595 Commits

Author SHA1 Message Date
Ad Schellevis
336f2e78c5 missed a spot in previous 2018-11-29 15:59:26 +01:00
Ad Schellevis
508e892880 Network insight, python2/3 compatibility for get_timeseries.py 2018-11-29 15:57:20 +01:00
Ad Schellevis
b6a7b7f6eb Network insight, cmd_args.key_fields missing split(','), for https://github.com/opnsense/core/issues/2964 2018-11-29 13:53:51 +01:00
Ad Schellevis
711e1d9da4 Netflow insight, regressions in rotate(), for https://github.com/opnsense/core/issues/2964 2018-11-29 13:36:51 +01:00
Ad Schellevis
2481b62ca8 Network insight, some 2to3 magic, closes https://github.com/opnsense/core/issues/2964 2018-11-29 13:08:12 +01:00
Franco Fichtner
c95c82cb87 firmware: rework opnsense-version again 2018-11-29 08:22:50 +00:00
Franco Fichtner
453946df33 firmware: proper kernel size, unify format with pkg 2018-11-29 08:04:44 +00:00
Franco Fichtner
c5a586e068 firmware: size for kernel / base 2018-11-28 14:25:39 +00:00
Ad Schellevis
4fada8803d Firewall/alias diagnostics, align endpoints with feature naming. https://github.com/opnsense/core/pull/2977 2018-11-28 08:38:15 +01:00
Michael Steenbeek
feb8423aeb Implement #2588: Add option to match IP with aliases (#2977) 2018-11-27 18:10:26 +01:00
Ad Schellevis
7841325609 Network insight, prevent undefined selected_resolution, set last item as default. for https://github.com/opnsense/core/issues/2964 2018-11-27 18:05:38 +01:00
Ad Schellevis
5b6289db3d Network insight, refactor get_top_usage.py for https://github.com/opnsense/core/issues/2964 2018-11-27 17:58:07 +01:00
Ad Schellevis
d8118a3004 more cleanups and alignments for https://github.com/opnsense/core/issues/2964 2018-11-27 15:27:49 +01:00
Ad Schellevis
813595af4f fix previous, https://github.com/opnsense/core/issues/2964 2018-11-27 12:50:45 +01:00
Ad Schellevis
8fdaf264de Network insight, support custom configuration in flowd_aggregate_metadata.py for https://github.com/opnsense/core/issues/2964 2018-11-27 10:43:16 +01:00
Ad Schellevis
4e69e5923b Network insight, cleanup. -c vs --config for https://github.com/opnsense/core/issues/2964 2018-11-27 10:30:06 +01:00
Franco Fichtner
3ad1be040c src: style and whitespace sweep 2018-11-25 12:10:03 +01:00
Ad Schellevis
1680c1e1b0 Network insight, aggregator support single_pass (exit when there's no new data left), for https://github.com/opnsense/core/issues/2964 2018-11-24 21:40:13 +01:00
Ad Schellevis
c7660ca43f Network insight, another minor side affect of https://github.com/opnsense/core/issues/2964 export misses timestamp convert. 2018-11-24 16:10:09 +01:00
Ad Schellevis
9222f5e4de fix regression in previous, for https://github.com/opnsense/core/issues/2964 2018-11-24 16:03:06 +01:00
Ad Schellevis
02c5bb692d Network insight, missing import for https://github.com/opnsense/core/issues/2964 2018-11-24 15:47:50 +01:00
Ad Schellevis
dc38875202 Network insight, cleanups and restructures for https://github.com/opnsense/core/issues/2964
Adds configuration yaml support, using a simple config yaml containing the previously hardcoded values:

```
library_path:  /path/to/core/src/opnsense/site-python
flowd_source: /path/to/flowd.log
database_dir: /path/to/netflow
pid_filename: /path/to/netflow.pid
```

Startup using local config, using:

```
flowd_aggregate.py -c my_config.yaml --console
```

Further then path relocations, this commit should not contain any new features. The other scripts, not related to the daemon have not been altered (yet)
2018-11-24 15:44:22 +01:00
Franco Fichtner
c28fb86f37 interfaces: add note about CGN addresses included in private range; closes #2880 2018-11-24 14:15:41 +01:00
Michael Steenbeek
7ad3d8dff6 Replace some trivial double quotes with single ones 2018-11-23 14:36:44 +01:00
Michael Steenbeek
19ce1c57a4 Replace uncommon <> notation with != 2018-11-23 14:36:44 +01:00
Franco Fichtner
9325d87b4e firmware: finalise mtree health check
Not what I was expecting from a base tool like mtree...

