Matteo Biscosi
af37780125
Fixes top talkers calculation ( #9222 )
...
Fixes timeseries colors
2025-06-12 11:22:41 +02:00
Alfredo Cardigliano
e48966dd38
Add Host::serializeAttributes to be used both by HostAlert::getSerializedAlert and Lua
2025-05-26 17:40:49 +02:00
Luca Deri
794c6c0634
Implemented service propagation with view interfaces
2025-05-01 09:32:10 +02:00
Luca Deri
ac8766d63e
Implemented detection of SSH/RDP/HTTP(S) services
2025-04-28 16:30:36 +02:00
Luca Deri
d861b002bd
Improved host mac address learning
2025-04-12 11:49:53 +02:00
Luca Deri
5e1bb08eaf
Added ability to know when a host has a meaningful IP (IPv4 hosts only)
2025-04-12 10:46:01 +02:00
Luca Deri
fa57ea29db
Crash fixes
...
Implemented device_type rework
2025-04-01 16:23:50 +02:00
Luca Deri
c21b972d03
Reworked protocol services detection
2025-03-31 22:23:06 +02:00
Luca Deri
80b71567b8
Cleaned-up OS type and aligned to nDPI
2025-03-31 13:07:48 +02:00
Luca Deri
7d8b599a8c
DHCP fingerprint is now reported on flows
...
Fixed OS inconsistencies
2025-03-27 21:43:48 +01:00
Luca Deri
f98adfa896
Implemented host OS change detection
2025-03-25 11:48:37 +01:00
Luca Deri
c08b31774d
Implemented nDPI OS hint support
2025-03-24 23:39:16 +01:00
Luca Deri
346e67fe27
Assets improvements
2025-03-20 21:50:00 +01:00
Luca Deri
704bb92b5b
Asset rework
2025-03-18 18:01:44 +01:00
Luca Deri
dc4394fd2e
Added DHCP fingerprint support
2025-03-17 23:36:40 +01:00
Matteo Biscosi
c6c47f727e
Added QoE timeseries and stats into various entities ( #8984 )
2025-02-26 18:13:11 +01:00
Luca Deri
6b7cc71391
Reworked RTT
2025-01-29 12:56:50 +01:00
Matteo Biscosi
1e18b7b693
Added Assets to hosts dump ( #6794 )
2025-01-14 10:43:12 +01:00
Alfredo Cardigliano
9352d0cdcd
Update copyright
2025-01-02 09:09:56 +01:00
Luca Deri
49506f3afa
OS detection improvements
2024-11-26 18:06:43 +01:00
Luca Deri
dd66f3965c
Various AM improvememnts
2024-11-26 13:07:17 +01:00
Luca Deri
6b4afa074a
Removed OS stats
2024-11-26 10:23:04 +01:00
Luca Deri
53db794497
fingerprint cleanup
2024-11-25 18:01:27 +01:00
Luca Deri
83e5477066
Cleaned up OS code
2024-11-25 14:35:53 +01:00
Luca Deri
6294343086
Reworked OS and hot fingerprint
2024-11-24 23:08:38 +01:00
YellowMan
d940cfb49c
Moved asset management tracking only to LocalHost ( #8803 )
2024-11-15 09:45:12 +01:00
Luca Deri
afff51311d
Asset management fixes
2024-11-05 18:32:15 +01:00
Alfredo Cardigliano
89f59cde5a
Migrate local networks type from 16 to 32 bit
2024-10-29 15:31:37 +01:00
Alfredo Cardigliano
9d4b54e326
Add Host::print
2024-10-23 16:24:29 +02:00
Luca
1117e71d18
Removed SYN flood check that was partially overlapping with SYN scan
2024-10-22 15:46:50 +02:00
Luca Deri
e019e9adf8
Added TCP fingerprint support
2024-10-20 23:09:21 +02:00
Luca Deri
2cb14a89b1
Fixes inconsistent flow counter update
2024-10-15 17:55:58 +02:00
Matteo Biscosi
e1d53695a4
Fixes minor issues when compiling
2024-10-15 11:56:22 +02:00
Matteo Biscosi
bd772a501d
Removed incorrect function
2024-10-15 11:43:02 +02:00
Matteo Biscosi
17ca341011
Minor fixes to syn flood alert
2024-10-15 11:04:38 +02:00
Luca Deri
de239b25fb
Reworked TCP flags handling
2024-10-14 21:49:08 +02:00
YellowMan
96de1fbea2
Invalid SYNFlood Error Fix ( #8747 )
...
* Invalid SYNFlood Error Fix
* Invalid SYNFlood Error Fix - Solve decrement number of flows error
2024-10-13 11:01:52 +02:00
Luca Deri
3f3b267ce1
Implemented support for nDPI address cache
2024-10-08 17:06:31 +02:00
Matteo Biscosi
952e136080
Moved unexpected gateway check from flows to hosts
2024-10-07 16:58:31 +02:00
Matteo Biscosi
e4632b3848
Introduced gateway into ipaddress
2024-10-04 17:49:22 +02:00
Alfredo Cardigliano
112bf29b9e
Make code more clear
2024-08-09 18:00:13 +02:00
Alfredo Cardigliano
548c9aeec5
Remove obsolete JA3 support
2024-08-09 09:08:32 +02:00
Alfredo Cardigliano
c262a4a38e
Cleanup local/unicast checks
2024-08-08 16:29:09 +02:00
Alfredo Cardigliano
3a08b62e05
Return host_pool_match (ip or mac) from C
2024-07-12 15:55:22 +00:00
Luca Ferretti
4ae4f0cec8
Added ServerPortsBitmap ( #8437 )
...
* added feature sorting flows by protocol
* changed protocols comparison order
* initial commit for bitmap of server ports
* bitmap added to redis
* added debug string, bitmap not working
* Update ServerPortsBitmap.cpp
* updated bitmapserverports
* added restore function
2024-06-05 17:17:56 +02:00
Luca Ferretti
edef411ebc
added contacted_server_port alert ( #8408 )
...
* initial integretion of server port check
* update learning period and received packet time
* updated host initial time
* Update Flow.cpp
* fixed reported issues
* added server_ports_contacts alert
* minor changes
2024-05-28 12:52:36 +02:00
Luca Ferretti
87429d4314
FIrst integration of check on open server ports ( #8402 )
...
* initial integretion of server port check
* update learning period and received packet time
* updated host initial time
* Update Flow.cpp
* fixed reported issues
2024-05-27 11:16:54 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. ( #8264 ) ( #8348 )
...
* Add Flow Reset Alert and counter. (#8264 )
* Renaming to TCP Flow Reset. (#8264 )
* Renaming the value retrieved by the getName method. (#8264 )
2024-04-24 17:15:20 +02:00
Luca Deri
812f1efdab
Fix for #8347
2024-04-23 18:01:09 +02:00
Luca Deri
b288f884d5
Fingerprints are not optional and available only for local hosts
2024-02-21 22:10:00 +01:00