Simone Mainardi
6fb469aa61
Minor cleanup
2019-10-29 17:53:17 +01:00
Simone Mainardi
1eba832869
Fixes flow aggregation after hash tables rework
...
Fixes #3018
2019-10-29 17:49:52 +01:00
emanuele-f
378a1e2cd8
Optimize nDPI categories reload to avoid packet drops
2019-10-29 12:07:27 +01:00
Simone Mainardi
cce73c2f44
Implements lua interpreters telemetry
2019-10-28 23:47:03 +01:00
Simone Mainardi
dc748b1b6d
Implements stats for periodic scripts duration
2019-10-28 17:10:03 +01:00
Simone Mainardi
68246efd01
Decouples periodic hash table updates using a thread pool
2019-10-27 17:40:07 +01:00
Simone Mainardi
ca657b2592
Removes unnecessary numFlows counter
2019-10-27 12:43:10 +01:00
Simone Mainardi
955eed4b50
Reworks idling and purging of hash table entries to make it faster
2019-10-24 15:48:18 +02:00
Simone Mainardi
15e17a801a
Implements per-state hash entry counters and writes them to ts
2019-10-23 13:09:02 +02:00
Simone Mainardi
6fd7386c03
Fixes possible collisions when looking up flows by key
2019-10-16 19:04:10 +02:00
Alfredo Cardigliano
87ac1b0bb6
New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface
2019-10-16 04:50:47 +02:00
Simone Mainardi
8b9dd98b55
Fixes packets and flows processing during shutdown
2019-10-15 18:12:28 +02:00
Simone Mainardi
453efa749f
Fixes shutdown procedures with new hash entry states
2019-10-11 15:16:42 +02:00
Alfredo Cardigliano
a2e74e16a3
New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup
2019-10-10 12:49:32 +02:00
Alfredo Cardigliano
c5e3d61205
Support for l7 proto name match in sub interfaces
2019-10-08 17:14:10 +02:00
emanuele-f
b3809344f9
Custom categories memory is now managed by nDPI
2019-10-08 10:25:12 +02:00
Simone Mainardi
79ec20d6df
Re-uses getFlows filters for the getActiveFlowsStats
...
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
d41198c4e5
Allows flow lua method idle to be called for pcap-dump interfaces
2019-10-01 12:52:12 +02:00
Alfredo Cardigliano
0c2ffc1f94
Dynamic and custom sub-interfaces are now sharing the same data structure (registering through API to the master interface), bug fixes
2019-09-26 15:50:31 +02:00
Alfredo Cardigliano
ff36d16968
Moved Disaggregation Criterion setting to the interface (per interface now)
2019-09-25 12:19:22 +02:00
Alfredo Cardigliano
1b45f800f9
Sub-interfaces backend improvements for the GUI
2019-09-24 20:50:58 +02:00
Simone Mainardi
d4068bb48a
Adds alerted flows debug traces
2019-09-24 16:52:43 +02:00
Simone Mainardi
da1dbe4ab0
Reworks hash entries idling
2019-09-24 14:29:20 +02:00
Simone Mainardi
7f150ef407
Implements alerted flows counters and shows them in the footer
...
Implements #2863
2019-09-19 15:15:32 +02:00
Alfredo Cardigliano
d672d93750
Sub interfaces support (wip) ( #2825 )
2019-09-17 10:34:52 +02:00
Simone Mainardi
77c1f85cd3
Implements interface and collection stats reset for ZMQ interfaces
2019-09-13 12:12:54 +02:00
Simone Mainardi
c1603f7d59
Fixes custom categories not counted in interface stats
2019-09-13 10:51:27 +02:00
Simone Mainardi
a44def039f
Fixes custom catecories not counted in nDPI stats
2019-09-13 10:20:08 +02:00
Simone Mainardi
968e21d984
Implements flow lua callbacks in the periodic activities thread
2019-09-12 15:36:41 +02:00
Simone Mainardi
949d2a1025
Calculates flow idle timeouts using nProbe data for ZMQ interfaces
2019-09-10 18:05:16 +02:00
Simone Mainardi
9fe404772d
Handles flow alerts and alert queues in view interfaces
...
Implements #2828
2019-09-10 15:48:39 +02:00
emanuele-f
e9aa6b1703
Add flow.lua duration trace
2019-09-06 11:15:12 +02:00
Simone Mainardi
5d380c39d0
Exposes interface stats update freq to lua
2019-09-05 10:27:25 +02:00
Simone Mainardi
ca56f94cef
Implements per-interface updateStats variable frequency
2019-09-04 19:27:55 +02:00
emanuele-f
5c3a063fae
Fix startup with sticky hosts
...
interface.restoreHost was improperly removed in ef4f98a5a5
2019-09-04 14:10:24 +02:00
Simone Mainardi
9924225473
Implements nDPIStats throughput calc for NetworkInterface
2019-09-04 10:21:21 +02:00
emanuele-f
8e6cd5962a
Fix blacklisted host alerts not generated when reading from PCAP dump
2019-09-03 17:50:08 +02:00
Simone Mainardi
a5b5510290
Adds bytes and packets throughput to NetworkInterface
2019-09-03 17:16:47 +02:00
emanuele-f
2d02de6cc1
Implement initial flow score support
2019-08-30 17:16:11 +02:00
Alfredo Cardigliano
3f04f0c080
Updating pf_ring drop stats in the housekeeping task (avoid inline updates with the GUI)
2019-08-29 15:53:20 +02:00
Alfredo Cardigliano
f8af84df2d
SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface ( #1928 )
2019-08-27 17:53:34 +02:00
Alfredo Cardigliano
dc9978c68d
Moved companion interface to ParserInterface to be used by any *ParserInterface
2019-08-27 16:24:46 +02:00
emanuele-f
b3bdfcff32
Cleanup of the too-many-drops interface alert
2019-08-27 13:04:53 +02:00
Simone Mainardi
e46221e0bb
Implements packet distribution and tcp flags stats for view interfaces
2019-08-27 12:34:12 +02:00
emanuele-f
f43f4b7dd9
Add engaged alerts type exclusion filter
...
Fixes #2780
2019-08-22 16:30:45 +02:00
emanuele-f
87ba28195b
Add support to engage/release on external alerts
2019-08-20 19:02:58 +02:00
emanuele-f
d1c5275302
Move suppressed alerts flag to C to reduce Redis load
2019-08-20 11:54:25 +02:00
Simone Mainardi
00ac9c2968
Compilation fix
2019-08-20 11:49:10 +02:00
Emanuele Faranda
c829c4c3c3
Unify os ( #2755 )
...
* Unify OS information.
Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.
* Fix network discovery OS
* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
Luca Deri
fa33738762
Added incUses in get-ter method to avoid race conditions
2019-08-06 09:43:30 +02:00
