Commit graph

493 commits

Author SHA1 Message Date
Matteo Biscosi
af37780125 Fixes top talkers calculation (#9222)
Fixes timeseries colors
2025-06-12 11:22:41 +02:00
Alfredo Cardigliano
e48966dd38 Add Host::serializeAttributes to be used both by HostAlert::getSerializedAlert and Lua 2025-05-26 17:40:49 +02:00
Luca Deri
794c6c0634 Implemented service propagation with view interfaces 2025-05-01 09:32:10 +02:00
Luca Deri
ac8766d63e Implemented detection of SSH/RDP/HTTP(S) services 2025-04-28 16:30:36 +02:00
Luca Deri
d861b002bd Improved host mac address learning 2025-04-12 11:49:53 +02:00
Luca Deri
5e1bb08eaf Added ability to know when a host has a meaningful IP (IPv4 hosts only) 2025-04-12 10:46:01 +02:00
Luca Deri
fa57ea29db Crash fixes
Implemented device_type rework
2025-04-01 16:23:50 +02:00
Luca Deri
c21b972d03 Reworked protocol services detection 2025-03-31 22:23:06 +02:00
Luca Deri
80b71567b8 Cleaned-up OS type and aligned to nDPI 2025-03-31 13:07:48 +02:00
Luca Deri
7d8b599a8c DHCP fingerprint is now reported on flows
Fixed OS inconsistencies
2025-03-27 21:43:48 +01:00
Luca Deri
f98adfa896 Implemented host OS change detection 2025-03-25 11:48:37 +01:00
Luca Deri
c08b31774d Implemented nDPI OS hint support 2025-03-24 23:39:16 +01:00
Luca Deri
346e67fe27 Assets improvements 2025-03-20 21:50:00 +01:00
Luca Deri
704bb92b5b Asset rework 2025-03-18 18:01:44 +01:00
Luca Deri
dc4394fd2e Added DHCP fingerprint support 2025-03-17 23:36:40 +01:00
Matteo Biscosi
c6c47f727e Added QoE timeseries and stats into various entities (#8984) 2025-02-26 18:13:11 +01:00
Luca Deri
6b7cc71391 Reworked RTT 2025-01-29 12:56:50 +01:00
Matteo Biscosi
1e18b7b693 Added Assets to hosts dump (#6794) 2025-01-14 10:43:12 +01:00
Alfredo Cardigliano
9352d0cdcd Update copyright 2025-01-02 09:09:56 +01:00
Luca Deri
49506f3afa OS detection improvements 2024-11-26 18:06:43 +01:00
Luca Deri
dd66f3965c Various AM improvememnts 2024-11-26 13:07:17 +01:00
Luca Deri
6b4afa074a Removed OS stats 2024-11-26 10:23:04 +01:00
Luca Deri
53db794497 fingerprint cleanup 2024-11-25 18:01:27 +01:00
Luca Deri
83e5477066 Cleaned up OS code 2024-11-25 14:35:53 +01:00
Luca Deri
6294343086 Reworked OS and hot fingerprint 2024-11-24 23:08:38 +01:00
YellowMan
d940cfb49c
Moved asset management tracking only to LocalHost (#8803) 2024-11-15 09:45:12 +01:00
Luca Deri
afff51311d Asset management fixes 2024-11-05 18:32:15 +01:00
Alfredo Cardigliano
89f59cde5a Migrate local networks type from 16 to 32 bit 2024-10-29 15:31:37 +01:00
Alfredo Cardigliano
9d4b54e326 Add Host::print 2024-10-23 16:24:29 +02:00
Luca
1117e71d18 Removed SYN flood check that was partially overlapping with SYN scan 2024-10-22 15:46:50 +02:00
Luca Deri
e019e9adf8 Added TCP fingerprint support 2024-10-20 23:09:21 +02:00
Luca Deri
2cb14a89b1 Fixes inconsistent flow counter update 2024-10-15 17:55:58 +02:00
Matteo Biscosi
e1d53695a4 Fixes minor issues when compiling 2024-10-15 11:56:22 +02:00
Matteo Biscosi
bd772a501d Removed incorrect function 2024-10-15 11:43:02 +02:00
Matteo Biscosi
17ca341011 Minor fixes to syn flood alert 2024-10-15 11:04:38 +02:00
Luca Deri
de239b25fb Reworked TCP flags handling 2024-10-14 21:49:08 +02:00
YellowMan
96de1fbea2
Invalid SYNFlood Error Fix (#8747)
* Invalid SYNFlood Error Fix

* Invalid SYNFlood Error Fix - Solve decrement  number of flows error
2024-10-13 11:01:52 +02:00
Luca Deri
3f3b267ce1 Implemented support for nDPI address cache 2024-10-08 17:06:31 +02:00
Matteo Biscosi
952e136080 Moved unexpected gateway check from flows to hosts 2024-10-07 16:58:31 +02:00
Matteo Biscosi
e4632b3848 Introduced gateway into ipaddress 2024-10-04 17:49:22 +02:00
Alfredo Cardigliano
112bf29b9e Make code more clear 2024-08-09 18:00:13 +02:00
Alfredo Cardigliano
548c9aeec5 Remove obsolete JA3 support 2024-08-09 09:08:32 +02:00
Alfredo Cardigliano
c262a4a38e Cleanup local/unicast checks 2024-08-08 16:29:09 +02:00
Alfredo Cardigliano
3a08b62e05 Return host_pool_match (ip or mac) from C 2024-07-12 15:55:22 +00:00
Luca Ferretti
4ae4f0cec8
Added ServerPortsBitmap (#8437)
* added feature sorting flows by protocol

* changed protocols comparison order

* initial commit for bitmap of server ports

* bitmap added to redis

* added debug string, bitmap not working

* Update ServerPortsBitmap.cpp

* updated bitmapserverports

* added restore function
2024-06-05 17:17:56 +02:00
Luca Ferretti
edef411ebc
added contacted_server_port alert (#8408)
* initial integretion of server port check

* update learning period and received packet time

* updated host initial time

* Update Flow.cpp

* fixed reported issues

* added server_ports_contacts alert

* minor changes
2024-05-28 12:52:36 +02:00
Luca Ferretti
87429d4314
FIrst integration of check on open server ports (#8402)
* initial integretion of server port check

* update learning period and received packet time

* updated host initial time

* Update Flow.cpp

* fixed reported issues
2024-05-27 11:16:54 +02:00
Nicolò Maio
636ba2975c
Add Flow Reset Alert and counter. (#8264) (#8348)
* Add Flow Reset Alert and counter. (#8264)

* Renaming to TCP Flow Reset. (#8264)

* Renaming the value retrieved by the getName method. (#8264)
2024-04-24 17:15:20 +02:00
Luca Deri
812f1efdab Fix for #8347 2024-04-23 18:01:09 +02:00
Luca Deri
b288f884d5 Fingerprints are not optional and available only for local hosts 2024-02-21 22:10:00 +01:00