1078 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	4ea64d4275	Flow::getFlowStatus is now setting a bitmap to handle multiple statuses to be exposed in the flowinfo	2019-09-04 18:27:32 +02:00
emanuele-f	5c3a063fae	Fix startup with sticky hosts ... interface.restoreHost was improperly removed in ef4f98a5a5	2019-09-04 14:10:24 +02:00
Simone Mainardi	9924225473	Implements nDPIStats throughput calc for NetworkInterface	2019-09-04 10:21:21 +02:00
Simone Mainardi	b86378bca3	Implements ul/dl thpts in C and reworks the footer to use them	2019-09-03 18:56:23 +02:00
Alfredo Cardigliano	f7dfe812b8	Support for VXLAN	2019-09-03 02:39:00 +02:00
Simone Mainardi	a5b5510290	Adds bytes and packets throughput to NetworkInterface	2019-09-03 17:16:47 +02:00
emanuele-f	017b367274	Fix flow alert generation when reading from PCAP dump	2019-09-03 16:32:55 +02:00
Simone Mainardi	e1d911a052	Adds lua_pcall check when loading scripts to prevent silent failures	2019-09-02 11:25:39 +02:00
Simone Mainardi	91163ed4e2	Fixes Lua script failures when loading alerts/flow.lua	2019-09-02 10:53:36 +02:00
emanuele-f	2d02de6cc1	Implement initial flow score support	2019-08-30 17:16:11 +02:00
Alfredo Cardigliano	3f04f0c080	Updating pf_ring drop stats in the housekeeping task (avoid inline updates with the GUI)	2019-08-29 15:53:20 +02:00
Alfredo Cardigliano	2c81afd678	Setting severity for IDS alerts	2019-08-28 03:38:01 +02:00
emanuele-f	a8cb972e7d	Implement ghost networks alerts	2019-08-28 16:42:18 +02:00
Alfredo Cardigliano	f8af84df2d	SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928)	2019-08-27 17:53:34 +02:00
Alfredo Cardigliano	dc9978c68d	Moved companion interface to ParserInterface to be used by any *ParserInterface	2019-08-27 16:24:46 +02:00
emanuele-f	b3bdfcff32	Cleanup of the too-many-drops interface alert	2019-08-27 13:04:53 +02:00
Simone Mainardi	e46221e0bb	Implements packet distribution and tcp flags stats for view interfaces	2019-08-27 12:34:12 +02:00
Simone Mainardi	af61cfd483	Implements tcp packet stats for hosts, ases, networks in interface views	2019-08-27 11:16:20 +02:00
Simone Mainardi	65049b2cac	Fixes crash when calling --help	2019-08-26 18:29:43 +02:00
emanuele-f	e92641920d	Implement syn/flow flood victim alerts on local networks	2019-08-26 16:42:23 +02:00
emanuele-f	f43f4b7dd9	Add engaged alerts type exclusion filter ... Fixes #2780	2019-08-22 16:30:45 +02:00
emanuele-f	69cd896a9f	Implement engaged alerts and flow alerts timeseries	2019-08-21 16:57:14 +02:00
emanuele-f	7893c1f78a	Implement RTT host engage/release alert	2019-08-20 19:02:58 +02:00
emanuele-f	87ba28195b	Add support to engage/release on external alerts	2019-08-20 19:02:58 +02:00
Simone Mainardi	54473f7883	Updates host pools stats also in community mode	2019-08-20 12:00:41 +02:00
emanuele-f	d1c5275302	Move suppressed alerts flag to C to reduce Redis load	2019-08-20 11:54:25 +02:00
Simone Mainardi	74c545d079	Uses stats rather than grouped hosts data for network stats	2019-08-19 17:39:51 +02:00
Simone Mainardi	e363e56e23	Implements sorting of hosts per number of UDP port unreachable flows	2019-08-16 15:25:41 +02:00
Luca	f8c962a6fb	Fixed alerts race conditions	2019-08-15 17:19:26 +02:00
Simone Mainardi	ac2ce0c058	Sets all hash entries to idle during shutdown	2019-08-12 14:05:08 +02:00
Luca	899b580cc4	SSL/TLS rename	2019-08-08 15:24:38 +02:00
Emanuele Faranda	c829c4c3c3	Unify os (#2755) ... * Unify OS information. Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS. * Fix network discovery OS * Show OS detail into the host details page	2019-08-08 12:09:51 +00:00
Simone Mainardi	abd7041dd4	Allows host pools to be configured for view interfaces	2019-08-06 10:23:39 +02:00
Luca Deri	fa33738762	Added incUses in get-ter method to avoid race conditions	2019-08-06 09:43:30 +02:00
emanuele-f	8225c589fe	Temporary disable inconsistent state messages during shutdown ... Shutdown is currently a special case, so such messages are expected	2019-08-05 17:58:34 +02:00
emanuele-f	f476d7118c	Log invalid hash entry states	2019-08-05 12:56:45 +02:00
Simone Mainardi	f110602192	Refactors hash entry state setters to ease override	2019-08-05 12:12:16 +02:00
emanuele-f	348e7b6c14	Unused label warning fix	2019-08-02 10:00:33 +02:00
Simone Mainardi	2a95e3925d	Allows up to 8 nindex interfaces	2019-07-31 19:40:15 +02:00
Simone Mainardi	c9223590d9	Workaround to handle \n forcefully set when decoding ZMQ tlv	2019-07-31 16:06:15 +02:00
emanuele-f	d38cd23615	Move C alerts to unified alerts_queue	2019-07-30 11:43:18 +02:00
emanuele-f	62f754f7f9	Initial work towards unified alerts queue	2019-07-29 18:22:49 +02:00
Alfredo Cardigliano	babab56394	Handling http ret code, dns query type and ret code from the ZMQ parser	2019-07-26 16:12:35 +00:00
Alfredo Cardigliano	289e787da7	Creating the flow additional fields json object only when required	2019-07-26 12:54:40 +00:00
Alfredo Cardigliano	d010bb9b47	ZMQ flow processing optimization (+20%)	2019-07-26 11:11:40 +00:00
Alfredo Cardigliano	b0d3260761	More profiling checkpoints	2019-07-26 09:47:27 +00:00
Alfredo Cardigliano	88ab5cfb3c	Profiler fixes	2019-07-26 09:05:17 +00:00
Simone Mainardi	afe2e5111e	Fixes disaggregated interfaces initialization ... Possible fix for #2745 and #2743	2019-07-26 10:13:51 +02:00
Alfredo Cardigliano	7efc8dfcae	flowProcess profiling	2019-07-25 16:33:41 +00:00
Simone Mainardi	f035d5c894	Reworks shutdown operations to properly terminate pool loops and periodic activites	2019-07-25 11:58:13 +02:00