Commit graph

1237 commits

Author SHA1 Message Date
Simone Mainardi
be167a6dcb Adds per-interface option to only allocate flows 2020-01-21 10:50:30 +01:00
emanuele-f
23f7d90ee4 Move interface.computeHostsScore in the Score script 2020-01-17 10:44:38 +01:00
emanuele-f
566b9ece0b Score changes
- Move score from status definition to user scripts
- Separate flow score counter from the peers score
- Create a new HostScore class to hold the score data
2020-01-16 18:11:14 +01:00
Simone Mainardi
38facb051a Adds sortable Score column to flows list 2020-01-16 17:09:46 +01:00
emanuele-f
01d5d83f21 Account host score also on volatile flows (e.g. scans)
Such flows may go idle too early and miss the minute.lua iteration
2020-01-16 14:08:49 +01:00
emanuele-f
ddea68f245 Fix crash with viewed interfaces while sorting by cli/srv 2020-01-15 18:42:48 +01:00
emanuele-f
c336cca0e7 Improve host score calculation 2020-01-15 18:42:48 +01:00
emanuele-f
6edecb12cb Score visualization improvements 2020-01-15 15:27:45 +01:00
Alfredo Cardigliano
55b1ca75a9 Replace anomalous with misbehaving to avoid inconsistencies (fix #2866) 2020-01-14 15:49:19 +01:00
emanuele-f
93a96eb214 Code cleanup 2020-01-13 15:20:38 +01:00
Simone Mainardi
cef4f6df81 Enforces non-privileged users allowed nets when browsing local nets
Fixes #3205
2020-01-10 13:16:17 +01:00
Simone Mainardi
3ef133cd35 Fixes hosts one/two way traffic 2020-01-09 16:41:22 +01:00
Luca Deri
b10dcb2e07 Fixed epoch time 2020-01-06 23:41:26 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Luca
92ea3cf5a0 TLS certificate improvements 2020-01-02 09:36:31 +01:00
emanuele-f
9d9fbd2aee Fix broken flows purging 2020-01-01 12:18:13 +01:00
emanuele-f
87c336a4aa Reduce cpu usage due to the loading of flow.lua
The FlowAlertCheckLuaEngine is now cached into the (reused) vm, so it is reloaded
only when needed (e.g. a script on disk changes).
2019-12-31 18:27:14 +01:00
Simone Mainardi
7a2def354a Moves unused code to attic 2019-12-31 16:07:09 +01:00
Simone Mainardi
b44de6e18d Implements discarded probing traffic counters and timeseries 2019-12-31 16:01:24 +01:00
emanuele-f
d3b9f22b0a Add missing ARP matrix entries purging
This resulted in the ARP matrix hash growing as idle entries were not purged.

Fixes #3152
2019-12-31 12:32:21 +01:00
Simone Mainardi
cc49cdc1af Implements per-interface pref to discard probing traffic 2019-12-31 10:15:54 +01:00
Simone Mainardi
5831451b77 Unifies and cleans interface preferences code 2019-12-31 10:00:18 +01:00
Simone Mainardi
fb7f2d553e Implements scanners detection using radix trees 2019-12-30 20:13:44 +01:00
Simone Mainardi
2abb8cfde5 Reworks flow scripts deadlines 2019-12-27 20:50:53 +01:00
Simone Mainardi
c873aee41b Implement counter and chart for new flows per second 2019-12-27 12:29:55 +01:00
Simone Mainardi
05f6837345 Adds inline thread names 2019-12-24 11:54:20 +01:00
emanuele-f
8b7d711a36 Add option to disable flow user scripts invocation 2019-12-23 18:03:19 +01:00
emanuele-f
139a16ffe3 Fix protocol categories association lost after reboot
After the recent changes, there is only one global nDPI struct which
is share across all the interfaces. However, the struct can be swapped
during normal operating, so it's necessary to reload the associations
every time a new nDPI struct is allocated.

Fixes #3139
2019-12-19 15:11:21 +01:00
Simone Mainardi
141cbeb2bc ICMP fixes and tables for both ICMP and ICMPv4 2019-12-18 10:17:31 +01:00
Simone Mainardi
893350653b Fixes incomplete data with pcap files
Fixes #3128
2019-12-17 12:35:06 +01:00
emanuele-f
b10520e264 Rename checkAlerts callback to runScripts 2019-12-16 09:31:24 +01:00
Simone Mainardi
08c487ad05 Fixes multicast broadcast addresses calculation 2019-12-14 14:21:57 +01:00
Simone Mainardi
0ebc64cf71 Handles offline NetBIOS updates 2019-12-13 17:08:35 +01:00
Simone Mainardi
a65b6efc7c Implements icmp hosts stats for view interfaces 2019-12-13 13:06:26 +01:00
Simone Mainardi
0ce4ebad97 Dropbox code cleanup 2019-12-13 10:43:08 +01:00
Simone Mainardi
4a9ac03cb4 Implements dns hosts stats for view interfaces 2019-12-13 09:58:09 +01:00
Simone Mainardi
8b0869da46 Implements http hosts stats for view interfaces 2019-12-12 17:11:56 +01:00
Simone Mainardi
4afa348f89 Fixes possibly invalid icmp echo id 2019-12-10 14:26:27 +01:00
Simone Mainardi
abf712fffc Detunnels 6-in-4 tunnels 2019-11-24 19:32:09 +01:00
Simone Mainardi
ff09e5b61f Allows flow lua scripts to be run on pcap dump interfaces 2019-11-21 12:53:25 +01:00
Simone Mainardi
a893e0a2c0 Implements IP addresses retrieval by Mac address 2019-11-20 18:44:01 +01:00
Simone Mainardi
62f7405716 Optimizes single mac lookups by avoiding full HT walks 2019-11-20 17:49:11 +01:00
emanuele-f
2df9b34201 Add flow user scripts drops alert 2019-11-19 17:37:58 +01:00
emanuele-f
265c84699d Add some missing shutdown cleanups 2019-11-19 11:53:56 +01:00
Simone Mainardi
bd5041ead2 Renames walkIdle to walkAllStates and documents method behavior 2019-11-18 11:35:43 +01:00
Alfredo Cardigliano
c9b538a199 Fixes filter by flow status in case of multiple statuses set (fix #2981) 2019-11-15 19:47:51 +01:00
Alfredo Cardigliano
e38835a603 Rename SSL to TLS (fix #3013) 2019-11-15 12:40:01 +01:00
Simone Mainardi
05e6dc1677 Implements bi- and mono-directional flow callbacks filter
Implements #3055
2019-11-13 18:14:49 +01:00
Simone Mainardi
d685de3ec1 Implements walkIdle fairness among hash table entries 2019-11-13 11:35:55 +01:00
Luca
5f72aa0c2e nDPI cleanup 2019-11-08 11:38:03 +00:00