Luca Deri
983e6ebe50
Changes due to new nDPI behaviour with ndpi_extra_dissection_possible()
2019-10-24 22:18:15 +02:00
Alfredo Cardigliano
dc326eccdf
Checking hash table before allocating entries (Flows, ASs, etc.) to avoid unneeded allocations/deallocations ( fix #2997 )
2019-10-24 19:33:20 +02:00
Simone Mainardi
955eed4b50
Reworks idling and purging of hash table entries to make it faster
2019-10-24 15:48:18 +02:00
Simone Mainardi
44a9d65f24
Compilation fix
2019-10-23 14:51:25 +02:00
Simone Mainardi
15e17a801a
Implements per-state hash entry counters and writes them to ts
2019-10-23 13:09:02 +02:00
Alfredo Cardigliano
d05777df1e
External alerts API update and cleanup
2019-10-22 15:08:06 +02:00
emanuele-f
b3374651ce
Merge branch 'alerts_cleanup' into dev
2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a
Migrate C flow status alerts to Lua user scripts
...
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
e80dc962f4
Optimizes host.getFullInfo with smaller functions in periodic scripts
2019-10-21 16:21:03 +02:00
Simone Mainardi
35d605e79f
Fixes crash when accessing stats upon startup
2019-10-18 17:53:00 +02:00
Simone Mainardi
343295a936
Prevents unnecessary sleeps in housekeeping tasks
2019-10-18 14:52:03 +02:00
Luca Deri
9d071c44c9
Minor code cleanup
2019-10-17 11:56:55 +02:00
Simone Mainardi
6fd7386c03
Fixes possible collisions when looking up flows by key
2019-10-16 19:04:10 +02:00
Alfredo Cardigliano
16c3b3a4af
Custom disaggregation available in EE
2019-10-16 05:02:53 +02:00
Alfredo Cardigliano
87ac1b0bb6
New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface
2019-10-16 04:50:47 +02:00
Simone Mainardi
8b9dd98b55
Fixes packets and flows processing during shutdown
2019-10-15 18:12:28 +02:00
Simone Mainardi
5568fae8e6
Prevents periodic alerts lua calls to be performed during shutdown
2019-10-15 17:35:22 +02:00
Alfredo Cardigliano
3290bd803b
Propagating additional fields to companion interface
2019-10-15 16:41:42 +02:00
Simone Mainardi
3950c3ddc8
Support for 5-min timeseries resolution in InfluxDB
2019-10-15 15:06:20 +02:00
Luca Deri
a969ba9813
Fixed invalid TCP transition when nDPi detected the protocol befoe 3WH
2019-10-11 21:54:14 +02:00
Simone Mainardi
453efa749f
Fixes shutdown procedures with new hash entry states
2019-10-11 15:16:42 +02:00
Simone Mainardi
b4d81c7013
Fixes non-TCP non-UDP flow state transitions
2019-10-11 12:35:22 +02:00
Luca
d1417519ec
Reworked bitmap handling
2019-10-11 11:41:20 +02:00
Alfredo Cardigliano
8ea4bc6397
Intentation fix
2019-10-11 09:33:00 +02:00
Luca
263fe3927b
Refactoring fixes
2019-10-11 07:36:06 +02:00
Alfredo Cardigliano
a2e74e16a3
New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup
2019-10-10 12:49:32 +02:00
Luca Deri
9910180137
Fix for nDPI API call signature change
2019-10-09 22:18:13 +02:00
Alfredo Cardigliano
7e9678de37
IDS alert -> External alert
2019-10-09 11:35:51 +02:00
emanuele-f
b3809344f9
Custom categories memory is now managed by nDPI
2019-10-08 10:25:12 +02:00
Simone Mainardi
79ec20d6df
Re-uses getFlows filters for the getActiveFlowsStats
...
Fixes #2891
2019-10-08 00:23:35 +02:00
emanuele-f
ede9a7940a
Generalize periodic and flows callbacks
...
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
Alfredo Cardigliano
256fec9283
Importing http metadata from Suricata
2019-10-05 12:15:16 +02:00
emanuele-f
fc308260be
Fix Flow protos.dns.last_query_type and protos.dns.last_return_code
2019-10-03 16:23:01 +02:00
emanuele-f
c41e2462df
Fix missing first letter in netbios name
2019-10-02 12:25:27 +02:00
Luca Deri
e373a90f9f
Removed ndpi_pref_enable_category_substring_match no longer present in nDPI
2019-09-29 21:48:54 +02:00
emanuele-f
62f136cc08
Fix detection give up in nEdge
...
This prevented most flows from being offloaded
2019-09-27 17:35:27 +02:00
emanuele-f
903fcf9c98
Rename callback in processFullyDissectedProtocol
2019-09-27 14:55:50 +02:00
emanuele-f
bdfe6ea22e
Fix crash with DHCP packets
2019-09-27 14:32:38 +02:00
emanuele-f
66547c46e9
Enable DNS dissection everywhere
2019-09-27 14:07:26 +02:00
emanuele-f
60024588c9
Use ndpi_extra_dissection_possible
2019-09-27 14:07:26 +02:00
emanuele-f
793c4bc4c5
Add extra detection function
2019-09-27 14:07:26 +02:00
Alfredo Cardigliano
0c2ffc1f94
Dynamic and custom sub-interfaces are now sharing the same data structure (registering through API to the master interface), bug fixes
2019-09-26 15:50:31 +02:00
emanuele-f
6ca08e91fc
Fix DNS replies not dissected by nEdge
2019-09-26 13:28:10 +02:00
Luca Deri
7c92070a95
Compilation fix for community edition
2019-09-25 21:41:19 +02:00
Luca Deri
3654ff4d45
nEdge compilation fix
2019-09-25 21:27:15 +02:00
Alfredo Cardigliano
afa29bfd0d
Flows purging fix
2019-09-25 15:09:41 +02:00
Simone Mainardi
d9aada6781
Uses hash table sizes to compute lua max num returned entries
2019-09-25 12:53:10 +02:00
Simone Mainardi
d7b0bbba80
Prevents unnecessary copies when loading IP categories
2019-09-25 12:41:37 +02:00
Alfredo Cardigliano
aacbf945db
Allow configuration of custom sub-interfaces only when there is no dynamic disaggregation mode configured
2019-09-25 12:33:14 +02:00
Alfredo Cardigliano
ff36d16968
Moved Disaggregation Criterion setting to the interface (per interface now)
2019-09-25 12:19:22 +02:00