68 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	3fa67c2836	Set suspicious DNS as requiring attention	2023-10-16 14:32:23 +02:00
Alfredo Cardigliano	b06ba6db23	Disable auto ack for sql inj alerts	2023-07-24 11:13:04 +02:00
Alfredo Cardigliano	2ac9ed0cfc	Mark critical alerts as non auto-acknowledged	2023-06-22 09:14:09 +02:00
Luca Deri	e86cd0f2ce	added Modbus Invalid Transition Alert	2023-06-05 00:53:27 +02:00
Luca Deri	4a13dc41d5	Implemented Modbus exceptions	2023-06-01 22:53:59 +02:00
lucaderi	d395deac4e	Automated commit of clang-format CI changes.	2023-04-07 14:20:44 +00:00
Luca Deri	96e10b12a5	Added stub for RareDestination check/alert implementation #6416 and #6417	2023-03-22 15:11:53 +01:00
Matteo Biscosi	fc82eff56b	Updated alert to NDPI_NUMERIC_IP_HOST	2023-03-02 15:18:40 +00:00
MatteoBiscosi	ddb55b4d7e	Updated ndpi alerts (#7200)	2023-02-09 18:46:37 +01:00
Luca Deri	24bc8213d9	Fixed VLANBidirectionalTraffic code	2023-02-06 21:49:30 +01:00
Nicolò Maio	7162045cdd	Add VLAN bidirectional traffic alert (#7126) (#7194) ... * Add VLAN bidirectional traffic alert (#7126) * Add alert description. (#7126)	2023-02-03 10:33:25 +01:00
Luca Deri	f726b867c7	Updated (C)	2023-01-01 16:37:57 +01:00
Luca Deri	71fbbdbf58	Implemented custom host script (WIP)	2022-11-24 12:34:14 +01:00
Luca Deri	a687b9280a	Implemented custom script check	2022-11-23 11:11:45 +01:00
Luca Deri	80db634bfe	Implemented skeleton of CustomFlowLuaScriptAlert check	2022-11-19 20:31:24 +01:00
MatteoBiscosi	b6692f3fea	Added TCP Packets issues check (#6899)	2022-11-16 11:28:16 +01:00
MatteoBiscosi	7bfc2fdde4	Fixes Flow risks not defined (#6939)	2022-10-21 13:37:08 +02:00
Alfredo Cardigliano	cdd4a41bd5	Rename FlowRisk Simple to Generic	2022-07-14 17:23:06 +02:00
MatteoBiscosi	755c90e0c2	Changed from UDP unidirection to unidirectiont traffic	2022-06-21 15:11:54 +02:00
MatteoBiscosi	4f8c5c6cec	Moved UDP unidirection to nDPI alerts	2022-06-21 11:37:46 +02:00
Luca Deri	9d364c69b4	Fixed TCP with no answer alert definition	2022-06-07 13:11:35 +02:00
MatteoBiscosi	3509b3b74b	Added dns fragmented alert	2022-05-31 18:34:22 +02:00
MatteoBiscosi	167cf6484a	Updated ndpi flow risk alerts	2022-05-31 17:15:21 +02:00
MatteoBiscosi	e9147aa37d	Implemented connection failed alert (#6622)	2022-05-27 10:45:25 +02:00
Luca Deri	cdbb0e5380	Implements #6598	2022-05-15 16:57:48 +02:00
Luca Deri	7c038e29da	Implemented IEC104 Invalid Command Transition check/alert	2022-05-11 23:16:45 +02:00
MatteoBiscosi	2bcf7c8dfa	Added Suspicious Entropy alert (#6563)	2022-05-04 22:11:44 +02:00
Luca Deri	64dd3fa940	Improved ICMP data exfiltration detection	2022-05-04 00:31:55 +02:00
Luca Deri	269e9da142	(C) Update	2022-02-20 23:17:50 +01:00
MatteoBiscosi	4528e5a660	Added Broadcast non-UDP traffic alert and minor fixes to apexcharts	2021-12-17 13:33:11 +01:00
MatteoBiscosi	3d5fb6c3b1	Remove duplicated information from tls flows (#6073)	2021-11-24 13:31:01 +01:00
Simone Mainardi	fef7723445	Implements dynamic loading of flow risk alerts in Lua ... Addresses #5743	2021-09-15 13:57:43 +02:00
Simone Mainardi	3db5843db2	Implements fallback check and alert classes to handle risks ... Addresses #5743	2021-09-14 11:47:27 +02:00
Simone Mainardi	e34fca9af0	Implements getFlowRiskAlertType ... Addresses #5743	2021-09-14 09:57:52 +02:00
Simone Mainardi	71063ee7c6	Refactors getFlowRiskScore ... Addresses #5743	2021-09-14 09:41:38 +02:00
Simone Mainardi	6d119be51e	Initial work to allow dynamic nDPI risks addition (C++) ... Addresses #5743	2021-09-13 18:32:50 +02:00
Simone Mainardi	5f70c1eff7	Implements support for obsolete client SSH version ... Addresses #5861	2021-09-10 12:32:42 +02:00
Simone Mainardi	4b55e02899	Reworks check for Obsolete SSH that was not handling cli and srv ... Addresses #5861	2021-09-10 11:58:46 +02:00
Simone Mainardi	ef9597140b	nEdge compilation fix	2021-08-11 17:23:03 +02:00
Simone Mainardi	f6560d1974	Implements and rework alert for flow periodicity change	2021-08-11 15:11:44 +02:00
MatteoBiscosi	73be980960	Fixes lateral movement alert	2021-08-05 20:29:38 +02:00
Simone Mainardi	aef24d06b0	Implements TLS cert validity check and corresponding test ... Addresses https://github.com/ntop/ntopng/issues/5434 Addresses https://github.com/ntop/nDPI/issues/1196	2021-07-14 18:04:00 +02:00
MatteoBiscosi	638bf881fd	Migrated periodicity update alert into flow alert	2021-06-21 17:47:03 +02:00
MatteoBiscosi	2d61babeaf	Removed unused lateral movement variable	2021-06-17 16:59:15 +02:00
MatteoBiscosi	a89c95dba4	Migrated Lateral Movement alert from interface to flow (Fixes #5485)	2021-06-17 11:07:29 +02:00
Simone Mainardi	a160ccf2d6	Refactors callback to check #defines (c++)	2021-06-16 15:56:07 +02:00
Simone Mainardi	40f5c4e821	Refactors {flow,host}callbacks into {flow,host}checks (C++)	2021-06-16 15:27:38 +02:00
Simone Mainardi	3d1ab71f9b	Reworks scores for nDPI-risk flow alerts ... Addresses #5402	2021-06-11 15:22:32 +02:00
Alfredo Cardigliano	38b31bdb9c	Add getDefaultScore	2021-06-11 13:15:24 +02:00
Simone Mainardi	b166b07007	Adds base class FlowRiskAlert	2021-06-11 12:38:57 +02:00