Commit graph

164 commits

Author SHA1 Message Date
Luca Deri
128eb7085f Added call to ntop.httpGetAuthToken() 2020-11-16 17:49:13 +01:00
Alfredo Cardigliano
a805a0501a Add api to send data over tcp 2020-11-09 15:42:34 +01:00
Simone Mainardi
4663559031 Improves flow status drilldown with alert level groups 2020-10-20 10:26:50 +02:00
Luca Deri
55d8e299fa Cleanued up code for flow score 2020-09-23 10:51:36 +02:00
Alfredo Cardigliano
fcfd9b3a2a Replace pcap_lookupdev (deprecated) with Utils::ntop_lookupdev 2020-09-14 13:20:49 +02:00
Simone Mainardi
e1f07e1787 Fixes email test button logs on console with no visual feedback
Fixes #4355
2020-09-03 16:30:34 +02:00
Simone Mainardi
b6667086ca Fixes email plugin not using CC
Fixes #4364
2020-09-03 14:45:56 +02:00
Alfredo Cardigliano
a034c72012 Add Utils::ifname2devname to convert pf_ring ifname into linux ifname 2020-09-03 10:50:22 +02:00
Luca Deri
6e4b27cee8 Fixed invalid CPU captialization 2020-07-29 10:17:55 +02:00
Simone Mainardi
1baa7d6cc4 Avoids double 5-sec HT-walks to update stats 2020-07-27 14:22:59 +02:00
Alfredo Cardigliano
3d4a072875 Syslog device name normalization (case insensitive match) (fix #4026) 2020-06-09 11:51:25 +02:00
Simone Mainardi
4eb8c10207 Enforces strict validation on default interfaces to prevent injections 2020-05-22 14:33:28 +00:00
Simone Mainardi
337637b1d8 Unifies interfaces enumeration across the whole code 2020-05-22 13:52:48 +02:00
Alfredo Cardigliano
56a505eaed Disable ifaces offloads via ethtool ioctl 2020-05-21 23:19:17 +02:00
Luca Deri
ad576c135c Win fixes 2020-04-28 13:25:48 +02:00
Luca Deri
9fabefe2cf Simplified houskeeping loop 2020-04-27 19:16:10 +02:00
emanuele-f
26520abf34 Add IPv6 support in HTTP monitor and don't follow the redirects
Fixes #3560
Fixes #3554
2020-03-16 11:23:37 +01:00
Luca Deri
fcd8b0bedc Implements #3517 2020-03-08 11:55:41 +01:00
Alfredo Cardigliano
765474fa70 Option -F nindex;{dump,load} to dump and load json flows (for debugging only) 2020-02-27 18:51:59 +01:00
Alfredo Cardigliano
731278448a Handle stats from multiple ZMQ producers in the same endpoint (fix #3409) 2020-02-18 12:26:50 +01:00
Alfredo Cardigliano
9ff35cb5f1 Country code to u16 2020-01-08 15:03:24 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Alfredo Cardigliano
2a3bef9d6c Replace JSON string with TLV for alerts generated by the datapath. This removes a JSON decode in housekeeping.lua (#3148) 2019-12-27 17:03:28 +01:00
Alfredo Cardigliano
65da842176 Add ntopng service restart to the menu 2019-12-19 18:08:22 +01:00
Alfredo Cardigliano
88a2c9c36f Email Notification improvements: add smtps support, add username/password configuration 2019-11-22 11:34:22 +01:00
Luca
c396ca1d25 Implemented redis address resolution optimizations by means of a bloom filter
Extended redis statistics
2019-11-09 18:41:01 +01:00
Luca Deri
7df142cb56 Compilation fixes for non-Linux platforms 2019-10-29 08:31:32 +01:00
Simone Mainardi
cce73c2f44 Implements lua interpreters telemetry 2019-10-28 23:47:03 +01:00
Alfredo Cardigliano
9992179645 Set affinity mask for service threads (implements #3012) 2019-10-28 15:54:33 +01:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Alfredo Cardigliano
3290bd803b Propagating additional fields to companion interface 2019-10-15 16:41:42 +02:00
Luca
d1417519ec Reworked bitmap handling 2019-10-11 11:41:20 +02:00
Alfredo Cardigliano
c34ffc65ed Importing DNS metadata from Suricata 2019-10-05 12:47:11 +02:00
emanuele-f
6e14f978d6 Flow alerts status cleanup 2019-09-10 13:12:11 +02:00
Alfredo Cardigliano
38a53ec1fa Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page. 2019-09-05 17:55:00 +02:00
Luca Deri
5cc319a787 Compilation fix 2019-08-29 07:13:24 +02:00
emanuele-f
a8cb972e7d Implement ghost networks alerts 2019-08-28 16:42:18 +02:00
Emanuele Faranda
c829c4c3c3
Unify os (#2755)
* Unify OS information.

Now OS information is only stored into the Host. The lua uses numeric IDs to handle OS.

* Fix network discovery OS

* Show OS detail into the host details page
2019-08-08 12:09:51 +00:00
emanuele-f
670f5f9d10 Fix bitmap operations on 64bit values 2019-07-31 13:48:00 +02:00
emanuele-f
09fb8667e2 Add ability to disable specific alert types on alertables 2019-07-22 23:37:23 +02:00
emanuele-f
6a6cedc899 Add ability to disable host alerts on specific flow status 2019-07-22 12:16:12 +02:00
emanuele-f
5e40e47cce Implement expired alerts release
This is necessary to handle the case where a previously configured alert config is deleted
2019-07-15 13:09:18 +02:00
emanuele-f
791afdbaca Implement CPU load chart 2019-06-06 19:20:11 +02:00
Simone Mainardi
f6557b1d69 Implements parsing and conversion of eBPF event types 2019-05-05 15:56:17 +02:00
Simone Mainardi
5a60605604 Handle eBPF virtual interfaces 2019-04-29 13:38:50 +02:00
emanuele-f
939ca8c166 Implement eBPF flows view and improve containers/pods pages 2019-04-26 15:34:53 +02:00
Simone Mainardi
bf3b1e45c4 Adds TcpInfo to class Flow with nProbe mini eBPF data 2019-04-24 18:13:09 +02:00
emanuele-f
46f37f764f Add missing declaration 2019-04-03 14:34:44 +02:00
Alfredo Cardigliano
61a8ce9a76 Implemented SyslogCollectorInterface/SyslogParserInterface
Implemented TCP-based syslog collector (multi producer)
Initial Suricata EVE events parsing (basic flows)
Reworked ZMQ CollectorInterface/Parser interface hierarchy
2019-04-02 18:32:52 +02:00
SalvatoreCostantino
27fcedf9ff Added TCP time series 2019-04-02 16:22:39 +02:00