Up to [cvs.NetBSD.org] / pkgsrc / net / ntopng
Request diff between arbitrary revisions
Default branch: MAIN
Revision 1.69 / (download) - annotate - [select for diffs], Sun Apr 7 07:34:49 2024 UTC (8 days, 20 hours ago) by wiz
Branch: MAIN
CVS Tags: HEAD
Changes since 1.68: +2 -1
lines
Diff to previous 1.68 (colored) to selected 1.21 (colored)
*: bump for cairo buildlink3.mk change lzo was made an option
Revision 1.68 / (download) - annotate - [select for diffs], Mon Nov 20 17:59:35 2023 UTC (4 months, 3 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2024Q1-base,
pkgsrc-2024Q1,
pkgsrc-2023Q4-base,
pkgsrc-2023Q4
Changes since 1.67: +6 -4
lines
Diff to previous 1.67 (colored) to selected 1.21 (colored)
ntopng: updated to 6.0 6.0 Stable Breakthroughs New configurable Dashboard with new built-in templates New configurable Traffic Report New Vulnerability Scans & CVEs support Add support to Periodic Reports notified via Recipients (e.g. email) Add Inactive Hosts Add PagerDuty integration Add TheHive integration Add support to Modbus and Modbus alerts Add Server Ports Analysis page Enable multithreading in active measurements (more accurate) Migrate frontend chart timeseries library to Dygraph Add support for MAC Address based RADIUS accounting Improve OT, ICS, Scada support Trigger External Host alerts directly from Lua (also for inactive hosts) Add multicast forwarders Implement host blackhole Add support for LLDP id to MIB-II InterfaceId mapping Add support for bidirectional rules Add support for Enterprise XL bundle Improvements Implement asynchronous VS scanning Implement Ms Teams call detection Optimize blacklist handling Improve Network Map charts physics Extend support to deliver notification to specific recipients Improve traffic recording settings Add support for Host Pools and Networks in Local Traffic Rules Add search map Add custom queries for Top Local/Remote hosts Add Top receiver/sender networks custom queries Add openvas support Add new Vulners vulnerability scanner Add ability to set probes aliases Add MDNS, NETBios, HTTP historical filters Improve FreeBSD clickhouse installation Implement -L <path> for logging HTTP requests Add -z for enabling timestamp reforge when reading pcap files Improve dark mode css Optimize ElasticSearch export (removed locks, increase export queue to 64K to handle spikes) Add Radius chap validation Add Radius auth protocol preference Automated commit of clang-format CI changes Add tool for creating nProbe topics in a kafka broker Implement host score in Host scripts Improvements for No-RX traffic analysis Improve nProbe time drift check Implement clickhouse retention Add new page with snmp device rules Add limit to discard clickhouse dump files Improve IP/MAC association in SNMP Changes Support multilple -m options Rework nDPI stats Add support for multiple email recipients Add logic to enable generic checks if without a configuration Add malware host contacted check Use REST API to enable/disable checks Disabled the reset of the email notification modal upon failed edit submission Whitelisted locale page Add ability to reset blacklist stats Implement blacklist stats Add mining currency in flow info Add flag to use proxy in email settings Reduced in simulate vlans option, the number of vlans Restricted top flow chart for community version Add input with suggestions component Set capture direction for n2disk in zmq interfaces Add explicit flag to enable flow export when recording on zmq interfaces Add support for %NPROBE_INSTANCE_NAME Add Ellio blocklist configuration (disabled by default) Update to the latest nDPI risks Email endpoint improvements Improve notification message Add download/upload buttons Add possibility to send notification to recipients Add multicast broadcast filter Updated checks lists per license Add feedback of correctly host inserted or already present Take the score into account when computing the top alerted hosts Add backend autorefresh support Add flow exporter mapping to timeseries Update default aggregation criteria in Aggregated live flows. Add missing protocol mapping Exported IP country information when using -F syslog Change js formatting function for 'number' type, using thousands separator Disabled LDAP support for FreeBSD Add VLAN bidirectional traffic alert Handle JSON format for NXLOG in Kerberos plugin nEdge Add dashboard templates for nedge pro and enterprise Enable CH support on nEdge Enterprise Enable throughput charts on nedge Make Multicast repeater configurable Add MDNS and multicast repeater Major cleanup of (deprecated) nedge host pools code Add support for custom informative captive portal Set multiple LAN addresses in case of multiple LAN interfaces Add inter-LANs policies Always redirect somewhere on captive success, instead of displaying an empty page nf_config API improvements Fixes Fix edit rest in multicast forwarding Fix missing validation functions Fix traffic timeseries labels Fix RedHat OS-name detection Fix prototype pollution vulnerability Fix thread pool spawning on freebsd Fix Zoom handling Fix behavior alert not triggered Fix naming with timeseries Fix nDPI protocol id issues Fix RRD computation of sampled series with MAX as consolidated function Fix flow alert where clause in write mode Fix alert silencing not working Fix application protocol ID using minor and major protocol Fix UI spinner on loading Fix recursive problem in active monitoring Fix ts with vlans Fix shutting down doesn't insert alerts in CH Fix checks configuration initialization (default values) for new risks Fix traffic behavior total not working in charts Fix timeseries chart date format Fix SSH flow swap heuristic Fix avg empty value and added extra check for nan values in js Fix pcap dynamically loaded not triggering alert Fix ZMQ linking on Win Fix date format Fix blacklist counter stats Fix flow alert queries on SQLite Fix interface and local networks alerts not released Fix flow devices not working with view interface Fix flow exporters not seen with aggregated interfaces Fix js regexes Fix for validating correctly host and VLAN Fix segv with custom protocols Fix l7 metadata ingestion (e.g. dns query) when collecting from ZMQ Fix hostname resolving Fix ApexCharts formatter Fix heap-buffer-overflow in MDNS packet dissection Fix exclusion bitmap not correctly set Fix some errors and leaks found while fuzzing locally Fix Heap buffer overflow in IEC104Stats Fix for memory management in packet-mode
Revision 1.67 / (download) - annotate - [select for diffs], Tue Nov 14 14:02:40 2023 UTC (5 months ago) by wiz
Branch: MAIN
Changes since 1.66: +2 -2
lines
Diff to previous 1.66 (colored) to selected 1.21 (colored)
*: recursive bump for cairo dependency changes
Revision 1.66 / (download) - annotate - [select for diffs], Sun Nov 12 13:23:12 2023 UTC (5 months ago) by wiz
Branch: MAIN
Changes since 1.65: +2 -2
lines
Diff to previous 1.65 (colored) to selected 1.21 (colored)
