2810 commits

Author	SHA1	Message	Date
emanuele-f	978ee7f944	Add misbehaving flows label to avoid confusion	2019-09-20 12:41:09 +02:00
Simone Mainardi	7f150ef407	Implements alerted flows counters and shows them in the footer ... Implements #2863	2019-09-19 15:15:32 +02:00
emanuele-f	f735749716	Add flow alert information into the flow defails	2019-09-18 15:10:41 +02:00
Simone Mainardi	79b69c2e6f	Flattens out the structure of lua flow callbacks	2019-09-17 18:22:55 +02:00
Simone Mainardi	e2c9e729a4	Implements flow check modules enable/disable prefs	2019-09-17 11:57:29 +02:00
emanuele-f	ef7d8614d9	Misconfigured DHCP range message fixes	2019-09-16 19:18:04 +02:00
Simone Mainardi	b3d595653e	Initial implementation of lua flow callback scripts and blacklisted alerts ... Partially implements #2842	2019-09-16 18:27:46 +02:00
Alfredo Cardigliano	fe6efaed9e	Printing 'no ports' instead of 'others' when there are no client or server ports (fix #2841)	2019-09-12 18:36:55 +02:00
Simone Mainardi	c52099aa4f	Shows ZMQ collected and dropped messages in a single chart ... Implements #2843	2019-09-12 17:49:25 +02:00
Simone Mainardi	237a72fc83	Improves inteface names shown when collecting from nProbe ... Fixes #2846	2019-09-11 18:26:32 +02:00
Simone Mainardi	f151fba989	Allows top talkers generation to be enabled/disabled	2019-09-11 16:42:26 +02:00
Simone Mainardi	165a53d18e	Adds timeseries of ZMQ messages received and dropped	2019-09-10 19:49:16 +02:00
Simone Mainardi	949d2a1025	Calculates flow idle timeouts using nProbe data for ZMQ interfaces	2019-09-10 18:05:16 +02:00
emanuele-f	4d62d68655	Add active alerted flows filter and count ... Closes #2821	2019-09-10 17:52:22 +02:00
emanuele-f	6e14f978d6	Flow alerts status cleanup	2019-09-10 13:12:11 +02:00
Simone Mainardi	72ebd961c9	Adds ZMQ total message and avg flows/msg counters	2019-09-09 12:57:04 +02:00
emanuele-f	8d7331e519	Improve ghost network alert message	2019-09-06 10:45:59 +02:00
Alfredo Cardigliano	38a53ec1fa	Transferring flows status bitmap to the client/server host. Added anomalous flows reasons to the host details page.	2019-09-05 17:55:00 +02:00
Alfredo Cardigliano	48f07c0f73	Added flow score below the list of flow issues, added host score	2019-09-05 15:57:05 +02:00
emanuele-f	c97ef3d908	Implement host MUD recording and dump	2019-09-04 21:20:52 +02:00
emanuele-f	b62e4183f0	Add ability to manually release an alert	2019-09-04 12:29:13 +02:00
Simone Mainardi	2e67a69cb7	Implements redis health and keys used monitoring	2019-08-30 16:19:33 +02:00
Simone Mainardi	24cf71a70d	Parses and charts UDP socket drops from nProbe	2019-08-30 12:54:41 +02:00
Alfredo Cardigliano	13d032d185	Formatting IDS alerts	2019-08-29 11:20:41 +02:00
Simone Mainardi	6ae30f0604	Initial implementation of the Redis monitoring probe	2019-08-28 19:30:52 +02:00
emanuele-f	a37bb425ea	Add JA3 signature link in alerts	2019-08-28 18:41:17 +02:00
emanuele-f	b66b71fd7e	Implement alert on JA3 malicious signatures ... Closes #2788	2019-08-28 18:33:13 +02:00
emanuele-f	a8cb972e7d	Implement ghost networks alerts	2019-08-28 16:42:18 +02:00
Simone Mainardi	0adf91f162	Adds description of Local Network Static Route ... Implements #2642	2019-08-27 18:28:45 +02:00
emanuele-f	3bf6ed1ecd	Add syn-vs-rst and misbehaving-vs-total-flows alerts	2019-08-27 16:33:53 +02:00
emanuele-f	300ea49b10	Little localization fix	2019-08-27 14:37:01 +02:00
emanuele-f	01c586119e	Remove ICMP ratio alert and enable ratio alerts by default in 5mins	2019-08-27 14:32:24 +02:00
emanuele-f	57e623da04	Implement ICMP and HTTP requests vs replies ratio alert	2019-08-27 10:33:08 +02:00
emanuele-f	5dd88985f4	Improve and fix DNS replies/requests ratio	2019-08-27 09:57:59 +02:00
emanuele-f	a0761db1e8	Implement replies/requests ratio alert	2019-08-26 18:38:34 +02:00
emanuele-f	b0ba13f0bc	Syn/flow flood alerts now use their own alert type	2019-08-26 17:36:27 +02:00
Simone Mainardi	11aa854cba	Handles hosts HASSH fingerprints	2019-08-26 16:55:39 +02:00
emanuele-f	2814a94077	Report curl error while a list download fails ... Fixes #2777	2019-08-23 09:52:58 +02:00
Simone Mainardi	c01ff1dc18	Implements add button anchor for host pools ... Fixes #2761	2019-08-14 12:02:05 +02:00
emanuele-f	81a9963e46	Implement alerts based on potentially dangerous flows nDPI classification	2019-08-07 14:29:06 +02:00
emanuele-f	c183a577be	Alerts API cleanup and JSON migration	2019-07-29 15:17:22 +02:00
Alfredo Cardigliano	add821e0f5	Google Maps API Key instructions	2019-07-26 09:02:52 +00:00
emanuele-f	988e3eaab6	Move alerts configuration under the triangle icon	2019-07-26 10:59:38 +02:00
emanuele-f	4fc1fea405	Fix remote hosts global alerts config	2019-07-25 14:45:23 +02:00
emanuele-f	e94bd45ca6	Improve disabled flow status alerts gui	2019-07-23 10:28:17 +02:00
emanuele-f	09fb8667e2	Add ability to disable specific alert types on alertables	2019-07-22 23:37:23 +02:00
emanuele-f	6a6cedc899	Add ability to disable host alerts on specific flow status	2019-07-22 12:16:12 +02:00
emanuele-f	3383ac0913	Implement dropped alerts per-interface counter	2019-07-18 17:29:05 +02:00
emanuele-f	9fa3b7920c	Add trace when alerts queue limit is exceeded	2019-07-15 15:37:20 +02:00
Simone Mainardi	7c4a9ef76c	Improves flood alerts descriptions	2019-07-15 12:52:35 +02:00