Commit graph

105 commits

Author SHA1 Message Date
emanuele-f
8a7ead5924 Harden HTTP session checks and remove user cookie 2018-08-21 18:16:54 +02:00
Simone Mainardi
abed170e98 Simplified handling of allowed interfaces 2018-08-21 13:21:21 +02:00
Simone Mainardi
dfb2401789 Reverts allowed interfaces fixes to make room for simplified code 2018-08-20 22:51:51 +02:00
Simone Mainardi
3f45eaabc3 Fixes for allowed ifnames 2018-08-20 20:40:45 +02:00
Simone Mainardi
d236bb580e Minor fix 2018-08-20 19:14:35 +02:00
Simone Mainardi
ee3f4ed52b Better handling of allowed interfaces during login 2018-08-20 17:48:15 +02:00
emanuele-f
354dd697c0 Add max value checks for traffic and packets metrics 2018-08-20 16:19:01 +02:00
Simone Mainardi
28b19afd8a Fixes security issues with interfaces selection
Fixes #1918
2018-08-20 13:37:32 +02:00
Simone Mainardi
f0ff5cbf99 Cleanup old MaxMind GeoIP code 2018-08-17 18:06:20 +02:00
Simone Mainardi
4390308eda Doc update for pcap download 2018-08-14 18:02:08 +02:00
Simone Mainardi
bd4252d727 Live pcap download security fixes 2018-08-14 17:57:42 +02:00
emanuele-f
d4ea15619f Add support for InfluxDB authentication 2018-08-13 14:36:06 +02:00
emanuele-f
163ef3af94 Allow to bind gui to a secondary address 2018-08-09 10:59:30 +02:00
Luca Deri
5f77b18c80 Added ability to set live pcap duration and optional BPF filter 2018-08-08 16:33:37 +02:00
Luca Deri
030a8c026e Disabled traces, removed un-necessary var 2018-08-08 14:14:12 +02:00
Luca Deri
30e22c3a71 Implemented multiple-pcap file download and monitor 2018-08-08 14:06:25 +02:00
Alfredo Cardigliano
508f2ca8e5 live_traffic.lua now accepts start/stop/status, implemented NetworkInterface::stopLiveCapture and Lua API stopLiveCapture 2018-08-07 19:07:41 +02:00
Luca Deri
3e6f8541df Added support for listing live captures 2018-08-07 16:45:20 +02:00
Luca Deri
5db87b3347 Added fix for insecure readdir_r() call
Fix for #1848
2018-08-06 17:00:36 +00:00
Simone Mainardi
f7fdc40c72 Major nEdge code cleanup 2018-08-06 17:54:25 +02:00
Luca Deri
67741e6b43 Ignored _GET for informative captive portal 2018-08-06 09:27:07 +02:00
Luca Deri
22728bc911 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2018-08-04 19:18:36 +02:00
Luca Deri
5ebaec2867 Added better trace for potential XSS attempts 2018-08-04 19:18:17 +02:00
Simone Mainardi
46f89a69d2 Fixes wrong hosts retrv by pool id 2018-08-04 19:16:27 +02:00
Luca Deri
0434ccc771 Added ability to execute HTTP GET with cookie authentication 2018-08-04 16:46:15 +02:00
Alfredo Cardigliano
3acc4e973d configuration backup (tar download) 2018-07-31 17:26:08 +02:00
Luca Deri
79d8c5451a Added topK nIndex implementation 2018-07-31 15:47:51 +02:00
emanuele-f
44abcd442c Add POST timeout to prevent housekeeping from blocking indefinitely 2018-07-30 12:48:41 +02:00
Luca
46b93c8f58 Merge branch 'dev' of https://github.com/ntop/ntopng into dev 2018-07-24 11:58:04 +02:00
Luca
f16a39ef04 Reworked live packet capture for both hosts and interfaces 2018-07-24 11:57:31 +02:00
Simone Mainardi
fc63f765ec Exposes lua setters for http/https bind addresses 2018-07-24 11:32:22 +02:00
Luca
31e86bdcd3 pcap capture is now allowed only for admin users 2018-07-24 10:07:12 +02:00
Simone Mainardi
4ce97fe86d Implements live pcap capture and download 2018-07-23 19:28:00 +02:00
Simone Mainardi
5e29e8697c Drafts API and calls for live captures 2018-07-23 11:49:51 +02:00
Luca Deri
9a1bf20663 Deprecated inline capabilities now implemented in nEdge 2018-07-23 10:53:10 +02:00
Luca Deri
b57aeed5a2 Lua fix 2018-07-18 22:13:53 +02:00
emanuele-f
05a576fe5c Fix custom categories matching
Note: custom_categories_to_purge will not be deallocated during shutdown
2018-07-17 19:54:39 +02:00
Luca Deri
0c99222903 Fixed lua platform dependent execution 2018-07-17 12:48:12 +02:00
Luca Deri
8eb25b54b5 Lua cleanup 2018-07-17 11:50:05 +02:00
Simone Mainardi
77c0f349d1 Migrates geolocation to GeoLite2 and libmaxminddb
Migrates class Geolocation to the new libmaxminddb

