776 commits

Author	SHA1	Message	Date
emanuele-f	8e6cd5962a	Fix blacklisted host alerts not generated when reading from PCAP dump	2019-09-03 17:50:08 +02:00
Simone Mainardi	a5b5510290	Adds bytes and packets throughput to NetworkInterface	2019-09-03 17:16:47 +02:00
emanuele-f	2d02de6cc1	Implement initial flow score support	2019-08-30 17:16:11 +02:00
Alfredo Cardigliano	3f04f0c080	Updating pf_ring drop stats in the housekeeping task (avoid inline updates with the GUI)	2019-08-29 15:53:20 +02:00
Alfredo Cardigliano	f8af84df2d	SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928)	2019-08-27 17:53:34 +02:00
Alfredo Cardigliano	dc9978c68d	Moved companion interface to ParserInterface to be used by any *ParserInterface	2019-08-27 16:24:46 +02:00
emanuele-f	b3bdfcff32	Cleanup of the too-many-drops interface alert	2019-08-27 13:04:53 +02:00
Simone Mainardi	e46221e0bb	Implements packet distribution and tcp flags stats for view interfaces	2019-08-27 12:34:12 +02:00
emanuele-f	f43f4b7dd9	Add engaged alerts type exclusion filter ... Fixes #2780	2019-08-22 16:30:45 +02:00
emanuele-f	87ba28195b	Add support to engage/release on external alerts	2019-08-20 19:02:58 +02:00
emanuele-f	d1c5275302	Move suppressed alerts flag to C to reduce Redis load	2019-08-20 11:54:25 +02:00
Simone Mainardi	00ac9c2968	Compilation fix	2019-08-20 11:49:10 +02:00
Emanuele Faranda	c829c4c3c3	Unify os (#2755) ... * Unify OS information. Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS. * Fix network discovery OS * Show OS detail into the host details page	2019-08-08 12:09:51 +00:00
Luca Deri	fa33738762	Added incUses in get-ter method to avoid race conditions	2019-08-06 09:43:30 +02:00
emanuele-f	e4a67824c1	Migrate slow periodic activity to alerts queue	2019-07-29 18:38:02 +02:00
emanuele-f	62f754f7f9	Initial work towards unified alerts queue	2019-07-29 18:22:49 +02:00
Alfredo Cardigliano	7efc8dfcae	flowProcess profiling	2019-07-25 16:33:41 +00:00
Simone Mainardi	f035d5c894	Reworks shutdown operations to properly terminate pool loops and periodic activites	2019-07-25 11:58:13 +02:00
Simone Mainardi	4155bd69b5	Shows VLANs in view interfaces hosts page when tags are present	2019-07-24 13:33:24 +02:00
Simone Mainardi	969c51fbe4	Implements time-based aggregated flows dump	2019-07-23 12:28:04 +02:00
Simone Mainardi	5f95d0727b	Adds is_view flag to the NetworkInterface	2019-07-19 19:24:54 +02:00
emanuele-f	c9bf1e78cc	Implement alerts release on shutdown	2019-07-19 13:58:10 +02:00
emanuele-f	3383ac0913	Implement dropped alerts per-interface counter	2019-07-18 17:29:05 +02:00
Simone Mainardi	0fd3be6b79	Implements hosts purge mark algorithm	2019-07-18 15:19:36 +02:00
Simone Mainardi	be85b2ebc8	Implements algorithm to purge hosts only after checking their alerts	2019-07-18 13:34:45 +02:00
emanuele-f	585dba1d19	Implement alertable walker	2019-07-18 11:50:51 +02:00
Simone Mainardi	f289ab4ddc	Cleanups old ViewInterface unused functions	2019-07-17 20:01:55 +02:00
emanuele-f	991c4e2786	Implement engaged alerts pagination	2019-07-17 17:31:37 +02:00
Simone Mainardi	34f91bfd9f	Implements new algorithm to allow flows purging control from interface views	2019-07-17 16:15:56 +02:00
emanuele-f	2e537a0c94	Alert changes after review	2019-07-17 12:51:47 +02:00
emanuele-f	279c29aeb7	Run purge and periodic scripts with original speed PCAP dump	2019-07-17 12:19:17 +02:00
Simone Mainardi	c984d33034	Prevents HTs allocation in viewed interfaces	2019-07-17 12:16:46 +02:00
Simone Mainardi	1c78421a8b	Defers NetworkInterface HTs allocation to skip it in view interfaces	2019-07-17 11:54:57 +02:00
Simone Mainardi	7680627842	Cleanups view interfaces code	2019-07-17 11:08:46 +02:00
Simone Mainardi	c13dc628de	Moves view subinterfaces to class ViewInterface	2019-07-17 11:01:05 +02:00
Simone Mainardi	006ccc4a97	Allows ntopng to work without vlan instances and vlans HT	2019-07-16 23:31:20 +02:00
Simone Mainardi	03af92eb36	Allows ntopng to work without countries instances and countries HT	2019-07-16 23:26:58 +02:00
Simone Mainardi	535b4438e3	Allows ntopng to work without AS instances and ASes HT	2019-07-16 23:21:08 +02:00
emanuele-f	c117f20e19	Initial rework for in-memory alerts	2019-07-16 19:25:09 +02:00
Simone Mainardi	7eae30e914	Allows ntopng to work without Host instances and hosts HT	2019-07-16 19:02:36 +02:00
Luca Deri	d04d5da466	Implemented --original-speed for reproducing pcaps at original pace	2019-07-15 17:29:07 +02:00
Alfredo Cardigliano	c63831bfa3	Computing L4 protocol statistics for flows	2019-07-12 16:27:34 +02:00
emanuele-f	a2d1e6eda4	Fix interface alert counters and bugged release	2019-07-12 16:08:26 +02:00
Alfredo Cardigliano	92c50fd8f6	Fixed host anomalous_flows counters for active flows when processing a pcap file	2019-07-11 16:46:23 +02:00
Simone Mainardi	11fa6b5212	Implements network alerts	2019-07-10 12:43:17 +02:00
Simone Mainardi	fbc74bf423	Initial implementation of network alerts (wip)	2019-07-09 19:33:27 +02:00
Simone Mainardi	ad5113cee0	Removes unused checkpoint_compression_buffer	2019-07-09 16:25:08 +02:00
Simone Mainardi	24624c8ed0	Implements new minute-by-minute top talkers	2019-07-09 15:43:09 +02:00
emanuele-f	8fc588ca00	Remove checkpointable ... checkpointHostTalker and scanAlert must be fixed	2019-07-08 15:31:37 +02:00
Luca Deri	d77704fdd8	Interface alert handler (work in progress)	2019-07-07 23:13:14 +02:00