Commit graph

633 commits

Author SHA1 Message Date
Luca Deri
4a93fe8a87 Added support in flow details for STUN MAPPED-ADDRESS 2024-04-12 21:14:38 +02:00
Matteo Biscosi
96d374007d Fixed info field cut after 256 characters 2024-04-08 13:11:09 -04:00
Luca Deri
296eebda0a Updates due to the new nDPI 2024-04-03 14:21:09 +02:00
Matteo Biscosi
9aaf15c49f Added network interface filter resolving the issue with duplicated flow exporters (#8129) 2024-03-28 05:55:15 -04:00
Nicolo Maio
93062e6c12 Fix minor connection state calculation with cumulative flags. 2024-03-26 17:11:25 +01:00
Nicolò Maio
c83a33e20b
Add in and out iface index filters (#8286) (#8288) 2024-03-26 10:29:18 +01:00
Luca Deri
c615274179 Code cleaup 2024-03-05 16:16:11 +01:00
Nicolò Maio
2d150103b7
Add TCP flow connection state (#8210)
* Add TCP flow connection state (#8140)

* Add Major and Minor connection states (#8140)

* Remove ZMQ connection state parsing. (#8140)

* Update doc with major and minor conn states. (#8140)
2024-02-28 14:45:49 +01:00
Nicolo Maio
5a295e5f8e Fix inconsistent DPI with nProbe (#8233) 2024-02-21 10:42:39 +01:00
Nicolo Maio
9165d05e40 Add JA4C 2024-02-20 11:48:13 +01:00
Luca Deri
3535198ea2 Various OT fixes 2024-02-16 19:18:13 +01:00
Luca Deri
841270d800 Added flow confidence 2024-02-16 16:37:05 +01:00
Nicolò Maio
d6cc11a10b
Refactor the isSMTP method (#8198) 2024-02-07 16:05:43 +01:00
Nicolo Maio
ed479a8b09 Add SMTP_MAIL_FROM, SMTP_RCPT_TO mapping + L7_PROTO_RISK_NAME dump on syslog. 2024-01-30 17:52:33 +01:00
Nicolo Maio
d0eb93ec1a Implement the FLOW_END_REASON parser. 2024-01-30 14:23:32 +01:00
Luca Deri
55870e97b9 (C) Update 2024-01-12 11:44:18 +01:00
Luca Deri
c00c4b9360 Added flow source support 2024-01-11 12:43:25 +01:00
Luca
aa3c050fc0 Reworked throughput calculation for flow-based interfaces: it is no longer calculated periodically but only when a new flow update is received 2024-01-11 11:36:25 +01:00
Alfredo Cardigliano
5642f22426 Fix 0 duration 2024-01-11 11:05:48 +01:00
Luca Deri
a5d1c92cdc Now with PF_RING in case of merged interfaces (e.g. -i virbr0,virbr1,eno1) ntopng keeps
track of the interface where a flow/host has been first observed
2023-12-01 20:48:40 +01:00
Matteo Biscosi
954d86bfb7 Fixes location not correctly set in case of aggregation 2023-11-30 14:20:24 +00:00
Nicolo Maio
b84c9f4e9a Add host name discovered with DHCP (#7972) 2023-11-28 17:06:32 +01:00
Nicolò Maio
3772ed52ac
Add flow exporters filter in aggregated live flows page. (#8047) (#8058) 2023-11-27 15:55:06 +01:00
Alfredo Cardigliano
0bb0acf24a Fix compilation of CH support in nEdge 2023-10-03 17:59:39 +02:00
Luca
83e97d121c Fix for blacklist handing with flow interfaces 2023-10-03 17:29:44 +02:00
Nicolo Maio
64612efca3 Add isMining check before free and fix typo. 2023-09-29 21:51:35 +02:00
Nicolò Maio
4fa9d796d8
Add mining currency in flow info column. (#7848)
* Add mining currency in flow info column.

* Add empty string check
2023-09-29 21:29:38 +02:00
Ivan Nardi
499d060fb1
Fix some errors and leaks found while fuzzing locally (#7757) 2023-08-14 17:15:20 +02:00
Luca Deri
139ac17a0c Added fix for memory management in packet-mode 2023-08-10 11:27:03 +02:00
Luca
f6296c76ea Code cleanup to avoid double allocations 2023-08-09 14:08:09 +02:00
Luca
28261ee3e0 Fixes for trackling ticket #7735 2023-08-07 23:49:58 +02:00
Luca
6f61a22ec4 Cleaned up ParsedFlow code 2023-08-07 23:19:20 +02:00
Nicolo Maio
d0fdcf6cc8 Add VLAN filter (#7673) 2023-07-14 15:39:17 +00:00
Luca
c70d0a2adf Reworked flow aggregation 2023-07-10 20:04:14 +02:00
Luca Deri
6ad77009f3 Fixes due to RTP nDPi changes 2023-06-26 13:23:51 +02:00
Alfredo Cardigliano
9fa2e96809 Augment Flow/Host alerts with auto-acknowledge flag 2023-06-22 09:12:34 +02:00
Luca Deri
7ea288bb52 Fixed Zoom handling
Implemented Ms Teams call detection
2023-06-15 22:35:12 +02:00
Luca Deri
dca9746a9f Added support for Modbus dissection 2023-05-26 23:01:11 +02:00
Luca Deri
12d4ea8c0c Implemented Flow::isDPIDetectedFlow() 2023-05-04 11:03:53 +02:00
lucaderi
d395deac4e Automated commit of clang-format CI changes. 2023-04-07 14:20:44 +00:00
Luca Deri
f38e346697 Code cleanup 2023-03-28 22:39:13 +02:00
Luca Deri
59ef3ca77d Fixes #7326 2023-03-17 17:24:23 +01:00
Luca Deri
2b679f4b92 Reworked host/MAC binding: ntopng is now able to avoid merging flows with the same 5 tuple but differnet MAC addresses 2023-03-11 00:11:51 +01:00
Matteo Biscosi
11869a4020 Removed thpt calculation from new flow 2023-03-07 12:02:20 +00:00
Matteo Biscosi
a38aab8ee6 Removed variables and initializations not necessary 2023-03-03 11:25:23 +00:00
Matteo Biscosi
18983a7d9c Removed no more used code 2023-03-02 18:48:41 +00:00
Matteo Biscosi
26508cd5ca Removed incorrect update 2023-02-23 17:03:30 +00:00
Luca Deri
676deedbbe Minor performance improvements 2023-02-21 23:37:35 +01:00
Luca Deri
05ecf9eb90 Remove un-necessary VLANid type in order to simplify code and avoid un-necessary and's 2023-02-20 22:30:12 +01:00
Luca Deri
c4e183ab0f Fixed flow export 2023-02-08 17:36:58 +01:00