Simone Mainardi
35c3771986
Adds flag is_inline_call used to lock/unlock when accessing the ASes hash
2019-07-05 11:07:46 +02:00
Simone Mainardi
bc1ecb758e
Removes unnecessary locks when accessing the VlanHash
2019-07-05 10:49:28 +02:00
Simone Mainardi
a6e71bef42
Removes unnecessary locks when accessing the AutonomousSystemHash
2019-07-05 10:31:37 +02:00
Simone Mainardi
62a0a11c25
Removes unnecessary locks when accessing the HostsHash
2019-07-05 09:08:14 +02:00
emanuele-f
a9d3c78587
Alerts changes
...
NOTE: database schema changed. Existing alerts will be lost.
- Unified engaged and closed tables
- Simplified hosts engaged alert counters handling: periodically set by lua
- Removed alert engine and replaced with alert periodicity
- Now engage is implicitly derived from the alert end timestamp and periodicity
- New alerts_api.lua to easily emit alerts
- Removed past alerts counter aggregation by hash
- Alert notifications for non-flow alerts are now removed from C and triggered by lua
2019-06-28 10:47:17 +02:00
emanuele-f
c506ef6aeb
Implement L7 num flows charts
2019-06-27 10:00:14 +02:00
Simone Mainardi
b4f7788dea
Implements batched lua flows iterator
2019-06-25 12:52:38 +02:00
Simone Mainardi
26d4cc2223
Renames rawsize to len_on_wire
2019-06-05 15:27:57 +02:00
Simone Mainardi
19b2f581d6
Fixes missing detection of the 'More Fragments' bit when counting fragments
2019-06-05 15:16:58 +02:00
Simone Mainardi
bf68184b95
Fixes overruns due to the use of len instead of caplen in ipsize
2019-06-05 12:31:45 +02:00
emanuele-f
8fcce457c9
Implement countries serialization
...
Countries now show the cumulative traffic since ntopng restart as this is consistent with the other views
2019-05-27 13:07:30 +02:00
emanuele-f
89f6544524
Implement interface L4 stats
2019-05-22 20:11:06 +02:00
Alfredo Cardigliano
9cdb84a875
Implements filtering per flow status in the active flows page
2019-05-20 18:54:50 +02:00
Luca Deri
0378f1ac69
Code cleanup
2019-05-16 17:51:34 +02:00
Simone Mainardi
d068e817d1
Implements multiple companions per ZMQ interface
2019-05-14 16:41:52 +02:00
emanuele-f
a4ed782486
Add option to disable flow dump on a network interface
...
Closes #2576
2019-05-13 17:18:16 +02:00
Simone Mainardi
204ea6cf62
Cleanup unused code based on struct eBPFEvent
2019-05-13 14:47:47 +02:00
Simone Mainardi
7eedde24e3
Dispatches eBPF events using class ParsedFlow
2019-05-13 13:04:06 +02:00
Simone Mainardi
ab92ee7926
Converts ZMQ PODs to classes
2019-05-10 19:32:34 +02:00
Simone Mainardi
79d31ebf93
Update README.eBPF.md with dispatching to interfaces using event IF_NAME
2019-05-06 11:52:34 +02:00
Simone Mainardi
5be58eccab
Enqueues only non-loopback eBPF flows to companion
2019-05-05 20:04:44 +02:00
Simone Mainardi
9658a621ad
Delivers eBPF flows to the companion interface
2019-05-05 14:44:24 +02:00
Simone Mainardi
ba0273a3ff
Adds companion interface to NetworkInterface
2019-05-03 11:08:50 +02:00
Simone Mainardi
0846ead22c
Adds TcpInfo to class Flow with nProbe mini eBPF data
2019-04-24 19:26:02 +02:00
emanuele-f
6fb921d68a
Implement Pods and Containers page
2019-04-24 18:46:07 +02:00
Simone Mainardi
2309e6df5e
Initial work to parse nProbe mini eBPF fields via ZMQ
2019-04-23 20:18:01 +02:00
Luca Deri
c520daac33
Cleaned up syslog collector code
...
Fixed syslog-collected flow time
2019-04-15 21:48:23 +02:00
emanuele-f
e04c956116
Add check for NULL dhcp_ranges
2019-04-14 15:49:30 +02:00
emanuele-f
fa4330bbfd
Implement alert for IP addresses assigned outside the configured DHCP ranges
2019-04-11 17:01:39 +02:00
emanuele-f
14a9d83a30
Move local broadcast domain preference to the interface settings and show warnings
...
A dismissable warning is shown if DHCP traffic has been seen on the currrent interface.
2019-04-11 12:52:15 +02:00
Alfredo Cardigliano
61a8ce9a76
Implemented SyslogCollectorInterface/SyslogParserInterface
...
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
Luca Deri
b9f513548e
Reworked ARP stats
2019-04-02 17:47:07 +02:00
Simone Mainardi
5e5ad77cec
Implements broadcast domain too large alerts
2019-04-01 14:20:57 +02:00
Simone Mainardi
091e89d5a3
Implements hosts walker by address CIDR
2019-03-21 15:25:00 +01:00
Simone Mainardi
0023f7e247
Implements and shows ghost broadcast domains
2019-03-15 14:09:36 +01:00
Simone Mainardi
436d1d6656
Implements reload of broadcast domains
2019-03-14 16:33:51 +01:00
Simone Mainardi
2cdca987fc
Handles broadcast domains concurrency
2019-03-13 17:55:50 +01:00
Luca Deri
ea4619dd2f
Reworked local broadcast domain implementation
2019-03-12 16:54:29 +01:00
Simone Mainardi
4b3ae0e652
Makes the ARP matrix generation optional using a pref
2019-03-12 14:53:06 +01:00
Luca
d52153d449
Added ability to handle IPv4-only AddressTree
...
Enabled broadcast domain handler logic
2019-03-11 21:02:21 +01:00
Simone Mainardi
28582ff8d9
Handles broadcast domains with patricia trees
2019-03-11 14:04:48 +01:00
Luca
76f9c8067f
Initial work towards local broadcast domain calculation automation
2019-03-11 09:52:47 +01:00
Simone Mainardi
8f017118c4
Minor Arp matrix fixes
2019-03-08 14:22:08 +01:00
Simone Mainardi
9e86e6b613
Reduces memory usage of arp matrix
2019-03-08 13:19:46 +01:00
Simone Mainardi
0a903c97ce
Finishes rework of ArpStatsHashMatrix
2019-03-07 14:20:41 +01:00
Francesco
58a72c8e88
ARP Stats Structures
2019-03-05 20:26:07 +01:00
Simone Mainardi
4f4548713e
Fixes protocol detection for flows with a few packets
2019-03-05 12:21:00 +01:00
emanuele-f
c2c10ed491
Implement dhcp hosts filter
2019-02-27 16:20:55 +01:00
emanuele-f
e37eb1cbd5
Add IPv6 DHCP ranges support
2019-02-27 15:10:00 +01:00
Simone Mainardi
2fd5a75b6a
Implements interface.findFlowByTuple to fix issues with ICMP
...
Fixes #2415
2019-02-27 11:39:02 +01:00