Luca
|
1fb32a0795
|
Unified nDPI struct across interfaces
|
2019-11-06 23:02:35 +00:00 |
|
Luca
|
0e523a4308
|
Changes to minimize the risk of categories reload
|
2019-11-06 09:17:53 +00:00 |
|
emanuele-f
|
54140b6f1a
|
Migrate alertable disabled alerts preference to lua
This avoids performing multiple hget on redis, thus increasing performance
|
2019-11-05 14:59:38 +01:00 |
|
emanuele-f
|
01953cf76f
|
Harden categories reload to avoid crashes if multiple housekeeping run concurrently
|
2019-11-04 12:01:27 +01:00 |
|
Luca Deri
|
d61470c653
|
Workaround for #3033 but a proper fix is necessary
|
2019-11-02 20:22:35 +01:00 |
|
Luca Deri
|
64e33a2018
|
Fixed script execution for pcap interfaces
|
2019-11-01 15:34:18 +01:00 |
|
Simone Mainardi
|
11d7f2aa12
|
Fixes for aggregated flows dump on view interfaces
|
2019-10-30 19:14:50 +01:00 |
|
Simone Mainardi
|
e8277e46ff
|
Reworks view interfaces implementation
|
2019-10-30 11:47:56 +01:00 |
|
Simone Mainardi
|
6fb469aa61
|
Minor cleanup
|
2019-10-29 17:53:17 +01:00 |
|
Simone Mainardi
|
1eba832869
|
Fixes flow aggregation after hash tables rework
Fixes #3018
|
2019-10-29 17:49:52 +01:00 |
|
emanuele-f
|
378a1e2cd8
|
Optimize nDPI categories reload to avoid packet drops
|
2019-10-29 12:07:27 +01:00 |
|
Simone Mainardi
|
cce73c2f44
|
Implements lua interpreters telemetry
|
2019-10-28 23:47:03 +01:00 |
|
Simone Mainardi
|
dc748b1b6d
|
Implements stats for periodic scripts duration
|
2019-10-28 17:10:03 +01:00 |
|
Simone Mainardi
|
68246efd01
|
Decouples periodic hash table updates using a thread pool
|
2019-10-27 17:40:07 +01:00 |
|
Simone Mainardi
|
ca657b2592
|
Removes unnecessary numFlows counter
|
2019-10-27 12:43:10 +01:00 |
|
Simone Mainardi
|
955eed4b50
|
Reworks idling and purging of hash table entries to make it faster
|
2019-10-24 15:48:18 +02:00 |
|
Simone Mainardi
|
15e17a801a
|
Implements per-state hash entry counters and writes them to ts
|
2019-10-23 13:09:02 +02:00 |
|
Simone Mainardi
|
6fd7386c03
|
Fixes possible collisions when looking up flows by key
|
2019-10-16 19:04:10 +02:00 |
|
Alfredo Cardigliano
|
87ac1b0bb6
|
New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface
|
2019-10-16 04:50:47 +02:00 |
|
Simone Mainardi
|
8b9dd98b55
|
Fixes packets and flows processing during shutdown
|
2019-10-15 18:12:28 +02:00 |
|
Simone Mainardi
|
453efa749f
|
Fixes shutdown procedures with new hash entry states
|
2019-10-11 15:16:42 +02:00 |
|
Alfredo Cardigliano
|
a2e74e16a3
|
New Lua interface.processFlow API, moved processFlow from NetworkInterface to ParserInterface, code cleanup
|
2019-10-10 12:49:32 +02:00 |
|
Alfredo Cardigliano
|
c5e3d61205
|
Support for l7 proto name match in sub interfaces
|
2019-10-08 17:14:10 +02:00 |
|
emanuele-f
|
b3809344f9
|
Custom categories memory is now managed by nDPI
|
2019-10-08 10:25:12 +02:00 |
|
Simone Mainardi
|
79ec20d6df
|
Re-uses getFlows filters for the getActiveFlowsStats
Fixes #2891
|
2019-10-08 00:23:35 +02:00 |
|
Simone Mainardi
|
d41198c4e5
|
Allows flow lua method idle to be called for pcap-dump interfaces
