vrr/ntopng
2
0
Fork 0
mirror of https://github.com/ntop/ntopng.git synced 2026-05-05 19:15:03 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 4
6794 commits 26 branches 19 tags 448 MiB
Commit graph

436 commits

Author SHA1 Message Date
Luca Deri
d04d5da466 Implemented --original-speed for reproducing pcaps at original pace 2019-07-15 17:29:07 +02:00
Alfredo Cardigliano
c63831bfa3 Computing L4 protocol statistics for flows 2019-07-12 16:27:34 +02:00
emanuele-f
a2d1e6eda4 Fix interface alert counters and bugged release 2019-07-12 16:08:26 +02:00
Alfredo Cardigliano
92c50fd8f6 Fixed host anomalous_flows counters for active flows when processing a pcap file 2019-07-11 16:46:23 +02:00
Simone Mainardi
11fa6b5212 Implements network alerts 2019-07-10 12:43:17 +02:00
Simone Mainardi
fbc74bf423 Initial implementation of network alerts (wip) 2019-07-09 19:33:27 +02:00
Simone Mainardi
ad5113cee0 Removes unused checkpoint_compression_buffer 2019-07-09 16:25:08 +02:00
Simone Mainardi
24624c8ed0 Implements new minute-by-minute top talkers 2019-07-09 15:43:09 +02:00
emanuele-f
8fc588ca00 Remove checkpointable 
checkpointHostTalker and scanAlert must be fixed
 2019-07-08 15:31:37 +02:00
Luca Deri
d77704fdd8 Interface alert handler (work in progress) 2019-07-07 23:13:14 +02:00
Luca
76ef993dfe Reworked alerts 2019-07-07 15:09:24 +02:00
Simone Mainardi
94f894454c Removes useless disablePurge and enablePurge 2019-07-05 16:08:51 +02:00
Simone Mainardi
ef4f98a5a5 Implements lock-free hash table additions 2019-07-05 16:00:43 +02:00
Simone Mainardi
54eb6bfe1f Adds flag is_inline_call to the getHost method 2019-07-05 11:44:41 +02:00
Simone Mainardi
5c3c2ae30c Removes unnecessary locks when accessing the mac addresses hash 2019-07-05 11:31:15 +02:00
Simone Mainardi
6248f8d62e Removes unnecessary locks when accessing the countries hash 2019-07-05 11:13:57 +02:00
Simone Mainardi
35c3771986 Adds flag is_inline_call used to lock/unlock when accessing the ASes hash 2019-07-05 11:07:46 +02:00
Simone Mainardi
bc1ecb758e Removes unnecessary locks when accessing the VlanHash 2019-07-05 10:49:28 +02:00
Simone Mainardi
a6e71bef42 Removes unnecessary locks when accessing the AutonomousSystemHash 2019-07-05 10:31:37 +02:00
Simone Mainardi
62a0a11c25 Removes unnecessary locks when accessing the HostsHash 2019-07-05 09:08:14 +02:00
emanuele-f
a9d3c78587 Alerts changes 
NOTE: database schema changed. Existing alerts will be lost.

- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
 2019-06-28 10:47:17 +02:00
emanuele-f
c506ef6aeb Implement L7 num flows charts 2019-06-27 10:00:14 +02:00
Simone Mainardi
b4f7788dea Implements batched lua flows iterator 2019-06-25 12:52:38 +02:00
Simone Mainardi
26d4cc2223 Renames rawsize to len_on_wire 2019-06-05 15:27:57 +02:00
Simone Mainardi
19b2f581d6 Fixes missing detection of the 'More Fragments' bit when counting fragments 2019-06-05 15:16:58 +02:00
Simone Mainardi
bf68184b95 Fixes overruns due to the use of len instead of caplen in ipsize 2019-06-05 12:31:45 +02:00
emanuele-f
8fcce457c9 Implement countries serialization 
Countries now show the cumulative traffic since ntopng restart as this is consistent with the other views
 2019-05-27 13:07:30 +02:00
emanuele-f
89f6544524 Implement interface L4 stats 2019-05-22 20:11:06 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Luca Deri
0378f1ac69 Code cleanup 2019-05-16 17:51:34 +02:00
Simone Mainardi
d068e817d1 Implements multiple companions per ZMQ interface 2019-05-14 16:41:52 +02:00
emanuele-f
a4ed782486 Add option to disable flow dump on a network interface 
Closes #2576
 2019-05-13 17:18:16 +02:00
Simone Mainardi
204ea6cf62 Cleanup unused code based on struct eBPFEvent 2019-05-13 14:47:47 +02:00
Simone Mainardi
7eedde24e3 Dispatches eBPF events using class ParsedFlow 2019-05-13 13:04:06 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
79d31ebf93 Update README.eBPF.md with dispatching to interfaces using event IF_NAME 2019-05-06 11:52:34 +02:00
Simone Mainardi
5be58eccab Enqueues only non-loopback eBPF flows to companion 2019-05-05 20:04:44 +02:00
Simone Mainardi
9658a621ad Delivers eBPF flows to the companion interface 2019-05-05 14:44:24 +02:00
Simone Mainardi
ba0273a3ff Adds companion interface to NetworkInterface 2019-05-03 11:08:50 +02:00
Simone Mainardi
0846ead22c Adds TcpInfo to class Flow with nProbe mini eBPF data 2019-04-24 19:26:02 +02:00
emanuele-f
6fb921d68a Implement Pods and Containers page 2019-04-24 18:46:07 +02:00
Simone Mainardi
2309e6df5e Initial work to parse nProbe mini eBPF fields via ZMQ 2019-04-23 20:18:01 +02:00
Luca Deri
c520daac33 Cleaned up syslog collector code 
Fixed syslog-collected flow time
 2019-04-15 21:48:23 +02:00
emanuele-f
e04c956116 Add check for NULL dhcp_ranges 2019-04-14 15:49:30 +02:00
emanuele-f
fa4330bbfd Implement alert for IP addresses assigned outside the configured DHCP ranges 2019-04-11 17:01:39 +02:00
emanuele-f
14a9d83a30 Move local broadcast domain preference to the interface settings and show warnings 
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
 2019-04-11 12:52:15 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface 
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
 2019-04-02 18:32:52 +02:00
Luca Deri
b9f513548e Reworked ARP stats 2019-04-02 17:47:07 +02:00
Simone Mainardi
5e5ad77cec Implements broadcast domain too large alerts 2019-04-01 14:20:57 +02:00
Simone Mainardi
091e89d5a3 Implements hosts walker by address CIDR 2019-03-21 15:25:00 +01:00