emanuele-f
94f175194b
Initial changes for MUD recording
2020-03-04 17:05:53 +01:00
Luca Deri
e55854aaff
Initial work on host bins
2020-01-27 11:55:00 +01:00
emanuele-f
566b9ece0b
Score changes
...
- Move score from status definition to user scripts
- Separate flow score counter from the peers score
- Create a new HostScore class to hold the score data
2020-01-16 18:11:14 +01:00
emanuele-f
01d5d83f21
Account host score also on volatile flows (e.g. scans)
...
Such flows may go idle too early and miss the minute.lua iteration
2020-01-16 14:08:49 +01:00
emanuele-f
c336cca0e7
Improve host score calculation
2020-01-15 18:42:48 +01:00
emanuele-f
6edecb12cb
Score visualization improvements
2020-01-15 15:27:45 +01:00
emanuele-f
d7528e1628
Score improvements
...
The score is now calculated differently on the client and on the server of the flow.
The hosts flow is updated every minute and charted.
It's now possible to trigger an alert when the score threshold is exceeded
2020-01-15 12:34:16 +01:00
Alfredo Cardigliano
55b1ca75a9
Replace anomalous with misbehaving to avoid inconsistencies ( fix #2866 )
2020-01-14 15:49:19 +01:00
emanuele-f
93a96eb214
Code cleanup
2020-01-13 15:20:38 +01:00
Simone Mainardi
3ef133cd35
Fixes hosts one/two way traffic
2020-01-09 16:41:22 +01:00
Simone Mainardi
76391ff6a5
Resores flow alerts for view interfaces
2020-01-08 18:18:00 +01:00
Luca Deri
57e6a93065
Improved scheduling algorithm to guarantee minimum service time when number of entries allow
...
Updated (C)
2020-01-06 23:36:36 +01:00
Simone Mainardi
417c4a3146
Reworks handling of TCP flags for both ZMQ and packet interfaces
...
This commit allows simplifies the code and also allows flags-based alerts
to be triggered for packet and non-packet interfaces
Fixes #3167
2020-01-02 19:21:44 +01:00
Simone Mainardi
8a169991cb
Minor method name change
2020-01-02 15:18:49 +01:00
emanuele-f
87c336a4aa
Reduce cpu usage due to the loading of flow.lua
...
The FlowAlertCheckLuaEngine is now cached into the (reused) vm, so it is reloaded
only when needed (e.g. a script on disk changes).
2019-12-31 18:27:14 +01:00
Simone Mainardi
2abb8cfde5
Reworks flow scripts deadlines
2019-12-27 20:50:53 +01:00
emanuele-f
8b7d711a36
Add option to disable flow user scripts invocation
2019-12-23 18:03:19 +01:00
Simone Mainardi
ba13e49856
Updates vlans, pools, ases stats for view interfaces
2019-12-13 18:49:29 +01:00
Simone Mainardi
0a7d677beb
Handles offline MDNS updates
2019-12-13 16:54:13 +01:00
Simone Mainardi
69453397a5
Handles offline MDNS updates
2019-12-13 16:47:18 +01:00
Simone Mainardi
a65b6efc7c
Implements icmp hosts stats for view interfaces
2019-12-13 13:06:26 +01:00
Simone Mainardi
0ce4ebad97
Dropbox code cleanup
2019-12-13 10:43:08 +01:00
Simone Mainardi
4a9ac03cb4
Implements dns hosts stats for view interfaces
2019-12-13 09:58:09 +01:00
Simone Mainardi
4bac6dfd85
DNS queries pie chart fix
2019-12-05 17:14:02 +01:00
Simone Mainardi
5b81a3ab9e
Implements low goodput calculation in lua
2019-11-21 16:37:33 +01:00
emanuele-f
54140b6f1a
Migrate alertable disabled alerts preference to lua
...
This avoids performing multiple hget on redis, thus increasing performance
2019-11-05 14:59:38 +01:00
emanuele-f
675adcf90e
Migrate hosts disabled flow status preference to lua
...
By loading all the preferences at once in flow.lua setup() the
redis load is reduced and design is simpler.
2019-11-04 16:50:26 +01:00
emanuele-f
e978a83151
Improve user scripts charts
...
Fixes #3020
2019-10-31 13:30:24 +01:00
Simone Mainardi
2d0b9e005a
Generalizes hosts/flows periodic stats update
2019-10-28 12:07:11 +01:00
Simone Mainardi
68246efd01
Decouples periodic hash table updates using a thread pool
2019-10-27 17:40:07 +01:00
Simone Mainardi
00f8c7d681
Handles slow flow scripts causing long delays and slow purges
2019-10-25 12:16:01 +02:00
Simone Mainardi
02464a9536
Additionsl inc/dec uses fixes
2019-10-24 17:28:57 +02:00
Alfredo Cardigliano
c29409673b
Added alerts for TCP SYN Scan Host and Network as victims (implements #2963 )
2019-10-24 16:59:33 +02:00
Simone Mainardi
249f804c4c
Handles inc/dec uses after new hash entries purging
2019-10-24 16:58:08 +02:00
Alfredo Cardigliano
afbb34e262
TCP SYN Scan detection (implements #2963 )
2019-10-24 15:35:26 +02:00
Simone Mainardi
e80dc962f4
Optimizes host.getFullInfo with smaller functions in periodic scripts
2019-10-21 16:21:03 +02:00
Luca
aa908c97cf
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
2019-10-11 11:41:29 +02:00
Luca
d1417519ec
Reworked bitmap handling
2019-10-11 11:41:20 +02:00
Simone Mainardi
48caf68f69
Fixes invalid state transitions
2019-10-11 11:15:38 +02:00
Simone Mainardi
b81592e49f
nEdge compilation fixes
2019-09-30 20:04:42 +02:00
Simone Mainardi
da1dbe4ab0
Reworks hash entries idling
2019-09-24 14:29:20 +02:00
Simone Mainardi
a44def039f
Fixes custom catecories not counted in nDPI stats
2019-09-13 10:20:08 +02:00
Simone Mainardi
968e21d984
Implements flow lua callbacks in the periodic activities thread
2019-09-12 15:36:41 +02:00
Simone Mainardi
0373feca8b
Fixes all IPv6 hosts marked as broadcast domain hosts
2019-09-11 17:44:26 +02:00
emanuele-f
4d62d68655
Add active alerted flows filter and count
...
Closes #2821
2019-09-10 17:52:22 +02:00
emanuele-f
c3fa094e99
Improve MUD prefs handling
...
Also implement a non-inline reloadPrefs Host method to avoid slowing down packet capture
2019-09-10 11:10:33 +02:00
emanuele-f
48d688d501
Add support for MAC MUD
2019-09-06 15:53:15 +02:00
Alfredo Cardigliano
38a53ec1fa
Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page.
2019-09-05 17:55:00 +02:00
emanuele-f
fbb66951b5
Add alert score on hosts
2019-09-03 13:36:27 +02:00
Simone Mainardi
3bfedf8f4c
Implements ThroughputStats and reworks GenericTrafficElement
2019-09-03 11:07:21 +02:00
