Commit graph

920 commits

Author SHA1 Message Date
Simone Mainardi
35c3771986 Adds flag is_inline_call used to lock/unlock when accessing the ASes hash 2019-07-05 11:07:46 +02:00
Simone Mainardi
bc1ecb758e Removes unnecessary locks when accessing the VlanHash 2019-07-05 10:49:28 +02:00
Simone Mainardi
a6e71bef42 Removes unnecessary locks when accessing the AutonomousSystemHash 2019-07-05 10:31:37 +02:00
Simone Mainardi
62a0a11c25 Removes unnecessary locks when accessing the HostsHash 2019-07-05 09:08:14 +02:00
emanuele-f
a9d3c78587 Alerts changes
NOTE: database schema changed. Existing alerts will be lost.

- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
emanuele-f
c506ef6aeb Implement L7 num flows charts 2019-06-27 10:00:14 +02:00
Simone Mainardi
b4f7788dea Implements batched lua flows iterator 2019-06-25 12:52:38 +02:00
Simone Mainardi
26d4cc2223 Renames rawsize to len_on_wire 2019-06-05 15:27:57 +02:00
Simone Mainardi
19b2f581d6 Fixes missing detection of the 'More Fragments' bit when counting fragments 2019-06-05 15:16:58 +02:00
Simone Mainardi
bf68184b95 Fixes overruns due to the use of len instead of caplen in ipsize 2019-06-05 12:31:45 +02:00
emanuele-f
8fcce457c9 Implement countries serialization
Countries now show the cumulative traffic since ntopng restart as this is consistent with the other views
2019-05-27 13:07:30 +02:00
emanuele-f
89f6544524 Implement interface L4 stats 2019-05-22 20:11:06 +02:00
Alfredo Cardigliano
9cdb84a875 Implements filtering per flow status in the active flows page 2019-05-20 18:54:50 +02:00
Luca Deri
0378f1ac69 Code cleanup 2019-05-16 17:51:34 +02:00
Simone Mainardi
d068e817d1 Implements multiple companions per ZMQ interface 2019-05-14 16:41:52 +02:00
emanuele-f
a4ed782486 Add option to disable flow dump on a network interface
Closes #2576
2019-05-13 17:18:16 +02:00
Simone Mainardi
204ea6cf62 Cleanup unused code based on struct eBPFEvent 2019-05-13 14:47:47 +02:00
Simone Mainardi
7eedde24e3 Dispatches eBPF events using class ParsedFlow 2019-05-13 13:04:06 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
79d31ebf93 Update README.eBPF.md with dispatching to interfaces using event IF_NAME 2019-05-06 11:52:34 +02:00
Simone Mainardi
5be58eccab Enqueues only non-loopback eBPF flows to companion 2019-05-05 20:04:44 +02:00
Simone Mainardi
9658a621ad Delivers eBPF flows to the companion interface 2019-05-05 14:44:24 +02:00
Simone Mainardi
ba0273a3ff Adds companion interface to NetworkInterface 2019-05-03 11:08:50 +02:00
Simone Mainardi
0846ead22c Adds TcpInfo to class Flow with nProbe mini eBPF data 2019-04-24 19:26:02 +02:00
emanuele-f
6fb921d68a Implement Pods and Containers page 2019-04-24 18:46:07 +02:00
Simone Mainardi
2309e6df5e Initial work to parse nProbe mini eBPF fields via ZMQ 2019-04-23 20:18:01 +02:00
Luca Deri
c520daac33 Cleaned up syslog collector code
Fixed syslog-collected flow time
2019-04-15 21:48:23 +02:00
emanuele-f
e04c956116 Add check for NULL dhcp_ranges 2019-04-14 15:49:30 +02:00
emanuele-f
fa4330bbfd Implement alert for IP addresses assigned outside the configured DHCP ranges 2019-04-11 17:01:39 +02:00
emanuele-f
14a9d83a30 Move local broadcast domain preference to the interface settings and show warnings
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
Luca Deri
b9f513548e Reworked ARP stats 2019-04-02 17:47:07 +02:00
Simone Mainardi
5e5ad77cec Implements broadcast domain too large alerts 2019-04-01 14:20:57 +02:00
Simone Mainardi
091e89d5a3 Implements hosts walker by address CIDR 2019-03-21 15:25:00 +01:00
Simone Mainardi
0023f7e247 Implements and shows ghost broadcast domains 2019-03-15 14:09:36 +01:00
Simone Mainardi
436d1d6656 Implements reload of broadcast domains 2019-03-14 16:33:51 +01:00
Simone Mainardi
2cdca987fc Handles broadcast domains concurrency 2019-03-13 17:55:50 +01:00
Luca Deri
ea4619dd2f Reworked local broadcast domain implementation 2019-03-12 16:54:29 +01:00
Simone Mainardi
4b3ae0e652 Makes the ARP matrix generation optional using a pref 2019-03-12 14:53:06 +01:00
Luca
d52153d449 Added ability to handle IPv4-only AddressTree
Enabled broadcast domain handler logic
2019-03-11 21:02:21 +01:00
Simone Mainardi
28582ff8d9 Handles broadcast domains with patricia trees 2019-03-11 14:04:48 +01:00
Luca
76f9c8067f Initial work towards local broadcast domain calculation automation 2019-03-11 09:52:47 +01:00
Simone Mainardi
8f017118c4 Minor Arp matrix fixes 2019-03-08 14:22:08 +01:00
Simone Mainardi
9e86e6b613 Reduces memory usage of arp matrix 2019-03-08 13:19:46 +01:00
Simone Mainardi
0a903c97ce Finishes rework of ArpStatsHashMatrix 2019-03-07 14:20:41 +01:00
Francesco
58a72c8e88 ARP Stats Structures 2019-03-05 20:26:07 +01:00
Simone Mainardi
4f4548713e Fixes protocol detection for flows with a few packets 2019-03-05 12:21:00 +01:00
emanuele-f
c2c10ed491 Implement dhcp hosts filter 2019-02-27 16:20:55 +01:00
emanuele-f
e37eb1cbd5 Add IPv6 DHCP ranges support 2019-02-27 15:10:00 +01:00
Simone Mainardi
2fd5a75b6a Implements interface.findFlowByTuple to fix issues with ICMP
Fixes #2415
2019-02-27 11:39:02 +01:00