Commit graph

562 commits

Author SHA1 Message Date
Simone Mainardi
92b722e6f3 Uses ARP do determine hosts in the same bcast domain 2019-01-29 18:07:43 +01:00
Simone Mainardi
72631b802d Adds support for IpAddress in AddressTree 2019-01-22 13:18:06 +01:00
Emanuele Faranda
1bf7da7ef7 Implements Mac stats/data reset and reset at midnight (#2326)
* Host data/stats delete improvements

* Rework mac counters and implemtent mac stats/data reset

* Implement stats reset at midnight

* Add missing files
2019-01-21 17:27:12 +01:00
emanuele-f
9881358bf8 Cleanup db initialization code 2019-01-16 16:44:36 +01:00
Luca Deri
7191cafe2e Compilation fixes 2019-01-15 20:42:55 +01:00
emanuele-f
68c85d6df6 Compilation fix 2019-01-15 13:29:10 +01:00
emanuele-f
5a88ee91da Rework flow exporters API
Now ElasticSearch and LogStash are bind to a NetworkInterface instance

Closes #2312
2019-01-15 12:53:21 +01:00
Simone Mainardi
fee0fe29a6 Handles Top-X aggregated flows 2019-01-11 13:54:30 +01:00
emanuele-f
08a8c67966 Implement interface in/out stats read from proc 2019-01-10 12:35:07 +01:00
Luca Deri
bedff2c8e2 Updated (C) 2019-01-07 19:28:49 +01:00
Simone Mainardi
d69237c0cd Initial work to add support to custom fields via ZMQ 2018-12-31 18:11:18 +01:00
Simone Mainardi
55a05c2bb7 Limits the maximum number of nIndex interfaces 2018-12-21 17:41:03 +01:00
Luca
15efe2fd44 Added nIndex version 2018-12-19 19:38:59 +01:00
Alfredo Cardigliano
479970c384 Implemented flows purging on shutdown (enabled with --shutdown-when-done only for now, it can be controlled with prefs->flushFlowsOnShutdown()), fixes #2229 2018-12-15 17:43:35 +01:00
emanuele-f
af02c76c8b Implement scan detection alerts for remote hosts
Closes #2068
2018-12-14 12:28:23 +01:00
Simone Mainardi
3f275417a3 Fixes race conditions with custom categories reload 2018-11-19 17:03:58 +01:00
Simone Mainardi
cc87e8ffe3 Adds interface.hasEBPF lua function to show certain menu entries 2018-11-06 16:08:14 +01:00
Luca Deri
02c539db6e Added check to avoid time rollback on interfaces 2018-11-03 10:58:39 +01:00
Alfredo Cardigliano
3683d1dbf9 profiling support 2018-10-29 10:54:29 +01:00
Alfredo Cardigliano
610cb69b9c builtin packet dump code cleanup (moving to continuous recording) 2018-10-25 09:56:52 +02:00
Luca Deri
50db9cbd85 Process changes
Restored unused code on some platforms
2018-10-17 09:07:14 +02:00
Luca Deri
32fad1189f Process info extensions 2018-10-17 00:51:47 +02:00
Luca Deri
15ec19fe0d Improved process introspection 2018-10-16 19:17:03 +02:00
Luca Deri
4130484d1b Process info: work in progress 2018-10-16 09:06:31 +02:00
Luca Deri
757341a0bb Improved process info in flows 2018-10-15 22:13:33 +02:00
emanuele-f
99a0cf0dd6 Optimize foreachLocalRRDHost for timeseries extraction 2018-10-12 14:20:27 +02:00
Simone Mainardi
57e035ed2f Implements One-Way traffic filter for hosts
Implements #2091
2018-10-12 12:56:52 +02:00
emanuele-f
de4e996ffc Move NetworkInterfaceTsPoint to separate file 2018-10-12 10:31:28 +02:00
Luca Deri
e020281263 Initial changes for libebpfflow support 2018-10-12 09:01:46 +02:00
Simone Mainardi
f30e042cfc Implements data cleanup for pcap interfaces
Implements #2092
2018-10-11 18:10:30 +02:00
Alfredo Cardigliano
5168d5dee6 badge to show the recording status instead of toggling buttons, reworked interface list 2018-10-10 12:32:02 +02:00
Simone Mainardi
d319cabb80 Fixes wrong packets accounting over ZMQ 2018-10-08 18:42:35 +02:00
Luca Deri
65ab40c339 Added time to aggregated flow dump 2018-10-07 17:56:33 +02:00
Simone Mainardi
889729495e Implements support for collected custom applications 2018-10-01 00:22:49 +02:00
emanuele-f
03bf331c3e Add alert for slow stats update and reduce flow alert generation
This avoids SQLite database flooding during an ongoing attack which can block stats update
2018-09-27 19:31:38 +02:00
emanuele-f
a5483bd0cf Reload active hosts blacklist when lists change at runtime 2018-09-27 18:28:55 +02:00
Luca Deri
b3fec44897 Code cleanup 2018-09-26 08:42:47 +02:00
emanuele-f
cfc345709d Implement high resolution interface timeseries 2018-09-04 12:57:18 +02:00
Simone Mainardi
0e258ce831 Implements flag for interfaces with mirrored traffic
Implements #1917
2018-08-28 18:27:53 +02:00
Simone Mainardi
07d993cd76 Makes the number of aggregated flows configurable 2018-08-22 13:06:05 +02:00
Simone Mainardi
abed170e98 Simplified handling of allowed interfaces 2018-08-21 13:21:21 +02:00
Simone Mainardi
dfb2401789 Reverts allowed interfaces fixes to make room for simplified code 2018-08-20 22:51:51 +02:00
emanuele-f
354dd697c0 Add max value checks for traffic and packets metrics 2018-08-20 16:19:01 +02:00
Simone Mainardi
28b19afd8a Fixes security issues with interfaces selection
Fixes #1918
2018-08-20 13:37:32 +02:00
Simone Mainardi
bd4252d727 Live pcap download security fixes 2018-08-14 17:57:42 +02:00
Luca Deri
5f77b18c80 Added ability to set live pcap duration and optional BPF filter 2018-08-08 16:33:37 +02:00
Luca Deri
30e22c3a71 Implemented multiple-pcap file download and monitor 2018-08-08 14:06:25 +02:00
Alfredo Cardigliano
508f2ca8e5 live_traffic.lua now accepts start/stop/status, implemented NetworkInterface::stopLiveCapture and Lua API stopLiveCapture 2018-08-07 19:07:41 +02:00
Luca Deri
3e6f8541df Added support for listing live captures 2018-08-07 16:45:20 +02:00
Simone Mainardi
f7fdc40c72 Major nEdge code cleanup 2018-08-06 17:54:25 +02:00