*: revebump for new brotli option for freetype2 Addresses PR 57693
Revision 1.65 / (download) - annotate - [select for diffs], Wed Nov 8 13:20:32 2023 UTC (5 months, 1 week ago) by wiz
Branch: MAIN
Changes since 1.64: +2 -2
lines
Diff to previous 1.64 (colored) to selected 1.21 (colored)
*: recursive bump for icu 74.1
Revision 1.64 / (download) - annotate - [select for diffs], Tue Oct 24 22:10:27 2023 UTC (5 months, 3 weeks ago) by wiz
Branch: MAIN
Changes since 1.63: +2 -1
lines
Diff to previous 1.63 (colored) to selected 1.21 (colored)
*: bump for openssl 3
Revision 1.63 / (download) - annotate - [select for diffs], Thu Jun 29 18:06:21 2023 UTC (9 months, 2 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2023Q3-base,
pkgsrc-2023Q3
Changes since 1.62: +22 -5
lines
Diff to previous 1.62 (colored) to selected 1.21 (colored)
ntopng: updated to 5.6 ntopng 5.6 Breakthroughs Add XL license Add support Rocky9 Add support to Kafka Increased max num of exporters Introduce nTap support Introduce support to ClickHouse Cluster Rework Historical Chart Page Rework pages using VueJS and moving towards responsive client Improvements Handle allowed networks for unprivileged users Improve multitenancy support Improve thread names Improve mac formatting Improve top host sites adding reset method Improve pcap upload Improve ports formatting Improve handling for Cisco NBAR collection Improve source style Improve Linux OS detection Improve Engaged Time Report in Chart Improve passive DNS hosty resolution Improve alerts reports Improve OPNsense installation instruction Improve host report Improve support to NDPI_TCP_ISSUES flow risk Improve layout Improve ICMP flow handling Lowered memory consumption due to alert score Rework pro code directories Rework lua code Rework flow aggregation Rework capabilities support Socket code cleanup Use API to build interface report Update rrd calculations Update JP localization (courtesy of Yoshihiro Ishikawa) Changes Add logo to package Add missing deps Add link to host Add options to send report by email Add Report class and example Add internal server error on health/interfaces doc api Add support for external (REST) host alerts Add various help and parameters Add script to create a pdf report from historical API data Add NXLOG/Active Directory documentation Add reload button in various pages Add third party resources Add flow exporter ips to observation points Add support for the python API documentation Add forced offline variable to mantain the --offline option Add support for Lua host engaged alerts using timeout Add observation points ts Add HTTP server in flow details Add token-based authentication https://www.ntop.org/guides/ntopng/advanced_features/authentication.html?highlight=token#token-based-authentication Add Flow Risk (Bitmap) Filter in alerts Add make targets for pip package Updated package classes Add L7 information in flow object adding Add CodeQL workflow for GitHub code scanning Add modal-download-file component and add export timeseries png picture button Add critical and emergency status to alerts Add oneway TCP flows counters Add support for nDPI network handling in flows Add -n 4 for name resolution Add IMAP/POP stats Add Stratosphere Labs Blacklist support Add support d3v7 Add Requires for RH9 (redhat-lsb-core is deprecated) Add interfaces stats api and refactor the others health api Add support to application protocol and master protocol Add CIDR support in Historical Flows Add new Aggregated Flows page Add new Alerts Analysis page Add support for estimating the number of TCP contacted servers with no reply Add new Ports Analysis page Add detection of periodic flows and exported it as flow risk in both flows and alerts Add REST API to get DB columns and info Add ability to query alerts from Python Add Zoom streams handling Add various checks Add IP-in-IP decapsulation Add Host Rules page (possiblity to trigger alerts based on timeseries) Add the ability to analyze a pcap without creating a new interface Add Windows timezone handling Change table definition Cleanup file names Disabled host serialization Enlarged the number of local networks to 1024 Increased upload size to 25 MB Implement custom script check Implement support of host filtering with TX traffic sent Implement unresponsive peers host report Implement count of incoming tx peers with TCP flows unanswered Move ts business logic in ts_rest_utils.lua Patch for handling nicely clock drift at startup Remove obsolete autogen commands On Linux stay with g++ unless asnitizer is used Remove REST API v0 (discontinued since ntopng 4.2) Remove no more used severity Refactor range-picker query_presets Rework host packets page and removed dscp page Rework host ports implementation Rework Historical class Rework OPNsense plugin package build Self test fixes and improvements Update documentation Update REST API Update bootstrap table css Update various pages to vuejs Update counter scaling (no gauge) Update response in service disabled case nEdge Add support to multi LAN and fixes DHCP service error Add VLAN and multi WAN support to nedge Add routing_policy to nedge configuration callback Fix netplan configuration error Update vlan trunk doc Fix Df columns error management, table export formatted with % and column reordering now working Fix missing openssl dependency from MacOS Fix clang Fix host sankey minor issues Fix hyperlinks to historical charts not working Fix hyperlinks not working correctly Fix Regex escape Fix application name resolution on aggregated views Fix RRD driver for step calaculation Fix visual bugs with master and app proto Fix various interface page minor bugs Fix shortened labels Fix default sort not working Fix influxdb retention not updated Fix name and size of charts Fix vlan label not mapped Fix for FreeBSD configure Fix ip resolution not updating the name Fix discrepancy in Traffic Calculation (Interface Chart) Fix measurement units not uniform Fix crash swap Fix bug that reported wrong DNS information Fix build process with opnsense/plugins Fix validators regexps Fix ICMP emtropy report Improved HTTP flows report Fix Telegram Reported alerts contain HTML Fix multi-series Charts are Unreadable in Dark Mode Fix invalid reverse host resolution that caused hosts to be labelled with wrong symbolic name Fix delete obsoleted code from page-stats Fix for circular dependency js Fix overlay not working Fix due to changes to nDPI ALPN handling Fix CSS Inconsistency Across Browsers Fix Deep copy also for array of objects Fix missing modules Fix NAT handling with nprobe Fix initialization crash Removed multiple load from tables ZMQ encryption key is now reported in hex to avoid escape problems
Revision 1.62 / (download) - annotate - [select for diffs], Wed Apr 19 08:11:10 2023 UTC (11 months, 4 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2023Q2-base,
pkgsrc-2023Q2
Changes since 1.61: +2 -2
lines
