Alfredo Cardigliano
5f48441ee7
Check max flow size in nedge (when configured)
2025-08-12 16:53:05 +02:00
Luca Deri
241de655d3
Added space among uicons
2025-08-09 11:03:05 +02:00
Alfredo Cardigliano
fb0696fa2b
Export drop reason and show it under flow details
2025-02-18 14:43:50 +01:00
Luca Deri
f1b2ad7832
Added support for %WLAN_SSID %WTP_MAC_ADDRESS
2024-08-22 23:14:20 +02:00
Matteo Biscosi
d795bf3474
Added NAT info in clickhouse ( #8384 )
2024-05-10 10:22:55 -04:00
Luca Deri
e3bbe090e0
Improved SIP call display
2024-05-04 12:27:37 +02:00
Nicolò Maio
2d150103b7
Add TCP flow connection state ( #8210 )
...
* Add TCP flow connection state (#8140 )
* Add Major and Minor connection states (#8140 )
* Remove ZMQ connection state parsing. (#8140 )
* Update doc with major and minor conn states. (#8140 )
2024-02-28 14:45:49 +01:00
Luca Deri
55870e97b9
(C) Update
2024-01-12 11:44:18 +01:00
Luca Deri
bdd95ff988
Added support for %NPROBE_INSTANCE_NAME
2023-09-12 23:59:23 +02:00
Luca
11cff335b0
Improvements for handlign Cisco NBAR collection
2022-11-05 22:18:32 +01:00
Luca Deri
790af4c9e1
Fixed nProbe template flow mapping
2022-06-27 20:08:38 +02:00
MatteoBiscosi
57a85de50e
Cleaned up the code from plugin_utils
2022-02-11 12:07:23 +01:00
Luca Deri
e38114b75f
Added missing cento flow labels
2022-02-02 13:45:01 +01:00
Alfredo Cardigliano
257ece18c0
Copyright update (Lua)
2022-01-03 09:42:33 +01:00
Luca Deri
e65e9f9304
Syslog collection fixes
2021-12-12 18:15:47 +01:00
Luca Deri
e22a8d31dc
Extensions for handling syslog flows
2021-12-02 18:12:25 +01:00
Luca Deri
5e03ad7e2f
Updated probe template
2021-10-27 18:29:29 +02:00
MatteoBiscosi
0c3bfd54c4
Changed name from probe to exporter ( #5970 )
2021-10-11 16:54:01 +02:00
MatteoBiscosi
a23babe57d
Changed Exporter name into Probe ( #5668 )
2021-07-14 12:43:13 +02:00
Luca Deri
195fe9578c
Improved observation point id support and flow reporting
2021-06-19 00:16:48 +02:00
Luca Deri
3dda9ba905
Added FLOW_VERDICT handling
2021-04-19 23:49:23 +02:00
Simone Mainardi
da943e0dff
Reduces the maximum cli/srv score per callback to 128
2021-03-23 14:54:32 +01:00
Luca Deri
a3990cd904
Added Some IPFIX stanndard fields collected by ntopng/nProbe in pass throught mode
2021-02-23 12:33:07 +01:00
Luca Deri
a1178a0791
Updated (C)
2021-01-02 12:08:23 +01:00
Simone Mainardi
16e2c9efe2
Cleanup to remove flow_consts no longer needed
2020-12-22 17:59:51 +01:00
Simone Mainardi
636ac2e804
Cleanup parametric alert severities from flow status definitions
2020-11-12 12:12:25 +01:00
Simone Mainardi
8b7a99aa94
Fixes for flow-status-dependent severity
2020-11-12 12:02:27 +01:00
Simone Mainardi
93920ccdce
Implements example of simplified flow alerts
2020-11-10 15:10:54 +01:00
Simone Mainardi
d42057baf5
Additional fixes for Zero TCP window detection
2020-11-07 15:38:39 +01:00
Simone Mainardi
357f11900f
Fixes exceptions upon plugins reload
...
Fixes #4633
2020-10-27 17:35:14 +01:00
Luca Deri
51ea9c53cf
Reworked alert icon colors
2020-10-16 19:38:04 +02:00
Simone Mainardi
d3dda0bb82
Unifies misbehaving with alerted flows
...
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
cbe28fb750
Makes loadDefinition local to flow_consts
...
Possible fix for #4560
2020-10-11 19:02:52 +02:00
Simone Mainardi
b82738330c
Adds extra indications upon plugin load failures
...
Fixes #4549
2020-10-09 09:23:11 +02:00
Luca Deri
c7b7f2ee1b
Minor cleanup
2020-09-23 09:35:32 +02:00
Alfredo Cardigliano
721a32b9a4
Indentation
2020-09-18 18:27:21 +02:00
Simone Mainardi
ec9d092423
Fixes DNS stats when collecting from ZMQ
...
Fixes #4148
2020-07-29 10:40:53 +02:00
Simone Mainardi
0b894bcec9
Typo
2020-07-24 13:22:17 +02:00
Simone Mainardi
c3bf89e984
Improves loading of flow definitions (uses require in place of dofile)
2020-07-23 14:31:09 +02:00
Alfredo Cardigliano
2364e73345
DSCP utiliti functions
2020-07-17 10:40:38 +02:00
Simone Mainardi
83c4d36e34
Simplifies flow.triggerStatus using internal flow status reference
2020-04-27 17:48:56 +02:00
Simone Mainardi
290175b16f
Refactors alrt builders into creators
...
Refactors builders into creators: calls
2020-04-27 15:53:56 +02:00
Simone Mainardi
ab1690ad9e
Implements builders for each flow status definition
...
[FlowsK] alert_blacklisted_country.lua
[FlowsK] alert_flow_blacklisted.lua
[FlowsK] alert_device_protocol_not_allowed.lua
[FlowsK] external_alert.lua
[FlowsK] alert_potentially_dangerous_protocol.lua
[FlowsK] tls_certificate_mismatch.lua
[FlowsK] tls_certificate_expired.lua
[FlowsK] tls_malicious_signature.lua
[FlowsK] elephant_flows.lua
[FlowsK] not_purged.lua
[FlowsK] web_mining.lua
[FlowsK] potentially_dangerous.lua
[FlowsK] alert_flow_blocked.lua
2020-04-27 12:43:37 +02:00
Simone Mainardi
78b334e4eb
Refactors alerts and flow statuses in builtin and plugins
...
Implements #3811
Implements #3812
Refactors builtin alerts
Refactors builtin flow statuses
2020-04-21 22:27:49 +02:00
Simone Mainardi
0a9a7015e0
Unifies status_id and status_key
2020-04-15 14:29:03 +02:00
Simone Mainardi
4177ee61ab
Implements constant flow and alert ids
...
Enlarges AlertType size
Changes alerts database
2020-04-14 22:20:44 +02:00
emanuele-f
15c013922d
Improve plugins reload to avoid transient errors
...
A "shadow directory" is now populated when the reload occurs and then swapped as the active directory.
This avoids breaking the directory structure or changing files when other threads are possibly working
on them.
Fixes #3595
2020-03-26 14:21:11 +01:00
emanuele-f
58b3d42d22
Set max score on hosts contacting blacklisted hosts
2020-02-17 15:16:01 +01:00
emanuele-f
13ec0d2f44
Use the flow score to determine the status priority
2020-02-07 19:17:07 +01:00
Alfredo Cardigliano
9d57d9ffce
Fix error string (2)
2020-01-30 10:04:34 +01:00