Simone Mainardi
|
92b722e6f3
|
Uses ARP do determine hosts in the same bcast domain
|
2019-01-29 18:07:43 +01:00 |
|
Simone Mainardi
|
72631b802d
|
Adds support for IpAddress in AddressTree
|
2019-01-22 13:18:06 +01:00 |
|
Emanuele Faranda
|
1bf7da7ef7
|
Implements Mac stats/data reset and reset at midnight (#2326)
* Host data/stats delete improvements
* Rework mac counters and implemtent mac stats/data reset
* Implement stats reset at midnight
* Add missing files
|
2019-01-21 17:27:12 +01:00 |
|
emanuele-f
|
9881358bf8
|
Cleanup db initialization code
|
2019-01-16 16:44:36 +01:00 |
|
Luca Deri
|
7191cafe2e
|
Compilation fixes
|
2019-01-15 20:42:55 +01:00 |
|
emanuele-f
|
68c85d6df6
|
Compilation fix
|
2019-01-15 13:29:10 +01:00 |
|
emanuele-f
|
5a88ee91da
|
Rework flow exporters API
Now ElasticSearch and LogStash are bind to a NetworkInterface instance
Closes #2312
|
2019-01-15 12:53:21 +01:00 |
|
Simone Mainardi
|
fee0fe29a6
|
Handles Top-X aggregated flows
|
2019-01-11 13:54:30 +01:00 |
|
emanuele-f
|
08a8c67966
|
Implement interface in/out stats read from proc
|
2019-01-10 12:35:07 +01:00 |
|
Luca Deri
|
bedff2c8e2
|
Updated (C)
|
2019-01-07 19:28:49 +01:00 |
|
Simone Mainardi
|
d69237c0cd
|
Initial work to add support to custom fields via ZMQ
|
2018-12-31 18:11:18 +01:00 |
|
Simone Mainardi
|
55a05c2bb7
|
Limits the maximum number of nIndex interfaces
|
2018-12-21 17:41:03 +01:00 |
|
Luca
|
15efe2fd44
|
Added nIndex version
|
2018-12-19 19:38:59 +01:00 |
|
Alfredo Cardigliano
|
479970c384
|
Implemented flows purging on shutdown (enabled with --shutdown-when-done only for now, it can be controlled with prefs->flushFlowsOnShutdown()), fixes #2229
|
2018-12-15 17:43:35 +01:00 |
|
emanuele-f
|
af02c76c8b
|
Implement scan detection alerts for remote hosts
Closes #2068
|
2018-12-14 12:28:23 +01:00 |
|
Simone Mainardi
|
3f275417a3
|
Fixes race conditions with custom categories reload
|
2018-11-19 17:03:58 +01:00 |
|
Simone Mainardi
|
cc87e8ffe3
|
Adds interface.hasEBPF lua function to show certain menu entries
|
2018-11-06 16:08:14 +01:00 |
|
Luca Deri
|
02c539db6e
|
Added check to avoid time rollback on interfaces
|
2018-11-03 10:58:39 +01:00 |
|
Alfredo Cardigliano
|
3683d1dbf9
|
profiling support
|
2018-10-29 10:54:29 +01:00 |
|
Alfredo Cardigliano
|
610cb69b9c
|
builtin packet dump code cleanup (moving to continuous recording)
|
2018-10-25 09:56:52 +02:00 |
|
Luca Deri
|
50db9cbd85
|
Process changes
Restored unused code on some platforms
|
2018-10-17 09:07:14 +02:00 |
|
Luca Deri
|
32fad1189f
|
Process info extensions
|
2018-10-17 00:51:47 +02:00 |
|
Luca Deri
|
15ec19fe0d
|
Improved process introspection
|
2018-10-16 19:17:03 +02:00 |
|
Luca Deri
|
4130484d1b
|
Process info: work in progress
|
2018-10-16 09:06:31 +02:00 |
|
Luca Deri
|
757341a0bb
|
Improved process info in flows
|
2018-10-15 22:13:33 +02:00 |
|
emanuele-f
|
99a0cf0dd6
|
