Simone Mainardi
9fd86de371
Reworks timeseries export into classes {InfluxDB,RRD}TimeseriesExporter
2020-02-29 18:25:33 +01:00
emanuele-f
297195abab
Add dropped/stored/queries system stats for alerts
2020-02-27 13:27:47 +01:00
emanuele-f
a6dab125d5
Improve dropped alerts information
...
- Add informative label
- Add dropped alerts timeseries and chart
- Generate a system alert whenever alerts are dropped on a network interface
- Add a periodic activity warning when some alerts are dropped on that activity
Closes #3025
2020-02-26 16:05:19 +01:00
Simone Mainardi
55cdb6c5ea
Reworks slow rrd calc for periodic activites
2020-02-25 13:30:10 +01:00
emanuele-f
a428bb665f
Add work completion indicator to ht_stats/stats/5min dump
2020-02-21 17:43:07 +01:00
Simone Mainardi
1cd375d756
Implements per-activity rrd writes duration
2020-02-19 15:34:29 +01:00
Simone Mainardi
0e64fd94d6
Implements deadlines for periodic and user scripts
2020-02-18 18:44:41 +01:00
Simone Mainardi
b54b3fec7e
Reworks flows dump to avoid delays in ht_stats_update
...
Fixes #3419
2020-02-14 16:13:59 +01:00
Simone Mainardi
f7d79e50f9
Implements anti stall when dumping flows (MySQL, nIndex, ES, ...)
...
Implements #3411
2020-02-13 11:36:48 +01:00
Simone Mainardi
768e8ac207
Fixes mem leak with aggregated flows
2020-02-06 15:49:19 +01:00
emanuele-f
00b4fe17a6
Implement multitenant alerts support for in-memory alerts
2020-02-06 15:18:50 +01:00
Simone Mainardi
05750cf3ef
Fixes and cleanup
2020-02-05 18:07:54 +01:00
Simone Mainardi
37975c1710
Fixes crashes with MySQL due to concurrency issues
...
Fixes #3381
2020-02-05 11:51:44 +01:00
Luca Deri
70dc07c3f1
ArpMatrix code moved to attic
2020-01-30 09:57:32 +01:00
emanuele-f
8d51dae0e5
Implement Misbehaving vs Alerted flows chart
2020-01-27 15:37:36 +01:00
Simone Mainardi
be167a6dcb
Adds per-interface option to only allocate flows
2020-01-21 10:50:30 +01:00
emanuele-f
23f7d90ee4
Move interface.computeHostsScore in the Score script
2020-01-17 10:44:38 +01:00
emanuele-f
c336cca0e7
Improve host score calculation
2020-01-15 18:42:48 +01:00
Simone Mainardi
cef4f6df81
Enforces non-privileged users allowed nets when browsing local nets
...
Fixes #3205
2020-01-10 13:16:17 +01:00
Luca Deri
57e6a93065
Improved scheduling algorithm to guarantee minimum service time when number of entries allow
...
Updated (C)
2020-01-06 23:36:36 +01:00
Simone Mainardi
417c4a3146
Reworks handling of TCP flags for both ZMQ and packet interfaces
...
This commit allows simplifies the code and also allows flags-based alerts
to be triggered for packet and non-packet interfaces
Fixes #3167
2020-01-02 19:21:44 +01:00
Simone Mainardi
591421d530
Handles TCP flags stats in ZMQ interfaces
2020-01-02 14:21:43 +01:00
Simone Mainardi
7a2def354a
Moves unused code to attic
2019-12-31 16:07:09 +01:00
Simone Mainardi
b44de6e18d
Implements discarded probing traffic counters and timeseries
2019-12-31 16:01:24 +01:00
Simone Mainardi
cc49cdc1af
Implements per-interface pref to discard probing traffic
2019-12-31 10:15:54 +01:00
Simone Mainardi
5831451b77
Unifies and cleans interface preferences code
2019-12-31 10:00:18 +01:00
Simone Mainardi
fb7f2d553e
Implements scanners detection using radix trees
2019-12-30 20:13:44 +01:00
Simone Mainardi
2abb8cfde5
Reworks flow scripts deadlines
2019-12-27 20:50:53 +01:00
Simone Mainardi
c873aee41b
Implement counter and chart for new flows per second
2019-12-27 12:29:55 +01:00
emanuele-f
8b7d711a36
Add option to disable flow user scripts invocation
2019-12-23 18:03:19 +01:00
emanuele-f
139a16ffe3
Fix protocol categories association lost after reboot
...
After the recent changes, there is only one global nDPI struct which
is share across all the interfaces. However, the struct can be swapped
during normal operating, so it's necessary to reload the associations
every time a new nDPI struct is allocated.
Fixes #3139
2019-12-19 15:11:21 +01:00
Simone Mainardi
141cbeb2bc
ICMP fixes and tables for both ICMP and ICMPv4
2019-12-18 10:17:31 +01:00
Simone Mainardi
ba13e49856
Updates vlans, pools, ases stats for view interfaces
2019-12-13 18:49:29 +01:00
Simone Mainardi
0ce4ebad97
Dropbox code cleanup
2019-12-13 10:43:08 +01:00
Simone Mainardi
993fcc2fc3
Fixes interfaces TCP timeseries
...
Fixes #3077
2019-11-25 15:53:30 +01:00
Simone Mainardi
ff09e5b61f
Allows flow lua scripts to be run on pcap dump interfaces
2019-11-21 12:53:25 +01:00
Simone Mainardi
a893e0a2c0
Implements IP addresses retrieval by Mac address
2019-11-20 18:44:01 +01:00
Simone Mainardi
62f7405716
Optimizes single mac lookups by avoiding full HT walks
2019-11-20 17:49:11 +01:00
emanuele-f
2df9b34201
Add flow user scripts drops alert
2019-11-19 17:37:58 +01:00
Simone Mainardi
d685de3ec1
Implements walkIdle fairness among hash table entries
2019-11-13 11:35:55 +01:00
Luca
5f72aa0c2e
nDPI cleanup
2019-11-08 11:38:03 +00:00
Luca
5268358ae0
Updated code for multiple ndpi instances
2019-11-07 07:40:45 +00:00
Luca
1fb32a0795
Unified nDPI struct across interfaces
2019-11-06 23:02:35 +00:00
Luca
0e523a4308
Changes to minimize the risk of categories reload
2019-11-06 09:17:53 +00:00
emanuele-f
54140b6f1a
Migrate alertable disabled alerts preference to lua
...
This avoids performing multiple hget on redis, thus increasing performance
2019-11-05 14:59:38 +01:00
emanuele-f
01953cf76f
Harden categories reload to avoid crashes if multiple housekeeping run concurrently
2019-11-04 12:01:27 +01:00
Luca Deri
d61470c653
Workaround for #3033 but a proper fix is necessary
2019-11-02 20:22:35 +01:00
Luca Deri
64e33a2018
Fixed script execution for pcap interfaces
2019-11-01 15:34:18 +01:00
Simone Mainardi
11d7f2aa12
Fixes for aggregated flows dump on view interfaces
2019-10-30 19:14:50 +01:00
Simone Mainardi
e8277e46ff
Reworks view interfaces implementation
2019-10-30 11:47:56 +01:00