Commit graph

920 commits

Author SHA1 Message Date
Luca
1fb32a0795 Unified nDPI struct across interfaces 2019-11-06 23:02:35 +00:00
Luca
0e523a4308 Changes to minimize the risk of categories reload 2019-11-06 09:17:53 +00:00
emanuele-f
54140b6f1a Migrate alertable disabled alerts preference to lua
This avoids performing multiple hget on redis, thus increasing performance
2019-11-05 14:59:38 +01:00
emanuele-f
01953cf76f Harden categories reload to avoid crashes if multiple housekeeping run concurrently 2019-11-04 12:01:27 +01:00
Luca Deri
d61470c653 Workaround for #3033 but a proper fix is necessary 2019-11-02 20:22:35 +01:00
Luca Deri
64e33a2018 Fixed script execution for pcap interfaces 2019-11-01 15:34:18 +01:00
Simone Mainardi
11d7f2aa12 Fixes for aggregated flows dump on view interfaces 2019-10-30 19:14:50 +01:00
Simone Mainardi
e8277e46ff Reworks view interfaces implementation 2019-10-30 11:47:56 +01:00
Simone Mainardi
6fb469aa61 Minor cleanup 2019-10-29 17:53:17 +01:00
Simone Mainardi
1eba832869 Fixes flow aggregation after hash tables rework
Fixes #3018
2019-10-29 17:49:52 +01:00
emanuele-f
378a1e2cd8 Optimize nDPI categories reload to avoid packet drops 2019-10-29 12:07:27 +01:00
Simone Mainardi
cce73c2f44 Implements lua interpreters telemetry 2019-10-28 23:47:03 +01:00
Simone Mainardi
dc748b1b6d Implements stats for periodic scripts duration 2019-10-28 17:10:03 +01:00
Simone Mainardi
68246efd01 Decouples periodic hash table updates using a thread pool 2019-10-27 17:40:07 +01:00
Simone Mainardi
ca657b2592 Removes unnecessary numFlows counter 2019-10-27 12:43:10 +01:00
Simone Mainardi
955eed4b50 Reworks idling and purging of hash table entries to make it faster 2019-10-24 15:48:18 +02:00
Simone Mainardi
15e17a801a Implements per-state hash entry counters and writes them to ts 2019-10-23 13:09:02 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
Alfredo Cardigliano
87ac1b0bb6 New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface 2019-10-16 04:50:47 +02:00
Simone Mainardi
8b9dd98b55 Fixes packets and flows processing during shutdown 2019-10-15 18:12:28 +02:00
Simone Mainardi
453efa749f Fixes shutdown procedures with new hash entry states 2019-10-11 15:16:42 +02:00
Alfredo Cardigliano
a2e74e16a3 New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup 2019-10-10 12:49:32 +02:00
Alfredo Cardigliano
c5e3d61205 Support for l7 proto name match in sub interfaces 2019-10-08 17:14:10 +02:00
emanuele-f
b3809344f9 Custom categories memory is now managed by nDPI 2019-10-08 10:25:12 +02:00
Simone Mainardi
79ec20d6df Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
2019-10-08 00:23:35 +02:00
Simone Mainardi
d41198c4e5 Allows flow lua method idle to be called for pcap-dump interfaces 2019-10-01 12:52:12 +02:00
Alfredo Cardigliano
0c2ffc1f94 Dynamic and custom sub-interfaces are now sharing the same data structure (registering through API to the master interface), bug fixes 2019-09-26 15:50:31 +02:00
Alfredo Cardigliano
ff36d16968 Moved Disaggregation Criterion setting to the interface (per interface now) 2019-09-25 12:19:22 +02:00
Alfredo Cardigliano
1b45f800f9 Sub-interfaces backend improvements for the GUI 2019-09-24 20:50:58 +02:00
Simone Mainardi
d4068bb48a Adds alerted flows debug traces 2019-09-24 16:52:43 +02:00
Simone Mainardi
da1dbe4ab0 Reworks hash entries idling 2019-09-24 14:29:20 +02:00
Simone Mainardi
7f150ef407 Implements alerted flows counters and shows them in the footer
Implements #2863
2019-09-19 15:15:32 +02:00
Alfredo Cardigliano
d672d93750 Sub interfaces support (wip) (#2825) 2019-09-17 10:34:52 +02:00
Simone Mainardi
77c1f85cd3 Implements interface and collection stats reset for ZMQ interfaces 2019-09-13 12:12:54 +02:00
Simone Mainardi
c1603f7d59 Fixes custom categories not counted in interface stats 2019-09-13 10:51:27 +02:00
Simone Mainardi
a44def039f Fixes custom catecories not counted in nDPI stats 2019-09-13 10:20:08 +02:00
Simone Mainardi
968e21d984 Implements flow lua callbacks in the periodic activities thread 2019-09-12 15:36:41 +02:00
Simone Mainardi
949d2a1025 Calculates flow idle timeouts using nProbe data for ZMQ interfaces 2019-09-10 18:05:16 +02:00
Simone Mainardi
9fe404772d Handles flow alerts and alert queues in view interfaces
Implements #2828
2019-09-10 15:48:39 +02:00
emanuele-f
e9aa6b1703 Add flow.lua duration trace 2019-09-06 11:15:12 +02:00
Simone Mainardi
5d380c39d0 Exposes interface stats update freq to lua 2019-09-05 10:27:25 +02:00
Simone Mainardi
ca56f94cef Implements per-interface updateStats variable frequency 2019-09-04 19:27:55 +02:00
emanuele-f
5c3a063fae Fix startup with sticky hosts
interface.restoreHost was improperly removed in ef4f98a5a5
2019-09-04 14:10:24 +02:00
Simone Mainardi
9924225473 Implements nDPIStats throughput calc for NetworkInterface 2019-09-04 10:21:21 +02:00
emanuele-f
8e6cd5962a Fix blacklisted host alerts not generated when reading from PCAP dump 2019-09-03 17:50:08 +02:00
Simone Mainardi
a5b5510290 Adds bytes and packets throughput to NetworkInterface 2019-09-03 17:16:47 +02:00
emanuele-f
2d02de6cc1 Implement initial flow score support 2019-08-30 17:16:11 +02:00
Alfredo Cardigliano
3f04f0c080 Updating pf_ring drop stats in the housekeeping task (avoid inline updates with the GUI) 2019-08-29 15:53:20 +02:00
Alfredo Cardigliano
f8af84df2d SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928) 2019-08-27 17:53:34 +02:00
Alfredo Cardigliano
dc9978c68d Moved companion interface to ParserInterface to be used by any *ParserInterface 2019-08-27 16:24:46 +02:00