Commit graph

327 commits

Author SHA1 Message Date
Luca Deri
6b6066e15b Improved brodcast host detection
Fixed invalid is_broadcast host report
2021-01-26 16:38:51 +01:00
Simone Mainardi
d11e58c498 Operating systems set fixes 2021-01-21 14:38:14 +01:00
Matteo Biscosi
43fa8cf6e9 Implements OperatingSystem Hash
Implements #1599
2021-01-21 11:14:52 +01:00
Luca
685bab35f4 Fix invalid host serialization for MAC-based interfaces 2021-01-20 08:38:43 +01:00
Simone Mainardi
7641faab96 Allows DHCP hosts to be serialized by Mac 2021-01-19 16:57:10 +01:00
Matteo Biscosi
864723c151 Fixed top sites problem and added a slice of top OS stats 2021-01-18 18:12:53 +01:00
Matteo Biscosi
4586833114 Fixed #4896 service map nodes have numerical label even though a symbolic name exists 2021-01-11 17:42:49 +01:00
Luca Deri
a1178a0791 Updated (C) 2021-01-02 12:08:23 +01:00
Luca Deri
06161556ac Fixes issues with unexpected XXX alerts where impacted server was not reported
Added Lua getFlowProtoClientIP/getFlowProtoServerIP calls in flows
2020-11-25 15:52:03 +01:00
Luca Deri
249477929a Exported additional host information when serializing flows 2020-11-20 12:59:51 +01:00
Luca Deri
17266b71a6 Extended flow alert JSON 2020-11-17 17:04:11 +01:00
Luca Deri
7758e0dea1 Reworked DoH code 2020-11-11 16:19:39 +01:00
Matteo Biscosi
5a8fd8efd7
Fixes #2115 and added shell script user guide (#4702)
* Added shell endpoint user guide

* Fixes #2115 std::new exceptions not always handled

* Removed a nothrow due to the insert of a try-catch statement

* Trying to implement #4421

Co-authored-by: matteo <biscosi@ntop.org>
2020-11-11 12:28:18 +01:00
Alfredo Cardigliano
109c79eafa Add score sorter in the backend 2020-11-02 11:24:40 +01:00
Simone Mainardi
a0056ef2b7 Unifies alerted and misbehaving flows on hosts
Fixes #4596
2020-10-19 10:19:22 +02:00
Simone Mainardi
30f46a15da Misbehaving flows cleanup 2020-10-16 11:28:46 +02:00
Simone Mainardi
e5f95c0237 Reworks/cleanup host score code 2020-10-15 12:25:27 +02:00
Simone Mainardi
24839a7135 Alerted flows counter fixes 2020-10-14 16:46:09 +02:00
Luca Deri
240dd7330a Added marker for DNS, DHCP, SMTP, NTP servers 2020-10-12 11:07:41 +02:00
Simone Mainardi
fdf0f15140 Fixes races in view interfaces and cli/srv scores
Fixes #4513
Fixes #4512
2020-10-02 16:34:28 +02:00
Luca Deri
79e749c769 Extended host with new methods for detecting broadcast and multicast addrsesses 2020-10-01 22:14:30 +02:00
Simone Mainardi
f0a2aba619 Simplifies incNumFlows/decNumFlows for Hosts 2020-10-01 14:28:13 +02:00
Simone Mainardi
fa96c5e2f5 Code cleanup 2020-10-01 14:20:07 +02:00
Simone Mainardi
90a5a57b36 Implements user script queues (avoids 5-sec HT walk) 2020-09-28 11:45:00 +02:00
Luca Deri
930e4c362d Fixes #4320
Implements peak score of the last minute
2020-09-23 13:51:40 +02:00
Simone Mainardi
841dacd4cd Simplifies per-category host score 2020-09-21 11:44:00 +02:00
Simone Mainardi
db0d7730a8 Implements per-category host score
Implements #4413
2020-09-18 18:34:28 +02:00
Luca Deri
8cf5d706f8 Added DHCP server detection 2020-08-05 11:32:40 +02:00
Simone Mainardi
1baa7d6cc4 Avoids double 5-sec HT-walks to update stats 2020-07-27 14:22:59 +02:00
Luca Deri
84bd93f903 Implemented periodicity stats 2020-07-20 22:44:23 +02:00
Alfredo Cardigliano
0a84d0706e Add DSCP stats to the host, new DSCPStats class 2020-07-17 18:05:11 +02:00
Luca Deri
35876b871e Added --pcap-file-purge-flows for forcing purge on pcap files (debug only)
Local host BA improvements
2020-07-15 17:20:57 +02:00
Luca Deri
f2c3ee137c Host stats cleanup 2020-07-13 23:56:46 +02:00
Luca Deri
a27eedaeef Implemented cardinarily information report in hsot
Fixes #4005
2020-06-13 00:00:30 +02:00
Luca Deri
32f38e6d8b Port cardinality implementation 2020-06-12 11:07:44 +02:00
Luca Deri
9445dcb6b8 Introduced cardinality count 2020-06-12 08:11:05 +02:00
emanuele-f
ec51278c20 Cleanup of HostStats 2020-05-20 17:05:30 +02:00
emanuele-f
898811ff6f Fix MDNS/Netbios names mixed with host labels
Addresses #3677
2020-05-08 12:12:52 +02:00
Alfredo Cardigliano
e32b29d9bf Get host label 2020-04-01 10:34:29 +00:00
Simone Mainardi
43284e22f8 Fixes crash and removes unused PortContactStats
Class was not used and didn't handle concurrent accesses to strings,
yielding crashes such as

