1301 Commits

Author SHA1 Message Date
Franco Fichtner
a122361d36 firmware: if mtree is not found, still do version check 2018-12-03 09:49:59 +01:00
Franco Fichtner
d8da4890fe firmware: fix issue with previous 2018-12-03 08:02:22 +01:00
Franco Fichtner
3d8507a5cf firmware: more consolidation 2018-12-03 07:59:20 +01:00
Ad Schellevis
fad4b3c426 Network insight, resample data for get_timeseries(), closes https://github.com/opnsense/core/issues/2895
This commit samples data for all requested fractions, which should improve the missing data output.
2018-11-30 16:59:06 +01:00
Ad Schellevis
a8b0c06de4 Firewall/alias, default proto to ipv4+ipv6, this will force a reload of all aliases (since uniqueid uses proto), but usually that's not a big issue. closes https://github.com/opnsense/core/issues/2986 2018-11-30 10:06:19 +01:00
Michael Steenbeek
afcae6226a Clean up incorrect/unused variable assignments 2018-11-29 17:29:58 +01:00
Ad Schellevis
336f2e78c5 missed a spot in previous 2018-11-29 15:59:26 +01:00
Ad Schellevis
508e892880 Network insight, python2/3 compatibility for get_timeseries.py 2018-11-29 15:57:20 +01:00
Ad Schellevis
b6a7b7f6eb Network insight, cmd_args.key_fields missing split(','), for https://github.com/opnsense/core/issues/2964 2018-11-29 13:53:51 +01:00
Ad Schellevis
711e1d9da4 Netflow insight, regressions in rotate(), for https://github.com/opnsense/core/issues/2964 2018-11-29 13:36:51 +01:00
Ad Schellevis
2481b62ca8 Network insight, some 2to3 magic, closes https://github.com/opnsense/core/issues/2964 2018-11-29 13:08:12 +01:00
Franco Fichtner
c95c82cb87 firmware: rework opnsense-version again 2018-11-29 08:22:50 +00:00
Franco Fichtner
453946df33 firmware: proper kernel size, unify format with pkg 2018-11-29 08:04:44 +00:00
Franco Fichtner
c5a586e068 firmware: size for kernel / base 2018-11-28 14:25:39 +00:00
Ad Schellevis
4fada8803d Firewall/alias diagnostics, align endpoints with feature naming. https://github.com/opnsense/core/pull/2977 2018-11-28 08:38:15 +01:00
Michael Steenbeek
feb8423aeb Implement #2588: Add option to match IP with aliases (#2977) 2018-11-27 18:10:26 +01:00
Ad Schellevis
7841325609 Network insight, prevent undefined selected_resolution, set last item as default. for https://github.com/opnsense/core/issues/2964 2018-11-27 18:05:38 +01:00
Ad Schellevis
5b6289db3d Network insight, refactor get_top_usage.py for https://github.com/opnsense/core/issues/2964 2018-11-27 17:58:07 +01:00
Ad Schellevis
d8118a3004 more cleanups and alignments for https://github.com/opnsense/core/issues/2964 2018-11-27 15:27:49 +01:00
Ad Schellevis
813595af4f fix previous, https://github.com/opnsense/core/issues/2964 2018-11-27 12:50:45 +01:00
Ad Schellevis
8fdaf264de Network insight, support custom configuration in flowd_aggregate_metadata.py for https://github.com/opnsense/core/issues/2964 2018-11-27 10:43:16 +01:00
Ad Schellevis
4e69e5923b Network insight, cleanup. -c vs --config for https://github.com/opnsense/core/issues/2964 2018-11-27 10:30:06 +01:00
Franco Fichtner
3ad1be040c src: style and whitespace sweep 2018-11-25 12:10:03 +01:00
Ad Schellevis
1680c1e1b0 Network insight, aggregator support single_pass (exit when there's no new data left), for https://github.com/opnsense/core/issues/2964 2018-11-24 21:40:13 +01:00
Ad Schellevis
c7660ca43f Network insight, another minor side affect of https://github.com/opnsense/core/issues/2964 export misses timestamp convert. 2018-11-24 16:10:09 +01:00
Ad Schellevis
9222f5e4de fix regression in previous, for https://github.com/opnsense/core/issues/2964 2018-11-24 16:03:06 +01:00
Ad Schellevis
02c5bb692d Network insight, missing import for https://github.com/opnsense/core/issues/2964 2018-11-24 15:47:50 +01:00
Ad Schellevis
dc38875202 Network insight, cleanups and restructures for https://github.com/opnsense/core/issues/2964
Adds configuration yaml support, using a simple config yaml containing the previously hardcoded values:

```
library_path:  /path/to/core/src/opnsense/site-python
flowd_source: /path/to/flowd.log
database_dir: /path/to/netflow
pid_filename: /path/to/netflow.pid
```

