Luca Deri
|
d0d759c7ec
|
Improved port stats handling
|
2019-07-23 11:31:22 +02:00 |
|
Simone Mainardi
|
9b6714823a
|
Implements hash entries lifecycle as a finite states machine
Fixes certain sporadic race conditions
|
2019-07-22 15:18:39 +02:00 |
|
Luca Deri
|
1f10876a0b
|
Work in progress towards flow alert generation preference handling in hosts
|
2019-07-19 16:40:21 +02:00 |
|
Simone Mainardi
|
6e8d0caca7
|
Implements host flows counters in View interfaces
|
2019-07-19 09:37:33 +02:00 |
|
Simone Mainardi
|
5fcc4986bc
|
Implements interface view hosts updates
|
2019-07-17 18:31:25 +02:00 |
|
Simone Mainardi
|
6b6c0843be
|
Groups base flow stats in a structure to allow easy snapshotting
|
2019-07-17 17:42:20 +02:00 |
|
Simone Mainardi
|
34f91bfd9f
|
Implements new algorithm to allow flows purging control from interface views
|
2019-07-17 16:15:56 +02:00 |
|
Simone Mainardi
|
d8f5a9c712
|
Reduces flows memory utilization
|
2019-07-16 23:03:20 +02:00 |
|
Simone Mainardi
|
7eae30e914
|
Allows ntopng to work without Host instances and hosts HT
|
2019-07-16 19:02:36 +02:00 |
|
Alfredo Cardigliano
|
c63831bfa3
|
Computing L4 protocol statistics for flows
|
2019-07-12 16:27:34 +02:00 |
|
Luca Deri
|
3ea1b7e5d8
|
Window fixes
Moved community hash to attic
|
2019-06-29 18:54:19 +02:00 |
|
Simone Mainardi
|
57f56d1fc3
|
Implements client/server flows sort
|
2019-06-27 15:16:10 +02:00 |
|
emanuele-f
|
f9f341b2ca
|
Add preference to enable l7 total flow timeseries
|
2019-06-27 10:01:12 +02:00 |
|
Simone Mainardi
|
f4cdf18d79
|
Fixes race conditions when iterating flows from Lua
|
2019-06-25 15:27:55 +02:00 |
|
Simone Mainardi
|
75af00d080
|
Fixes false positive obsolete SSL alarms
Fixes #2670
|
2019-06-21 16:46:21 +02:00 |
|
Simone Mainardi
|
78b2456931
|
Implements whitelist for long-lived flows
Fixes #2666
|
2019-06-21 16:00:54 +02:00 |
|
emanuele-f
|
793dcab32c
|
Use process name and username as key instead of pid and uid
Names are more reliable across multiple machines
|
2019-05-30 18:04:38 +02:00 |
|
Luca Deri
|
e03b7f0f5f
|
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
|
2019-05-29 00:17:39 +02:00 |
|
Luca Deri
|
93ed8c009a
|
Added SSL protocol handling
|
2019-05-29 00:12:26 +02:00 |
|
emanuele-f
|
1c9a4d3461
|
Implement ICMP data exfiltration alerts
Closes #256
|
2019-05-28 10:37:59 +02:00 |
|
Luca Deri
|
15046a4157
|
Improved SSL cipher display
|
2019-05-23 00:21:51 +02:00 |
|
Alfredo Cardigliano
|
86f3f19756
|
IP fragments per flow direction (implements #2359)
|
2019-05-21 12:43:55 +02:00 |
|
Simone Mainardi
|
df46dfecfa
|
Reworks counters of tcp seqs
|
2019-05-21 12:06:27 +02:00 |
|
Luca Deri
|
1228ddc2ca
|
Added unsafe SSL ciphers detection
|
2019-05-20 23:19:53 +02:00 |
|
Alfredo Cardigliano
|
9cdb84a875
|