Diff to previous 1.61 (colored) to selected 1.21 (colored)
revbump after textproc/icu update
Revision 1.61 / (download) - annotate - [select for diffs], Sun Jan 29 21:17:30 2023 UTC (14 months, 2 weeks ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2023Q1-base,
pkgsrc-2023Q1
Changes since 1.60: +2 -2
lines
Diff to previous 1.60 (colored) to selected 1.21 (colored)
*: Recursive revbup from graphics/freetype2
Revision 1.60 / (download) - annotate - [select for diffs], Wed Nov 23 16:20:53 2022 UTC (16 months, 3 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2022Q4-base,
pkgsrc-2022Q4
Changes since 1.59: +2 -2
lines
Diff to previous 1.59 (colored) to selected 1.21 (colored)
massive revision bump after textproc/icu update
Revision 1.59 / (download) - annotate - [select for diffs], Wed Oct 26 10:31:50 2022 UTC (17 months, 2 weeks ago) by wiz
Branch: MAIN
Changes since 1.58: +2 -2
lines
Diff to previous 1.58 (colored) to selected 1.21 (colored)
*: bump PKGREVISION for libunistring shlib major bump
Revision 1.58 / (download) - annotate - [select for diffs], Mon Apr 18 19:11:52 2022 UTC (23 months, 4 weeks ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2022Q3-base,
pkgsrc-2022Q3,
pkgsrc-2022Q2-base,
pkgsrc-2022Q2
Changes since 1.57: +2 -1
lines
Diff to previous 1.57 (colored) to selected 1.21 (colored)
revbump for textproc/icu update
Revision 1.57 / (download) - annotate - [select for diffs], Wed Mar 30 09:46:07 2022 UTC (2 years ago) by wiz
Branch: MAIN
Changes since 1.56: +4 -1
lines
Diff to previous 1.56 (colored) to selected 1.21 (colored)
ntopng: patch out unportable test(1) operator to fix build
Revision 1.56 / (download) - annotate - [select for diffs], Mon Mar 28 19:32:24 2022 UTC (2 years ago) by adam
Branch: MAIN
Changes since 1.55: +7 -9
lines
Diff to previous 1.55 (colored) to selected 1.21 (colored)
ntopng: updated to 5.2.1 ntopng 5.2 (February 2022) Breakthroughs * New ClickHouse support for storing historical data, replacing nIndex support (data migration available) * Advanced Historical Flow Explorer, with the ability to define custom queries using JSON-based configurations * New Historical Data Analysis page (including Score, Applications, Alerts, AS analysis), with the ability to define custom reports with charts * Enhanced drill down from charts and historical flow data and alerts to PCAP data * nEdge support for Ubuntu 20 * Enhanced support for Observation Points Improvements * Improve CPU utilization and memory footprint * Improve historical data retention management for flows and timeseries * Improve periodic activities handling, with support for strict and relaxed (delayed) tasks * Improve filtering and analysis of the historical flows * Improve alert explorer and filtering * Improve Enterprise dashboard look and feel * Improve the speedtest support and servers selection * Improve support for ping and continuous ping (ICMP) for active monitoring * Improve flow-direction handling * Improve localization (including DE and IT translations) * Improve IPS policies management * Add IPS activities logging (e.g. block, unblock) * Improve SNMP support * Optimize polling of SNMP devices * Improve SNMP v3 support * Add more information including version * Stateful SNMP alert to detect too many MACs on non-trunk * Perform fat MIBs poll on average every 15 minutes * Add preference to disable polling of SNMP fat MIBs * Add more information to the historical flow data, including Latency, AS, Observation Points, SNMP interface, Host Pools * Add detailed view of historical flows and alerts * Add support for nProbe field L7_INFO * Add ICMP flood alert * Add Checks exclusion settings for subnets and for hosts and domains globally * Add CDP support * Add more regression tests * Add support for obsolete client SSH version * Add support for ERSPAN version 2 (type III) * Add support for all the new nDPI Flow Risks added in nDPI 4.2 * Add extra info to service and periodicity map hosts * Add Top Sites check * REST API * Getter for the bridge MIB * Getter for LLDP adjacencies * Check for BPF filters * Score charts timeseries and analysis Changes * Encapsulated traffic is accounted for the lenght of the encapsulated packet and not of the original packet * Remove nIndex support, including the flow explorer * Remove MySQL historical flow explorer (export only) * Hide LDAP password from logs Fixes * Fix a few memory leaks, double free, buffer overflow and invalid memory access * Fix SQLite initialization * Fix support for fragmented packets * Fix IP validation in modals * Fix netplan configuration manager * Fix blog notifications * Fix time range picker to support all browsers * Fix binary application transfer name in alerts * Fix glitches in chart drag operations * Fix pools edit/remove * Fix InfluxDB timeseries export * Fix ELK memory leak * Fix TLS version for obsolete TLS alerts when collecting flows * Fix fields conversion in timeseries charts filters * Fix some invalid nProbe field mapping * Fix hosts Geomap * Fix slow shutdown termination * Fix wrong Call-ID 0 with RTP streams with no SIP stream associated * Fix ping support for FreeBSD * Fix active monitoring interface list * Fix host names not always shown * Fix host pools stats * Fix UTF8 encoding issues in localization tools * Fix time/timezone in forwarded syslog messages * Fix unknown process alert * Fix nil DOM javascript error * Fix country not always shown in flow alerts * Fix non-initialized traffic profiles * Fix traffic profiles not working over ZMQ * Fix syslog collection * Fix async SNMP calls blocking the execution * Fix CPU stats timeseries * Fix InfluxDB attempts to alwa re-create retention policies * Fix REST API ts.lua returning 24h data * Fix processing of DNS packets under certain conditions * Fix invalid space in SNMP Hostnames * Fix REST API incompat. (/get/alert/severity/counters.lua, /get/alert/type/counters.lua) * Fix map layout not saved correctly * Fix LLDP topology for Juniper routers * Fix not authorized error when editing SNMP devices * Fix double 95perc, splitted avg and 95perc in sent/rcvd in charts * Fix inconsistent local/remote timeseries * Fix Risks generation in IPS policy configuration * Fix deletion of sub-interface * Fix deadline not honored when monitoring SNMP devices * Fix traffic profiles on L7 protocols * Fix TCP connection refused check * Fix failures when the DB is not reacheable * Fix segfault with View interfaces * Fix hosts wrongly detected as Local * Fix missing throughputs in countries Misc * Enforces proxy exclusions with env var `no_proxy` * Move Lua engine to 5.4 * Major code review and cleanup nEdge * Add support for Ubuntu 20 * Add ability to logout when using the Captive Portal * Add per egress interface stats and timeseries * Add active DHCP leases in UI and REST API * Add daily/weekly/monthly quotas * Add service and periodicity maps and alerts * Fix Captive Portal not working due to invalid allowed interface * Fix addition of static