Startup using local config, using:

```
flowd_aggregate.py -c my_config.yaml --console
```

Further then path relocations, this commit should not contain any new features. The other scripts, not related to the daemon have not been altered (yet)
2018-11-24 15:44:22 +01:00
Franco Fichtner
c28fb86f37 interfaces: add note about CGN addresses included in private range; closes #2880 2018-11-24 14:15:41 +01:00
Michael Steenbeek
7ad3d8dff6 Replace some trivial double quotes with single ones 2018-11-23 14:36:44 +01:00
Michael Steenbeek
19ce1c57a4 Replace uncommon <> notation with != 2018-11-23 14:36:44 +01:00
Franco Fichtner
9325d87b4e firmware: finalise mtree health check
Not what I was expecting from a base tool like mtree...

* Missing files are not seen as an error condition, so
  remove our ignored files (they show up as nonexistent)
  and then count how many files are missing.  If there
  is at least a missing file show the output and don't
  say everything is swell.

* Since we prefilter MTREE_OUT on a real error just show
  the output since it's likely there's an error to see.
2018-11-21 09:03:42 +01:00
Franco Fichtner
760300db52 firmware: stop checking /var due to MFS possibililty 2018-11-21 08:27:28 +01:00
Franco Fichtner
6bf0dbd70b firmware: extend health checks, avoid issues with our mods 2018-11-19 17:01:37 +00:00
Michael Steenbeek
6debd169da Do not clear unbound stats when querying them 2018-11-19 13:22:57 +01:00
Ad Schellevis
bb90be17c7 Network insight, possible division by zero, closes https://github.com/opnsense/core/issues/2928 2018-11-18 18:20:13 +01:00
Ad Schellevis
862d6a86d6 Monit: add carp status script for https://github.com/opnsense/core/issues/2919
Communicates the general carp status:
- if any of the interfaces is in backup mode, the result will be backup (exit 1)
- if all carp enabled interfaces are master, return master (exit 0)
- all other scenario's return list of found statuses and exit -1
2018-11-16 04:00:41 +01:00
Franco Fichtner
9634dc64fc shell: make banner foreach a little more straight-forward 2018-11-13 11:19:45 +01:00
Franco Fichtner
2601f23b74 Revert "firewall: CGN seems to be valid... for discussion"
This reverts commit fba9b8ab2ee1d42edb36e2706c4c50abbc14e811.
Handling CGN as private is the lesser of two evils.  We could
always make the help text more clear.
2018-11-13 10:55:00 +01:00
Franco Fichtner
01846ab2bb shell: use new network functions in banner 2018-11-12 14:58:23 +01:00
Franco Fichtner
6172beb8f4 src: useless globals 2018-11-12 14:44:44 +01:00
Franco Fichtner
fba9b8ab2e firewall: CGN seems to be valid... for discussion
PR: https://github.com/opnsense/core/issues/2880
2018-11-11 12:49:19 +01:00
Franco Fichtner
c6df560fa6 firewall: add XXX to label mismatch, related to #1494 2018-11-11 09:01:13 +01:00
Franco Fichtner
cae5ec3f69 system: remove apinger, dpinger takes over 2018-11-10 23:42:17 +01:00
Ad Schellevis
08bd6c7177 Firewall/alias, increase resolve() performance, see https://forum.opnsense.org/index.php?topic=10164.msg46639 2018-11-08 13:42:32 +01:00
Ad Schellevis
b38a76a265 IDS/IPS, prevent duplicate download of same target filename, support overlays. for https://github.com/opnsense/core/issues/2885 2018-11-06 20:05:09 +01:00
Ad Schellevis
416b05afa6 IDS/IPS, use content-disposition, for https://github.com/opnsense/core/issues/2885 2018-11-06 20:04:05 +01:00
Ad Schellevis
534c918a4e IDS/ruledownload, improve logging a bit. log http return code when download failed 2018-11-05 21:14:52 +01:00
Franco Fichtner
ee6b692455 firewall: move bogon script out of the way, priv-sep, lower retries 2018-11-03 12:25:09 +01:00
Franco Fichtner
05d1283508 dhcp: flip arguments for services_dhcpd_configure
Stop radvd in setport while there.
2018-10-31 15:07:53 +01:00