Implements Alert for long-lived flows (data exfiltration?) #2163

This commit is contained in:
Alfredo Cardigliano 2018-12-10 18:58:51 +01:00
parent d2b5913af7
commit 4db4228d12
11 changed files with 67 additions and 10 deletions

View file

@ -1052,6 +1052,7 @@ local known_parameters = {
["toggle_device_protocols_alerts"] = validateBool,
["toggle_elephant_flows_alerts"] = validateBool,
["toggle_ip_reassignment_alerts"] = validateBool,
["toggle_longlived_flows_alerts"] = validateBool,
["toggle_flow_db_dump_export"] = validateBool,
["toggle_alert_syslog"] = validateBool,
["toggle_slack_notification"] = validateBool,
@ -1123,6 +1124,7 @@ local known_parameters = {
["http_auth_url"] = validateSingleWord,
["radius_secret"] = validateUnquoted,
["local_host_max_idle"] = validateNumber,
["longlived_flow_duration"] = validateNumber,
["non_local_host_max_idle"] = validateNumber,
["flow_max_idle"] = validateNumber,
["active_local_host_cache_interval"] = validateNumber,