DHCP leases * Fix factory reset * Fix reboot button ntopng 5.0 (August 2021) Breakthroughs * Advanced alerts engine with security features, including the detection of [attackers and victims](https://www.ntop.org/ntopng/how-attackers-and-victims-detection-works-in-ntopng/) * Integration of 30+ [nDPI security risks](https://www.ntop.org/ndpi/how-to-spot-unsafe-communications-using-ndpi-flow-risk-score/) * Generation of the `score` [indicator of compromise](https://www.ntop.org/ntopng/what-is-score-and-how-it-can-drive-you-towards-network-issues/) for hosts, interfaces and other network elements * Ability to collect flows from hundredths of routers by means of [observation points](https://www.ntop.org/nprobe/collecting-flows-from-hundred-of-routers-using-observation-points/) * Anomaly detection based on Double Exponential Smoothing (DES) to uncover possibly suspicious behaviors in the traffic and in the score * Encrypted Traffic Analysis (ETA) with special emphasis on the TLS to uncover self-signed, expired, invalid certificates and other issues New features * Ability to configure alert exclusions for individual hosts to mitigate false positives * FreeBSD / OPNsense / pfSense [packages](https://packages.ntop.org/) * Ability to see the TX/RX traffic breakdown both for physical interfaces and when receiving traffic from nProbe * Add support for ECS when exporting to Syslog * Improved TCP analysis, including analysis of TCP flows with zero window and low goodput * Ability to send alerts to Slack * Implementation of a token-based REST API access Improvements * Reworked the execution of hosts and flows checks (formerly user scripts), yielding a reduced CPU load of about 50% * Improved 100Kfps+ [NetFlow/sFlow collection performance](https://www.ntop.org/nprobe/netflow-collection-performance-using-ntopng-and-nprobe/) * Drilldown of [nIndex](https://www.ntop.org/guides/ntopng/advanced_features/flows_dump.html#nindex) historical flows much more flexible * Migration to Bootstrap 5 * Check malicious JA3 signatures against all TLS-based protocols * Reworked Doh/DoT handling Fixes * Fixes SSRF and stored-XSS injected with malicious SSDP responses * Fixes several leaks in NetworkInterface Notes * To ensure optimal performance and scalability and to prevent uneven resource utilization, the maximum number of interfaces handled by a single ntopng instance has been reduced to * 16 (Enterprise M) * 32 (Enterprise L) * 8 (all other versions) * REST API v1/ is deprecated and will be dropped in the next stable release in favor of REST API v2/ * The old alerts dashboard has been removed and replaced by an advanced alerts drilldown page with integrated charts
Revision 1.55 / (download) - annotate - [select for diffs], Wed Dec 8 16:06:04 2021 UTC (2 years, 4 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2022Q1-base,
pkgsrc-2022Q1,
pkgsrc-2021Q4-base,
pkgsrc-2021Q4
Changes since 1.54: +2 -2
lines
Diff to previous 1.54 (colored) to selected 1.21 (colored)
revbump for icu and libffi
Revision 1.54 / (download) - annotate - [select for diffs], Wed Sep 29 19:01:09 2021 UTC (2 years, 6 months ago) by adam
Branch: MAIN
Changes since 1.53: +2 -2
lines
Diff to previous 1.53 (colored) to selected 1.21 (colored)
revbump for boost-libs
Revision 1.53 / (download) - annotate - [select for diffs], Wed Jun 23 20:33:15 2021 UTC (2 years, 9 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2021Q3-base,
pkgsrc-2021Q3
Changes since 1.52: +2 -1
lines
Diff to previous 1.52 (colored) to selected 1.21 (colored)
Revbump for MySQL default change
Revision 1.52 / (download) - annotate - [select for diffs], Wed Jun 23 19:34:15 2021 UTC (2 years, 9 months ago) by adam
Branch: MAIN
Changes since 1.51: +4 -5
lines
Diff to previous 1.51 (colored) to selected 1.21 (colored)
ntopng: updated to 4.2 4.2 Stable Breakthroughs Flexible Alert Handling Added recipients and endpoints to send alerts to different recipients on different channels, including email, Discord, Slack and Elasticsearch Initial SCADA protocol support Many internal components of ntopng have been rewritten in order to improve the overall ntopng performance, reduce system load, and capable of processing more data while reducing memory usage with respect to 4.0. Cybersecurity extensions have been greatly enhanced by leveraging on the latest nDPI enhancements that enabled the creation of several user scripts able to supervise many security aspects of modern systems. Behavioral traffic analysis and lateral traffic movement detection for finding cybersecurity threats in traffic noise. Initial Scada support with native IEC 60870-5-104 support. We acknowledge switch.ch for having supported this development. Consolidation of Suricata and external alerts integration to further open ntopng to the integration of commercial security devices. SNMP support has been enhanced in terms of speed, SNMPv3 protocol support, and variety of supported devices. New REST API that enabled the integration of ntopng with third party applications such as CheckMK. New features Traffic Behavioral Analysis Periodic Traffic Lateral Movements TLS with self-signed certificates, issuerDN, subjectDN Support for Industrial IOT and Scada with modbus, DNP3 and IEC60870 Support for attack mitigation via SNMP Active monitoring Support for ICMP v4/v6, HTTP, HTTPS and Speedtest Ability to generate alerts upon unreachable or slow hosts or services Detection of unexpected servers DHCP, NTP, SMTP, DNS Services map nIndex direct to maximixe flows dump performance MacOS package Improvements Implements per-category indicator of compromise score Flexible configuration import/export/reset Ability to import/export/reset all the ntopng configurations or parts of it Increased nIndex dump throughput by a factor 10 Increased user scripts execution throughput Massive cleanup/simplifications of plugins to ease community contributions Improved cardinality estimation (e.g., number of contacted hosts, number of contacted ports) using Hyper-Log-Log Added DSCP information Reworked handling of dissected virtual hosts to improve speed and reduce memory nEdge Support for hardware bypass Fixes Fixed race conditions in view interfaces Fixed crash when restoring serialized hosts in memory Fixed conditions causing high CPU load Fixes CSRF vulnerabilities when POSTing JSON Fixes heap-use-after-free on HTTP dissected last_url
Revision 1.51 / (download) - annotate - [select for diffs], Fri May 14 12:57:27 2021 UTC (2 years, 11 months ago) by nia
Branch: MAIN
CVS Tags: pkgsrc-2021Q2-base,
pkgsrc-2021Q2
Changes since 1.50: +5 -3
lines
Diff to previous 1.50 (colored) to selected 1.21 (colored)
ntopng: Don't use bundled copy of Lua
Revision 1.50 / (download) - annotate - [select for diffs], Fri May 14 12:29:44 2021 UTC (2 years, 11 months ago) by nia
Branch: MAIN
Changes since 1.49: +1 -2
lines
Diff to previous 1.49 (colored) to selected 1.21 (colored)
ntopng: revert previous, needs more investigation...
