Commit graph

3226 commits

Author SHA1 Message Date
Luca Deri
4ad109a7c0 Added the ability to analyze a pcap without creating a new interface 2022-09-15 00:35:56 +02:00
Alfredo Cardigliano
b05b8b3bf6 Disable any host name decoding with -n 3 2022-09-14 11:05:13 +02:00
Luca Deri
cec7592305 Added vlandId in assets 2022-09-14 00:35:22 +02:00
Alfredo Cardigliano
7bd88ecf3b Fix linux checks 2022-09-13 09:48:46 +02:00
Alfredo Cardigliano
aa4c871bfd Code cleanup 2022-09-08 09:56:17 +02:00
Alfredo Cardigliano
49c0dd037f Make functions public 2022-09-07 09:54:18 +02:00
Alfredo Cardigliano
3ed0b5d2e4 Code cleanup 2022-09-07 09:51:35 +02:00
Alfredo Cardigliano
ad4e9facb7 Add support for multiple LAN/WAN interfaces in nEdge backend (C++) 2022-09-07 09:19:16 +02:00
Luca Deri
be90bf50df Optimized pools lock/unlock removing redis with a lock in ntopng 2022-09-05 20:00:29 +02:00
Luca Deri
45bcebd021 Added ntopng Enterprise XL support 2022-09-03 11:26:36 +02:00
Luca Deri
91309c5c95 Fix for aarch64 2022-09-01 00:26:57 +02:00
Luca
23cfc5efb8 Added SNMP interface polling collection sent by nProbe via ZMQ (--snmp-mappings) 2022-08-27 18:20:45 +02:00
Alfredo Cardigliano
26f9f7a418 Add 'runtime' test scripts, in addition to pre and post 2022-08-24 17:13:30 +02:00
Alfredo Cardigliano
8816605841 Fix shutdown sequence with pcap to fix regression tests on historical data 2022-08-24 15:37:38 +02:00
Luca Deri
7b4a4acd5a Improved service categorization 2022-08-20 19:34:47 +02:00
Luca Deri
db3cdd1d15 Added IMAP/POP stats 2022-08-18 19:17:38 +02:00
Alfredo Cardigliano
6b8e16151b Cleanup unused functions 2022-08-18 15:37:31 +02:00
Luca Deri
f7180631f5 Added router information 2022-08-18 12:54:09 +02:00
Luca Deri
bee57c0f57 Changes in redis serialization key 2022-08-18 11:31:06 +02:00
Luca Deri
5c17fa1099 Improved asset management 2022-08-17 17:35:36 +02:00
Luca Deri
9be5d34f5c Code clanup 2022-08-16 17:54:41 +02:00
Luca Deri
b046e3d748 Added --log-labels for creating a log of labels used by ntopng when learnt during traffic processing 2022-08-12 20:21:38 +02:00
Luca Deri
64233d94e2 Introdices nTap support 2022-08-11 19:18:00 +02:00
MatteoBiscosi
a1ed5d29f4 Fixes Redis trim 2022-08-09 16:32:26 +02:00
MatteoBiscosi
c330724455 Last fixes to connection/disconnection alert (#6801) 2022-08-08 17:40:33 +02:00
MatteoBiscosi
1009b30a99 Added directions to Periodicity Map (#6668) 2022-08-02 18:04:08 +02:00
Alfredo Cardigliano
8845ca8573 Add Utils::openSocket/Utils::closeSocket to label sockets 2022-07-29 10:11:57 +02:00
MatteoBiscosi
8e4f76c6ce Changed traffic direction support to true by default (#6704) 2022-07-27 16:20:18 +02:00
MatteoBiscosi
74fcb75d78 Added asset management class 2022-07-26 18:15:19 +02:00
MatteoBiscosi
c3bb24a38b Add num alerted flows in ASN (#6465) 2022-07-25 10:51:08 +02:00
MatteoBiscosi
fb6d7e1655 Added num alerted flows in Networks (#6465) 2022-07-25 10:50:42 +02:00
MatteoBiscosi
d8d14b8ab9 Final fix for #6790 2022-07-22 16:34:37 +02:00
Alfredo Cardigliano
61244379ea Rename misleading file name (CH schema also includes flows) 2022-07-21 17:47:02 +02:00
Luca Deri
0e7f609957 Added Windows timezone handling 2022-07-19 15:19:30 +02:00
Alfredo Cardigliano
fe48f82631 Improve local hosts lookups by using cached info when the network ID is not required 2022-07-19 12:54:33 +02:00
MatteoBiscosi
687d508daa Fixes IEC alerts triggered even when disabled (#6682) 2022-07-19 11:14:25 +02:00
Luca Deri
fac4572ad1 File rename 2022-07-18 17:53:28 +02:00
Alfredo Cardigliano
fb8e748679 Handle ndpi failures loading host lists. Print failing entries 2022-07-18 15:23:45 +02:00
Alfredo Cardigliano
80a4acab95 Add Flow Checks profiling (execution time in System -> Health -> Behavioural Checks) 2022-07-15 16:22:48 +02:00
Alfredo Cardigliano
e4e7c4e89f Rework profiling macros 2022-07-15 11:56:19 +02:00
Alfredo Cardigliano
14e2ae834c Add alert type for missing flow risks 2022-07-15 10:57:02 +02:00
Alfredo Cardigliano
cdd4a41bd5 Rename FlowRisk Simple to Generic 2022-07-14 17:23:06 +02:00
Alfredo Cardigliano
86e475b292 Add notes and cleanup support for unhandled flow risks. Add flow_alert_ndpi_desktop_or_file_sharing_session 2022-07-14 17:15:08 +02:00
Alfredo Cardigliano
deb52c5894 Fix typo 2022-07-14 15:10:15 +02:00
Luca
58478f0c42 Flow risks code cleanup 2022-07-14 11:04:02 +02:00
Luca
888be4858f Cosmetic changes 2022-07-12 11:40:31 +02:00
Luca Deri
7bb3d1480f No idea why we're still usinge const 2022-07-06 14:52:38 +02:00
Alfredo Cardigliano
72b19f8c64 Clear all risks for flows matching the IssuerDN Exclusion for self-signed certificates 2022-07-06 10:47:21 +00:00
Luca Deri
49c15bac20 Added DGA domain handling received via ZMQ 2022-07-04 22:30:37 +02:00
Luca Deri
bdbc84fef6 Implemented issuerDN exception handling 2022-07-04 21:39:36 +02:00