Simone Mainardi
5c3c2ae30c
Removes unnecessary locks when accessing the mac addresses hash
2019-07-05 11:31:15 +02:00
Simone Mainardi
6248f8d62e
Removes unnecessary locks when accessing the countries hash
2019-07-05 11:13:57 +02:00
Simone Mainardi
35c3771986
Adds flag is_inline_call used to lock/unlock when accessing the ASes hash
2019-07-05 11:07:46 +02:00
Simone Mainardi
845342e43f
Adds flag is_inline_call used to lock/unlock when accessing HostsHash
2019-07-05 10:55:57 +02:00
Simone Mainardi
bc1ecb758e
Removes unnecessary locks when accessing the VlanHash
2019-07-05 10:49:28 +02:00
Simone Mainardi
a6e71bef42
Removes unnecessary locks when accessing the AutonomousSystemHash
2019-07-05 10:31:37 +02:00
Simone Mainardi
62a0a11c25
Removes unnecessary locks when accessing the HostsHash
2019-07-05 09:08:14 +02:00
Luca Deri
3ea1b7e5d8
Window fixes
...
Moved community hash to attic
2019-06-29 18:54:19 +02:00
emanuele-f
a9d3c78587
Alerts changes
...
NOTE: database schema changed. Existing alerts will be lost.
- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
Simone Mainardi
57f56d1fc3
Implements client/server flows sort
2019-06-27 15:16:10 +02:00
Simone Mainardi
2c02c312a8
Skips ARP Probes when calculating broadcast domains
...
Fixes #2678
2019-06-27 11:13:29 +02:00
Simone Mainardi
b4f7788dea
Implements batched lua flows iterator
2019-06-25 12:52:38 +02:00
Luca Deri
699f8a71cc
netBIOS decoding fix
...
visualizaion experiment
2019-06-25 10:29:20 +02:00
Simone Mainardi
5f9c61a049
Fixes missing nIndex flows received with nprobe agent
...
Fixes #2671
2019-06-21 12:55:56 +02:00
emanuele-f
dc2071ede2
Fix ethtool on system interface
2019-06-18 16:55:41 +02:00
emanuele-f
8c441a5bf6
System interface fix
2019-06-13 15:27:26 +02:00
Simone Mainardi
8a7487d868
Handles -1 interface id in NetworkInterface::lua
2019-06-12 10:26:28 +02:00
Simone Mainardi
934b774f25
Simplifies access of l4 payload
2019-06-05 16:39:21 +02:00
Simone Mainardi
1896a09c4a
Fixes possible overruns when accessing l4 packet payload
2019-06-05 16:31:15 +02:00
Simone Mainardi
26d4cc2223
Renames rawsize to len_on_wire
2019-06-05 15:27:57 +02:00
Simone Mainardi
19b2f581d6
Fixes missing detection of the 'More Fragments' bit when counting fragments
2019-06-05 15:16:58 +02:00
Simone Mainardi
a0c3bfeea9
Fixes calculation of fragmented IP packets
2019-06-05 12:34:46 +02:00
Simone Mainardi
bf68184b95
Fixes overruns due to the use of len instead of caplen in ipsize
2019-06-05 12:31:45 +02:00
Simone Mainardi
190b7ed2cf
Handles flow last seen with Netlink updates
2019-06-03 16:06:38 +02:00
Emanuele Faranda
5f9e8b17df
Implement System interface
...
The system interface now holds system wide alerts and timeseries
2019-06-03 08:53:26 +00:00
Simone Mainardi
aabb4c662d
Updates flow timestamps on companion interfaces
2019-06-02 11:21:57 +02:00
Luca Deri
5d634c493d
Warning fixes
2019-05-31 12:47:52 +02:00
emanuele-f
793dcab32c
Use process name and username as key instead of pid and uid
...
Names are more reliable across multiple machines
2019-05-30 18:04:38 +02:00
emanuele-f
1c9a4d3461
Implement ICMP data exfiltration alerts
...
Closes #256
2019-05-28 10:37:59 +02:00
emanuele-f
8fcce457c9
Implement countries serialization
...
Countries now show the cumulative traffic since ntopng restart as this is consistent with the other views
2019-05-27 13:07:30 +02:00
Emanuele Faranda
c09199690f
Unify serialization to redis and implement VLAN/AS serialization ( #2610 )
2019-05-27 08:11:20 +00:00
emanuele-f
89f6544524
Implement interface L4 stats
2019-05-22 20:11:06 +02:00
Alfredo Cardigliano
86f3f19756
IP fragments per flow direction (implements #2359 )
2019-05-21 12:43:55 +02:00
Simone Mainardi
df46dfecfa
Reworks counters of tcp seqs
2019-05-21 12:06:27 +02:00
Alfredo Cardigliano
9cdb84a875
Implements filtering per flow status in the active flows page
2019-05-20 18:54:50 +02:00
Alfredo Cardigliano
0b5668be6d
Implements traffic profile filter in the active flows page ( #2598 )
2019-05-20 12:43:51 +02:00
Simone Mainardi
a0059eda4f
Minor categories reload fix
2019-05-16 19:02:04 +02:00
Luca Deri
0378f1ac69
Code cleanup
2019-05-16 17:51:34 +02:00
Simone Mainardi
ace94bd786
Prevents eBPF events from being set for standard nProbe flows
2019-05-15 17:59:52 +02:00
Alfredo Cardigliano
9c35912c6b
Possible memory leak fix
2019-05-14 16:55:22 +02:00
Simone Mainardi
d068e817d1
Implements multiple companions per ZMQ interface
2019-05-14 16:41:52 +02:00
emanuele-f
359d359d09
Add ICMP flow filter
...
Closes #2498
2019-05-14 16:40:16 +02:00
emanuele-f
a4ed782486
Add option to disable flow dump on a network interface
...
Closes #2576
2019-05-13 17:18:16 +02:00
Simone Mainardi
1ab525422c
Uses class ParsedeBPF also in Flow
2019-05-13 17:16:45 +02:00
Simone Mainardi
0ea2f2dbf7
Fixes conditional jump or move depends on uninitialized value
2019-05-13 15:48:18 +02:00
Simone Mainardi
204ea6cf62
Cleanup unused code based on struct eBPFEvent
2019-05-13 14:47:47 +02:00
Simone Mainardi
7eedde24e3
Dispatches eBPF events using class ParsedFlow
2019-05-13 13:04:06 +02:00
Simone Mainardi
c95bdc7aa4
Implements class ParsedeBPF to handle eBPF events
2019-05-13 11:56:24 +02:00
Simone Mainardi
ab92ee7926
Converts ZMQ PODs to classes
2019-05-10 19:32:34 +02:00
emanuele-f
89db79f915
Improve containers code
2019-05-10 12:20:09 +02:00