Commit graph

1013 commits

Author SHA1 Message Date
Simone Mainardi
5c3c2ae30c Removes unnecessary locks when accessing the mac addresses hash 2019-07-05 11:31:15 +02:00
Simone Mainardi
6248f8d62e Removes unnecessary locks when accessing the countries hash 2019-07-05 11:13:57 +02:00
Simone Mainardi
35c3771986 Adds flag is_inline_call used to lock/unlock when accessing the ASes hash 2019-07-05 11:07:46 +02:00
Simone Mainardi
845342e43f Adds flag is_inline_call used to lock/unlock when accessing HostsHash 2019-07-05 10:55:57 +02:00
Simone Mainardi
bc1ecb758e Removes unnecessary locks when accessing the VlanHash 2019-07-05 10:49:28 +02:00
Simone Mainardi
a6e71bef42 Removes unnecessary locks when accessing the AutonomousSystemHash 2019-07-05 10:31:37 +02:00
Simone Mainardi
62a0a11c25 Removes unnecessary locks when accessing the HostsHash 2019-07-05 09:08:14 +02:00
Luca Deri
3ea1b7e5d8 Window fixes
Moved community hash to attic
2019-06-29 18:54:19 +02:00
emanuele-f
a9d3c78587 Alerts changes
NOTE: database schema changed. Existing alerts will be lost.

- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
Simone Mainardi
57f56d1fc3 Implements client/server flows sort 2019-06-27 15:16:10 +02:00
Simone Mainardi
2c02c312a8 Skips ARP Probes when calculating broadcast domains
Fixes #2678
2019-06-27 11:13:29 +02:00
Simone Mainardi
b4f7788dea Implements batched lua flows iterator 2019-06-25 12:52:38 +02:00
Luca Deri
699f8a71cc netBIOS decoding fix
visualizaion experiment
2019-06-25 10:29:20 +02:00
Simone Mainardi
5f9c61a049 Fixes missing nIndex flows received with nprobe agent
Fixes #2671
2019-06-21 12:55:56 +02:00
emanuele-f
dc2071ede2 Fix ethtool on system interface 2019-06-18 16:55:41 +02:00
emanuele-f
8c441a5bf6 System interface fix 2019-06-13 15:27:26 +02:00
Simone Mainardi
8a7487d868 Handles -1 interface id in NetworkInterface::lua 2019-06-12 10:26:28 +02:00
Simone Mainardi
934b774f25 Simplifies access of l4 payload 2019-06-05 16:39:21 +02:00
Simone Mainardi
1896a09c4a Fixes possible overruns when accessing l4 packet payload 2019-06-05 16:31:15 +02:00
Simone Mainardi
26d4cc2223 Renames rawsize to len_on_wire 2019-06-05 15:27:57 +02:00
Simone Mainardi
19b2f581d6 Fixes missing detection of the 'More Fragments' bit when counting fragments 2019-06-05 15:16:58 +02:00
Simone Mainardi
a0c3bfeea9 Fixes calculation of fragmented IP packets 2019-06-05 12:34:46 +02:00
Simone Mainardi
bf68184b95 Fixes overruns due to the use of len instead of caplen in ipsize 2019-06-05 12:31:45 +02:00
Simone Mainardi
190b7ed2cf Handles flow last seen with Netlink updates 2019-06-03 16:06:38 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
Simone Mainardi
aabb4c662d Updates flow timestamps on companion interfaces 2019-06-02 11:21:57 +02:00
Luca Deri
5d634c493d Warning fixes 2019-05-31 12:47:52 +02:00
emanuele-f
793dcab32c Use process name and username as key instead of pid and uid
Names are more reliable across multiple machines
2019-05-30 18:04:38 +02:00
emanuele-f
1c9a4d3461 Implement ICMP data exfiltration alerts
Closes #256
2019-05-28 10:37:59 +02:00
emanuele-f
8fcce457c9 Implement countries serialization
Countries now show the cumulative traffic since ntopng restart as this is consistent with the other views
2019-05-27 13:07:30 +02:00
Emanuele Faranda
c09199690f
Unify serialization to redis and implement VLAN/AS serialization (#2610) 2019-05-27 08:11:20 +00:00
emanuele-f
89f6544524 Implement interface L4 stats 2019-05-22 20:11:06 +02:00
Alfredo Cardigliano
86f3f19756 IP fragments per flow direction (implements #2359) 2019-05-21 12:43:55 +02:00
Simone Mainardi
df46dfecfa Reworks counters of tcp seqs 2019-05-21 12:06:27 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d Implements traffic profile filter in the active flows page (#2598) 2019-05-20 12:43:51 +02:00
Simone Mainardi
a0059eda4f Minor categories reload fix 2019-05-16 19:02:04 +02:00
Luca Deri
0378f1ac69 Code cleanup 2019-05-16 17:51:34 +02:00
Simone Mainardi
ace94bd786 Prevents eBPF events from being set for standard nProbe flows 2019-05-15 17:59:52 +02:00
Alfredo Cardigliano
9c35912c6b Possible memory leak fix 2019-05-14 16:55:22 +02:00
Simone Mainardi
d068e817d1 Implements multiple companions per ZMQ interface 2019-05-14 16:41:52 +02:00
emanuele-f
359d359d09 Add ICMP flow filter
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
a4ed782486 Add option to disable flow dump on a network interface
Closes #2576
2019-05-13 17:18:16 +02:00
Simone Mainardi
1ab525422c Uses class ParsedeBPF also in Flow 2019-05-13 17:16:45 +02:00
Simone Mainardi
0ea2f2dbf7 Fixes conditional jump or move depends on uninitialized value 2019-05-13 15:48:18 +02:00
Simone Mainardi
204ea6cf62 Cleanup unused code based on struct eBPFEvent 2019-05-13 14:47:47 +02:00
Simone Mainardi
7eedde24e3 Dispatches eBPF events using class ParsedFlow 2019-05-13 13:04:06 +02:00
Simone Mainardi
c95bdc7aa4 Implements class ParsedeBPF to handle eBPF events 2019-05-13 11:56:24 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
emanuele-f
89db79f915 Improve containers code 2019-05-10 12:20:09 +02:00