Commit graph

2810 commits

Author SHA1 Message Date
Simone Mainardi
dc748b1b6d Implements stats for periodic scripts duration 2019-10-28 17:10:03 +01:00
emanuele-f
22742fa0d5 Fix nil value in user scripts column 2019-10-28 16:55:02 +01:00
Alfredo Cardigliano
fa57c701bb Displaying file id to retrieve files stored by Suricata 2019-10-28 12:24:15 +01:00
Alfredo Cardigliano
0d0394e862 Internals labels 2019-10-25 14:40:25 +02:00
Alfredo Cardigliano
96ef3c05e7 New alert when the number of idle entries in the hash tabel exceeds a configured threshold (implements #3005) 2019-10-25 14:29:37 +02:00
emanuele-f
1d5ff7c4e7 Remove global flow user scripts on/off 2019-10-25 13:12:47 +02:00
emanuele-f
f8ccfe24d8 Add flow scripts labels and descriptions 2019-10-25 12:16:19 +02:00
Alfredo Cardigliano
592aaf80e2 Displaying Active/Idle in the internals page 2019-10-25 12:02:13 +02:00
emanuele-f
0ea6856b44 Clean flow user scripts page 2019-10-25 11:30:06 +02:00
emanuele-f
58a12f1241 Add user scripts benchmark charts
Implements #2999
2019-10-24 20:24:13 +02:00
Alfredo Cardigliano
c29409673b Added alerts for TCP SYN Scan Host and Network as victims (implements #2963) 2019-10-24 16:59:33 +02:00
Alfredo Cardigliano
afbb34e262 TCP SYN Scan detection (implements #2963) 2019-10-24 15:35:26 +02:00
emanuele-f
d1d789ea88 Improve category lists limits and reporting 2019-10-23 18:12:24 +02:00
Simone Mainardi
47f8525144 Adds chars and page for hash table states 2019-10-23 14:14:44 +02:00
Simone Mainardi
fca66af5e5 Adds speed and num calls to script duration information 2019-10-22 19:05:57 +02:00
Alfredo Cardigliano
8aa9f42123 external alert status_defs cleanup 2019-10-22 15:40:11 +02:00
Simone Mainardi
b44900276b Fixes ports pie charts with VLANs and reworks their appearence
Fixes #2971
2019-10-22 13:00:22 +02:00
Alfredo Cardigliano
f66d7b113d Suricata statistics label 2019-10-18 18:32:29 +02:00
Luca Deri
2afe5f3b76 Added note about timeseries data retention 2019-10-18 11:36:35 +02:00
Alfredo Cardigliano
9b071bb873 Ingesting JA3 from Suricata, uniformed TLS IE names with those exported by cento, added localization for missing IEs 2019-10-17 13:04:42 +02:00
Alfredo Cardigliano
053df4bc67 Added external interface statistics (e.g. signatures loaded by suricata) 2019-10-16 13:40:50 +02:00
emanuele-f
6533175336 Add flow/alerts definitions directories 2019-10-16 17:45:55 +02:00
Alfredo Cardigliano
87ac1b0bb6 New Duplicate Disaggregated Traffic option to show disaggregated traffic in the master interface 2019-10-16 04:50:47 +02:00
Simone Mainardi
d1600d0e9b Adds toggle to exclude one-way-traffic hosts from timeseries gen 2019-10-16 11:58:50 +02:00
Simone Mainardi
5e60fb19c9 Implements two-way traffic filter for hosts 2019-10-16 11:01:22 +02:00
Luca Deri
3b5e56d802 Added script for detecting unidirectional UDP flows 2019-10-15 21:56:48 +02:00
Alfredo Cardigliano
3290bd803b Propagating additional fields to companion interface 2019-10-15 16:41:42 +02:00
Alfredo Cardigliano
240fa15149 Handle additional fields from Suricata 2019-10-15 15:48:12 +02:00
Simone Mainardi
3950c3ddc8 Support for 5-min timeseries resolution in InfluxDB 2019-10-15 15:06:20 +02:00
emanuele-f
ffd3b4c1ee Users scripts api changes and initial documentation 2019-10-09 15:12:28 +02:00
Alfredo Cardigliano
7e9678de37 IDS alert -> External alert 2019-10-09 11:35:51 +02:00
Simone Mainardi
aa652145d0 Unifies flows, timeseries and top-talkers data retention
Implements #2897
2019-10-07 16:35:32 +02:00
Simone Mainardi
aceb123ebb Adds About/directories page listing custom scripts directories 2019-10-07 11:34:39 +02:00
emanuele-f
bee1efdded Move callbacks scripts into separate tab 2019-10-04 10:48:13 +02:00
Simone Mainardi
7c2898abe8 Adds dir paths to the about page 2019-10-03 18:25:01 +02:00
Simone Mainardi
99989d0200 Implements flow lua scripts ui (simple mode) 2019-10-01 23:53:20 +02:00
Simone Mainardi
6810c86d22 Reworks flow lua scripts ui (expert mode) 2019-10-01 23:10:25 +02:00
Simone Mainardi
6db2c6392f Stores flow lua scripts benchmarks and shows them in the ui 2019-10-01 17:06:29 +02:00
Simone Mainardi
d41198c4e5 Allows flow lua method idle to be called for pcap-dump interfaces 2019-10-01 12:52:12 +02:00
Simone Mainardi
fa17aab9db Implements lua flow method calls using ids to be more efficient 2019-09-30 17:29:01 +02:00
Alfredo Cardigliano
3566770bd0 Locale update 2019-09-26 17:05:06 +02:00
Alfredo Cardigliano
ec77c7df9b Sub-interface creation note 2019-09-25 12:57:46 +02:00
Alfredo Cardigliano
dbe48cebc5 Hiding disaggregation tab frmo dynamic interfaces 2019-09-25 11:05:09 +02:00
Alfredo Cardigliano
a900c8f356 Locales update 2019-09-25 10:47:30 +02:00
Alfredo Cardigliano
1b45f800f9 Sub-interfaces backend improvements for the GUI 2019-09-24 20:50:58 +02:00
emanuele-f
1bf89fdb4d Add server malicious JA3 signature check and improve alert information
Closes #2880
2019-09-24 13:30:32 +02:00
Simone Mainardi
3ea092093f Adds generic probes tab to the alerts pages 2019-09-23 18:50:43 +02:00
emanuele-f
beddb433b7 Add a message when POST form submission fails 2019-09-23 16:00:25 +02:00
Simone Mainardi
fd54ad95bf Allows host RTT to be set from the host config page 2019-09-20 16:28:36 +02:00
Simone Mainardi
c3c3b06028 Implements RTT host details page 2019-09-20 15:32:20 +02:00