Commit graph

11300 commits

Author SHA1 Message Date
Simone Mainardi
4eeae18cef Adds alert notes and descriptions 2017-05-02 22:13:43 +02:00
Simone Mainardi
d85302d80f Fixes host activity alert 2017-05-02 17:19:06 +02:00
emanuele-f
a5e528047d Use a single redis key to read all host anomalies configuration 2017-05-02 15:38:39 +02:00
Simone Mainardi
6f7c2b9616 Reworks default password change 2017-05-02 15:12:52 +02:00
emanuele-f
9aa7b31552 Add SafeSearch and Global DNS in traffic bridge preferences. 2017-05-02 12:47:33 +02:00
Luca Deri
24f0808c23 Merge pull request #1197 from emanuele-f/password_change
Force default admin password change
2017-05-02 12:14:48 +02:00
Luca Deri
1c532234ce Reworked childSafe display 2017-05-01 23:15:57 +02:00
emanuele-f
f137f14ee5 Reload host pools when a new pool is added or configuration is changed 2017-05-01 16:02:32 +02:00
Luca Deri
73b3a3ded6 Added child safe information in host pools
Minor code rework
2017-05-01 15:53:23 +02:00
emanuele-f
dc86847467 Remove frequent pool re-initialization 2017-05-01 00:50:55 +02:00
emanuele-f
21594b834d Separate syn/flow attacker and victim alert thresholds 2017-04-30 20:07:58 +02:00
Emanuele Faranda
8b8974e56c Alerts improvements (#1204)
* Implement flow flood alert

* Remove alerts general settings

* Implement global threshold alerts for hosts, networks and interfaces

* Implement global anomaly alert configuration, lua side

* Make the global thresholds not bound to the interface

* Implement global anomaly alert configuration, C side

* Make the engaged alerts cache per interface to avoid conflics
2017-04-29 12:19:49 +02:00
Emanuele Faranda
a9bcb8b5de Merge pull request #1203 from danielmeyer/ldap-search-validation
LDAP search_path parameter allows spaces
2017-04-29 12:05:32 +02:00
emanuele-f
a53ec8b131 Force the release of expired alerts 2017-04-28 16:30:23 +02:00
Daniel Meyer
0ac9dff8cd Validation mode for search_path parameter updated to support paths containing spaces. 2017-04-28 09:08:48 -04:00
emanuele-f
f516d7edb8 Fix flow alert explorer validation error 2017-04-28 12:30:30 +02:00
emanuele-f
bf803803da Hide children safe for non-inline interfaces 2017-04-28 11:08:41 +02:00
Luca
f473c1a4be Label change 2017-04-28 08:38:22 +02:00
emanuele-f
011b7f5cdf Force default admin password change 2017-04-27 21:15:58 +02:00
emanuele-f
f344f55116 Add children safe host pool option 2017-04-27 16:24:28 +02:00
emanuele-f
01816f3e7d Add category name in flashstart graphs 2017-04-27 15:24:14 +02:00
emanuele-f
cc3191bc4f Remove flapping-checking code in alert counter 2017-04-27 11:13:40 +02:00
emanuele-f
8b72607c38 Migrate interface alerts to lua logic 2017-04-27 11:07:04 +02:00
emanuele-f
426032426b Expose the traffic profile validation function 2017-04-26 23:05:31 +02:00
emanuele-f
230d2f434c Show SNMP host information in pro version 2017-04-26 22:34:18 +02:00
Emanuele Faranda
7d8d26efdc Merge pull request #1182 from emanuele-f/alerts_with_cache
Alerts with cache
2017-04-26 20:32:46 +02:00
valentina
4dfa9cb2f3 Changed calls from sudowrapper to run script (nbox integration) 2017-04-26 19:09:39 +02:00
emanuele-f
d6469510ee Add startup alert engine and use it for MYSQL open files limit check 2017-04-26 18:12:40 +02:00
emanuele-f
63402a848d Invalidate cache on alerts delete 2017-04-26 18:04:11 +02:00
emanuele-f
22d9d3ad2c Fix single alert delete 2017-04-26 17:10:05 +02:00
emanuele-f
5e663675f2 Fix flows shown in interface alert configuration 2017-04-26 16:16:12 +02:00
Simone Mainardi
57b592c905 Fixes invalid use of alert engine 2017-04-26 16:09:55 +02:00
emanuele-f
1545dcb73e Host Flows alert becomes a threshold alert 2017-04-26 15:50:54 +02:00
emanuele-f
4afe4328eb Enable SYN flood/victim alert generation 2017-04-26 11:23:23 +02:00
emanuele-f
bae63434c1 Implement engaged alerts cache 2017-04-24 17:24:31 +02:00
Simone Mainardi
e36554de9d Bridged interfaces footer gauge
Footer gauge only shows bridged actually bridged traffic
for bridged interfaces
2017-04-24 16:19:03 +02:00
emanuele-f
52cdd7382a Fix wrong ajax field used in time quota 2017-04-24 15:30:01 +02:00
emanuele-f
b83a93c6a5 Add preference to enable VLAN rrd dump and display VLAN rrd graphs 2017-04-24 13:00:24 +02:00
Simone Mainardi
7b13e2e6a1 Adds an engine id to the engaged alerts 2017-04-24 12:22:47 +02:00
emanuele-f
60bb301c76 Fix host search with VLANs 2017-04-24 11:17:36 +02:00
emanuele-f
eb167e8dee Fix localization key collision causing blank historical explorer page 2017-04-23 17:21:23 +02:00
Simone Mainardi
c8c4505d9c Adds VLANs lua getters 2017-04-23 14:20:04 +02:00
Simone Mainardi
2873438712 Handles VLAN statistics in both UI and backend
VLAN statistics are now properly accounted both in the front and
in the backend.

It is now required to add a toggle preference to save their
statistics (presently statistics are always saved) and it is
also requested to browse their historical protocols.
2017-04-23 12:58:10 +02:00
emanuele-f
43b3a7f078 Fix AlertCounter based host alerts 2017-04-22 19:48:09 +02:00
emanuele-f
04e01c24b0 Re-enable alerts generation. Use structured format functions. 2017-04-22 18:58:32 +02:00
emanuele-f
bfd2759eeb Move global status to local status 2017-04-22 17:09:23 +02:00
emanuele-f
a4a7f0d12f Restructure code to use the upcoming alerts cache 2017-04-22 15:20:43 +02:00
emanuele-f
31d26c4d76 Fixes #1169 2017-04-20 19:17:22 +02:00
emanuele-f
5892319880 Update in-memory hosts alert configuration when the configuration changes
Also fixes invalid redis key used to check host alerts trigger
2017-04-20 19:09:52 +02:00
Simone Mainardi
9fb24219e4 Passes host detected anomalies to lua 2017-04-20 18:50:05 +02:00