emanuele-f
01953cf76f
Harden categories reload to avoid crashes if multiple housekeeping run concurrently
2019-11-04 12:01:27 +01:00
Luca Deri
d61470c653
Workaround for #3033 but a proper fix is necessary
2019-11-02 20:22:35 +01:00
Simone Mainardi
c171574957
Reads CPU load from /proc/loadavg
2019-11-01 18:35:57 +01:00
Alfredo Cardigliano
d10dfc7762
Deferred flow alerts insertion through a redis queue. Removed alerts DB select when printing flow details.
2019-10-31 12:53:23 +01:00
Simone Mainardi
64b3892909
Counts user scripts execution time using clock ticks
2019-10-30 17:52:59 +01:00
emanuele-f
378a1e2cd8
Optimize nDPI categories reload to avoid packet drops
2019-10-29 12:07:27 +01:00
Simone Mainardi
cce73c2f44
Implements lua interpreters telemetry
2019-10-28 23:47:03 +01:00
Simone Mainardi
dc748b1b6d
Implements stats for periodic scripts duration
2019-10-28 17:10:03 +01:00
Simone Mainardi
f98dd234e8
Decouples periodic stats updates using a thread pool
2019-10-28 12:21:57 +01:00
Simone Mainardi
68246efd01
Decouples periodic hash table updates using a thread pool
2019-10-27 17:40:07 +01:00
Alfredo Cardigliano
c7120e23f3
Hide periodic user scripts in pcap dump mode (unless --original-speed is specified)
2019-10-25 16:45:23 +02:00
emanuele-f
0d04eb2d5c
Stop writing points if InfluxDB export is failing.
...
The dropped points are accounted and shown in the gui. Dropped points alert are generated as usual.
Fixes #2998
2019-10-24 16:09:01 +02:00
Alfredo Cardigliano
afbb34e262
TCP SYN Scan detection (implements #2963 )
2019-10-24 15:35:26 +02:00
emanuele-f
d1d789ea88
Improve category lists limits and reporting
2019-10-23 18:12:24 +02:00
Simone Mainardi
15e17a801a
Implements per-state hash entry counters and writes them to ts
2019-10-23 13:09:02 +02:00
emanuele-f
ac8d6f1110
Fix host MUD user script
2019-10-22 15:35:19 +02:00
Simone Mainardi
7683989920
Fixes crash after flow status migration to Lua
2019-10-22 11:31:32 +02:00
emanuele-f
b3374651ce
Merge branch 'alerts_cleanup' into dev
2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
1ec35c3042
Fixes and cleanup of disabled alerts
2019-10-22 10:33:42 +02:00
Luca Deri
fa10f4b6e1
Compilation fixes
2019-10-21 22:56:31 +02:00
Simone Mainardi
661dbbbeb0
Removes unnecessary alerts expired code
2019-10-21 17:47:17 +02:00
Simone Mainardi
e80dc962f4
Optimizes host.getFullInfo with smaller functions in periodic scripts
2019-10-21 16:21:03 +02:00
Simone Mainardi
f8443ff03d
Disk space reclaim and defrag of alerts db
2019-10-17 12:12:28 +02:00
Simone Mainardi
bdbd44819c
Fixes nEdge flows drop
2019-10-16 19:17:14 +02:00
Simone Mainardi
6fd7386c03
Fixes possible collisions when looking up flows by key
2019-10-16 19:04:10 +02:00
emanuele-f
e0fd591db2
Add ability to reset a status bit
2019-10-16 16:21:18 +02:00
emanuele-f
9786581526
flow.getInfo now returns minimal information
2019-10-16 13:57:54 +02:00
Alfredo Cardigliano
87ac1b0bb6
New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface
2019-10-16 04:50:47 +02:00
Simone Mainardi
d1600d0e9b
Adds toggle to exclude one-way-traffic hosts from timeseries gen
2019-10-16 11:58:50 +02:00
Simone Mainardi
5e60fb19c9
Implements two-way traffic filter for hosts
2019-10-16 11:01:22 +02:00
emanuele-f
9ea7ff01b8
Improve flow alert trigger logic and fix support for custom message
2019-10-15 18:36:41 +02:00
Simone Mainardi
3950c3ddc8
Support for 5-min timeseries resolution in InfluxDB
2019-10-15 15:06:20 +02:00
Simone Mainardi
002f1e7176
InfluxDB writes are now done with second precision
...
Implements #2935
2019-10-14 09:44:15 +02:00
emanuele-f
0ddc82d7db
Port blacklisted flow alerts to new api
2019-10-11 16:32:37 +02:00
Alfredo Cardigliano
e3f7979add
nEdge compilation fix
2019-10-11 09:51:10 +02:00
emanuele-f
2da2bdf7f6
Initial flow api documentation
2019-10-10 17:16:39 +02:00
Alfredo Cardigliano
a2e74e16a3
New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup
2019-10-10 12:49:32 +02:00
Simone Mainardi
179d24e268
Removes unused Mutex rrd_lock
2019-10-09 11:54:44 +02:00
Simone Mainardi
27444ec067
Reworks lua method calls in flow context
2019-10-09 11:51:53 +02:00
Simone Mainardi
79ec20d6df
Re-uses getFlows filters for the getActiveFlowsStats
...
Fixes #2891
2019-10-08 00:23:35 +02:00
emanuele-f
ede9a7940a
Generalize periodic and flows callbacks
...
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
emanuele-f
d74e4b4aa6
Compilation fix
2019-10-04 12:09:30 +02:00
Simone Mainardi
fa17aab9db
Implements lua flow method calls using ids to be more efficient
2019-09-30 17:29:01 +02:00
Simone Mainardi
60c5de9c7f
Waits an extra time for interfaces to reload custom categories
2019-09-25 12:39:54 +02:00
Alfredo Cardigliano
1b45f800f9
Sub-interfaces backend improvements for the GUI
2019-09-24 20:50:58 +02:00
emanuele-f
beddb433b7
Add a message when POST form submission fails
2019-09-23 16:00:25 +02:00
Simone Mainardi
b3f50c6b21
Fixes DNS resolution leaks and wrong ping addresses
2019-09-23 14:54:19 +02:00
Simone Mainardi
b3d595653e
Initial implementation of lua flow callback scripts and blacklisted alerts
...
Partially implements #2842
2019-09-16 18:27:46 +02:00
Simone Mainardi
968e21d984
Implements flow lua callbacks in the periodic activities thread
2019-09-12 15:36:41 +02:00