|
2019-10-01 12:52:12 +02:00 |
|
Alfredo Cardigliano
|
0c2ffc1f94
|
Dynamic and custom sub-interfaces are now sharing the same data structure (registering through API to the master interface), bug fixes
|
2019-09-26 15:50:31 +02:00 |
|
Alfredo Cardigliano
|
ff36d16968
|
Moved Disaggregation Criterion setting to the interface (per interface now)
|
2019-09-25 12:19:22 +02:00 |
|
Alfredo Cardigliano
|
1b45f800f9
|
Sub-interfaces backend improvements for the GUI
|
2019-09-24 20:50:58 +02:00 |
|
Simone Mainardi
|
d4068bb48a
|
Adds alerted flows debug traces
|
2019-09-24 16:52:43 +02:00 |
|
Simone Mainardi
|
da1dbe4ab0
|
Reworks hash entries idling
|
2019-09-24 14:29:20 +02:00 |
|
Simone Mainardi
|
7f150ef407
|
Implements alerted flows counters and shows them in the footer
Implements #2863
|
2019-09-19 15:15:32 +02:00 |
|
Alfredo Cardigliano
|
d672d93750
|
Sub interfaces support (wip) (#2825)
|
2019-09-17 10:34:52 +02:00 |
|
Simone Mainardi
|
77c1f85cd3
|
Implements interface and collection stats reset for ZMQ interfaces
|
2019-09-13 12:12:54 +02:00 |
|
Simone Mainardi
|
c1603f7d59
|
Fixes custom categories not counted in interface stats
|
2019-09-13 10:51:27 +02:00 |
|
Simone Mainardi
|
a44def039f
|
Fixes custom catecories not counted in nDPI stats
|
2019-09-13 10:20:08 +02:00 |
|
Simone Mainardi
|
968e21d984
|
Implements flow lua callbacks in the periodic activities thread
|
2019-09-12 15:36:41 +02:00 |
|
Simone Mainardi
|
949d2a1025
|
Calculates flow idle timeouts using nProbe data for ZMQ interfaces
|
2019-09-10 18:05:16 +02:00 |
|
Simone Mainardi
|
9fe404772d
|
Handles flow alerts and alert queues in view interfaces
Implements #2828
|
2019-09-10 15:48:39 +02:00 |
|
emanuele-f
|
e9aa6b1703
|
Add flow.lua duration trace
|
2019-09-06 11:15:12 +02:00 |
|
Simone Mainardi
|
5d380c39d0
|
Exposes interface stats update freq to lua
|
2019-09-05 10:27:25 +02:00 |
|
Simone Mainardi
|
ca56f94cef
|
Implements per-interface updateStats variable frequency
|
2019-09-04 19:27:55 +02:00 |
|
emanuele-f
|
5c3a063fae
|
Fix startup with sticky hosts
interface.restoreHost was improperly removed in ef4f98a5a5
|
2019-09-04 14:10:24 +02:00 |
|
Simone Mainardi
|
9924225473
|
Implements nDPIStats throughput calc for NetworkInterface
|
2019-09-04 10:21:21 +02:00 |
|
emanuele-f
|
8e6cd5962a
|
Fix blacklisted host alerts not generated when reading from PCAP dump
|
2019-09-03 17:50:08 +02:00 |
|
Simone Mainardi
|
a5b5510290
|
Adds bytes and packets throughput to NetworkInterface
|
2019-09-03 17:16:47 +02:00 |
|
emanuele-f
|
2d02de6cc1
|
Implement initial flow score support
|
2019-08-30 17:16:11 +02:00 |
|
Alfredo Cardigliano
|
3f04f0c080
|
Updating pf_ring drop stats in the housekeeping task (avoid inline updates with the GUI)
|
2019-08-29 15:53:20 +02:00 |
|
Alfredo Cardigliano
|
f8af84df2d
|
SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928)
|
2019-08-27 17:53:34 +02:00 |
|
Alfredo Cardigliano
|
dc9978c68d
|
Moved companion interface to ParserInterface to be used by any *ParserInterface
|
2019-08-27 16:24:46 +02:00 |
|