Commit graph

900 commits

Author SHA1 Message Date
Simone Mainardi
83c4d36e34 Simplifies flow.triggerStatus using internal flow status reference 2020-04-27 17:48:56 +02:00
Simone Mainardi
efe4f9a8be Unifies alerts generation format with flow statuses 2020-04-27 14:37:04 +02:00
Simone Mainardi
ab1690ad9e Implements builders for each flow status definition
[FlowsK] alert_blacklisted_country.lua

[FlowsK] alert_flow_blacklisted.lua

[FlowsK] alert_device_protocol_not_allowed.lua

[FlowsK] external_alert.lua

[FlowsK] alert_potentially_dangerous_protocol.lua

[FlowsK] tls_certificate_mismatch.lua

[FlowsK] tls_certificate_expired.lua

[FlowsK] tls_malicious_signature.lua

[FlowsK] elephant_flows.lua

[FlowsK] not_purged.lua

[FlowsK] web_mining.lua

[FlowsK] potentially_dangerous.lua

[FlowsK] alert_flow_blocked.lua
2020-04-27 12:43:37 +02:00
Simone Mainardi
0a9a7015e0 Unifies status_id and status_key 2020-04-15 14:29:03 +02:00
Simone Mainardi
1eb02b2c2b Unifies alert_id and alert_key 2020-04-15 14:29:03 +02:00
Simone Mainardi
e487427aab Refactors alert_utils and enterprise_alert_utils
Addresses #3720