Handles static/dynamic compilation of libmaxminddb

Adds missing configure/make files for libmaxminddb

Adds libmaxminddb to travis.yml

Adds dev libmaxminddb to .travis.yml

Removes t Makefile

Removes missing ubuntu14 libmaxminddb-dev

Run autoreconf on libmaxminddb

Adds autoreconf to libmaxminddb static build

Adds libmaxminddb dependency to packages

Adds new *.mmdb files to debian/ubuntu ntopng-data

Adds new *.mmdb files to centos6/7 ntopng-data

Removes old libgeoip dep in favor of libmaxminddb

Adds back old .dat to debian/ubuntu ntopng-data

Adds back old .dat to centos ntopng-data

Adds autoreconf for travis

Removes libmaxminddb autoreconf from travis

Removes third-party libmaxminddb

Removes static build of libmaxminddb

Removes old libgeoip1 dependencies

Updates readme with libmaxminddb

Adds geolite attribution
2018-07-13 12:03:15 +02:00
Simone Mainardi
71ebaa39c2 Fixes allowed interfaces users access 2018-07-12 14:38:30 +02:00
Emanuele Faranda
a4730f33c1 Improve captive portal support with WISPr XML 2018-07-06 19:35:48 +02:00
Luca
bc4f709497 Integers that can be represented with 32 bits (or less) are now pushed to Lua as integer and not as numbers (that are represented as float) as this causes side effects in some functions 2018-06-27 09:04:57 -07:00
Luca Deri
5f461dfbd3 Fixed with Lua )non JIT) 2018-06-22 22:22:19 +02:00
Luca Deri
d4ad9dae90 Implemented packeet capture in background, ability to check if the capture is still in progress, and terminate it ahead of time
Example:
local fname = interface.captureToPcap(10, "tcp")

print(fname)

if(interface.isCaptureRunning()) then
   os.execute("sleep 1")
end

interface.stopRunningCapture()
2018-06-21 01:07:53 +02:00
Luca Deri
56b43f20a8 Added capabilities for dumping pcaps
On OSX Lua non-JIT is now the default
2018-06-20 09:19:43 +02:00
Luca Deri
d83ca95529 Fixed warning 2018-06-20 08:32:59 +02:00
Luca Deri
633e307d02 Added interface.captureToPcap() Lua API call 2018-06-19 17:31:37 +02:00
Luca Deri
2efadcf43f In case of application/json the received JSON is stored into _POST["payload"} rather than in _POST["JSON"]
Minor code cleanup
2018-06-16 14:47:10 +02:00
emanuele-f
06eae40681 Document ntop object Lua API 2018-06-15 15:52:05 +02:00