Thread 14 "stats_update.lu" received signal SIGSEGV, Segmentation fault.
[Switching to Thread 0x7fffb3fff700 (LWP 25268)]
0x00005555556b9183 in IpAddress::intoa (this=0x28c, buf=0x7fffb3ffe030 "", bufLen=64, bitmask=255 '\377') at src/IpAddress.cpp:352
352     src/IpAddress.cpp: No such file or directory.
(gdb)
(gdb) bt
    at src/GenericHash.cpp:222
    #9  0x00005555556c0413 in NetworkInterface::walker (this=0x555556159e70, begin_slot=0x7fffb3ffe454, walk_all=true, wtype=walker_flows, walker=0x5555556c6b79 <host_flow_update_stats(GenericHashEntry*, void*, bool*)>,
        user_data=0x7fffb3ffe458) at src/NetworkInterface.cpp:795
	#10 0x00005555556c6f7c in NetworkInterface::periodicStatsUpdate (this=0x555556159e70, vm=0x7fffac0a5578) at src/NetworkInterface.cpp:2589
	#11 0x0000555555671d62 in ntop_periodic_stats_update (vm=0x7fffac0a5578) at src/LuaEngine.cpp:6304
	#12 0x000055555576c2f6 in luaD_precall ()
	#13 0x0000555555777acd in luaV_execute ()
	#14 0x000055555576c5cf in luaD_call ()
	#15 0x000055555576c621 in luaD_callnoyield ()
	#16 0x000055555576ba42 in luaD_rawrunprotected ()
	#17 0x000055555576c91b in luaD_pcall ()
	#18 0x0000555555769cd4 in lua_pcallk ()
	#19 0x0000555555681e8a in LuaEngine::run_loaded_script (this=0x7fffac01fe10) at src/LuaEngine.cpp:12188
	#20 0x000055555563eca2 in ThreadedActivity::runScript (this=0x555562aee4e0, now=1585309410, script_path=0x7fff88002620 "/usr/share/ntopng/scripts/callbacks/interface/stats_update.lua", iface=0x555556159e70, deadline=1585309420)
	    at src/ThreadedActivity.cpp:418
	    #21 0x00005555556ba04d in ThreadPool::run (this=0x5555624525a0) at src/ThreadPool.cpp:103
	    #22 0x00005555556b9c79 in doRun (ptr=0x5555624525a0) at src/ThreadPool.cpp:31
	    #23 0x00007ffff65aa6db in start_thread (arg=0x7fffb3fff700) at pthread_create.c:463
	    #24 0x00007ffff3ea388f in clone () at ../sysdeps/unix/sysv/linux/x86_64/clone.S:95
2020-03-27 13:36:51 +01:00
Alfredo Cardigliano
dc4431f71b Move names reset in case of data reset 2020-03-27 11:17:22 +00:00
Alfredo Cardigliano
18a15a8b86 Reset host names when setting the name from Lua 2020-03-27 10:58:14 +00:00
emanuele-f
94f175194b Initial changes for MUD recording 2020-03-04 17:05:53 +01:00
Luca Deri
e55854aaff Initial work on host bins 2020-01-27 11:55:00 +01:00
emanuele-f
566b9ece0b Score changes
- Move score from status definition to user scripts
- Separate flow score counter from the peers score
- Create a new HostScore class to hold the score data
2020-01-16 18:11:14 +01:00
emanuele-f
01d5d83f21 Account host score also on volatile flows (e.g. scans)
Such flows may go idle too early and miss the minute.lua iteration
2020-01-16 14:08:49 +01:00
emanuele-f
c336cca0e7 Improve host score calculation 2020-01-15 18:42:48 +01:00
emanuele-f
6edecb12cb Score visualization improvements 2020-01-15 15:27:45 +01:00
emanuele-f
d7528e1628 Score improvements
The score is now calculated differently on the client and on the server of the flow.
The hosts flow is updated every minute and charted.
It's now possible to trigger an alert when the score threshold is exceeded
2020-01-15 12:34:16 +01:00
Alfredo Cardigliano
55b1ca75a9 Replace anomalous with misbehaving to avoid inconsistencies (fix #2866) 2020-01-14 15:49:19 +01:00