Revision 1.49 / (download) - annotate - [select for diffs], Fri May 14 12:29:19 2021 UTC (2 years, 11 months ago) by nia
Branch: MAIN
Changes since 1.48: +2 -1
lines
Diff to previous 1.48 (colored) to selected 1.21 (colored)
ntopng: needs readline
Revision 1.48 / (download) - annotate - [select for diffs], Wed Apr 21 13:25:12 2021 UTC (2 years, 11 months ago) by adam
Branch: MAIN
Changes since 1.47: +2 -2
lines
Diff to previous 1.47 (colored) to selected 1.21 (colored)
revbump for boost-libs
Revision 1.47 / (download) - annotate - [select for diffs], Wed Apr 21 11:42:27 2021 UTC (2 years, 11 months ago) by adam
Branch: MAIN
Changes since 1.46: +2 -2
lines
Diff to previous 1.46 (colored) to selected 1.21 (colored)
revbump for textproc/icu
Revision 1.46 / (download) - annotate - [select for diffs], Thu Nov 5 09:08:55 2020 UTC (3 years, 5 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2021Q1-base,
pkgsrc-2021Q1,
pkgsrc-2020Q4-base,
pkgsrc-2020Q4
Changes since 1.45: +2 -2
lines
Diff to previous 1.45 (colored) to selected 1.21 (colored)
*: Recursive revbump from textproc/icu-68.1
Revision 1.45 / (download) - annotate - [select for diffs], Mon Aug 17 20:19:50 2020 UTC (3 years, 7 months ago) by leot
Branch: MAIN
CVS Tags: pkgsrc-2020Q3-base,
pkgsrc-2020Q3
Changes since 1.44: +2 -2
lines
Diff to previous 1.44 (colored) to selected 1.21 (colored)
*: revbump after fontconfig bl3 changes (libuuid removal)
Revision 1.44 / (download) - annotate - [select for diffs], Tue Jun 2 08:24:33 2020 UTC (3 years, 10 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2020Q2-base,
pkgsrc-2020Q2
Changes since 1.43: +2 -1
lines
Diff to previous 1.43 (colored) to selected 1.21 (colored)
Revbump for icu
Revision 1.43 / (download) - annotate - [select for diffs], Mon May 25 20:26:51 2020 UTC (3 years, 10 months ago) by adam
Branch: MAIN
Changes since 1.42: +7 -3
lines
Diff to previous 1.42 (colored) to selected 1.21 (colored)
ntopng: updated to 4.0 ntopng 4.0: Breakthroughs * Plugins engine to tap into flows, hosts and other network elements * Migration to Bootstrap 4 and Font Awesome 5 for a renewed ntopng look-and-feel with light and dark themes * Processes and containers monitoring thanks to the eBPF integration via libebpfflow https://github.com/ntop/libebpfflow * Active monitoring of hosts ICMP/ICMPv6/HTTP/HTTPS Round Trip Times (RTT) New features * X.509 client certificate authentication * ERSPAN transparent ethernet bridging * Webhook export module for exporting alarms * Identifications of the hosts in broadcast domain * Category Lists editor to manage ip/domain lists * Handling of PEN fields from nProbe * Added anomalous flows to the looking glass * Visibility of ICMP port-unreachable flows IPv4 * TCP states filtering (est., connecting, closed and rst) * Ability to serialize local hosts in the broadcast domain via MAC address * Japanese, portugese/brazilian localization * Added process memory, cpu load, InfluxDB, Redis status pages and charts * Implement ntopng Plugins, self contained modules to extend the ntopng functionalities * Implement ZMQ/Suricata companion interface * SSL traffic analysis and alerts via JA3 fingerprint, unsafe ciphers detection * SSH traffic analysis and alerts via HASSH fingerprint * Host traffic profile generation via the (MUD) Manufacturer Usage Descriptor * Experimental Prometheus timeseries export * Introduce the System interface to manage system wide settings and status * Read events from Suricata and generate alerts * SNMP network topology visualization * Automatic ntopng update check and upgrade * Calculate host anomaly score and trigger alerts when it exceeds a threshold * Add ability to extract timeseries data with a click * Initial Marketplace droplet using Fabric * Alerts on duplex status change on SNMP interface Improvements * View interfaces are now optimized for big networks and use less memory * Systemd macros are now used to start/restart the ntopng services * Handles n2disk traffic extractions from recording processes non managed by ntopng * Interface in/out now available also for non PF_RING interfaces (read from /proc) * Automatic InfluxDB rollup support * MDNS discovery improvements * Rework of the alerts engine and api for efficient engaged alerts triggering * Faster ZMQ communication to nProbe thanks to the implementation of a binary TLV format * Stats update for ZMQ interfaces is now based on the idle/active flows timeout * Timeseries export improvements via queues, detect if InfluxDB is down and stop the export * Implemented reusable Lua engine to reduce the overhead of periodic scripts * Improve Lua error handling * Exclude certain categories from Elephant/Long lived flows alerts nEdge * Ability to set up port forwarding * Support for Ubuntu 18.04 * Fix users and other prefs deleted during nEdge data reset * Japanese localization * Block unsupported L3 protocols (currently only ARP and IPv4 are supported) * DNS mapping port to avoid conflicts with system programs Fixes * Fixed export to mysql on shutdown in case of Pcap file in community mode * Fixed failing SYN-scan detection * Fixed ZMQ decompression errors with large templates * Fixed possible XSS in login.lua referer param and `runtime.lua` * Update geolocation due to changes in the library usage policy * Fixes to support browsers dark mode * Option `--zmq-encryption-key <pub key>` can be used with `-I <endpoint>` to encrypt data hi hierarchical mode * Fixed nIndex missing data while performing some queries and throughput calculation
Revision 1.42 / (download) - annotate - [select for diffs], Fri May 22 10:56:30 2020 UTC (3 years, 10 months ago) by adam
