Commit graph

215 commits

Author SHA1 Message Date
Simone Mainardi
539f82a153 Improves ICMPv6 types/codes support 2019-12-14 16:58:37 +01:00
emanuele-f
a3432e00e8 Implement ntopng plugins
Plugins are a convenient way to group together related lua scripts.
Their primary use case is to group user scripts and their alert/status
definition.
The builtin ntopng user scripts and definitions are now
packed into plugins directories. In future, we will support loading of
user created plugins.
Plugins are loaded at startup into some runtime directories and then
used. Other changes provided by this commit include:

- Add sample flow logger plugin
- Initial support for system user scripts
- Rename edge to threshold
- Migrate system probes to user scripts/plugins
- Migrate scripts to more explicit alerts_api.checkThresholdAlert api
2019-12-10 09:25:57 +01:00
Simone Mainardi
7402bbdd14 FontAwesome 5 migration 2019-12-09 15:11:37 +01:00
Simone Mainardi
1aa0546b85 Bootstrap migration dropdown style fixes 2019-12-05 09:27:48 +01:00
Simone Mainardi
a34a326d4c Bootstrap migration glyphicon filter to fa 2019-12-05 09:27:48 +01:00
Simone Mainardi
2639d49e4a Bootstrap migration progress bars 2019-12-05 09:27:47 +01:00
Alfredo Cardigliano
6359bc9ab0 Fix displayed RTP MOS with TLV (this also fixes other fields formatting with JSON) 2019-12-02 12:09:37 +01:00
Alfredo Cardigliano
d54e34b102 Reworked flow fields parsing. Fixed SIP/RTP details (Fix #3043) 2019-11-07 12:51:13 +01:00
Simone Mainardi
18a1d5ea8d Minor fix 2019-10-30 16:43:36 +01:00
Simone Mainardi
e10dfb1b24 Fixes for the CZ translation 2019-10-30 16:41:19 +01:00
emanuele-f
76812f42af Add priority column in status overview 2019-10-22 19:52:05 +02:00
emanuele-f
b3374651ce Merge branch 'alerts_cleanup' into dev 2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
f8443ff03d Disk space reclaim and defrag of alerts db 2019-10-17 12:12:28 +02:00
Alfredo Cardigliano
bfdf5773d3 Format boolean custom fields 2019-10-16 12:51:04 +02:00
Simone Mainardi
bdbd44819c Fixes nEdge flows drop 2019-10-16 19:17:14 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
emanuele-f
9786581526 flow.getInfo now returns minimal information 2019-10-16 13:57:54 +02:00
emanuele-f
7a14a9cf11 Improvements in status definition API 2019-10-16 10:33:19 +02:00
Simone Mainardi
2f984277ca Fixes flows one-way/two-way flows filtering 2019-10-16 09:55:43 +02:00
emanuele-f
1c629b331a Fix missing flow status menu entries 2019-10-15 18:51:34 +02:00
emanuele-f
60566f4b53 Fix flows_stats page title 2019-10-15 18:48:20 +02:00
emanuele-f
b217909966 Split flow status definitions in multiple files 2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
76759a7d03 Suricata events are now processed by the Lua script 2019-10-10 15:56:53 +02:00
Simone Mainardi
9a08c116b5 Improves flows filtering dropdowns 2019-10-08 11:25:36 +02:00
Simone Mainardi
79ec20d6df Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
53d03884f8 Removes a debug print 2019-10-07 19:45:21 +02:00
Simone Mainardi
6bcb8b18a2 Prevents TCP state filter from being shown on non-TCP flows 2019-10-07 18:51:16 +02:00
emanuele-f
978ee7f944 Add misbehaving flows label to avoid confusion 2019-09-20 12:41:09 +02:00
emanuele-f
4d62d68655 Add active alerted flows filter and count
Closes #2821
2019-09-10 17:52:22 +02:00
emanuele-f
935c2de722 Fix active flows error 2019-09-10 14:57:30 +02:00
emanuele-f
6e14f978d6 Flow alerts status cleanup 2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
141622f151 Lua: created flow_consts module, getFlowStatusTypes has been replaced by flow_consts.flow_status_types, added flow.status_map to the Lua flow info 2019-09-04 22:20:51 +02:00
emanuele-f
a58cd6a7d9 Add country flag in flow peers 2019-09-02 10:58:43 +02:00
emanuele-f
2d02de6cc1 Implement initial flow score support 2019-08-30 17:16:11 +02:00
Simone Mainardi
c9223590d9 Workaround to handle \n forcefully set when decoding ZMQ tlv 2019-07-31 16:06:15 +02:00
emanuele-f
664d165b2f Add hosts alerts link into flow alerts 2019-07-26 13:24:05 +02:00
Alfredo Cardigliano
c63831bfa3 Computing L4 protocol statistics for flows 2019-07-12 16:27:34 +02:00
Alfredo Cardigliano
54c783f236 Filter flows by L4 protocol 2019-07-12 14:41:07 +02:00
Alfredo Cardigliano
78fe243d2b Added missing ICMPV6 types descriptions 2019-07-12 11:58:56 +02:00
Alfredo Cardigliano
87d1834f13 Added missing ICMPV4 type 3 values description 2019-07-12 11:46:07 +02:00
emanuele-f
7b936a1a4c Mesbehaving flows documentation 2019-07-02 16:32:12 +02:00
Alfredo Cardigliano
b2b5d07aa6 Typo fix 2019-06-05 11:53:30 +02:00
Alfredo Cardigliano
e9d9204ba7 Active flows title with status filter 2019-05-20 19:08:35 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d Implements traffic profile filter in the active flows page (#2598) 2019-05-20 12:43:51 +02:00
emanuele-f
359d359d09 Add ICMP flow filter
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
939ca8c166 Implement eBPF flows view and improve containers/pods pages 2019-04-26 15:34:53 +02:00
emanuele-f
fdc7772519 Implement simplified flows page with container filter 2019-04-26 10:44:44 +02:00
Simone Mainardi
25785fca62 Groups together flow alerts for the same flow in a counter variable
This is to mitigate the number of alerts and implements #2515
2019-04-19 16:14:06 +02:00