Alerts Refactor: alert_utils as module

Alerts Refactor: notify_ntopng_start and notify_ntopng_stop

Alerts Refactor: processAlertNotifications

Alerts Refactor: checkStoreAlertsFromC

Alerts Refactor: formatAlertNotification

Alerts Refactor: notification_timestamp_rev

Alerts Refactor: formatAlertMessage

Alerts Refactor: getConfigsetAlertLink

Alerts Refactor: alertNotificationActionToLabel

Alerts Refactor: flushAlertsData

Alerts Refactor: disableAlertsGeneration

Alerts Refactor: newAlertsWorkingStatus and other

Alerts Refactor: drawAlerts

Alerts Refactor: drawAlertTables

Alerts Refactor: printAlertTables

Alerts Refactor: checkDeleteStoredAlerts

Alerts Refactor: getUnpagedAlertOptions

Alerts Refactor: getTabParameters

Alerts Refactor: getAlerts

Alerts Refactor: getNumAlerts

Alerts Refactor: performAlertsQuery

Alerts Refactor: sec2granularity

Alerts Refactor: granularity2id

Alerts Refactor: granularity2sec

Alerts Refactor: alertEngineLabel

Alerts Refactor: alertEngine

Alerts Refactor: alertEngineRaw

Alerts Refactor: alertTypeDescription

Alerts Refactor: alertType

Alerts Refactor: alertTypeLabel

Alerts Refactor: alertTypeRaw

Alerts Refactor: alertSeverity

Alerts Refactor: alertSeverityLabel

Alerts Refactor: alertSeverityRaw

Alerts Refactor: get_make_room_keys

Alerts Refactor: enterprise_alert_utils
2020-04-10 14:03:20 +02:00
emanuele-f
c848ea2395 Fix script failure due to removed host.getLocalhostInfo 2020-04-02 18:42:52 +02:00
Alfredo Cardigliano
2425134f05 Replace isEnterprise with isEnterpriseM 2020-04-02 12:36:34 +00:00
Simone Mainardi
daf7f0a05c Minor Fix 2020-04-01 13:12:55 +02:00
Simone Mainardi
a9776b5013 Documents internals periodic activities 2020-04-01 13:03:13 +02:00
emanuele-f
983fea5701 Fix bad SNMP interface formatter
Fixes #3659
2020-03-27 17:40:51 +01:00
Simone Mainardi
3144bc8bdf Renames alert_config to user_script_config 2020-03-26 14:51:53 +01:00
emanuele-f
61ab06fcd7 Fix SyslogParserInterface plugins loading 2020-03-26 14:47:51 +01:00
Luca Deri
7769beecad Added blog check at startup 2020-03-25 08:12:04 +01:00
emanuele-f
60da5a0c13 Blog notifications fix 2020-03-24 17:12:41 +01:00
gabryon99
b1251aef5f created blog notification 2020-03-22 23:52:59 +01:00
emanuele-f
1ec35cadbf Fix invalid engaged/dropped alerts ts on system interface
Fixes #3556
2020-03-17 12:25:36 +01:00
Simone Mainardi
04f5b99342 Calculates and charts RRD queue length 2020-03-09 22:46:35 +01:00
emanuele-f
c17ddb486e Ensure monotonic time in uSecDiffPeriodicActivityBody 2020-03-05 17:09:40 +01:00
emanuele-f
1c7dabf247 Pass current periodic activity time from C
This prevents possible inconsistencies between the C and lua time
2020-03-05 17:09:40 +01:00
emanuele-f
0facf0e27d Implement host timeseries off/light/mode selection
Closes #3466
2020-03-03 15:52:04 +01:00
emanuele-f
f9bd2973c8 Avoid cpu load timeseries creation on non linux platforms 2020-03-02 16:04:02 +01:00
Simone Mainardi
3405b7184e Writes new_flow timeseries every minute (not every second)
Implements #3456
2020-02-28 15:35:16 +01:00
Simone Mainardi
a1905609a2 Prevents writing ZMQ timeseries for non-ZMQ interfaces
Addresses #3456
2020-02-28 15:11:18 +01:00
Simone Mainardi
ec724babcf Unifies all internals timeseries in a single preference
Implements #3459
2020-02-28 15:00:51 +01:00
Simone Mainardi
474fe19e07 Writes CPU load every 5 secs (/proc/loadavg doesn't update faster)
Additional fix for #3465
2020-02-28 11:55:26 +01:00
Simone Mainardi
f6bd1b3493 Adds timeseries of iowait 2020-02-27 18:20:42 +01:00
Simone Mainardi
82a01c521a Computes CPU states every 5 seconds in the system interface 2020-02-27 16:48:08 +01:00
emanuele-f
b194643a18 Join exported and dropped flows into a single timeseries 2020-02-27 12:15:53 +01:00
emanuele-f
ea4f936d07 Join interface packets and drops into a single timeseries 2020-02-27 12:09:43 +01:00
emanuele-f
8abdb926cd Handle /proc/net/dev counters wrapping on 32bit platforms.
Fixes #3398
2020-02-25 16:56:58 +01:00
Alfredo Cardigliano
b3ceaf9db4 Moved external alert score computation (fix #3447) 2020-02-24 15:01:21 +01:00
Alfredo Cardigliano
dbe07bbfcd Score computation fix (external alerts) 2020-02-24 12:27:48 +01:00
Simone Mainardi
bd46b7268e Implements system alerts for not executed activities 2020-02-21 14:00:06 +01:00
Simone Mainardi
a0612895fe Implements slow rrd checks and updates in C 2020-02-19 19:28:07 +01:00
Simone Mainardi
a7ea7f76ed Implements detection of slow timeseries append 2020-02-19 18:45:36 +01:00
emanuele-f
7c534a557c Add the is_critical_ts flag to force timeseries write 2020-02-19 15:31:36 +01:00
emanuele-f
d1140ec9fd Avoid timeseries read operations to display the chart icon
Now the icon is displayed whenever the timeseries are enabled for the given context
2020-02-19 13:27:20 +01:00
Simone Mainardi
5b70db90ad Handles deadlines for flow user scripts 2020-02-19 10:46:44 +01:00
Simone Mainardi
0e64fd94d6 Implements deadlines for periodic and user scripts 2020-02-18 18:44:41 +01:00
Simone Mainardi
156975afd5 Show periodic scripts stats in the system interface 2020-02-17 15:43:42 +01:00
emanuele-f
58b3d42d22 Set max score on hosts contacting blacklisted hosts 2020-02-17 15:16:01 +01:00
Simone Mainardi
95bd9ace07 Implements duration stats for system periodic activities 2020-02-17 14:39:58 +01:00
Simone Mainardi
00158e8bc2 Implements error handling in line protocol generation 2020-02-16 14:30:08 +01:00
emanuele-f
7e6909b561 Add now timestamp in SNMP 2020-02-11 17:33:19 +01:00
emanuele-f
e3d3d3992f Replace an existing flow alert if a more critical problem is found
Also add the flow score into the database
2020-02-07 19:20:57 +01:00
emanuele-f
0a0a3c4537 Rework flow status accounting 2020-02-07 19:17:07 +01:00
emanuele-f
13ec0d2f44 Use the flow score to determine the status priority 2020-02-07 19:17:07 +01:00
emanuele-f
96925a7e03 Fix invalid flow.triggerStatus calls 2020-02-06 10:31:22 +01:00
Simone Mainardi
7f6e69653e Fixes reload of scripts upon license changes or expiration
Fixes #3213
2020-01-27 14:07:50 +01:00