Branch: MAIN
Changes since 1.41: +2 -2
lines
Diff to previous 1.41 (colored) to selected 1.21 (colored)
revbump after updating security/nettle
Revision 1.41 / (download) - annotate - [select for diffs], Tue May 19 12:09:08 2020 UTC (3 years, 10 months ago) by nia
Branch: MAIN
Changes since 1.40: +2 -2
lines
Diff to previous 1.40 (colored) to selected 1.21 (colored)
Recursive revbump for json-c-0.14
Revision 1.40 / (download) - annotate - [select for diffs], Wed May 6 14:04:57 2020 UTC (3 years, 11 months ago) by adam
Branch: MAIN
Changes since 1.39: +2 -2
lines
Diff to previous 1.39 (colored) to selected 1.21 (colored)
revbump after boost update
Revision 1.39 / (download) - annotate - [select for diffs], Sun Apr 12 08:29:05 2020 UTC (4 years ago) by adam
Branch: MAIN
Changes since 1.38: +2 -2
lines
Diff to previous 1.38 (colored) to selected 1.21 (colored)
Recursive revision bump after textproc/icu update
Revision 1.38 / (download) - annotate - [select for diffs], Tue Mar 10 22:10:47 2020 UTC (4 years, 1 month ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2020Q1-base,
pkgsrc-2020Q1
Changes since 1.37: +2 -2
lines
Diff to previous 1.37 (colored) to selected 1.21 (colored)
librsvg: update bl3.mk to remove libcroco in rust case recursive bump for the dependency change
Revision 1.37 / (download) - annotate - [select for diffs], Sun Mar 8 16:50:57 2020 UTC (4 years, 1 month ago) by wiz
Branch: MAIN
Changes since 1.36: +2 -2
lines
Diff to previous 1.36 (colored) to selected 1.21 (colored)
*: recursive bump for libffi
Revision 1.36 / (download) - annotate - [select for diffs], Sat Jan 18 21:50:21 2020 UTC (4 years, 2 months ago) by jperkin
Branch: MAIN
Changes since 1.35: +2 -2
lines
Diff to previous 1.35 (colored) to selected 1.21 (colored)
*: Recursive revision bump for openssl 1.1.1.
Revision 1.35 / (download) - annotate - [select for diffs], Sun Jan 12 20:20:39 2020 UTC (4 years, 3 months ago) by ryoon
Branch: MAIN
Changes since 1.34: +2 -2
lines
Diff to previous 1.34 (colored) to selected 1.21 (colored)
*: Recursive revbump from devel/boost-libs
Revision 1.34 / (download) - annotate - [select for diffs], Thu Aug 22 12:23:41 2019 UTC (4 years, 7 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q4-base,
pkgsrc-2019Q4,
pkgsrc-2019Q3-base,
pkgsrc-2019Q3
Changes since 1.33: +2 -2
lines
Diff to previous 1.33 (colored) to selected 1.21 (colored)
Recursive revbump from boost-1.71.0
Revision 1.33 / (download) - annotate - [select for diffs], Sat Jul 20 22:46:40 2019 UTC (4 years, 8 months ago) by wiz
Branch: MAIN
Changes since 1.32: +2 -1
lines
Diff to previous 1.32 (colored) to selected 1.21 (colored)
*: recursive bump for nettle 3.5.1
Revision 1.32 / (download) - annotate - [select for diffs], Fri Jul 12 09:33:22 2019 UTC (4 years, 9 months ago) by adam
Branch: MAIN
Changes since 1.31: +2 -3
lines
Diff to previous 1.31 (colored) to selected 1.21 (colored)
ntopng: updated to 3.8 3.8 Stable New features * Remote assistance to temporarily grant encrypted ntopng access to remote parties * Custom URLs and IP addresses mappings to traffic categories * Continuous traffic recording * User activities logging * Extended chart metrics Improvements * Alerts * Improved InfluxDB support * Handles slow and aborted queries * Uses authentication * Adds RADIUS and HTTP authenticators * Options to allow users login via RADIUS and HTTP * Lua 5.3 support * Improved performance * Better memory management * Native support for 64-bit integers * Native support for bitwise operations * Adds the new libmaxminddb geolocation library * Storage utilization indicators * Global storage indicator to show the disk used by each interface * Per-interface storage indicator to show the disk used to store timeseries and flows * Support for Sonicwall PEN field names * Option to disable LDAP referrals * Requests and configures Keepalive support for ZMQ sockets * Three-way-handshake detection * Adds SNMP mac addresses to the search function nEdge * Implement nEdge policies test page * Implement device presets * DNS Fixes * Fixes missing flows dump on shutdown * HTTP dissection fixes * SNMP * Properly handles endianness over ZMQ
Revision 1.31 / (download) - annotate - [select for diffs], Mon Jul 1 04:08:42 2019 UTC (4 years, 9 months ago) by ryoon
Branch: MAIN
Changes since 1.30: +2 -2
lines
Diff to previous 1.30 (colored) to selected 1.21 (colored)
Recursive revbump from boost-1.70.0
Revision 1.30 / (download) - annotate - [select for diffs], Wed Apr 3 00:33:00 2019 UTC (5 years ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2019Q2-base,
pkgsrc-2019Q2
Changes since 1.29: +2 -2
lines
Diff to previous 1.29 (colored) to selected 1.21 (colored)
Recursive revbump from textproc/icu
Revision 1.29 / (download) - annotate - [select for diffs], Thu Dec 13 19:52:17 2018 UTC (5 years, 4 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2019Q1-base,
pkgsrc-2019Q1,
pkgsrc-2018Q4-base,
pkgsrc-2018Q4
Changes since 1.28: +2 -2
lines
Diff to previous 1.28 (colored) to selected 1.21 (colored)
revbump for boost 1.69.0
Revision 1.28 / (download) - annotate - [select for diffs], Sun Dec 9 18:52:41 2018 UTC (5 years, 4 months ago) by adam
Branch: MAIN
Changes since 1.27: +2 -2
lines
Diff to previous 1.27 (colored) to selected 1.21 (colored)
revbump after updating textproc/icu
Revision 1.27 / (download) - annotate - [select for diffs], Wed Nov 14 22:22:13 2018 UTC (5 years, 5 months ago) by kleink
Branch: MAIN
Changes since 1.26: +2 -2
lines
Diff to previous 1.26 (colored) to selected 1.21 (colored)
Revbump after cairo 1.16.0 update.
