Commit graph

2447 commits

Author SHA1 Message Date
Simone Mainardi
a2705a8bda Implements header and drilldown of flow status severities 2020-10-19 19:26:30 +02:00
Simone Mainardi
d7f1ce0d8c Reworks and optimizes flow alerted status 2020-10-19 16:50:22 +02:00
Simone Mainardi
a0056ef2b7 Unifies alerted and misbehaving flows on hosts
Fixes #4596
2020-10-19 10:19:22 +02:00
Luca Deri
236089d66c Optimized purging strategy to makes it more often and lighter 2020-10-18 21:16:49 +02:00
Simone Mainardi
d3dda0bb82 Unifies misbehaving with alerted flows
Implements #4596
2020-10-16 18:58:20 +02:00
Simone Mainardi
92ed28cf4c Prevents unidirectional traffic alerts from NoIP from being triggered
Fixes #4592 along with companion pro commit
2020-10-16 12:20:15 +02:00
Simone Mainardi
30f46a15da Misbehaving flows cleanup 2020-10-16 11:28:46 +02:00
Simone Mainardi
b506968a13 Parallelizes user script hooks exec for view interfaces 2020-10-15 14:25:01 +02:00
Simone Mainardi
e5f95c0237 Reworks/cleanup host score code 2020-10-15 12:25:27 +02:00
Simone Mainardi
adfec81477 Simplifies idling of flows for views 2020-10-15 09:03:01 +02:00
Simone Mainardi
5658312832 Changes Condvar predicate to boolean
Addresses #4576
2020-10-15 08:40:33 +02:00
Luca Deri
abf30f74bc Improved periodicity handling of VLAN tagged traffic 2020-10-14 23:37:29 +02:00
Simone Mainardi
24839a7135 Alerted flows counter fixes 2020-10-14 16:46:09 +02:00
Simone Mainardi
d1f974857c Adds a condition variable for flows dump
Addresses #4576
2020-10-14 12:42:59 +02:00
Simone Mainardi
9a9b161662 Adds a condition variable for flow user script hooks execution
Addresses #4576
2020-10-14 11:36:48 +02:00
Simone Mainardi
d113e38642 Fixes reuse of flow hooks Lua engines
Addresses #4576
2020-10-13 18:32:37 +02:00
Alfredo Cardigliano
3aae425731 Print device ID in flow details (when available) 2020-10-13 17:17:17 +02:00
Alfredo Cardigliano
6a23f59bcf Add support for OBSERVATION_POINT_ID 2020-10-13 14:54:24 +02:00
Simone Mainardi
5b878a2a7a Reworks reload of in-mem preferences and runtimeprefs.json dump 2020-10-13 12:49:48 +02:00
Luca Deri
240dd7330a Added marker for DNS, DHCP, SMTP, NTP servers 2020-10-12 11:07:41 +02:00
Luca Deri
60a238acb0 Various service and periodicty map improvements 2020-10-11 16:17:55 +02:00
Luca Deri
3af2b10a9f Reworked service and periodic map 2020-10-11 14:47:31 +02:00
Simone Mainardi
17ad258589 Fixes exporter stats displayed for invalid interfaces
Fixes #4559
2020-10-11 14:04:45 +02:00
Luca Deri
cfa3d08943 Service map
- Fixed filtering protocol menu
- Added reload button
- Added reset button (interface only)
2020-10-10 16:00:44 +02:00
Simone Mainardi
049bfdcf4a Implements bitmap-based limited privileges for non-admins
Implements #4489
2020-10-09 15:50:22 +02:00
Alfredo Cardigliano
bafccf2c06 Add malformed/dispatched syslog counters. Inc counters in the Suricata plugin. 2020-10-09 15:00:21 +02:00
Alfredo Cardigliano
fc8357ce6f Add support for Syslog stats (backend and lua API) 2020-10-09 12:00:55 +02:00
Simone Mainardi
3ce3b9dc46 Implements list hosts according to retransmissions
Implements #4420
2020-10-08 17:54:04 +02:00
Simone Mainardi
8bf82dd0cb Implements stats page for interface queue drops monitoring 2020-10-08 12:52:55 +02:00
Simone Mainardi
626ebacf11 Fixes possible stall in purging in high-capacity views 2020-10-08 10:01:12 +02:00
Simone Mainardi
7320c8266c Adds throughput estimation via ZMQ
Implements #3508
2020-10-06 19:28:11 +02:00
Simone Mainardi
78e61c8e13 Reworks VirtualHostHash (fixes leaks and improves speed)
Fixes #4296
2020-10-06 17:52:21 +02:00
Simone Mainardi
b052eeebee Reports engaged alerts in system status bar
Implements #4522
2020-10-06 11:11:11 +02:00
Simone Mainardi
d15e1c4e71 Fixes hash table entries not purged
Fixes #4528
2020-10-05 17:49:12 +02:00
Simone Mainardi
83209ac402 Keeps alerted hosts in memory (fixes engaged alert counter out of sync)
Fixes #4506
2020-10-05 11:54:17 +02:00
Luca Deri
21f3fbd847 Added service map reporting 2020-10-02 23:29:15 +02:00
Luca Deri
37da96ae0c Service map changes 2020-10-02 17:08:56 +02:00
Simone Mainardi
891e52c1ef Adds comments for flow status / alerted status 2020-10-02 17:03:47 +02:00
Simone Mainardi
fdf0f15140 Fixes races in view interfaces and cli/srv scores
Fixes #4513
Fixes #4512
2020-10-02 16:34:28 +02:00
Luca Deri
79e749c769 Extended host with new methods for detecting broadcast and multicast addrsesses 2020-10-01 22:14:30 +02:00
Simone Mainardi
72e4382333 Reworks purging of idle entries without Lua periodic scripts 2020-10-01 16:08:21 +02:00
Simone Mainardi
f0a2aba619 Simplifies incNumFlows/decNumFlows for Hosts 2020-10-01 14:28:13 +02:00
Simone Mainardi
fa96c5e2f5 Code cleanup 2020-10-01 14:20:07 +02:00
Simone Mainardi
b5781eea2c Cleanup unused flow_acle lua context member 2020-09-30 18:44:39 +02:00
Simone Mainardi
0db456c0cf Reworks flow user scripts execution in C++ 2020-09-30 18:41:36 +02:00
Simone Mainardi
8392e126f8 Simplifies and reduces the number of threads for purging idle entries 2020-09-29 18:51:44 +02:00
Simone Mainardi
5133af720f Reworks view interfaces with queues; rework idling and flow hooks exec 2020-09-29 18:30:10 +02:00
Luca Deri
80dfd37e04 Reworked baheviour analysis code 2020-09-28 12:55:37 +02:00
Simone Mainardi
90a5a57b36 Implements user script queues (avoids 5-sec HT walk) 2020-09-28 11:45:00 +02:00
Alfredo Cardigliano
a435cdab9d SPSCQueue doc/comments 2020-09-28 10:50:29 +02:00