Commit graph

1156 commits

Author SHA1 Message Date
Luca Deri
983e6ebe50 Changes due to new nDPI behaviour with ndpi_extra_dissection_possible() 2019-10-24 22:18:15 +02:00
Alfredo Cardigliano
dc326eccdf Checking hash table before allocating entries (Flows, ASs, etc.) to avoid unneeded allocations/deallocations (fix #2997) 2019-10-24 19:33:20 +02:00
Simone Mainardi
955eed4b50 Reworks idling and purging of hash table entries to make it faster 2019-10-24 15:48:18 +02:00
Simone Mainardi
44a9d65f24 Compilation fix 2019-10-23 14:51:25 +02:00
Simone Mainardi
15e17a801a Implements per-state hash entry counters and writes them to ts 2019-10-23 13:09:02 +02:00
Alfredo Cardigliano
d05777df1e External alerts API update and cleanup 2019-10-22 15:08:06 +02:00
emanuele-f
b3374651ce Merge branch 'alerts_cleanup' into dev 2019-10-22 10:50:21 +02:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
e80dc962f4 Optimizes host.getFullInfo with smaller functions in periodic scripts 2019-10-21 16:21:03 +02:00
Simone Mainardi
35d605e79f Fixes crash when accessing stats upon startup 2019-10-18 17:53:00 +02:00
Simone Mainardi
343295a936 Prevents unnecessary sleeps in housekeeping tasks 2019-10-18 14:52:03 +02:00
Luca Deri
9d071c44c9 Minor code cleanup 2019-10-17 11:56:55 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
Alfredo Cardigliano
16c3b3a4af Custom disaggregation available in EE 2019-10-16 05:02:53 +02:00
Alfredo Cardigliano
87ac1b0bb6 New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface 2019-10-16 04:50:47 +02:00
Simone Mainardi
8b9dd98b55 Fixes packets and flows processing during shutdown 2019-10-15 18:12:28 +02:00
Simone Mainardi
5568fae8e6 Prevents periodic alerts lua calls to be performed during shutdown 2019-10-15 17:35:22 +02:00
Alfredo Cardigliano
3290bd803b Propagating additional fields to companion interface 2019-10-15 16:41:42 +02:00
Simone Mainardi
3950c3ddc8 Support for 5-min timeseries resolution in InfluxDB 2019-10-15 15:06:20 +02:00
Luca Deri
a969ba9813 Fixed invalid TCP transition when nDPi detected the protocol befoe 3WH 2019-10-11 21:54:14 +02:00
Simone Mainardi
453efa749f Fixes shutdown procedures with new hash entry states 2019-10-11 15:16:42 +02:00
Simone Mainardi
b4d81c7013 Fixes non-TCP non-UDP flow state transitions 2019-10-11 12:35:22 +02:00
Luca
d1417519ec Reworked bitmap handling 2019-10-11 11:41:20 +02:00
Alfredo Cardigliano
8ea4bc6397 Intentation fix 2019-10-11 09:33:00 +02:00
Luca
263fe3927b Refactoring fixes 2019-10-11 07:36:06 +02:00
Alfredo Cardigliano
a2e74e16a3 New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup 2019-10-10 12:49:32 +02:00
Luca Deri
9910180137 Fix for nDPI API call signature change 2019-10-09 22:18:13 +02:00
Alfredo Cardigliano
7e9678de37 IDS alert -> External alert 2019-10-09 11:35:51 +02:00
emanuele-f
b3809344f9 Custom categories memory is now managed by nDPI 2019-10-08 10:25:12 +02:00
Simone Mainardi
79ec20d6df Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
2019-10-08 00:23:35 +02:00
emanuele-f
ede9a7940a Generalize periodic and flows callbacks
Now periodic callbacks are properly called even when alerts are disabled
The granularity filter and check_function has been replaced with a more generic hooks list
2019-10-07 19:05:43 +02:00
Alfredo Cardigliano
256fec9283 Importing http metadata from Suricata 2019-10-05 12:15:16 +02:00
emanuele-f
fc308260be Fix Flow protos.dns.last_query_type and protos.dns.last_return_code 2019-10-03 16:23:01 +02:00
emanuele-f
c41e2462df Fix missing first letter in netbios name 2019-10-02 12:25:27 +02:00
Luca Deri
e373a90f9f Removed ndpi_pref_enable_category_substring_match no longer present in nDPI 2019-09-29 21:48:54 +02:00
emanuele-f
62f136cc08 Fix detection give up in nEdge
This prevented most flows from being offloaded
2019-09-27 17:35:27 +02:00
emanuele-f
903fcf9c98 Rename callback in processFullyDissectedProtocol 2019-09-27 14:55:50 +02:00
emanuele-f
bdfe6ea22e Fix crash with DHCP packets 2019-09-27 14:32:38 +02:00
emanuele-f
66547c46e9 Enable DNS dissection everywhere 2019-09-27 14:07:26 +02:00
emanuele-f
60024588c9 Use ndpi_extra_dissection_possible 2019-09-27 14:07:26 +02:00
emanuele-f
793c4bc4c5 Add extra detection function 2019-09-27 14:07:26 +02:00
Alfredo Cardigliano
0c2ffc1f94 Dynamic and custom sub-interfaces are now sharing the same data structure (registering through API to the master interface), bug fixes 2019-09-26 15:50:31 +02:00
emanuele-f
6ca08e91fc Fix DNS replies not dissected by nEdge 2019-09-26 13:28:10 +02:00
Luca Deri
7c92070a95 Compilation fix for community edition 2019-09-25 21:41:19 +02:00
Luca Deri
3654ff4d45 nEdge compilation fix 2019-09-25 21:27:15 +02:00
Alfredo Cardigliano
afa29bfd0d Flows purging fix 2019-09-25 15:09:41 +02:00
Simone Mainardi
d9aada6781 Uses hash table sizes to compute lua max num returned entries 2019-09-25 12:53:10 +02:00
Simone Mainardi
d7b0bbba80 Prevents unnecessary copies when loading IP categories 2019-09-25 12:41:37 +02:00
Alfredo Cardigliano
aacbf945db Allow configuration of custom sub-interfaces only when there is no dynamic disaggregation mode configured 2019-09-25 12:33:14 +02:00
Alfredo Cardigliano
ff36d16968 Moved Disaggregation Criterion setting to the interface (per interface now) 2019-09-25 12:19:22 +02:00