8168 commits

Author	SHA1	Message	Date
Alfredo Cardigliano	0aa9c899df	Fix debug trace	2022-05-18 10:42:25 +02:00
MatteoBiscosi	65284b6929	Fixes Score Network alert (#6366)	2022-05-17 11:26:00 +02:00
MatteoBiscosi	c1e6f01d53	Fixes suspicious DGA domain nil value	2022-05-17 11:26:00 +02:00
Luca Deri	2380d80642	Added DHCP MAC stats	2022-05-16 23:30:50 +02:00
MatteoBiscosi	7b51a4ca61	Added Fin Scan check (#5903)	2022-05-16 17:18:11 +02:00
MatteoBiscosi	7f81cc45a1	Added mirrore traffic toast (#6600)	2022-05-16 12:33:22 +02:00
MatteoBiscosi	bde099b236	Fixes url not correct (#6601)	2022-05-16 11:30:36 +02:00
Luca Deri	b0158f89c2	Reworked MAC/IP Reassociation alert used to detect spoofind and MITM (Man In The Middle) Attacks	2022-05-15 19:17:18 +02:00
Luca Deri	cdbb0e5380	Implements #6598	2022-05-15 16:57:48 +02:00
Luca Deri	7c038e29da	Implemented IEC104 Invalid Command Transition check/alert	2022-05-11 23:16:45 +02:00
MatteoBiscosi	e81f97d02d	Fixes https dga domain url (#6583)	2022-05-11 16:50:08 +02:00
Alfredo Cardigliano	d248d2a158	Handle IPv4 vs IPv6 columns when writing to the flow alerts table using a view	2022-05-11 16:16:23 +02:00
Alfredo Cardigliano	7025b3dd5b	Fix string to numeric IP conversion in flow alerts	2022-05-11 15:46:39 +02:00
MatteoBiscosi	7e9b3579c5	Added info ordering into historical view (#6587)	2022-05-11 14:47:13 +02:00
Alfredo Cardigliano	addecb93e8	Move info field out of the json for flow alerts	2022-05-11 09:47:52 +02:00
MatteoBiscosi	37820b4940	Added dga domain URL check (#6583)	2022-05-10 17:16:10 +02:00
uccidibuti	ff14e60c3d	Alerts: Add Top Protocols Dropdown menu #6582: enable top protocols even if clickhouse is disabled	2022-05-10 16:24:27 +02:00
uccidibuti	6a0a60047c	Alerts: Add Top Protocols Dropdown menu #6582	2022-05-10 16:12:15 +02:00
MatteoBiscosi	fa0578c8a9	Added filter for second host in flows (#2722)	2022-05-10 12:45:50 +02:00
Alfredo Cardigliano	8d5ddda7d4	Fix flow alert delete with clickhouse view (add IS_ALERT_DELETED flag)	2022-05-10 09:46:21 +02:00
Alfredo Cardigliano	103ffcf370	Fix columns type conversion for flow alerts view	2022-05-09 18:42:03 +02:00
Alfredo Cardigliano	8651e089a1	Handle write operation on flow alerts with clickhouse view	2022-05-09 17:49:48 +02:00
Alfredo Cardigliano	2f0ba125da	Add support for 'write' columns which differ from 'view' columns when building where conditions	2022-05-09 14:37:13 +02:00
MatteoBiscosi	524378cccd	Changed alert drops description (#6575)	2022-05-09 11:47:01 +02:00
Luca Deri	e19b1471c7	Added IEC 104 download URL	2022-05-08 10:17:23 +02:00
Luca Deri	d7de08ee90	Fixed JSON link	2022-05-08 10:16:56 +02:00
Luca Deri	3e2c3aee0c	Database initializations fixes	2022-05-06 20:29:27 +02:00
Alfredo Cardigliano	5308864593	Fix flow alert delete backend with clickhouse view (#6567)	2022-05-06 12:16:28 +02:00
MatteoBiscosi	b2094f32eb	Fixes nil name given to loading category	2022-05-06 09:56:29 +02:00
MatteoBiscosi	71cb504bac	Added check to empty category list	2022-05-04 22:11:45 +02:00
MatteoBiscosi	ef8fe6e9e6	Added check to alert_id nil	2022-05-04 22:11:45 +02:00
MatteoBiscosi	2bcf7c8dfa	Added Suspicious Entropy alert (#6563)	2022-05-04 22:11:44 +02:00
Luca Deri	0ceb25eaac	Fixed invalid ICMP info field format	2022-05-03 23:16:14 +02:00
MatteoBiscosi	a338bcd448	Added ICMP type and code formatting to alerts (#6560)	2022-05-03 11:33:30 +02:00
MatteoBiscosi	e6716342ba	Added ICMP mapping (#6560)	2022-05-03 11:05:46 +02:00
MatteoBiscosi	5fa6dc1513	Fixes cardinality set as string instead of number	2022-05-02 16:55:44 +02:00
Luca Deri	a28d4f4886	Added error code in flow alerts	2022-05-02 16:18:05 +02:00
Luca Deri	0e05c21d9f	Added support for error code	2022-05-02 13:04:01 +02:00
Luca Deri	3c660a513a	Host redirect URL now contains the hostname and not the IP, if present	2022-05-02 10:57:36 +02:00
Luca Deri	ab217cac6e	Improved networks page	2022-05-01 22:54:58 +02:00
Alfredo Cardigliano	fc11f0cfa1	Add logout button to nedge captive portal if logged in. Fix login.	2022-04-29 18:55:25 +02:00
Alfredo Cardigliano	8a8805167a	Fix alert exclusion with clickhouse view (#6556)	2022-04-29 16:33:54 +02:00
Alfredo Cardigliano	515af750b6	Fix remove of flow alerts when using clickhouse view	2022-04-29 16:16:34 +02:00
MatteoBiscosi	544a760611	Fixes no more IEC working (#6554)	2022-04-29 16:11:48 +02:00
Alfredo Cardigliano	c8aca13ab5	Fix username field in captive_portal.lua	2022-04-29 15:57:12 +02:00
Luca	e1808c2ed6	Disabled trace	2022-04-29 13:47:11 +02:00
Alfredo Cardigliano	6916494d50	Restore old endpoint get/alert/data.lua (deprecated - partially working)	2022-04-29 11:57:02 +02:00
uccidibuti	91b67b2941	Fix client zoneinfo	2022-04-29 11:57:15 +02:00
Luca	160279e5eb	Fix for blacklisted flow	2022-04-29 11:49:53 +02:00
MatteoBiscosi	e058583a77	Fixes nil granularity	2022-04-29 10:59:58 +02:00