Commit graph

215 commits

Author SHA1 Message Date
Simone Mainardi
8441aab9ec Fixes XSS in dissected HTTP URLs, TLS certs, and DNS names
Fixes possible XSS due to forged HTTP urls such as

curl -u admin:admin1 "http://devel:3000/</a><script>alert(1);</script><a>"

Similar attacks could have been performed with TLS certs and DNS names
2020-06-03 19:00:41 +02:00
gabryon99
badc9af8f8 fix for system view 2020-03-24 17:13:37 +01:00
gabryon99
7479582210 fix system view and add rtt host from host_details 2020-03-23 17:38:22 +01:00
emanuele-f
b0520ee189 Improve localization support
- nDPI categories are now localized (see getCategoryLabel)
- Add some missing localization in plugins/user scripts pages
2020-03-03 18:26:14 +01:00
Luca Deri
14202b7c9b Layout fix 2020-02-17 16:42:17 +01:00
Luca Deri
5f9a63f0fb Updated TLS versions 2020-02-17 16:39:35 +01:00
Luca Deri
8786c9fb30 Added support for ALPN and Client Supported TLS Protocols reported by nDPI 2020-02-17 16:29:24 +01:00
Simone Mainardi
dffd0a7a60 Fixes TCP and IP flow details tables 2020-02-11 12:15:01 +01:00
emanuele-f
7105cb8a65 Add score and user script config link into the flow details additional status 2020-02-07 20:02:19 +01:00
emanuele-f
5882926b0b Host score increment fix for PCAP dump interfaces 2020-02-07 11:32:22 +01:00
Simone Mainardi
33df10f20c Fixes flow peers names visualization 2020-02-03 18:00:55 +01:00
emanuele-f
4f6788fb58 New page_utils api to handle sidebar subitems selection 2020-01-30 11:53:13 +01:00
emanuele-f
6fa5f071e8 Add user script edit config icon into the flow details 2020-01-27 10:47:31 +01:00
Luca Deri
6cd4097118 Added fix to avoid long DNS names 2020-01-26 19:19:03 +01:00
Simone Mainardi
9185e940ec Fixes TLS certificates visualization in flow_details.lua
Fixes #3262
Fixes #3263
2020-01-21 11:34:48 +01:00
emanuele-f
6edecb12cb Score visualization improvements 2020-01-15 15:27:45 +01:00
Simone Mainardi
5a378a9bd2 Adds ICMP unreachable information also for inactive flows
Fixes #3206
2020-01-10 11:57:17 +01:00
Luca Deri
170bc60f19 Updated (C) 2020-01-08 23:52:51 +01:00
Luca
2d63ae8024 Certificate validity fix 2020-01-07 16:57:12 +01:00
Luca Deri
57e6a93065 Improved scheduling algorithm to guarantee minimum service time when number of entries allow
Updated (C)
2020-01-06 23:36:36 +01:00
Luca
92ea3cf5a0 TLS certificate improvements 2020-01-02 09:36:31 +01:00
Simone Mainardi
29095ac4af Fixes bytes expressed with decimals 2019-12-20 12:25:19 +01:00
Simone Mainardi
dacaa7e3db Migrates font-awesome 5 fa to fas 2019-12-18 11:50:02 +01:00
Simone Mainardi
0eb75bf884 Uses new localization for icmp types and codes 2019-12-18 10:49:38 +01:00
Simone Mainardi
8f52113bbb Minor cleanup 2019-12-13 11:42:00 +01:00
Simone Mainardi
37f54a5090 Fixes font-awesome 5 external link
Fixes #3125
2019-12-13 10:18:20 +01:00
Simone Mainardi
7402bbdd14 FontAwesome 5 migration 2019-12-09 15:11:37 +01:00
Simone Mainardi
e2eef6e778 Bootstrap migration nEdge if_stats page 2019-12-05 12:39:48 +01:00
Simone Mainardi
f79bd4869b Bootstrap migration flow details navbar 2019-12-05 09:27:48 +01:00
Simone Mainardi
6d36e7cb76 Bootstrap migration btn-default to btn-secondary 2019-12-05 09:27:47 +01:00
Simone Mainardi
2639d49e4a Bootstrap migration progress bars 2019-12-05 09:27:47 +01:00
Simone Mainardi
14db3bb11f Bootstrap migration labels to badges 2019-12-05 09:27:46 +01:00
Alfredo Cardigliano
e38835a603 Rename SSL to TLS (fix #3013) 2019-11-15 12:40:01 +01:00
Alfredo Cardigliano
d10dfc7762 Deferred flow alerts insertion through a redis queue. Removed alerts DB select when printing flow details. 2019-10-31 12:53:23 +01:00
emanuele-f
b3a8c6d49a Migrate C flow status alerts to Lua user scripts
- Alerts and flow status cleanup
- Community flow user scripts migration
- Implement scripts filters by l7 proto and packet interface only
- Migrate flow2statusinfojson
- Lower flow periodic update to 30 seconds if there is flow activity
- Display flow scripts without a gui section
2019-10-22 10:42:22 +02:00
Simone Mainardi
63ce367f8b Fixes flow process trees 2019-10-16 19:30:31 +02:00
Simone Mainardi
6fd7386c03 Fixes possible collisions when looking up flows by key 2019-10-16 19:04:10 +02:00
emanuele-f
7a14a9cf11 Improvements in status definition API 2019-10-16 10:33:19 +02:00
emanuele-f
b217909966 Split flow status definitions in multiple files 2019-10-15 17:28:45 +02:00
Alfredo Cardigliano
b390fddcf2 Flow details rowspan fix 2019-10-15 16:55:26 +02:00
Alfredo Cardigliano
256fec9283 Importing http metadata from Suricata 2019-10-05 12:15:16 +02:00
emanuele-f
1bf89fdb4d Add server malicious JA3 signature check and improve alert information
Closes #2880
2019-09-24 13:30:32 +02:00
emanuele-f
50c5395a1c Replace flow status warning icon to avoid confusion with alerted state 2019-09-18 15:33:33 +02:00
emanuele-f
f735749716 Add flow alert information into the flow defails 2019-09-18 15:10:41 +02:00
Simone Mainardi
8c3271753e Allocates InterarrivalStats only for packet interfaces with unsampled traffic
Fixes #2826
2019-09-10 12:15:01 +02:00
Alfredo Cardigliano
3fcded57fa Set ntopng.prefs.beta_score redis key to enable score supprot (beta) 2019-09-10 09:39:32 +02:00
Alfredo Cardigliano
240c7c0e84 Printing score only when > 0 2019-09-05 21:18:49 +02:00
Alfredo Cardigliano
48f07c0f73 Added flow score below the list of flow issues, added host score 2019-09-05 15:57:05 +02:00
Alfredo Cardigliano
e6ec8711d7 Setting also status_normal in the status bitmap, Flow Status fix 2019-09-05 15:23:11 +02:00
Alfredo Cardigliano
3cdd9fdf4c Printing all flow statuses in flow_details 2019-09-05 13:05:53 +02:00