762 commits

Author	SHA1	Message	Date
Luca Deri	e9b858f030	Datatypes cleanup	2022-09-19 17:24:08 +02:00
Luca Deri	7b4a4acd5a	Improved service categorization	2022-08-20 19:34:47 +02:00
Alfredo Cardigliano	6b8e16151b	Cleanup unused functions	2022-08-18 15:37:31 +02:00
Alfredo Cardigliano	fe48f82631	Improve local hosts lookups by using cached info when the network ID is not required	2022-07-19 12:54:33 +02:00
Luca	888be4858f	Cosmetic changes	2022-07-12 11:40:31 +02:00
Luca Deri	7bb3d1480f	No idea why we're still usinge const	2022-07-06 14:52:38 +02:00
Alfredo Cardigliano	72b19f8c64	Clear all risks for flows matching the IssuerDN Exclusion for self-signed certificates	2022-07-06 10:47:21 +00:00
Luca Deri	49c15bac20	Added DGA domain handling received via ZMQ	2022-07-04 22:30:37 +02:00
Luca Deri	bdbc84fef6	Implemented issuerDN exception handling	2022-07-04 21:39:36 +02:00
Luca Deri	20b373ef13	eBPF fixes	2022-06-14 18:03:49 +02:00
MatteoBiscosi	dee321129f	Standardized score to ecs	2022-06-13 19:25:43 +02:00
Alfredo Cardigliano	8ddf0e6998	Store cli/srv location in alerts	2022-06-09 11:27:41 +02:00
Alfredo Cardigliano	bbf2edb5d5	Add process/container/tcp info for both client and server. Parse container id.	2022-06-08 18:27:17 +02:00
MatteoBiscosi	021086e44f	Added dpi and guessed badge to flow list and details	2022-06-08 10:51:19 +02:00
Luca Deri	0ae4341d9b	Added %L7_CONFIDENCE support	2022-06-06 14:05:42 +02:00
Luca Deri	8234249b20	nDPI Risk information is now saved earlier in the flow	2022-06-01 11:12:10 +02:00
MatteoBiscosi	ad3ada6826	Added flow risk info to alert description	2022-05-31 17:16:12 +02:00
Luca Deri	930a2ac34d	Added support for FlowRiskInfo via nProbe	2022-05-31 11:29:32 +02:00
Luca Deri	fb481d4f23	Added flow riskInfo field containing the nDPI-generated JSON	2022-05-30 23:02:00 +02:00
Luca Deri	b0919c9dba	Added flow risk info	2022-05-30 22:30:05 +02:00
MatteoBiscosi	3867b03978	Added protocol information dumped even with no alerts (#6649)	2022-05-30 17:54:16 +02:00
Luca Deri	cf516f7411	Fixed IEC continuous dissection	2022-05-04 10:19:31 +02:00
Luca Deri	0e05c21d9f	Added support for error code	2022-05-02 13:04:01 +02:00
MatteoBiscosi	ef1c963090	Added ECS 8 support (#6552)	2022-04-29 18:01:12 +02:00
Luca Deri	8f75df9797	Blacklist name is now shown in blacklisted flows alerts	2022-04-26 14:56:15 +02:00
Alfredo Cardigliano	5c69bd7d0a	Add missing alert info to Flow	2022-04-20 12:40:05 +02:00
MatteoBiscosi	702bd0441a	Removed remote access alert local to local	2022-03-11 17:34:27 +01:00
Luca Deri	1fe96bc73b	Initial work for implementing host/port scan detection (#6327) (#6328)	2022-02-20 23:17:04 +01:00
Luca Deri	835f57ac3c	Added Process/UserName placeholder code	2022-02-18 12:41:35 +01:00
Luca Deri	adf97e5e9b	HTTP User Agent is now exported in nProbe and collected by ntopng. Implements ##6325	2022-02-16 23:47:54 +01:00
Luca Deri	90a8951492	Fixed DHCP/NTP client/server roles with reverted traffic	2022-02-16 22:17:27 +01:00
Matteo Biscosi	cf184d07ff	Added MAC Address to View Interfaces	2022-02-09 19:18:00 +01:00
Alfredo Cardigliano	19310ffd06	Initial cleanup of useless consts towards migration to modern C++ (#6271)	2022-02-03 15:57:34 +01:00
Luca	d0a39b85ef	Added user agent in HTTP pages (including alerts)	2022-01-31 11:36:07 +01:00
Luca Deri	c0e949ff28	nDPI fixes due to https://github.com/ntop/nDPI/pull/1427	2022-01-30 19:34:20 +01:00
Luca Deri	a1e4e98fcb	Implements #6215	2022-01-18 22:52:57 +01:00
Luca Deri	425dff1aac	Changed method name	2022-01-13 17:28:50 +01:00
Luca Deri	57232ee8cf	Minor cleanup	2022-01-11 10:22:08 +01:00
Luca Deri	97eae029e5	Changed get Flow::getFlowInfo() method signature	2022-01-11 08:52:36 +01:00
MatteoBiscosi	fbda39209a	Added extra application info to alerts	2022-01-05 18:50:09 +01:00
Alfredo Cardigliano	f2060f2488	Copyright update (C)	2022-01-03 09:35:09 +01:00
Simone Mainardi	8c5023e2d5	Fixes invalid DNS query characters risk (now handled in nDPI) ... Fixes #5982	2021-12-24 16:39:41 +01:00
Simone Mainardi	f21fb02b02	Reworks Clickhouse latency support (now stores 32-bits us) ... Addresses #6059	2021-11-12 15:01:00 +01:00
Simone Mainardi	76b834a7c8	Dumps network latencies into Clickhouse ... Addresses #6059 along with companion pro commit	2021-11-10 11:55:23 +01:00
Simone Mainardi	debd3cb105	Fixes processDNSPacket not performed under certain conditions ... Addresses #5952	2021-10-14 15:32:22 +02:00
MatteoBiscosi	7c10fba84b	Implements ICMP flood check (#5904)	2021-10-07 11:40:51 +02:00
Luca Deri	21aeee5c95	Removed dead code	2021-09-29 22:26:36 +02:00
MatteoBiscosi	d0fbfa8e12	Added exporter ip address to host informations (#5156)	2021-09-28 18:42:09 +02:00
MatteoBiscosi	301ac445dc	Fixed HTTP memory leak with nProbe	2021-09-28 12:33:57 +02:00
Simone Mainardi	a1b31b054e	Adds {periodicity,service} maps and alerts to nEdge ... Addresses #5917	2021-09-28 11:44:07 +02:00