Implements filtering per flow status in the active flows page
|
2019-05-20 18:54:50 +02:00 |
|
Luca Deri
|
7ec6b9f42c
|
Improve JA3 support
|
2019-05-14 15:55:45 +02:00 |
|
Simone Mainardi
|
1ab525422c
|
Uses class ParsedeBPF also in Flow
|
2019-05-13 17:16:45 +02:00 |
|
Simone Mainardi
|
204ea6cf62
|
Cleanup unused code based on struct eBPFEvent
|
2019-05-13 14:47:47 +02:00 |
|
Simone Mainardi
|
c95bdc7aa4
|
Implements class ParsedeBPF to handle eBPF events
|
2019-05-13 11:56:24 +02:00 |
|
Luca Deri
|
7144478591
|
Added JA3 support in flows
|
2019-05-12 14:15:19 +02:00 |
|
Simone Mainardi
|
b03c57dccf
|
Uses eBPF events to determine if the proc is cli or srv
|
2019-05-05 16:20:03 +02:00 |
|
emanuele-f
|
939ca8c166
|
Implement eBPF flows view and improve containers/pods pages
|
2019-04-26 15:34:53 +02:00 |
|
emanuele-f
|
6fb921d68a
|
Implement Pods and Containers page
|
2019-04-24 18:46:07 +02:00 |
|
Simone Mainardi
|
bf3b1e45c4
|
Adds TcpInfo to class Flow with nProbe mini eBPF data
|
2019-04-24 18:13:09 +02:00 |
|
Simone Mainardi
|
e1e1dc5a52
|
Makes processLua static
|
2019-04-24 12:13:27 +02:00 |
|
Simone Mainardi
|
2d4488eb24
|
Pushes container info into lua tables for visualization
|
2019-04-24 12:11:28 +02:00 |
|
Simone Mainardi
|
47438af92f
|
Sets Flow process and container data from nProbe mini eBPF
|
2019-04-24 10:44:51 +02:00 |
|
Simone Mainardi
|
a600b0d2aa
|
Adds ContainerInfo to class Flow
|
2019-04-24 10:00:18 +02:00 |
|
Luca Deri
|
dcbd42ae1f
|
Fixed suricata README
Tiny flow change to avoid false positives when the application protocol is not NULL
|
2019-04-10 11:46:27 +02:00 |
|
Alfredo Cardigliano
|
7ce1150a69
|
IDS flow alerts notification
|
2019-04-04 16:03:48 +02:00 |
|
Alfredo Cardigliano
|
3c3d581b93
|
Parsing Suricata alerts, minor improvements
|
2019-04-03 17:04:32 +02:00 |
|
Simone Mainardi
|
b58f67a5de
|
Protocol detection fixes
|
2019-04-02 12:29:32 +02:00 |
|
Simone Mainardi
|
2872ccb54b
|
Adds traces to debug false positives in blacklisted flows
|
2019-04-01 16:56:55 +02:00 |
|
Simone Mainardi
|
f5c269da5a
|
Prevents protocols from being returned when dpi is not completed
|
2019-03-29 12:48:10 +01:00 |
|
Simone Mainardi
|
e6b85f56fe
|
Check SSL alt names to avoid false SSL certificate mismatchs
|
2019-03-27 15:22:45 +01:00 |
|
Luca Deri
|
fa3b2940c5
|
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
|
2019-03-25 23:54:22 +01:00 |
|
Luca Deri
|
afda95c8d6
|
Added SSL certificate dissection
|
2019-03-25 23:54:02 +01:00 |
|
Simone Mainardi
|
3fcb15cda2
|
Handles TCP flags via nProbe
|
2019-03-25 20:31:13 +01:00 |
|
Luca Deri
|
64911a37e8
|
Merge branch 'dev' of https://github.com/ntop/ntopng into dev
|
2019-03-25 18:54:59 +01:00 |
|
Luca Deri
|
e230c3a451
|
SSL cleanup
|
2019-03-25 18:54:45 +01:00 |
|