Optimize foreachLocalRRDHost for timeseries extraction
|
2018-10-12 14:20:27 +02:00 |
|
Simone Mainardi
|
57e035ed2f
|
Implements One-Way traffic filter for hosts
Implements #2091
|
2018-10-12 12:56:52 +02:00 |
|
emanuele-f
|
de4e996ffc
|
Move NetworkInterfaceTsPoint to separate file
|
2018-10-12 10:31:28 +02:00 |
|
Luca Deri
|
e020281263
|
Initial changes for libebpfflow support
|
2018-10-12 09:01:46 +02:00 |
|
Simone Mainardi
|
f30e042cfc
|
Implements data cleanup for pcap interfaces
Implements #2092
|
2018-10-11 18:10:30 +02:00 |
|
Alfredo Cardigliano
|
5168d5dee6
|
badge to show the recording status instead of toggling buttons, reworked interface list
|
2018-10-10 12:32:02 +02:00 |
|
Simone Mainardi
|
d319cabb80
|
Fixes wrong packets accounting over ZMQ
|
2018-10-08 18:42:35 +02:00 |
|
Luca Deri
|
65ab40c339
|
Added time to aggregated flow dump
|
2018-10-07 17:56:33 +02:00 |
|
Simone Mainardi
|
889729495e
|
Implements support for collected custom applications
|
2018-10-01 00:22:49 +02:00 |
|
emanuele-f
|
03bf331c3e
|
Add alert for slow stats update and reduce flow alert generation
This avoids SQLite database flooding during an ongoing attack which can block stats update
|
2018-09-27 19:31:38 +02:00 |
|
emanuele-f
|
a5483bd0cf
|
Reload active hosts blacklist when lists change at runtime
|
2018-09-27 18:28:55 +02:00 |
|
Luca Deri
|
b3fec44897
|
Code cleanup
|
2018-09-26 08:42:47 +02:00 |
|
emanuele-f
|
cfc345709d
|
Implement high resolution interface timeseries
|
2018-09-04 12:57:18 +02:00 |
|
Simone Mainardi
|
0e258ce831
|
Implements flag for interfaces with mirrored traffic
Implements #1917
|
2018-08-28 18:27:53 +02:00 |
|
Simone Mainardi
|
07d993cd76
|
Makes the number of aggregated flows configurable
|
2018-08-22 13:06:05 +02:00 |
|
Simone Mainardi
|
abed170e98
|
Simplified handling of allowed interfaces
|
2018-08-21 13:21:21 +02:00 |
|
Simone Mainardi
|
dfb2401789
|
Reverts allowed interfaces fixes to make room for simplified code
|
2018-08-20 22:51:51 +02:00 |
|
emanuele-f
|
354dd697c0
|
Add max value checks for traffic and packets metrics
|
2018-08-20 16:19:01 +02:00 |
|
Simone Mainardi
|
28b19afd8a
|
Fixes security issues with interfaces selection
Fixes #1918
|
2018-08-20 13:37:32 +02:00 |
|
Simone Mainardi
|
bd4252d727
|
Live pcap download security fixes
|
2018-08-14 17:57:42 +02:00 |
|
Luca Deri
|
5f77b18c80
|
Added ability to set live pcap duration and optional BPF filter
|
2018-08-08 16:33:37 +02:00 |
|
Luca Deri
|
30e22c3a71
|
Implemented multiple-pcap file download and monitor
|
2018-08-08 14:06:25 +02:00 |
|
Alfredo Cardigliano
|
508f2ca8e5
|
live_traffic.lua now accepts start/stop/status, implemented NetworkInterface::stopLiveCapture and Lua API stopLiveCapture
|
2018-08-07 19:07:41 +02:00 |
|
Luca Deri
|
3e6f8541df
|
Added support for listing live captures
|
2018-08-07 16:45:20 +02:00 |
|
Simone Mainardi
|
f7fdc40c72
|
Major nEdge code cleanup
|
2018-08-06 17:54:25 +02:00 |
|