Commit graph

436 commits

Author SHA1 Message Date
Simone Mainardi
57e035ed2f Implements One-Way traffic filter for hosts
Implements #2091
2018-10-12 12:56:52 +02:00
emanuele-f
de4e996ffc Move NetworkInterfaceTsPoint to separate file 2018-10-12 10:31:28 +02:00
Luca Deri
e020281263 Initial changes for libebpfflow support 2018-10-12 09:01:46 +02:00
Simone Mainardi
f30e042cfc Implements data cleanup for pcap interfaces
Implements #2092
2018-10-11 18:10:30 +02:00
Alfredo Cardigliano
5168d5dee6 badge to show the recording status instead of toggling buttons, reworked interface list 2018-10-10 12:32:02 +02:00
Simone Mainardi
d319cabb80 Fixes wrong packets accounting over ZMQ 2018-10-08 18:42:35 +02:00
Luca Deri
65ab40c339 Added time to aggregated flow dump 2018-10-07 17:56:33 +02:00
Simone Mainardi
889729495e Implements support for collected custom applications 2018-10-01 00:22:49 +02:00
emanuele-f
03bf331c3e Add alert for slow stats update and reduce flow alert generation
This avoids SQLite database flooding during an ongoing attack which can block stats update
2018-09-27 19:31:38 +02:00
emanuele-f
a5483bd0cf Reload active hosts blacklist when lists change at runtime 2018-09-27 18:28:55 +02:00
Luca Deri
b3fec44897 Code cleanup 2018-09-26 08:42:47 +02:00
emanuele-f
cfc345709d Implement high resolution interface timeseries 2018-09-04 12:57:18 +02:00
Simone Mainardi
0e258ce831 Implements flag for interfaces with mirrored traffic
Implements #1917
2018-08-28 18:27:53 +02:00
Simone Mainardi
07d993cd76 Makes the number of aggregated flows configurable 2018-08-22 13:06:05 +02:00
Simone Mainardi
abed170e98 Simplified handling of allowed interfaces 2018-08-21 13:21:21 +02:00
Simone Mainardi
dfb2401789 Reverts allowed interfaces fixes to make room for simplified code 2018-08-20 22:51:51 +02:00
emanuele-f
354dd697c0 Add max value checks for traffic and packets metrics 2018-08-20 16:19:01 +02:00
Simone Mainardi
28b19afd8a Fixes security issues with interfaces selection
Fixes #1918
2018-08-20 13:37:32 +02:00
Simone Mainardi
bd4252d727 Live pcap download security fixes 2018-08-14 17:57:42 +02:00
Luca Deri
5f77b18c80 Added ability to set live pcap duration and optional BPF filter 2018-08-08 16:33:37 +02:00
Luca Deri
30e22c3a71 Implemented multiple-pcap file download and monitor 2018-08-08 14:06:25 +02:00
Alfredo Cardigliano
508f2ca8e5 live_traffic.lua now accepts start/stop/status, implemented NetworkInterface::stopLiveCapture and Lua API stopLiveCapture 2018-08-07 19:07:41 +02:00
Luca Deri
3e6f8541df Added support for listing live captures 2018-08-07 16:45:20 +02:00
Simone Mainardi
f7fdc40c72 Major nEdge code cleanup 2018-08-06 17:54:25 +02:00
Luca Deri
ae9c68171c Minor optimization 2018-08-03 18:23:16 +02:00
emanuele-f
af1fc50ce6 Add preference to select the timeseries database to use 2018-07-30 12:53:55 +02:00
Luca
f16a39ef04 Reworked live packet capture for both hosts and interfaces 2018-07-24 11:57:31 +02:00
Simone Mainardi
4ce97fe86d Implements live pcap capture and download 2018-07-23 19:28:00 +02:00
Simone Mainardi
5e29e8697c Drafts API and calls for live captures 2018-07-23 11:49:51 +02:00
Luca Deri
ea115eb582 Fix for enabling broken SSL certificate mismatch alerts 2018-07-09 23:48:31 +02:00
emanuele-f
f62345e0cb Fix disk packet dump
Broken since commit 4ea4491c054097383499d589eebf8a7d5bffa4a
2018-06-20 16:00:36 +02:00
Luca Deri
0d6d3e4c58 Lua code cleanup
Added ability (in Makefile.in) to use the non-JIT Lua interpreter (usefult on some platforms)
2018-06-11 10:16:42 +02:00
Simone Mainardi
8cca1f6703 Implements informative captive portal (no login) 2018-06-06 10:33:36 +02:00
emanuele-f
2b15b65f37 Use a single file for timeseries export 2018-05-28 10:28:26 +02:00
emanuele-f
42083f1865 Rework influxdb exporter 2018-05-25 13:52:06 +02:00
emanuele-f
73353f9de4 Clean NetworkInterface incStats 2018-05-21 13:13:42 +02:00
emanuele-f
89d203883f Add support for custom categories lists
- Extend malware hosts from list
- Read web mining hosts from list and generate alerts
2018-05-10 17:12:53 +02:00
Luca Deri
52b7d7d0bd Fixed SNMp reentrancy problems that lead to crashes on OSX 2018-04-10 21:44:54 +02:00
Simone Mainardi
7b64b7fbfe Input/output SNMP interfaces disaggregation with ignored interfaces 2018-04-10 20:26:26 +02:00
Luca Deri
7806e3caee Fixed invalid termination with pcap interfaces with multiple -i devices
Disabled debug trace
2018-04-04 21:16:22 +02:00
emanuele-f
89cb18d29c Release all the engaged alerts when alerts are disabled 2018-03-30 15:57:46 +02:00
Luca Deri
b8a870b631 Experimental TS code 2018-03-24 11:37:04 +01:00
emanuele-f
02cec8a2be Remove host macs and show source macs instead 2018-03-23 14:42:21 +01:00
Luca Deri
f0c936c368 Updated (C) to 2018 2018-03-22 21:59:42 +01:00
Luca
71474c713f Initial fix for #1092 2018-03-19 19:40:37 +01:00
Luca Deri
378936fe9b Fixed bug in Lua parameter handling 2018-03-17 11:00:44 +01:00
emanuele-f
4767789b1a Implement country charts for inner, egress and ingress traffic 2018-03-15 18:35:51 +01:00
emanuele-f
60f3753e12 Fix network discovery on nedge 2018-03-08 17:28:02 +01:00
emanuele-f
b2082b7788 Generate alert when interface drops exceed a given threshold and fix alerts invalid cache 2018-03-07 15:13:23 +01:00
emanuele-f
d09454d0d1 Complete VLAN id MAC addresses removal 2018-03-06 15:40:09 +01:00