emanuele-f
6b37ee2820
Optimize alerts handling
...
Avoid checkpointing on entities with no configured threshold
2017-11-17 14:00:53 +01:00
emanuele-f
c29d5eb808
Move checkpoint logic to separate Checkpointable class
2017-11-16 11:40:20 +01:00
emanuele-f
7281fd0d5d
Implement per protocol schedule
2017-11-02 12:49:22 +01:00
Simone Mainardi
a22022bb30
Reworks alerts to prevent local hosts I/O
2017-11-01 23:04:33 +01:00
Simone Mainardi
4bbe36c957
Removes unused DNS-based categorization
2017-10-31 13:53:17 +01:00
Simone Mainardi
a67205af77
Implements per-host traffic shapers
2017-10-23 15:01:34 +02:00
Simone Mainardi
5c2353eb0a
Adds host pool flag to enforce cross application quotas
2017-10-18 18:57:56 +02:00
Simone Mainardi
686fe178ab
Host pools members count fixes
2017-10-12 12:14:42 +02:00
Luca Deri
0623d2fc7d
Changed the way host pool inc/dec are implemented to avoid race conditions
2017-10-11 17:29:23 +02:00
Simone Mainardi
bf0df0be7c
Prevents zero-divisions in GenericTrafficElement throughput calc.
...
Attempts to fix #1446
2017-09-26 14:44:53 +02:00
Luca Deri
6704c1ef9e
Implemented initial device detection based on OS
2017-09-15 15:56:11 +02:00
Luca Deri
43cca84ebe
Fix for #1401
2017-08-16 11:55:35 +02:00
Luca Deri
2405449029
Removed the concept of secondary mac: one mac fits all
...
Removed activity heatmap: it will be soon replaces with host timeseries
2017-08-16 11:06:15 +02:00
Luca Deri
df41e83925
Added detection of ghost hosts in discovery
2017-08-11 14:24:05 +02:00
Simone Mainardi
fd8ee25641
Code refactoring to simplify stats reset
2017-08-01 15:39:00 +02:00
Simone Mainardi
a7b41075e4
Implements broadcast addresses per local network
...
Implements #571
2017-07-31 18:45:49 +02:00
Simone Mainardi
eaa7a0d313
Separates L3 IPs from L2 MACs
...
Before this commit, multiple L3 hosts were allocated if the same ip
address was seen with multiple mac addresses. We have decided to keep
ip and macs logically sepatated. For this reason, after this commit,
the L3 ip always remains the same even if there are changes in the
mac. A user who wants to monitor mac addresses can use the L2 section
as well as the host pools.
This commit also reverts:
"Add MAC address to the serialized hosts key to fix bad MAC address association and stats"
This reverts commit 89a756fb9a
2017-07-04 01:41:31 +02:00
Luca
bf0f7f68b1
Implemented initia; Lua discovery call
...
Dissected SSDP location header and reported in host info page
2017-06-18 15:25:18 -04:00
emanuele-f
12d0e8a0bb
Quota gui improvements
...
- Filter flows with blocked traffic
- Filter hosts with blocked traffic
- Improve flow_details quota report
2017-06-05 18:09:56 +02:00
Simone Mainardi
802f760fb9
Implements Active Local Hosts counter and display
2017-05-23 22:15:52 +02:00
Luca
cb4b0c002b
Added the concept of bridgeInterface Id in MACs
2017-05-21 15:30:17 +02:00
emanuele-f
9c973ca439
Move host activity detection code to attic
2017-05-17 22:19:37 +02:00
emanuele-f
4b482f02fc
Fix host quotas reset on pools reload
2017-05-09 16:11:37 +02:00
Simone Mainardi
b5e685f243
Implements per pool member quotas
2017-05-09 15:07:53 +02:00
emanuele-f
9097333cf1
Always show IPv6 suffix in IPv6 host names
2017-05-04 21:28:11 +02:00
emanuele-f
8537b2cc0a
Fix host alert counter
2017-05-02 18:32:46 +02:00
emanuele-f
a5e528047d
Use a single redis key to read all host anomalies configuration
2017-05-02 15:38:39 +02:00
Luca Deri
2d5dd2c9f0
Compilation fix
2017-05-01 18:08:44 +02:00
Luca Deri
73b3a3ded6
Added child safe information in host pools
...
Minor code rework
2017-05-01 15:53:23 +02:00
Luca Deri
de060d3470
Minor code rework
2017-04-30 23:28:32 +02:00
emanuele-f
21594b834d
Separate syn/flow attacker and victim alert thresholds
2017-04-30 20:07:58 +02:00
emanuele-f
284dfcd4cd
Specify hosts role in malware detected alerts
2017-04-30 18:24:56 +02:00
Emanuele Faranda
8b8974e56c
Alerts improvements ( #1204 )
...
* Implement flow flood alert
* Remove alerts general settings
* Implement global threshold alerts for hosts, networks and interfaces
* Implement global anomaly alert configuration, lua side
* Make the global thresholds not bound to the interface
* Implement global anomaly alert configuration, C side
* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
emanuele-f
1545dcb73e
Host Flows alert becomes a threshold alert
2017-04-26 15:50:54 +02:00
Simone Mainardi
0c40af5863
Implements VLANs hash table
2017-04-21 18:44:48 +02:00
Simone Mainardi
a07ce941ee
Fixes a crash introduced by a91781f
2017-04-21 17:35:05 +02:00
emanuele-f
a91781f66c
Add hide findHostsByIP to enforce purge lock on hosts hash
2017-04-21 16:57:34 +02:00
emanuele-f
5892319880
Update in-memory hosts alert configuration when the configuration changes
...
Also fixes invalid redis key used to check host alerts trigger
2017-04-20 19:09:52 +02:00
Simone Mainardi
9fb24219e4
Passes host detected anomalies to lua
2017-04-20 18:50:05 +02:00
Simone Mainardi
5014669d12
Implements Autonomous Systems hash table
2017-04-19 23:19:16 +02:00
emanuele-f
97afda88b8
Visualize host blocking status
2017-04-10 12:10:29 +02:00
emanuele-f
eb7fae8c4c
Visualize flow quota status information
2017-04-10 11:07:07 +02:00
Simone Mainardi
ca20b0d3e8
Implements continent support to the geolocation
...
Partially implements #1088
2017-04-05 20:06:23 +02:00
emanuele-f
a439d9c2bd
Implement host TCP flags distribution
2017-04-04 16:51:35 +02:00
Luca Deri
1854b884a2
Improved ICMP stats, added last peer, made them available interface wide
2017-03-30 12:37:03 +02:00
emanuele-f
42904dd034
Implement HostPool time and bytes quota limit in inline mode
2017-03-29 19:42:31 +02:00
Luca Deri
8d66bf1d30
Implemented ICMP detailed stats for local hosts
2017-03-29 13:02:08 +02:00
Simone Mainardi
13613fc2da
Implements Flow Devices statistics collection and storage
...
Flows sent via nProbe (proxy mode) carry information on the exporter
address (EXPORTER_IPV4_ADDRESS) and on the exporter interfaces
(INPUT_SNMP and OUTPUT_SNMP). This implementation attempts at saving
this information to allow comparisons with raw SNMP data.
2017-03-27 23:58:50 +02:00
Luca Deri
669cbc2b46
Implemented fix for #1091 (Address Re-association Blindness)
2017-03-27 22:03:22 +02:00
emanuele-f
02051bbdbd
Remove old host quota
2017-03-27 17:54:35 +02:00
