
"srv2cli.tcp_flags":{"SYN":1,"RST":0,"PSH":1,"FIN":0,"URG":0,"ACK":1},"tcp_established":true,"srv2cli.throughput_pps":0,"cli.ip":"192.168.2.130","proto.ndpi_id":126,"proto.ndpi":"SSL.Google"},
2016-07-14 12:44:55 +02:00
Simone Mainardi
99448b5ded
Dumps SSL certificate name to MySQL if available
2016-06-21 16:43:14 +02:00
Luca Deri
43c17964e5
Implemented non-L3 stats and improved tcp flow stats
2016-06-17 23:51:13 +02:00
Luca Deri
9a717fede5
Implemented ICMPv6 dissection
2016-06-15 16:42:52 +02:00
Luca Deri
d6bc2ce91a
Implemented ICMP handling
...
Optimized flow memory
2016-06-15 15:33:00 +02:00
Simone Mainardi
9953cc2328
Implements IN_BYTES/OUT_BYTES in historical data
...
MySQL schema change has been implemented together with
new historical talkers.
TODO: historical protocols.
2016-05-24 11:08:11 +02:00
Luca
5ff9db9dd5
Improved detection of flow status
2016-05-16 18:54:08 +02:00
Simone Mainardi
4d6f675a31
Fixes ZMQ speed detection when nprobe is used as NF collector
...
Code has been fixed and lightly reworked.
Fixes #536 #500
2016-05-02 12:39:53 +02:00
Luca
dc8930e089
Enhancements for flow idle detection
2016-04-28 16:51:51 +02:00
Luca Deri
561d6c8161
Added support for BT Hash and SSL host name via ZMQ
2016-04-23 00:45:16 +02:00
Luca
6985803662
Added ability to identify idle flows that are now marked on the user interface
2016-04-19 11:56:11 +02:00
Luca
13e4913039
Fixed flow sort with port filter
...
Implemented application latency in flows
2016-04-14 22:58:58 +02:00
Luca Deri
1e4798a468
Code cleanup
2016-04-14 11:50:19 +02:00
Marco Venturini
b768becc16
Add bool isSuspiciousFlow() definition
2016-04-14 00:40:16 +02:00
Simone Mainardi
e4dd2cba51
Implements cli2srv/srv2cli flow throughput breakdown
2016-04-07 13:22:27 +02:00
Luca
c3d2ecc749
Implemented flow packets interarrival stats
2016-03-23 23:22:58 +01:00
Luca Deri
744c0e88c0
Traffic shaping protocols/flows are not immediately refreshed
2016-03-18 19:48:00 +01:00
Luca Deri
07c839489e
Various ZMQ enhancementent
...
Set the icon size of some external links to the correct size
2016-03-15 19:51:38 +01:00
Luca
8f0f8fc1cf
Added logic to detect flows with low goodput (e.g. originated by tools like https://github.com/shekyan/slowhttptest )
2016-03-08 19:18:28 +01:00
Luca Deri
6a7929ea26
Added goodput host/flow counters
2016-03-08 16:12:41 +01:00
Luca Deri
5f89da0062
Fixed uninitialized value
...
Minor cleanup
2016-03-07 21:35:07 +01:00
Luca Deri
a949d76a02
Minor windows changes
2016-03-06 19:33:03 +01:00
Luca Deri
b4fd6053df
Improved BT-uTP detection and hash dissection
2016-02-25 10:56:25 +01:00
Luca Deri
670edfe644
Initial work towards trend monitoring
2016-02-24 08:35:25 +01:00
Luca
3da77d5aea
Updated JQuery-UI
...
Initial work torwards goodput implementation
2016-02-19 09:36:30 +01:00
Luca Deri
40a1110a7e
Added ability to show file information/hash when downloaded via Bittorrent
2016-02-15 11:20:08 +01:00
Luca
ce178a1127
Initial work towards counter trends
2016-02-13 00:07:03 +01:00
Luca Deri
3041514a56
Implemented TCP throughout estimation
2016-02-11 00:43:12 +01:00
Luca Deri
fe8218e258
Minor code cleanup
2016-02-06 13:38:30 +01:00
Luca Deri
804cac1193
Disabled experimental code
2016-01-26 01:05:32 +01:00
Simone Mainardi
5233449b3a
Implements timeseries with derivatives
...
A templated TimeSeries Classes is implemented
with the feature of discrete derivatives.
Discrete derivatives can be optionally normalized using
angles between +90 and -90 degrees to obtain comparable numbers
todo:
- make timeseries circular so data is rotated lifo
2016-01-26 00:46:39 +01:00
Luca Deri
1b105de9c0
Added per-host traffic category stats
...
Check on startup when Flashstart is operational
2016-01-03 12:57:39 +01:00
Luca Deri
47d43d986b
Implemented multi-categories for flows
2016-01-02 12:55:13 +01:00
Luca Deri
b9068886a4
Reworked flashstart categorization support (work in progress)
2016-01-01 20:05:58 +01:00
Luca Deri
d7c452f0a3
Moved to 2016
2016-01-01 09:27:39 +01:00
Simone Mainardi
5d53d78af2
Abstracts flow profiles to generic profiles
...
New abstract classes have been added with the
aim of creating both Flow and Host Profiles.
2015-12-29 23:07:39 +01:00
Luca
440a2c8329
Reworked flow listing by sorting flows in memory before they are pased to Lua. This prevents Lua from using too much memory (in particular with limited-memory hosts or large sites with many flows)
2015-12-26 12:34:45 +01:00
Luca
32780947f5
Minor code cleanup
2015-12-09 18:01:52 +01:00
Luca
d31a5d5267
Fix to avoid that ZMQ-received flows with old timestamps are not purged immediately but at least show up for at least 5 sec
2015-12-08 10:14:09 +08:00
Luca Deri
2b8336b67e
Win fixes
2015-11-27 00:59:54 +01:00
Simone Mainardi
71b390ec47
Adds MySQL support for traffic profiles
...
Traffic profile information is dumped to MySQL.
2015-11-10 11:36:55 +01:00
Luca
86b793d006
Harvested interface view code and replaced with simpler one
2015-11-07 10:47:29 +01:00
Luca Deri
598f128200
Implemented traffic profiles (pro)
2015-10-19 00:48:55 +02:00
Luca Deri
cfbf3f2ac6
Removed duplicated interfaces (issue #236 )
...
Initial work towards traffic profiles support
2015-10-17 19:14:16 +02:00
Luca Deri
c8e0bb24a4
Initial work for supporting communities (work in progress)
...
Fixrd bug in daily Lua script
2015-10-12 01:04:34 +02:00
Luca Deri
a642a26b50
Fix for #60 and #160
2015-10-06 22:11:58 +02:00
Luca Deri
a62344d45c
Added field INFO to MySQL flows.
...
If you update the code, you need to drop or modify the MySQL database format.
2015-09-22 22:37:11 +02:00
Luca
868758ee34
Fix for bug #168
2015-09-21 16:23:32 +02:00
Luca Deri
9d3e29ff74
Added information about traffic shapers in case you use ntopng inline
...
When using packet bridges, the local interface networks are now added to ntopng configuration
2015-09-14 00:19:57 +02:00
Luca Deri
a2741dbdc8
Fix fir decoding HTTP requests: they were not decoded as nDPI was configured to decode responses thus making HTTP-based protocol recognition too late
2015-08-21 00:36:14 +02:00
