Commit graph

2590 commits

Author SHA1 Message Date
Simone Mainardi
76006d6250 Fixes IP reassignment code that is now per-interface
Implements #5038
2021-02-26 11:21:04 +01:00
Luca Deri
e9ae852c03 Moved to 128 bit bitmaps 2021-02-25 18:17:57 +01:00
Matteo Biscosi
dbfdec34fe Implements Local Host behaviour analysis and it's alert
Alert in case the host has an unexpected behaviour
2021-02-25 12:04:05 +01:00
Matteo Biscosi
4e0bb51969 Implements client/server heuristic #5058 2021-02-25 10:01:53 +01:00
Luca Deri
edc8159396 Compilation fix 2021-02-24 15:55:27 +01:00
Matteo Biscosi
f7773fb715 Implemented behavioural counter for visited sites by local hosts 2021-02-24 15:25:36 +01:00
Luca Deri
9b81f740df Improved BehaviouralCounter with forecast and boundaries 2021-02-24 10:07:18 +01:00
Alfredo Cardigliano
db9adb9060 Add support for Malicious JA3 signature using nDPI (#5045) 2021-02-23 18:35:19 +01:00
Alfredo Cardigliano
9c196d322b Use Patricia from nDPI 2021-02-23 12:34:49 +01:00
Alfredo Cardigliano
434f827ab6 Implement continuous ping for selected interfaces (fix #5001) 2021-02-19 19:13:49 +01:00
Matteo Biscosi
9632c62bfa Implements cleanup IP reassignment code
Implements #5038
2021-02-19 15:36:27 +01:00
Alfredo Cardigliano
8c4408628a Show TLS info for protocols using TLS as transport (fix #5045) 2021-02-19 11:32:23 +01:00
Simone Mainardi
59380ecd39 Implements matching of filters on alerts stored in SQLite 2021-02-17 17:31:00 +01:00
Simone Mainardi
f4dff6f2e7 Implements risk-based filtering of flow alerts 2021-02-16 15:25:20 +01:00
Simone Mainardi
c8a7232ef9 Reworks SQLite indices and adds l7_cat to the alerts database 2021-02-16 12:41:45 +01:00
Alfredo Cardigliano
c658b8ed24 Full purge idle scan on shutdown when processing pcap 2021-02-11 15:56:43 +01:00
Alfredo Cardigliano
2b3102e2ae Fix memory leak 2021-02-11 12:03:54 +01:00
Alfredo Cardigliano
3cd232e4c4 Fix math 2021-02-11 10:13:40 +01:00
Alfredo Cardigliano
e1984cb886 Add support for --vm. Deferred version print 2021-02-10 15:24:14 +01:00
Alfredo Cardigliano
149c1a0df1 Fix division by 0 2021-02-10 10:00:05 +01:00
Luca Deri
07b61ff972 Added detection of initialization errors 2021-02-09 13:18:28 +01:00
Luca Deri
f0853062b2 Implemented classes based on nDPI for behavioural traffic analysis 2021-02-09 13:06:08 +01:00
Simone Mainardi
265472728d Improves guess of local networks from broadcast traffic
Fixes #5011
2021-02-08 17:23:05 +01:00
Simone Mainardi
5b6f794d02 Fixesd to adjust new nDPI API 2021-02-05 15:24:23 +01:00
Simone Mainardi
537bc5210a Adds Layer-7 Applications to Exporters (backend)
Addresses #4976
2021-02-04 11:01:22 +01:00
Simone Mainardi
af2eeda9e5 Implements MAC access in user scripts
Implements #5015
2021-02-04 09:22:05 +01:00
Simone Mainardi
bdf3069227 Fixes for interface/host.lua [attempt to index a function value] 2021-02-03 15:06:07 +01:00
MatteoBiscosi
5713777ff7 Fixed wrong peers stats given to lua 2021-02-03 13:14:24 +01:00
Matteo Biscosi
eba1aaa359 Implements #4984 core Internet resources misuse script 2021-02-03 12:41:18 +01:00
Luca Deri
e22e7c6963 Implemented smart IPv4 fragment handling 2021-02-02 23:00:48 +01:00
Matteo Biscosi
2a4ec8ee0c Fixed wrong filename include 2021-02-02 19:01:30 +01:00
Matteo Biscosi
931258e7e5 Changed class name
Implements #4006
2021-02-02 18:52:34 +01:00
Luca Deri
ad9e629e36 Fixes #4961 2021-02-02 18:39:24 +01:00
Simone Mainardi
30fb35741f Fixes process of detected protocol for non-packet interfaces
Fixes #5000
2021-02-02 14:30:06 +01:00
Matteo Biscosi
fe01117324 Implements #4006 alerts when host contacts an unusual number of peers
Partial implementation, the rest is under the Pro Repository
2021-02-02 13:31:21 +01:00
Matteo Biscosi
770abf38ac Implements #4945 add label to local networks 2021-02-02 13:26:46 +01:00
Alfredo Cardigliano
ab7c490731 Add support for bash script in --test-script. Add --test-script-pre. Rework script for rest tests. (wip #4989) 2021-02-01 18:52:49 +01:00
Alfredo Cardigliano
eb93779d48 Add Ntop::isLocalAuthEnabled. Unify check to allow users management. Allow editing local user for admin even if remote (implement #4964). 2021-02-01 15:14:41 +01:00
Matteo Biscosi
ba001ba70f Implements #4957 binding interface in ICMP active tests 2021-02-01 12:36:26 +01:00
Luca Deri
602cf85c32 Fixed Utils::readIPv6() implementation that finnaly completes the implementation of #4956 2021-01-31 22:57:52 +01:00
Luca Deri
0b4e2757c1 Added host contact counters for core servers 2021-01-28 23:42:03 +01:00
Matteo Biscosi
f7f27dd503 Implements #4933 possibility to filter out flows with DSCP 2021-01-28 11:03:56 +01:00
Matteo Biscosi
288463b5d0 Implements #4973 partial local broadcast domain calculation 2021-01-27 09:59:05 +01:00
Luca Deri
6b6066e15b Improved brodcast host detection
Fixed invalid is_broadcast host report
2021-01-26 16:38:51 +01:00
Luca Deri
14c23188bb Added ntop.getStaticFileEpoch() mathos for handling static file lifecycle 2021-01-26 11:09:39 +01:00
Simone Mainardi
ce45bf0f9c Reworks throughput estimation for ZMQ interfaces 2021-01-25 17:27:13 +01:00
Matteo Biscosi
c44dbecf5f Implements #4957 backend, binding interface in ICMP 2021-01-25 17:21:02 +01:00
Matteo Biscosi
04a92124b0 Implements per interface Ping 2021-01-25 16:08:29 +01:00
Matteo Biscosi
c4dd51e9b6 Implements dynamic menu for periodicity and service map
Implements #4939
2021-01-22 16:18:57 +01:00
Alfredo Cardigliano
f2e64bb9ef Support 4-byte INPUT/OUTPUT SNMP 2021-01-22 10:24:56 +01:00