Commit graph

509 commits

Author SHA1 Message Date
emanuele-f
4b482f02fc Fix host quotas reset on pools reload 2017-05-09 16:11:37 +02:00
Simone Mainardi
b5e685f243 Implements per pool member quotas 2017-05-09 15:07:53 +02:00
emanuele-f
9097333cf1 Always show IPv6 suffix in IPv6 host names 2017-05-04 21:28:11 +02:00
emanuele-f
8537b2cc0a Fix host alert counter 2017-05-02 18:32:46 +02:00
emanuele-f
a5e528047d Use a single redis key to read all host anomalies configuration 2017-05-02 15:38:39 +02:00
Luca Deri
2d5dd2c9f0 Compilation fix 2017-05-01 18:08:44 +02:00
Luca Deri
73b3a3ded6 Added child safe information in host pools
Minor code rework
2017-05-01 15:53:23 +02:00
Luca Deri
de060d3470 Minor code rework 2017-04-30 23:28:32 +02:00
emanuele-f
21594b834d Separate syn/flow attacker and victim alert thresholds 2017-04-30 20:07:58 +02:00
emanuele-f
284dfcd4cd Specify hosts role in malware detected alerts 2017-04-30 18:24:56 +02:00
Emanuele Faranda
8b8974e56c Alerts improvements (#1204)
* Implement flow flood alert

* Remove alerts general settings

* Implement global threshold alerts for hosts, networks and interfaces

* Implement global anomaly alert configuration, lua side

* Make the global thresholds not bound to the interface

* Implement global anomaly alert configuration, C side

* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
emanuele-f
1545dcb73e Host Flows alert becomes a threshold alert 2017-04-26 15:50:54 +02:00
Simone Mainardi
0c40af5863 Implements VLANs hash table 2017-04-21 18:44:48 +02:00
Simone Mainardi
a07ce941ee Fixes a crash introduced by a91781f 2017-04-21 17:35:05 +02:00
emanuele-f
a91781f66c Add hide findHostsByIP to enforce purge lock on hosts hash 2017-04-21 16:57:34 +02:00
emanuele-f
5892319880 Update in-memory hosts alert configuration when the configuration changes
Also fixes invalid redis key used to check host alerts trigger
2017-04-20 19:09:52 +02:00
Simone Mainardi
9fb24219e4 Passes host detected anomalies to lua 2017-04-20 18:50:05 +02:00
Simone Mainardi
5014669d12 Implements Autonomous Systems hash table 2017-04-19 23:19:16 +02:00
emanuele-f
97afda88b8 Visualize host blocking status 2017-04-10 12:10:29 +02:00
emanuele-f
eb7fae8c4c Visualize flow quota status information 2017-04-10 11:07:07 +02:00
Simone Mainardi
ca20b0d3e8 Implements continent support to the geolocation
Partially implements #1088
2017-04-05 20:06:23 +02:00
emanuele-f
a439d9c2bd Implement host TCP flags distribution 2017-04-04 16:51:35 +02:00
Luca Deri
1854b884a2 Improved ICMP stats, added last peer, made them available interface wide 2017-03-30 12:37:03 +02:00
emanuele-f
42904dd034 Implement HostPool time and bytes quota limit in inline mode 2017-03-29 19:42:31 +02:00
Luca Deri
8d66bf1d30 Implemented ICMP detailed stats for local hosts 2017-03-29 13:02:08 +02:00
Simone Mainardi
13613fc2da Implements Flow Devices statistics collection and storage
Flows sent via nProbe (proxy mode) carry information on the exporter
address (EXPORTER_IPV4_ADDRESS) and on the exporter interfaces
(INPUT_SNMP and OUTPUT_SNMP). This implementation attempts at saving
this information to allow comparisons with raw SNMP data.
2017-03-27 23:58:50 +02:00
Luca Deri
669cbc2b46 Implemented fix for #1091 (Address Re-association Blindness) 2017-03-27 22:03:22 +02:00
emanuele-f
02051bbdbd Remove old host quota 2017-03-27 17:54:35 +02:00
Luca Deri
9a95fc9511 Implemented per nDPI-protocol time duration 2017-03-25 19:58:22 +01:00
Luca Deri
370406241f Improved NetBIOS name dissection 2017-03-19 23:43:05 +01:00
Luca Deri
87fdd64f7d Removed code for binding a host to an interfaceId 2017-03-15 09:59:49 +01:00
Luca Deri
e50a0f7560 Added stub for handling category drop 2017-02-26 23:45:23 +01:00
Luca Deri
3f7faed07e Reduced number of host resolve attempts 2017-02-24 19:22:29 +01:00
Luca Deri
3175670ab1 Integrated MSDN support (work in progress) 2017-02-13 14:27:30 +01:00
emanuele-f
68b3f5710f Perform top HTTP talkers calculation in memory 2017-01-23 17:35:44 +01:00
Luca Deri
cc1304d49f Modified API processing API 2017-01-19 00:45:16 +01:00
Simone Mainardi
e220e9c7a3 Adds support for dynamic host pool changes 2017-01-17 21:02:20 +01:00
Luca Deri
d9af0c8025 Added the ability to display the number of flows per host in the host list
DHCP/Mac address optimizations
2017-01-17 18:24:10 +01:00
Simone Mainardi
df3a99decc Implement Host Pools 2017-01-17 11:34:57 +01:00
Luca
30e1a75f98 (C) update 2017-01-10 15:03:16 -08:00
Luca
f50f61f9fc MySQL DB improvements
Cached slack preference
Optimized DHCP cache read
2016-12-28 19:20:06 +01:00
Simone Mainardi
eca2c41049 Reworks alert counters (WIP)
Alert counters are now kept in sync only for engaged alerts.
Each host will show the current number of engaged alerts.
This alleviates the complexity of constantly keep the numbers
synchronized with the database.

Todo: see how to handle counters for flow alerts and past alerts.
2016-12-24 16:21:50 +01:00
Luca Deri
9d4df13c1a Reworked AddressTree implementation 2016-12-20 19:16:34 +01:00
Luca Deri
405c6aa253 Misaligned code 2016-12-19 14:09:12 +01:00
Luca
a16fc2800b Code cleanup 2016-12-16 01:46:07 +01:00
Luca
4226122bfe Added L7 shadow policer 2016-12-12 19:57:49 +01:00
Luca Deri
ce5fbf2a8e Traffic shaping code cleanup and optimizations 2016-12-10 13:27:42 +01:00
Simone Mainardi
9294c9ad78 Fix for names resolution 2016-12-09 12:29:50 +01:00
valentina
09056d0646 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2016-12-09 03:04:27 +01:00
valentina
c0fbce98a5 Network and protocol shaping step 2: Implemented shaping engine 2016-12-09 03:02:34 +01:00