1099 commits

Author	SHA1	Message	Date
emanuele-f	ed44536037	Fix missing cleanup on external_alerts	2019-09-23 16:35:54 +02:00
Simone Mainardi	856ae1a7a5	Fixes uninitialized interface seen mac addresses flag	2019-09-23 10:07:38 +02:00
Simone Mainardi	45544e5c2d	Fixes uninitialized interface arp counters	2019-09-23 10:04:43 +02:00
Alfredo Cardigliano	a7a9c7c848	ifdef for pPro code	2019-09-20 10:49:26 +02:00
Alfredo Cardigliano	30b142506f	processPacket/processFlow now call the SubInterface	2019-09-20 10:47:40 +02:00
Simone Mainardi	7f150ef407	Implements alerted flows counters and shows them in the footer ... Implements #2863	2019-09-19 15:15:32 +02:00
Simone Mainardi	a615f96ceb	Fixes periodic stats on pcap dump interfaces ... Fixes #2867	2019-09-19 12:35:12 +02:00
Alfredo Cardigliano	d672d93750	Sub interfaces support (wip) (#2825)	2019-09-17 10:34:52 +02:00
Alfredo Cardigliano	b7d459dd2b	Moved strdup for JSON/TLV strings from Flow to Parser to handle non-null-terminated strings	2019-09-13 12:36:19 +02:00
Simone Mainardi	a44def039f	Fixes custom catecories not counted in nDPI stats	2019-09-13 10:20:08 +02:00
Simone Mainardi	968e21d984	Implements flow lua callbacks in the periodic activities thread	2019-09-12 15:36:41 +02:00
Alfredo Cardigliano	9bd00fa0ee	Support for encoding additional fields to TLV	2019-09-10 20:50:34 +02:00
Simone Mainardi	77a3bdb051	Reworks profiling instrumentation	2019-09-10 19:06:52 +02:00
Simone Mainardi	949d2a1025	Calculates flow idle timeouts using nProbe data for ZMQ interfaces	2019-09-10 18:05:16 +02:00
emanuele-f	4d62d68655	Add active alerted flows filter and count ... Closes #2821	2019-09-10 17:52:22 +02:00
Simone Mainardi	9fe404772d	Handles flow alerts and alert queues in view interfaces ... Implements #2828	2019-09-10 15:48:39 +02:00
emanuele-f	c3fa094e99	Improve MUD prefs handling ... Also implement a non-inline reloadPrefs Host method to avoid slowing down packet capture	2019-09-10 11:10:33 +02:00
Alfredo Cardigliano	a9d73a8022	Fix active flows stats (e.g. status filter now reports the correct number of flows)	2019-09-06 11:27:02 +02:00
emanuele-f	e9aa6b1703	Add flow.lua duration trace	2019-09-06 11:15:12 +02:00
emanuele-f	d9a44d615a	Implement generic flow callbacks	2019-09-05 19:11:11 +02:00
Simone Mainardi	ca56f94cef	Implements per-interface updateStats variable frequency	2019-09-04 19:27:55 +02:00
Alfredo Cardigliano	4ea64d4275	Flow::getFlowStatus is now setting a bitmap to handle multiple statuses to be exposed in the flowinfo	2019-09-04 18:27:32 +02:00
emanuele-f	5c3a063fae	Fix startup with sticky hosts ... interface.restoreHost was improperly removed in ef4f98a5a5	2019-09-04 14:10:24 +02:00
Simone Mainardi	9924225473	Implements nDPIStats throughput calc for NetworkInterface	2019-09-04 10:21:21 +02:00
Simone Mainardi	b86378bca3	Implements ul/dl thpts in C and reworks the footer to use them	2019-09-03 18:56:23 +02:00
Alfredo Cardigliano	f7dfe812b8	Support for VXLAN	2019-09-03 02:39:00 +02:00
Simone Mainardi	a5b5510290	Adds bytes and packets throughput to NetworkInterface	2019-09-03 17:16:47 +02:00
emanuele-f	017b367274	Fix flow alert generation when reading from PCAP dump	2019-09-03 16:32:55 +02:00
Simone Mainardi	e1d911a052	Adds lua_pcall check when loading scripts to prevent silent failures	2019-09-02 11:25:39 +02:00
Simone Mainardi	91163ed4e2	Fixes Lua script failures when loading alerts/flow.lua	2019-09-02 10:53:36 +02:00
emanuele-f	2d02de6cc1	Implement initial flow score support	2019-08-30 17:16:11 +02:00
Alfredo Cardigliano	3f04f0c080	Updating pf_ring drop stats in the housekeeping task (avoid inline updates with the GUI)	2019-08-29 15:53:20 +02:00
Alfredo Cardigliano	2c81afd678	Setting severity for IDS alerts	2019-08-28 03:38:01 +02:00
emanuele-f	a8cb972e7d	Implement ghost networks alerts	2019-08-28 16:42:18 +02:00
Alfredo Cardigliano	f8af84df2d	SyslogParserInterface now supports the companion interface for delivering Suricata alerts to a packet interface (#1928)	2019-08-27 17:53:34 +02:00
Alfredo Cardigliano	dc9978c68d	Moved companion interface to ParserInterface to be used by any *ParserInterface	2019-08-27 16:24:46 +02:00
emanuele-f	b3bdfcff32	Cleanup of the too-many-drops interface alert	2019-08-27 13:04:53 +02:00
Simone Mainardi	e46221e0bb	Implements packet distribution and tcp flags stats for view interfaces	2019-08-27 12:34:12 +02:00
Simone Mainardi	af61cfd483	Implements tcp packet stats for hosts, ases, networks in interface views	2019-08-27 11:16:20 +02:00
Simone Mainardi	65049b2cac	Fixes crash when calling --help	2019-08-26 18:29:43 +02:00
emanuele-f	e92641920d	Implement syn/flow flood victim alerts on local networks	2019-08-26 16:42:23 +02:00
emanuele-f	f43f4b7dd9	Add engaged alerts type exclusion filter ... Fixes #2780	2019-08-22 16:30:45 +02:00
emanuele-f	69cd896a9f	Implement engaged alerts and flow alerts timeseries	2019-08-21 16:57:14 +02:00
emanuele-f	7893c1f78a	Implement RTT host engage/release alert	2019-08-20 19:02:58 +02:00
emanuele-f	87ba28195b	Add support to engage/release on external alerts	2019-08-20 19:02:58 +02:00
Simone Mainardi	54473f7883	Updates host pools stats also in community mode	2019-08-20 12:00:41 +02:00
emanuele-f	d1c5275302	Move suppressed alerts flag to C to reduce Redis load	2019-08-20 11:54:25 +02:00
Simone Mainardi	74c545d079	Uses stats rather than grouped hosts data for network stats	2019-08-19 17:39:51 +02:00
Simone Mainardi	e363e56e23	Implements sorting of hosts per number of UDP port unreachable flows	2019-08-16 15:25:41 +02:00
Luca	f8c962a6fb	Fixed alerts race conditions	2019-08-15 17:19:26 +02:00