* Missing files are not seen as an error condition, so
  remove our ignored files (they show up as nonexistent)
  and then count how many files are missing.  If there
  is at least a missing file show the output and don't
  say everything is swell.

* Since we prefilter MTREE_OUT on a real error just show
  the output since it's likely there's an error to see.
2018-11-21 09:03:42 +01:00
Franco Fichtner
760300db52 firmware: stop checking /var due to MFS possibililty 2018-11-21 08:27:28 +01:00
Franco Fichtner
6bf0dbd70b firmware: extend health checks, avoid issues with our mods 2018-11-19 17:01:37 +00:00
Michael Steenbeek
6debd169da Do not clear unbound stats when querying them 2018-11-19 13:22:57 +01:00
Ad Schellevis
bb90be17c7 Network insight, possible division by zero, closes https://github.com/opnsense/core/issues/2928 2018-11-18 18:20:13 +01:00
Ad Schellevis
862d6a86d6 Monit: add carp status script for https://github.com/opnsense/core/issues/2919
Communicates the general carp status:
- if any of the interfaces is in backup mode, the result will be backup (exit 1)
- if all carp enabled interfaces are master, return master (exit 0)
- all other scenario's return list of found statuses and exit -1
2018-11-16 04:00:41 +01:00
Franco Fichtner
9634dc64fc shell: make banner foreach a little more straight-forward 2018-11-13 11:19:45 +01:00
Franco Fichtner
2601f23b74 Revert "firewall: CGN seems to be valid... for discussion"
This reverts commit fba9b8ab2ee1d42edb36e2706c4c50abbc14e811.
Handling CGN as private is the lesser of two evils.  We could
always make the help text more clear.
2018-11-13 10:55:00 +01:00
Franco Fichtner
01846ab2bb shell: use new network functions in banner 2018-11-12 14:58:23 +01:00
Franco Fichtner
6172beb8f4 src: useless globals 2018-11-12 14:44:44 +01:00
Franco Fichtner
fba9b8ab2e firewall: CGN seems to be valid... for discussion
PR: https://github.com/opnsense/core/issues/2880
2018-11-11 12:49:19 +01:00
Franco Fichtner
c6df560fa6 firewall: add XXX to label mismatch, related to #1494 2018-11-11 09:01:13 +01:00
Franco Fichtner
cae5ec3f69 system: remove apinger, dpinger takes over 2018-11-10 23:42:17 +01:00
Ad Schellevis
08bd6c7177 Firewall/alias, increase resolve() performance, see https://forum.opnsense.org/index.php?topic=10164.msg46639 2018-11-08 13:42:32 +01:00
Ad Schellevis
b38a76a265 IDS/IPS, prevent duplicate download of same target filename, support overlays. for https://github.com/opnsense/core/issues/2885 2018-11-06 20:05:09 +01:00
Ad Schellevis
416b05afa6 IDS/IPS, use content-disposition, for https://github.com/opnsense/core/issues/2885 2018-11-06 20:04:05 +01:00
Ad Schellevis
534c918a4e IDS/ruledownload, improve logging a bit. log http return code when download failed 2018-11-05 21:14:52 +01:00
Franco Fichtner
ee6b692455 firewall: move bogon script out of the way, priv-sep, lower retries 2018-11-03 12:25:09 +01:00
Franco Fichtner
05d1283508 dhcp: flip arguments for services_dhcpd_configure
Stop radvd in setport while there.
2018-10-31 15:07:53 +01:00
Ad Schellevis
1d9b7ef480 Firewall/alias, disabled alias should leave us with an empty one, for https://github.com/opnsense/core/issues/2860 2018-10-30 09:27:45 +01:00
Franco Fichtner
e682d77bb0 firmware: we modify these too 2018-10-23 09:52:32 +02:00
Franco Fichtner
4d16653fc5 firmware: ask only once via expansion
We only want to know if there is anything at all and "" + "" is still "".
2018-10-23 06:14:37 +02:00
Franco Fichtner
e01d6c7f86 firmware: unify temp file handling in health audit 2018-10-22 16:22:30 +02:00
Franco Fichtner
e23a63699b firmware: finish mtree for base/kernel 2018-10-22 13:53:50 +02:00
Franco Fichtner
389b9d4839 firmware: use named arguments in check script 2018-10-22 09:06:03 +02:00