Revision 1.26 / (download) - annotate - [select for diffs], Mon Nov 12 03:52:44 2018 UTC (5 years, 5 months ago) by ryoon
Branch: MAIN
Changes since 1.25: +2 -1
lines
Diff to previous 1.25 (colored) to selected 1.21 (colored)
Recursive revbump from hardbuzz-2.1.1
Revision 1.25 / (download) - annotate - [select for diffs], Thu Oct 18 16:25:40 2018 UTC (5 years, 5 months ago) by adam
Branch: MAIN
Changes since 1.24: +19 -15
lines
Diff to previous 1.24 (colored) to selected 1.21 (colored)
ntopng: updated to 3.6.1 3.6.1 Stable Brew formula fixes 3.6 Stable New features ------------ New pro charts Ability to compare data with the past (time shift) Trend lines based on ASAP Average and percentile lines overlayed on the graph and animated New color scheme that uses pastel colors for better visualization https://www.ntop.org/ntopng/ntopng-and-time-series-from-rrd-to-influxdb-new-charts-with-time-shift/ New timeseries API with support for RRD and InfluxDB Abstracts and handles multiple sources transparently https://www.ntop.org/guides/ntopng/api/lua/timeseries/index.html Streaming pcap captures with BPF support Download live packet captures right from the browser New SNMP devices caching Periodically cache information of all the SNMP device configured Calculate and visualize interfaces throughput Improvements ------------ Security Access to the web user interface is controlled with ACLs Secure ntopng cookies with SameSite and HttpOnly HTTP cookie authentication Improved random session id generation Various SNMP improvemenets Caching Interfaces status change alerts Device interfaces page Devices and interfaces added to flows Fixed several library memory leaks Improved device and interface charts Interfaces throughput calculation and visualization Ability to delete all SNMP devices at once Improved active devices discovery OS detection via HTTP User-Agent Alerts Crypto miners alerts toggle Detection and alerting of anomalous terminations Module for sending telegram.org alerts Slack Configurable Slack channel names Added Slack test button Charts Active flows vs local hosts chart Active flows vs interface traffic chart Ubuntu 18.04 support Support for ElasticSearch 6 export Added support for custom categories lists Added ability to use the non-JIT Lua interpreter Improved ntopng startup and shutdown time Support for capturing from interface pairs with PF_RING ZC Support for variable PPP header lenght Migrated geolocation to GeoLite2 and libmaxminddb Configuration backup and restore Improved IE browser support Using client SSL certificate for protocol detection Optimized host/flows purging
Revision 1.24 / (download) - annotate - [select for diffs], Fri Jul 20 03:34:24 2018 UTC (5 years, 8 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2018Q3-base,
pkgsrc-2018Q3
Changes since 1.23: +2 -2
lines
Diff to previous 1.23 (colored) to selected 1.21 (colored)
Recursive revbump from textproc/icu-62.1
Revision 1.23 / (download) - annotate - [select for diffs], Wed Jul 18 00:06:22 2018 UTC (5 years, 9 months ago) by joerg
Branch: MAIN
Changes since 1.22: +2 -2
lines
Diff to previous 1.22 (colored) to selected 1.21 (colored)
Mark packages that require C++03 (or the GNU variants) if they fail with C++14 default language.
Revision 1.22 / (download) - annotate - [select for diffs], Sun Apr 29 21:32:00 2018 UTC (5 years, 11 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2018Q2-base,
pkgsrc-2018Q2
Changes since 1.21: +2 -2
lines
Diff to previous 1.21 (colored)
revbump for boost-libs update
Revision 1.21 / (download) - annotate - [selected], Tue Apr 17 22:29:46 2018 UTC (6 years ago) by wiz
Branch: MAIN
Changes since 1.20: +2 -2
lines
Diff to previous 1.20 (colored)
Add p11-kit to gnutls/bl3.mk and bump dependencies.
Revision 1.20 / (download) - annotate - [select for diffs], Mon Apr 16 14:35:02 2018 UTC (6 years ago) by wiz
Branch: MAIN
Changes since 1.19: +2 -2
lines
Diff to previous 1.19 (colored) to selected 1.21 (colored)
Recursive bump for new fribidi dependency in pango.
Revision 1.19 / (download) - annotate - [select for diffs], Sat Apr 14 07:34:36 2018 UTC (6 years ago) by adam
Branch: MAIN
Changes since 1.18: +2 -2
lines
Diff to previous 1.18 (colored) to selected 1.21 (colored)
revbump after icu update
Revision 1.18 / (download) - annotate - [select for diffs], Mon Mar 12 11:17:22 2018 UTC (6 years, 1 month ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2018Q1-base,
pkgsrc-2018Q1
Changes since 1.17: +2 -2
lines
Diff to previous 1.17 (colored) to selected 1.21 (colored)
Recursive bumps for fontconfig and libzip dependency changes.
Revision 1.17 / (download) - annotate - [select for diffs], Mon Jan 1 21:18:49 2018 UTC (6 years, 3 months ago) by adam
Branch: MAIN
Changes since 1.16: +2 -2
lines
Diff to previous 1.16 (colored) to selected 1.21 (colored)
Revbump after boost update
Revision 1.16 / (download) - annotate - [select for diffs], Thu Nov 30 16:45:34 2017 UTC (6 years, 4 months ago) by adam
Branch: MAIN
CVS Tags: pkgsrc-2017Q4-base,
pkgsrc-2017Q4
Changes since 1.15: +2 -2
lines
Diff to previous 1.15 (colored) to selected 1.21 (colored)
Revbump after textproc/icu update
Revision 1.15 / (download) - annotate - [select for diffs], Mon Nov 6 13:30:12 2017 UTC (6 years, 5 months ago) by wiz
Branch: MAIN
Changes since 1.14: +2 -2
lines
Diff to previous 1.14 (colored) to selected 1.21 (colored)
ntopng: follow redirect
Revision 1.14 / (download) - annotate - [select for diffs], Mon Sep 18 09:53:31 2017 UTC (6 years, 6 months ago) by maya
Branch: MAIN
CVS Tags: pkgsrc-2017Q3-base,
pkgsrc-2017Q3
Changes since 1.13: +2 -2
lines
Diff to previous 1.13 (colored) to selected 1.21 (colored)
revbump for requiring ICU 59.x
Revision 1.13 / (download) - annotate - [select for diffs], Thu Aug 24 20:03:36 2017 UTC (6 years, 7 months ago) by adam
Branch: MAIN
Changes since 1.12: +2 -2
lines
Diff to previous 1.12 (colored) to selected 1.21 (colored)
Revbump for boost update
Revision 1.12 / (download) - annotate - [select for diffs], Thu Jun 15 14:54:44 2017 UTC (6 years, 10 months ago) by fhajny
Branch: MAIN
CVS Tags: pkgsrc-2017Q2-base,
pkgsrc-2017Q2
Changes since 1.11: +9 -1
lines
Diff to previous 1.11 (colored) to selected 1.21 (colored)
Add rudimentary SunOS support.
