Alfredo Cardigliano
dc9978c68d
Moved companion interface to ParserInterface to be used by any *ParserInterface
2019-08-27 16:24:46 +02:00
Simone Mainardi
ab92ee7926
Converts ZMQ PODs to classes
2019-05-10 19:32:34 +02:00
Simone Mainardi
2309e6df5e
Initial work to parse nProbe mini eBPF fields via ZMQ
2019-04-23 20:18:01 +02:00
Simone Mainardi
4ed935547e
Fixes memsets on Parsed_Flow members of type class
...
Fixes #2521
2019-04-09 16:17:07 +02:00
Alfredo Cardigliano
61a8ce9a76
Implemented SyslogCollectorInterface/SyslogParserInterface
...
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
Simone Mainardi
3fcb15cda2
Handles TCP flags via nProbe
2019-03-25 20:31:13 +01:00
Simone Mainardi
34b36422ad
Parses nProbe application latency
2019-03-25 17:34:54 +01:00
Simone Mainardi
d9d21462cd
Parses nProbe client/server network latencies
2019-03-25 16:55:14 +01:00
Simone Mainardi
1975d68e91
Handles backward ZMQ compat with new <PEN.FIELD> format
2019-02-18 12:01:37 +01:00
Simone Mainardi
c4fda59b0c
Adds INPUT_SNMP and OUTPUT_SNMP as default ZMQ fields
2019-02-12 15:17:10 +01:00
Simone Mainardi
b32368afd6
Overrides NPROBE_IPV4_ADDRESS with EXPORTER_IPV4_ADDRESS (when both are present)
2019-02-12 14:46:22 +01:00
Simone Mainardi
01bad09a88
Implements handling of PEN fields from nProbe
2019-02-11 18:14:13 +01:00
Simone Mainardi
19a4b03478
ParserInterface sprobe cleanup
2019-02-11 15:15:48 +01:00
Simone Mainardi
e5eff5b30f
Initial sprobe code cleanup
2019-02-11 14:22:36 +01:00
Simone Mainardi
7a1b2dc887
Parses nProbe options topic and handles custom applications
2019-02-07 16:11:11 +01:00
Simone Mainardi
300e6c4672
Parses new template ZMQ topic
2019-02-06 19:10:00 +01:00
Simone Mainardi
5317d23fc2
Disables ZMQ flow collection drop alerts (waiting to make them engaged)
...
Revert "Implements ZMQ flow collection drops alerts"
This reverts commit d21e8d6f3e .
2019-01-24 15:02:22 +01:00
Simone Mainardi
d21e8d6f3e
Implements ZMQ flow collection drops alerts
2019-01-23 19:42:18 +01:00
Simone Mainardi
a11257482b
Removes a debug trace
2019-01-23 16:19:08 +01:00
Simone Mainardi
fa3d346f58
Adds historical charts of flow collection drops
2019-01-23 16:16:55 +01:00
Simone Mainardi
16cd644f4f
Adds flow collection drops to the GUI when present
2019-01-23 15:40:31 +01:00
Simone Mainardi
3819af0037
Honours --ignore-vlans in collector mode
2019-01-18 10:29:03 +01:00
Luca Deri
bedff2c8e2
Updated (C)
2019-01-07 19:28:49 +01:00
Simone Mainardi
d69237c0cd
Initial work to add support to custom fields via ZMQ
2018-12-31 18:11:18 +01:00
Simone Mainardi
9ceb104114
Adds nProbe queue full dropped flows to ntopng
2018-12-18 18:05:53 +01:00
Simone Mainardi
859e85c7ce
Fixes C to Lua integer types conversions affecting OS X
2018-11-23 15:58:38 +01:00
Luca Deri
4130484d1b
Process info: work in progress
2018-10-16 09:06:31 +02:00
Luca Deri
757341a0bb
Improved process info in flows
2018-10-15 22:13:33 +02:00
Simone Mainardi
889729495e
Implements support for collected custom applications
2018-10-01 00:22:49 +02:00
Simone Mainardi
025295da9d
Parses ZMQ <master>.<app> in L7_PROTO
2018-09-17 20:11:38 +02:00
Simone Mainardi
b724cc4518
Uses struct ndpi_proto when collecting ZMQ flows
2018-09-17 18:00:06 +02:00
Luca Deri
f0c936c368
Updated (C) to 2018
2018-03-22 21:59:42 +01:00
emanuele-f
99b67b16ad
Remove old nedge define and move to new one
2018-02-09 13:01:08 +01:00
Luca Deri
5b54d43690
Added handling of IP_PROTOCOL_VERSION ZMQ export
2017-12-19 12:50:39 +01:00
emanuele-f
5d22c6fbd2
Fix crash on zmq when source ip is zero and destination ip is ipv4
...
The source ip is sometimes set as ipv6, and this tricks code thinking the flow is ipv6.
This caused a crash in FlowProfiles, where get_ipv6 was called on an ipv4 address
2017-12-19 11:48:29 +01:00
Luca Deri
c9ecd931d9
Code cleanup
2017-12-16 08:23:56 +01:00
Luca Deri
ac8a06617f
Fixed leak in flow collection
2017-11-21 18:00:55 +01:00
Luca Deri
29ede6ff67
Added support for sFlow sample packet drops
2017-11-18 13:34:36 +01:00
Simone Mainardi
76ac648339
Fixes ZMQ ip parse with new optimized flow format
...
Fixes #1532
2017-10-23 19:05:10 +02:00
Luca Deri
074a08e7ce
Simplified ntopng when nEdge is used
2017-10-21 15:36:28 +02:00
Luca Deri
fef176ea5b
Reworked memory deallocation in collected flows with multiple elements
2017-10-15 07:57:45 +02:00
Luca Deri
4b01406137
Improved fingerprinting support
...
Disabled HTTP banned page support as in the current implementation is ambiguous
Fixed flow parsing leak
2017-10-15 07:46:20 +02:00
Luca Deri
3cfbfd4900
Fix ZMQ flow increment when multiple flows are delivered on the same ZMQ message
2017-10-13 15:24:47 +02:00
Luca Deri
594abe68ce
Implemented ZMQ flow buffering support for enhancing ZMQ performance and decreasing data exchanged
2017-10-10 10:45:25 +02:00
Luca Deri
124364c4a2
Initial work towards better flow serialization
2017-10-03 14:55:35 +02:00
Luca Deri
3f62a7f9c3
Implemented traffic direction in network interfaces
2017-09-16 18:35:06 +02:00
Simone Mainardi
906aff3e20
Implements use of post-nat src/dst addresses and ports
...
Implements https://github.com/ntop/ntopng/issues/1398
2017-09-07 16:24:53 +02:00
Simone Mainardi
0499fce4d3
Adds missing ZMQ fields
2017-09-07 12:29:47 +02:00
Simone Mainardi
5955ee576c
Handles multiple banaced ZMQ endpoints
2017-09-05 10:18:04 +02:00
Simone Mainardi
816965b1ac
Implements support of flow field FIREWALL_EVENT
2017-08-10 15:54:03 +02:00