Commit graph

146 commits

Author SHA1 Message Date
Alfredo Cardigliano
dc9978c68d Moved companion interface to ParserInterface to be used by any *ParserInterface 2019-08-27 16:24:46 +02:00
Simone Mainardi
ab92ee7926 Converts ZMQ PODs to classes 2019-05-10 19:32:34 +02:00
Simone Mainardi
2309e6df5e Initial work to parse nProbe mini eBPF fields via ZMQ 2019-04-23 20:18:01 +02:00
Simone Mainardi
4ed935547e Fixes memsets on Parsed_Flow members of type class
Fixes #2521
2019-04-09 16:17:07 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
Simone Mainardi
3fcb15cda2 Handles TCP flags via nProbe 2019-03-25 20:31:13 +01:00
Simone Mainardi
34b36422ad Parses nProbe application latency 2019-03-25 17:34:54 +01:00
Simone Mainardi
d9d21462cd Parses nProbe client/server network latencies 2019-03-25 16:55:14 +01:00
Simone Mainardi
1975d68e91 Handles backward ZMQ compat with new <PEN.FIELD> format 2019-02-18 12:01:37 +01:00
Simone Mainardi
c4fda59b0c Adds INPUT_SNMP and OUTPUT_SNMP as default ZMQ fields 2019-02-12 15:17:10 +01:00
Simone Mainardi
b32368afd6 Overrides NPROBE_IPV4_ADDRESS with EXPORTER_IPV4_ADDRESS (when both are present) 2019-02-12 14:46:22 +01:00
Simone Mainardi
01bad09a88 Implements handling of PEN fields from nProbe 2019-02-11 18:14:13 +01:00
Simone Mainardi
19a4b03478 ParserInterface sprobe cleanup 2019-02-11 15:15:48 +01:00
Simone Mainardi
e5eff5b30f Initial sprobe code cleanup 2019-02-11 14:22:36 +01:00
Simone Mainardi
7a1b2dc887 Parses nProbe options topic and handles custom applications 2019-02-07 16:11:11 +01:00
Simone Mainardi
300e6c4672 Parses new template ZMQ topic 2019-02-06 19:10:00 +01:00
Simone Mainardi
5317d23fc2 Disables ZMQ flow collection drop alerts (waiting to make them engaged)
Revert "Implements ZMQ flow collection drops alerts"

This reverts commit d21e8d6f3e.
2019-01-24 15:02:22 +01:00
Simone Mainardi
d21e8d6f3e Implements ZMQ flow collection drops alerts 2019-01-23 19:42:18 +01:00
Simone Mainardi
a11257482b Removes a debug trace 2019-01-23 16:19:08 +01:00
Simone Mainardi
fa3d346f58 Adds historical charts of flow collection drops 2019-01-23 16:16:55 +01:00
Simone Mainardi
16cd644f4f Adds flow collection drops to the GUI when present 2019-01-23 15:40:31 +01:00
Simone Mainardi
3819af0037 Honours --ignore-vlans in collector mode 2019-01-18 10:29:03 +01:00
Luca Deri
bedff2c8e2 Updated (C) 2019-01-07 19:28:49 +01:00
Simone Mainardi
d69237c0cd Initial work to add support to custom fields via ZMQ 2018-12-31 18:11:18 +01:00
Simone Mainardi
9ceb104114 Adds nProbe queue full dropped flows to ntopng 2018-12-18 18:05:53 +01:00
Simone Mainardi
859e85c7ce Fixes C to Lua integer types conversions affecting OS X 2018-11-23 15:58:38 +01:00
Luca Deri
4130484d1b Process info: work in progress 2018-10-16 09:06:31 +02:00
Luca Deri
757341a0bb Improved process info in flows 2018-10-15 22:13:33 +02:00
Simone Mainardi
889729495e Implements support for collected custom applications 2018-10-01 00:22:49 +02:00
Simone Mainardi
025295da9d Parses ZMQ <master>.<app> in L7_PROTO 2018-09-17 20:11:38 +02:00
Simone Mainardi
b724cc4518 Uses struct ndpi_proto when collecting ZMQ flows 2018-09-17 18:00:06 +02:00
Luca Deri
f0c936c368 Updated (C) to 2018 2018-03-22 21:59:42 +01:00
emanuele-f
99b67b16ad Remove old nedge define and move to new one 2018-02-09 13:01:08 +01:00
Luca Deri
5b54d43690 Added handling of IP_PROTOCOL_VERSION ZMQ export 2017-12-19 12:50:39 +01:00
emanuele-f
5d22c6fbd2 Fix crash on zmq when source ip is zero and destination ip is ipv4
The source ip is sometimes set as ipv6, and this tricks code thinking the flow is ipv6.
This caused a crash in FlowProfiles, where get_ipv6 was called on an ipv4 address
2017-12-19 11:48:29 +01:00
Luca Deri
c9ecd931d9 Code cleanup 2017-12-16 08:23:56 +01:00
Luca Deri
ac8a06617f Fixed leak in flow collection 2017-11-21 18:00:55 +01:00
Luca Deri
29ede6ff67 Added support for sFlow sample packet drops 2017-11-18 13:34:36 +01:00
Simone Mainardi
76ac648339 Fixes ZMQ ip parse with new optimized flow format
Fixes #1532
2017-10-23 19:05:10 +02:00
Luca Deri
074a08e7ce Simplified ntopng when nEdge is used 2017-10-21 15:36:28 +02:00
Luca Deri
fef176ea5b Reworked memory deallocation in collected flows with multiple elements 2017-10-15 07:57:45 +02:00
Luca Deri
4b01406137 Improved fingerprinting support
Disabled HTTP banned page support as in the current implementation is ambiguous
Fixed flow parsing leak
2017-10-15 07:46:20 +02:00
Luca Deri
3cfbfd4900 Fix ZMQ flow increment when multiple flows are delivered on the same ZMQ message 2017-10-13 15:24:47 +02:00
Luca Deri
594abe68ce Implemented ZMQ flow buffering support for enhancing ZMQ performance and decreasing data exchanged 2017-10-10 10:45:25 +02:00
Luca Deri
124364c4a2 Initial work towards better flow serialization 2017-10-03 14:55:35 +02:00
Luca Deri
3f62a7f9c3 Implemented traffic direction in network interfaces 2017-09-16 18:35:06 +02:00
Simone Mainardi
906aff3e20 Implements use of post-nat src/dst addresses and ports
Implements https://github.com/ntop/ntopng/issues/1398
2017-09-07 16:24:53 +02:00
Simone Mainardi
0499fce4d3 Adds missing ZMQ fields 2017-09-07 12:29:47 +02:00
Simone Mainardi
5955ee576c Handles multiple banaced ZMQ endpoints 2017-09-05 10:18:04 +02:00
Simone Mainardi
816965b1ac Implements support of flow field FIREWALL_EVENT 2017-08-10 15:54:03 +02:00