ntopng 5.6 (February 2023)

Breakthroughs

• Add XL license
• Add support Rocky9
• Add support to Kafka
• Increased max num of exporters
• Introduce nTap support
• Introduce support to ClickHouse Cluster
• Rework Historical Chart Page
• Rework pages using VueJS and moving towards responsive client

Improvements

• Handle allowed networks for unprivileged users
• Improve multitenancy support
• Improve thread names
• Improve mac formatting
• Improve top host sites adding reset method
• Improve pcap upload
• Improve ports formatting
• Improve handling for Cisco NBAR collection
• Improve source style
• Improve Linux OS detection
• Improve Engaged Time Report in Chart
• Improve passive DNS hosty resolution
• Improve alerts reports
• Improve OPNsense installation instruction
• Improve host report
• Improve support to NDPI_TCP_ISSUES flow risk
• Improve layout
• Improve ICMP flow handling
• Lowered memory consumption due to alert score
• Rework pro code directories
• Rework lua code
• Rework flow aggregation
• Rework capabilities support
• Socket code cleanup
• Use API to build interface report
• Update rrd calculations
• Update JP localization (courtesy of Yoshihiro Ishikawa)

Changes

• Add logo to package
• Add missing deps
• Add link to host
• Add options to send report by email
• Add Report class and example
• Add internal server error on health/interfaces doc api
• Add support for external (REST) host alerts
• Add various help and parameters
• Add script to create a pdf report from historical API data
• Add NXLOG/Active Directory documentation
• Add reload button in various pages
• Add third party resources
• Add flow exporter ips to observation points
• Add support for the python API documentation
• Add forced offline variable to mantain the --offline option
• Add support for Lua host engaged alerts using timeout
• Add observation points ts
• Add HTTP server in flow details
• Add token-based authentication https://www.ntop.org/guides/ntopng/advanced_features/authentication.html?highlight=token#token-based-authentication
• Add Flow Risk (Bitmap) Filter in alerts
• Add make targets for pip package Updated package classes
• Add L7 information in flow object adding
• Add CodeQL workflow for GitHub code scanning
• Add modal-download-file component and add export timeseries png picture button
• Add critical and emergency status to alerts
• Add oneway TCP flows counters
• Add support for nDPI network handling in flows
• Add -n 4 for name resolution
• Add IMAP/POP stats
• Add Stratosphere Labs Blacklist support
• Add support d3v7
• Add Requires for RH9 (redhat-lsb-core is deprecated)
• Add interfaces stats api and refactor the others health api
• Add support to application protocol and master protocol
• Add CIDR support in Historical Flows
• Add new Aggregated Flows page
• Add new Alerts Analysis page
• Add support for estimating the number of TCP contacted servers with no reply
• Add new Ports Analysis page
• Add detection of periodic flows and exported it as flow risk in both flows and alerts
• Add REST API to get DB columns and info
• Add ability to query alerts from Python
• Add Zoom streams handling
• Add various checks
• Add IP-in-IP decapsulation
• Add Host Rules page (possiblity to trigger alerts based on timeseries)
• Add the ability to analyze a pcap without creating a new interface
• Add Windows timezone handling
• Change table definition
• Cleanup file names
• Disabled host serialization
• Enlarged the number of local networks to 1024
• Increased upload size to 25 MB
• Implement custom script check
• Implement support of host filtering with TX traffic sent
• Implement unresponsive peers host report
• Implement count of incoming tx peers with TCP flows unanswered
• Move ts business logic in ts_rest_utils.lua
• Patch for handling nicely clock drift at startup
• Remove obsolete autogen commands On Linux stay with g++ unless asnitizer is used
• Remove REST API v0 (discontinued since ntopng 4.2)
• Remove no more used severity
• Refactor range-picker query_presets
• Rework host packets page and removed dscp page
• Rework host ports implementation
• Rework Historical class
• Rework OPNsense plugin package build
• Self test fixes and improvements
• Update documentation
• Update REST API
• Update bootstrap table css
• Update various pages to vuejs
• Update counter scaling (no gauge)
• Update response in service disabled case

nEdge

• Add support to multi LAN and fixes DHCP service error
• Add VLAN and multi WAN support to nedge
• Add routing_policy to nedge configuration callback
• Fix netplan configuration error
• Update vlan trunk doc

Fix

• Df columns error management, table export formatted with % and column reordering now working
• Fix missing openssl dependency from MacOS
• Fix clang
• Fix host sankey minor issues
• Fix hyperlinks to historical charts not working
• Fix hyperlinks not working correctly
• Fix Regex escape
• Fix application name resolution on aggregated views
• Fix RRD driver for step calaculation
• Fix visual bugs with master and app proto
• Fix various interface page minor bugs
• Fix shortened labels
• Fix default sort not working
• Fix influxdb retention not updated
• Fix name and size of charts
• Fix vlan label not mapped
• Fix for FreeBSD configure
• Fix ip resolution not updating the name
• Fix discrepancy in Traffic Calculation (Interface Chart)
• Fix measurement units not uniform
• Fix crash swap
• Fix bug that reported wrong DNS information
• Fix build process with opnsense/plugins
• Fix validators regexps
• Fix ICMP emtropy report Improved HTTP flows report
• Fix Telegram Reported alerts contain HTML
• Fix multi-series Charts are Unreadable in Dark Mode
• Fix invalid reverse host resolution that caused hosts to be labelled with wrong symbolic name
• Fix delete obsoleted code from page-stats
• Fix for circular dependency js
• Fix overlay not working
• Fix due to changes to nDPI ALPN handling
• Fix CSS Inconsistency Across Browsers
• Fix Deep copy also for array of objects
• Fix missing modules
• Fix NAT handling with nprobe
• Fix initialization crash
• Removed multiple load from tables
• ZMQ encryption key is now reported in hex to avoid escape problems