Revision 1.11 / (download) - annotate - [select for diffs], Sun Apr 30 01:21:57 2017 UTC (6 years, 11 months ago) by ryoon
Branch: MAIN
Changes since 1.10: +2 -2
lines
Diff to previous 1.10 (colored) to selected 1.21 (colored)
Recursive revbump from boost update
Revision 1.10 / (download) - annotate - [select for diffs], Sat Apr 22 21:03:50 2017 UTC (6 years, 11 months ago) by adam
Branch: MAIN
Changes since 1.9: +2 -2
lines
Diff to previous 1.9 (colored) to selected 1.21 (colored)
Revbump after icu update
Revision 1.9 / (download) - annotate - [select for diffs], Sun Feb 12 06:25:53 2017 UTC (7 years, 2 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2017Q1-base,
pkgsrc-2017Q1
Changes since 1.8: +2 -2
lines
Diff to previous 1.8 (colored) to selected 1.21 (colored)
Recursive revbump from fonts/harfbuzz
Revision 1.8 / (download) - annotate - [select for diffs], Mon Feb 6 13:55:50 2017 UTC (7 years, 2 months ago) by wiz
Branch: MAIN
Changes since 1.7: +2 -2
lines
Diff to previous 1.7 (colored) to selected 1.21 (colored)
Recursive bump for harfbuzz's new graphite2 dependency.
Revision 1.7 / (download) - annotate - [select for diffs], Sun Jan 1 16:06:33 2017 UTC (7 years, 3 months ago) by adam
Branch: MAIN
Changes since 1.6: +2 -2
lines
Diff to previous 1.6 (colored) to selected 1.21 (colored)
Revbump after boost update
Revision 1.6 / (download) - annotate - [select for diffs], Sun Dec 4 05:17:37 2016 UTC (7 years, 4 months ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2016Q4-base,
pkgsrc-2016Q4
Changes since 1.5: +2 -2
lines
Diff to previous 1.5 (colored) to selected 1.21 (colored)
Recursive revbump from textproc/icu 58.1
Revision 1.5 / (download) - annotate - [select for diffs], Fri Oct 7 18:26:07 2016 UTC (7 years, 6 months ago) by adam
Branch: MAIN
Changes since 1.4: +2 -2
lines
Diff to previous 1.4 (colored) to selected 1.21 (colored)
Revbump post boost update
Revision 1.4 / (download) - annotate - [select for diffs], Mon Sep 19 13:04:25 2016 UTC (7 years, 6 months ago) by wiz
Branch: MAIN
CVS Tags: pkgsrc-2016Q3-base,
pkgsrc-2016Q3
Changes since 1.3: +2 -1
lines
Diff to previous 1.3 (colored) to selected 1.21 (colored)
Recursive PKGREVISION bump for gnutls shlib major bump.
Revision 1.3 / (download) - annotate - [select for diffs], Fri Jul 1 04:51:15 2016 UTC (7 years, 9 months ago) by adam
Branch: MAIN
Changes since 1.2: +3 -3
lines
Diff to previous 1.2 (colored) to selected 1.21 (colored)
Changes 2.4: * Memory-management, stability and speed have been fundamentally improved * We have kept an eye on security and hardened the code to prevent privileges escalation and XSS * Alerts have been extended to include support for . Re-arming to avoid raising trains of identical alerts in short periods of time . Alert propagation to the infrastructure monitoring software Nagios . CIDR-based triggers to monitor the behavior of whole networks . The detection of suspicious probing attempts * Netfilter support has been added together with optional packet dropping features * Routing visibility is now possible through RIPE RIS * Availability of fine-grained historical data drill-down features, including top talkers, top applications, and interactions between hosts (more details here) * Integrations with other software . LDAP authentication support . alerts forwarding/withdrawal to Nagios . nBox integration to request full packet pcaps of monitored flows . Data export to Apache Kafka * We have extended and improved traffic monitoring . Visibility of TCP sessions throughput estimations and state breakdown (e.g., connections established, connections reset, etc.) . Goodput monitoring . Trends detection . Highlight of low-goodput flows and hosts . Visibility of hosts top-visited sites * Built-in support is now included for . GRE detunnelling . per-VLAN historical statistics . ICMP and ICMPv6 dissection * We have extended the set of supported OSes to include: Ubuntu 16, Debian 7, EdgeOS * There is also an optional support for hosts categorization via service flashstart.it
Revision 1.2 / (download) - annotate - [select for diffs], Mon Apr 11 19:02:00 2016 UTC (8 years ago) by ryoon
Branch: MAIN
CVS Tags: pkgsrc-2016Q2-base,
pkgsrc-2016Q2
Changes since 1.1: +2 -1
lines
Diff to previous 1.1 (colored) to selected 1.21 (colored)
Recursive revbump from textproc/icu 57.1
Revision 1.1 / (download) - annotate - [select for diffs], Fri Apr 8 16:59:07 2016 UTC (8 years ago) by adam
Branch: MAIN
Diff to selected 1.21 (colored)
ntopng is the next generation version of the original ntop, a network traffic probe that shows the network usage, similar to what the popular top Unix command does. ntopng is based on libpcap and it has been written in a portable way in order to virtually run on every Unix platform, MacOSX and on Windows as well. ntopng users can use a a web browser to navigate through ntop (that acts as a web server) traffic information and get a dump of the network status. In the latter case, ntopng can be seen as a simple RMON-like agent with an embedded web interface. The use of: * a web interface. * limited configuration and administration via the web interface. * reduced CPU and memory usage (they vary according to network size and traffic)